Function at 0x4770fc
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x47775e
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x477151
mov eax, dword [ebp - 4]
test byte [eax + 0x374], 4
je 0x477151
lea edx, [ebp - 0x18]
mov eax, dword [0x4fef68]
call fcn.00408d4c
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x420c98]
call fcn.00411a64
call fcn.00404a74
mov eax, dword [0x504178]
call fcn.0047cd1c
mov eax, dword [ebp - 4]
or byte [eax + 0x374], 4
xor edx, edx
push ebp
push 0x477741
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x4776fb
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e2], 0
je 0x4775ef
xor eax, eax
push ebp
push 0x4771b4
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffab
call fcn.004042a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x4771cb
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 4
je 0x4771f7
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 6
jne 0x4772db
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x4772db
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x47723d
mov eax, dword [0x504178]
mov eax, dword [eax + 0x40]
call fcn.0045a42c
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x47721f
adc ebx, 0
mov eax, dword [0x504178]
mov eax, dword [eax + 0x40]
call fcn.0045a470
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x477270
adc esi, 0
jmp 0x477270
lea edx, [ebp - 0x14]
mov eax, dword [0x50417c]
call fcn.0047a150
mov ebx, dword [ebp - 0xc]
sub ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x47725d
adc ebx, 0
mov esi, dword [ebp - 8]
sub esi, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x477270
adc esi, 0
mov eax, dword [0x50417c]
call fcn.004790d4
cmp ebx, eax
jge 0x47728a
mov eax, dword [0x50417c]
call fcn.004790d4
mov ebx, eax
mov eax, dword [0x50417c]
call fcn.004790c8
cmp esi, eax
jge 0x4772a4
mov eax, dword [0x50417c]
call fcn.004790c8
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x57], 0
je 0x4774fb
mov eax, dword [ebp - 4]
call fcn.0047499c
jmp 0x4774fb
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x288]
mov edx, eax
add dl, 0xfa
sub dl, 2
jae 0x477400
mov eax, dword [0x504178]
mov esi, dword [eax + 0x40]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 7
jne 0x477322
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [0x46ed24]
call fcn.00404238
test al, al
je 0x477322
mov eax, dword [ebp - 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x477363
cmp esi, dword [ebp - 4]
je 0x477363
mov eax, esi
call fcn.00472b30
mov ebx, eax
mov eax, dword [esi + 0x48]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x48]
sar eax, 1
jns 0x477344
adc eax, 0
add ebx, eax
mov eax, esi
call fcn.00472b50
mov edx, dword [esi + 0x4c]
mov ecx, dword [ebp - 4]
sub edx, dword [ecx + 0x4c]
sar edx, 1
jns 0x47735d
adc edx, 0
add eax, edx
mov esi, eax
jmp 0x477395
mov eax, dword [0x50417c]
call fcn.004790bc
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x47737c
adc ebx, 0
mov eax, dword [0x50417c]
call fcn.004790b0
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x477395
adc esi, 0
mov eax, dword [0x50417c]
call fcn.004790d4
cmp ebx, eax
jge 0x4773af
mov eax, dword [0x50417c]
call fcn.004790d4
mov ebx, eax
mov eax, dword [0x50417c]
call fcn.004790c8
cmp esi, eax
jge 0x4773c9
mov eax, dword [0x50417c]
call fcn.004790c8
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x57], 0
je 0x4774fb
mov eax, dword [ebp - 4]
call fcn.0047499c
jmp 0x4774fb
cmp al, 5
jne 0x4774fb
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x47744e
mov eax, dword [0x504178]
mov eax, dword [eax + 0x40]
call fcn.0045a42c
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x477430
adc ebx, 0
mov eax, dword [0x504178]
mov eax, dword [eax + 0x40]
call fcn.0045a470
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4774aa
adc esi, 0
jmp 0x4774aa
mov eax, dword [0x50417c]
call fcn.004790ec
mov ebx, eax
sar ebx, 1
jns 0x477461
adc ebx, 0
mov eax, dword [0x50417c]
call fcn.004790d4
add ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x47747a
adc eax, 0
sub ebx, eax
mov eax, dword [0x50417c]
call fcn.004790e0
mov esi, eax
sar esi, 1
jns 0x47748f
adc esi, 0
mov eax, dword [0x50417c]
call fcn.004790c8
add esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
sar eax, 1
jns 0x4774a8
adc eax, 0
sub esi, eax
mov eax, dword [0x50417c]
call fcn.004790d4
cmp ebx, eax
jge 0x4774c4
mov eax, dword [0x50417c]
call fcn.004790d4
mov ebx, eax
mov eax, dword [0x50417c]
call fcn.004790c8
cmp esi, eax
jge 0x4774de
mov eax, dword [0x50417c]
call fcn.004790c8
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
mov byte [eax + 0x288], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x4775ca
mov eax, dword [ebp - 4]
cmp byte [eax + 0x283], 2
jne 0x477557
push 0
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
push 0x223
mov eax, dword [0x504178]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x36c]
push eax
call sub.user32.dll_SendMessageW
push 3
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
call sub.user32.dll_ShowWindow
jmp 0x4775a8
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x283]
mov eax, dword [eax*4 + 0x4fdd1c]
push eax
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4c]
shl edx, 0x10
or eax, edx
push eax
push 0
push 5
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
push 0x409b9c
call sub.user32.dll_CallWindowProcW
mov eax, dword [ebp - 4]
call fcn.0045adc4
push 0
push 0
push 0x234
mov eax, dword [0x504178]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x36c]
push eax
call sub.user32.dll_SendMessageW
jmp 0x477729
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x283]
mov eax, dword [eax*4 + 0x4fdd1c]
push eax
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
call sub.user32.dll_ShowWindow
jmp 0x477729
xor eax, eax
push ebp
push 0x477613
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffac
call fcn.004042a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47762a
mov eax, dword [0x50417c]
mov eax, dword [eax + 0x64]
cmp eax, dword [ebp - 4]
jne 0x477641
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00475e50
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x47765d
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xb0]
jmp 0x477729
mov eax, dword [ebp - 4]
test byte [eax + 0x374], 8
je 0x47768b
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
call sub.user32.dll_SetWindowPos
jmp 0x477729
xor ebx, ebx
mov eax, dword [ebp - 4]
call fcn.00463464
mov esi, eax
call sub.user32.dll_GetActiveWindow
cmp esi, eax
jne 0x4776c0
mov eax, dword [ebp - 4]
call fcn.00463464
call fcn.00470480
test eax, eax
jne 0x4776c0
mov eax, dword [ebp - 4]
call fcn.00463464
call fcn.004707b0
mov ebx, eax
test ebx, ebx
je 0x4776e9
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
call sub.user32.dll_SetWindowPos
push ebx
call sub.user32.dll_SetActiveWindow
jmp 0x477729
push 0
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
call sub.user32.dll_ShowWindow
jmp 0x477729
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
je 0x477729
mov eax, dword [ebp - 4]
cmp dword [eax + 0x30], 0
je 0x477729
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e2], 0
je 0x477729
push 1
mov eax, dword [ebp - 4]
call fcn.00463464
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x477748
mov eax, dword [ebp - 4]
and byte [eax + 0x374], 0xfb
ret