Function at 0x4671d0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffa4
push ebx
push esi
push edi
xor edx, edx
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x54], edx
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 4], edx
mov ebx, eax
xor eax, eax
push ebp
push 0x467704
push dword fs:[eax]
mov dword fs:[eax], esp
test bl, bl
jne 0x46721b
push 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_ShowWindow_1
push ebp
mov eax, 2
call fcn.00467190
pop ecx
push ebp
mov eax, 3
call fcn.00467190
pop ecx
push ebp
mov eax, 4
call fcn.00467190
pop ecx
push ebp
mov eax, 5
call fcn.00467190
pop ecx
push ebp
mov eax, 0xbb8
call fcn.00467190
pop ecx
push ebp
mov eax, 0xfa0
call fcn.00467190
pop ecx
push ebp
mov eax, 0x1388
call fcn.00467190
pop ecx
push 0xfffffffffffffff0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_GetWindowLongA_1
mov esi, 0x50000
mov edx, dword [0x5ee7e0]
test byte [edx + 0x314], 0x40
jne 0x467297
or esi, 0x80000
test bl, bl
je 0x46729f
or eax, esi
jmp 0x4672a6
or edx, 0xffffffff
sub edx, esi
and eax, edx
push eax
push 0xfffffffffffffff0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_SetWindowLongA_1
lea ecx, [ebp - 4]
mov dl, 0x14
mov eax, dword [0x5ee7e0]
call fcn.00434a7c
test bl, bl
je 0x467384
lea eax, [ebp - 4]
mov ecx, dword [ebp - 4]
mov edx, 0x46771c
call fcn.00405a48
lea ecx, [ebp - 0x28]
mov dl, 4
mov eax, dword [0x5ee7e0]
call fcn.00434a7c
mov eax, dword [ebp - 0x28]
call fcn.00405bc0
push eax
push 0
push 0xc
push 0x65
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_GetDlgItem_1
push eax
call sub.USER32.dll_SendMessageA_1
mov eax, dword [ebp + 8]
push eax
call fcn.00466d10
pop ecx
mov eax, dword [ebp + 8]
push eax
mov eax, dword [0x5eed04]
call fcn.00467158
pop ecx
push 8
push 0x3e8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_GetDlgItem_1
push eax
call sub.USER32.dll_ShowWindow_1
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x28]
mov edx, dword [ebp + 8]
add eax, dword [edx - 0x20]
add eax, dword [0x5eed54]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x24]
mov eax, dword [ebp + 8]
add ecx, dword [eax - 0x1c]
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x28]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x24]
call fcn.0041f99c
lea eax, [ebp - 0x38]
call fcn.00466cc8
pop ecx
jmp 0x4676b0
lea eax, [ebp - 4]
mov edx, 0x467728
call fcn.004059fc
lea eax, [ebp - 0x3c]
call fcn.00464e40
mov eax, dword [ebp - 0x3c]
call fcn.00405bc0
push eax
push 0
push 0xc
push 0x65
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_GetDlgItem_1
push eax
call sub.USER32.dll_SendMessageA_1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_GetWindowDC_1
mov dword [ebp - 0x10], eax
mov eax, dword [0x5eeb14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.GDI32.dll_SelectObject_1
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
push 0x20
call sub.USER32.dll_GetSystemMetrics_1
dec eax
add eax, eax
add eax, 0x3c
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [0x41ecf4]
call fcn.004046d0
mov dword [ebp - 0x20], eax
xor edx, edx
push ebp
push 0x467532
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x40]
call fcn.00464e40
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x48]
mov dl, 0x16
mov eax, dword [0x5ee7e0]
call fcn.00434a7c
push dword [ebp - 0x48]
push 0x467734
lea ecx, [ebp - 0x4c]
mov dl, 0x18
mov eax, dword [0x5ee7e0]
call fcn.00434a7c
push dword [ebp - 0x4c]
lea eax, [ebp - 0x44]
mov edx, 3
call fcn.00405ac4
mov edx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x46751c
inc eax
mov dword [ebp - 0x24], eax
xor ebx, ebx
lea ecx, [ebp - 0x50]
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x50], 0
jne 0x46749c
mov ecx, 0x467744
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
call dword [esi + 0x20]
lea ecx, [ebp - 0x54]
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov esi, dword [ebp - 0x58]
test esi, esi
je 0x4674bb
sub esi, 4
mov esi, dword [esi]
lea eax, [ebp - 0xc]
push eax
push esi
lea ecx, [ebp - 0x5c]
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x5c]
call fcn.00405bc0
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.GDI32.dll_GetTextExtentPoint32A_1
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jle 0x46750c
add eax, 0x10
mov dword [ebp - 0x18], eax
mov ecx, 0x280
sub ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x18]
jge 0x46750c
mov eax, dword [ebp - 0x18]
sub eax, ecx
cdq
idiv ecx
inc eax
imul dword [ebp - 8]
add dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 8]
add dword [ebp - 0x1c], eax
inc ebx
dec dword [ebp - 0x24]
jne 0x46747a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x467539
mov eax, dword [ebp - 0x20]
call fcn.00404700
ret
mov eax, dword [ebp - 4]
call fcn.00405bc0
push eax
push 0
push 0xc
push 4
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.USER32.dll_GetDlgItem_1
push eax
call sub.USER32.dll_SendMessageA_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x46770b
lea eax, [ebp - 0x5c]
call fcn.00405704
lea eax, [ebp - 0x54]
mov edx, 7
call fcn.00405728
lea eax, [ebp - 0x28]
call fcn.00405704
lea eax, [ebp - 4]
call fcn.00405704
ret