Function at 0x477740
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push ebx
push esi
push edi
xor ecx, ecx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x477da2
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x477795
mov eax, dword [ebp - 4]
test byte [eax + 0x374], 4
je 0x477795
lea edx, [ebp - 0x18]
mov eax, dword [0x508090]
call fcn.00408d5c
mov ecx, dword [ebp - 0x18]
mov dl, 1
mov eax, dword [0x420dc0]
call fcn.004119a0
call fcn.00404a74
mov eax, dword [0x50e17c]
call fcn.0047d360
mov eax, dword [ebp - 4]
or byte [eax + 0x374], 4
xor edx, edx
push ebp
push 0x477d85
push dword fs:[edx]
mov dword fs:[edx], esp
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
jne 0x477d3f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e2], 0
je 0x477c33
xor eax, eax
push ebp
push 0x4777f8
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffab
call fcn.004042a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x47780f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 4
je 0x47783b
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 6
jne 0x47791f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x47791f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x477881
mov eax, dword [0x50e17c]
mov eax, dword [eax + 0x40]
call fcn.0045aa70
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x477863
adc ebx, 0
mov eax, dword [0x50e17c]
mov eax, dword [eax + 0x40]
call fcn.0045aab4
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4778b4
adc esi, 0
jmp 0x4778b4
lea edx, [ebp - 0x14]
mov eax, dword [0x50e180]
call fcn.0047a794
mov ebx, dword [ebp - 0xc]
sub ebx, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x4778a1
adc ebx, 0
mov esi, dword [ebp - 8]
sub esi, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4778b4
adc esi, 0
mov eax, dword [0x50e180]
call fcn.00479718
cmp ebx, eax
jge 0x4778ce
mov eax, dword [0x50e180]
call fcn.00479718
mov ebx, eax
mov eax, dword [0x50e180]
call fcn.0047970c
cmp esi, eax
jge 0x4778e8
mov eax, dword [0x50e180]
call fcn.0047970c
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x57], 0
je 0x477b3f
mov eax, dword [ebp - 4]
call fcn.00474fe0
jmp 0x477b3f
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x288]
mov edx, eax
add dl, 0xfa
sub dl, 2
jae 0x477a44
mov eax, dword [0x50e17c]
mov esi, dword [eax + 0x40]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x288], 7
jne 0x477966
mov eax, dword [ebp - 4]
mov eax, dword [eax + 4]
mov edx, dword [0x46f368]
call fcn.00404238
test al, al
je 0x477966
mov eax, dword [ebp - 4]
mov esi, dword [eax + 4]
test esi, esi
je 0x4779a7
cmp esi, dword [ebp - 4]
je 0x4779a7
mov eax, esi
call fcn.00473174
mov ebx, eax
mov eax, dword [esi + 0x48]
mov edx, dword [ebp - 4]
sub eax, dword [edx + 0x48]
sar eax, 1
jns 0x477988
adc eax, 0
add ebx, eax
mov eax, esi
call fcn.00473194
mov edx, dword [esi + 0x4c]
mov ecx, dword [ebp - 4]
sub edx, dword [ecx + 0x4c]
sar edx, 1
jns 0x4779a1
adc edx, 0
add eax, edx
mov esi, eax
jmp 0x4779d9
mov eax, dword [0x50e180]
call fcn.00479700
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x4779c0
adc ebx, 0
mov eax, dword [0x50e180]
call fcn.004796f4
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x4779d9
adc esi, 0
mov eax, dword [0x50e180]
call fcn.00479718
cmp ebx, eax
jge 0x4779f3
mov eax, dword [0x50e180]
call fcn.00479718
mov ebx, eax
mov eax, dword [0x50e180]
call fcn.0047970c
cmp esi, eax
jge 0x477a0d
mov eax, dword [0x50e180]
call fcn.0047970c
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
cmp byte [eax + 0x57], 0
je 0x477b3f
mov eax, dword [ebp - 4]
call fcn.00474fe0
jmp 0x477b3f
cmp al, 5
jne 0x477b3f
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x477a92
mov eax, dword [0x50e17c]
mov eax, dword [eax + 0x40]
call fcn.0045aa70
mov ebx, eax
mov eax, dword [ebp - 4]
sub ebx, dword [eax + 0x48]
sar ebx, 1
jns 0x477a74
adc ebx, 0
mov eax, dword [0x50e17c]
mov eax, dword [eax + 0x40]
call fcn.0045aab4
mov esi, eax
mov eax, dword [ebp - 4]
sub esi, dword [eax + 0x4c]
sar esi, 1
jns 0x477aee
adc esi, 0
jmp 0x477aee
mov eax, dword [0x50e180]
call fcn.00479730
mov ebx, eax
sar ebx, 1
jns 0x477aa5
adc ebx, 0
mov eax, dword [0x50e180]
call fcn.00479718
add ebx, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
sar eax, 1
jns 0x477abe
adc eax, 0
sub ebx, eax
mov eax, dword [0x50e180]
call fcn.00479724
mov esi, eax
sar esi, 1
jns 0x477ad3
adc esi, 0
mov eax, dword [0x50e180]
call fcn.0047970c
add esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
sar eax, 1
jns 0x477aec
adc eax, 0
sub esi, eax
mov eax, dword [0x50e180]
call fcn.00479718
cmp ebx, eax
jge 0x477b08
mov eax, dword [0x50e180]
call fcn.00479718
mov ebx, eax
mov eax, dword [0x50e180]
call fcn.0047970c
cmp esi, eax
jge 0x477b22
mov eax, dword [0x50e180]
call fcn.0047970c
mov esi, eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
push eax
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x4c]
push eax
mov ecx, esi
mov edx, ebx
mov eax, dword [ebp - 4]
mov ebx, dword [eax]
call dword [ebx + 0x88]
mov eax, dword [ebp - 4]
mov byte [eax + 0x288], 0
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x477c0e
mov eax, dword [ebp - 4]
cmp byte [eax + 0x283], 2
jne 0x477b9b
push 0
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
push 0x223
mov eax, dword [0x50e17c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x36c]
push eax
call sub.user32.dll_SendMessageW
push 3
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
call sub.user32.dll_ShowWindow
jmp 0x477bec
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x283]
mov eax, dword [eax*4 + 0x506d1c]
push eax
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp - 4]
mov eax, dword [eax + 0x48]
mov edx, dword [ebp - 4]
mov edx, dword [edx + 0x4c]
shl edx, 0x10
or eax, edx
push eax
push 0
push 5
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
push 0x409bc4
call sub.user32.dll_CallWindowProcW
mov eax, dword [ebp - 4]
call fcn.0045b408
push 0
push 0
push 0x234
mov eax, dword [0x50e17c]
mov eax, dword [eax + 0x40]
mov eax, dword [eax + 0x36c]
push eax
call sub.user32.dll_SendMessageW
jmp 0x477d6d
mov eax, dword [ebp - 4]
movzx eax, byte [eax + 0x283]
mov eax, dword [eax*4 + 0x506d1c]
push eax
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
call sub.user32.dll_ShowWindow
jmp 0x477d6d
xor eax, eax
push ebp
push 0x477c57
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [ebp - 4]
mov si, 0xffac
call fcn.004042a8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x477c6e
mov eax, dword [0x50e180]
mov eax, dword [eax + 0x64]
cmp eax, dword [ebp - 4]
jne 0x477c85
xor edx, edx
mov eax, dword [ebp - 4]
call fcn.00476494
mov eax, dword [ebp - 4]
cmp byte [eax + 0x287], 1
jne 0x477ca1
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0xb0]
jmp 0x477d6d
mov eax, dword [ebp - 4]
test byte [eax + 0x374], 8
je 0x477ccf
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
call sub.user32.dll_SetWindowPos
jmp 0x477d6d
xor ebx, ebx
mov eax, dword [ebp - 4]
call fcn.00463aa8
mov esi, eax
call sub.user32.dll_GetActiveWindow
cmp esi, eax
jne 0x477d04
mov eax, dword [ebp - 4]
call fcn.00463aa8
call fcn.00470ac4
test eax, eax
jne 0x477d04
mov eax, dword [ebp - 4]
call fcn.00463aa8
call fcn.00470df4
mov ebx, eax
test ebx, ebx
je 0x477d2d
push 0x97
push 0
push 0
push 0
push 0
push 0
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
call sub.user32.dll_SetWindowPos
push ebx
call sub.user32.dll_SetActiveWindow
jmp 0x477d6d
push 0
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
call sub.user32.dll_ShowWindow
jmp 0x477d6d
mov eax, dword [ebp - 4]
test byte [eax + 0x1c], 0x10
je 0x477d6d
mov eax, dword [ebp - 4]
cmp dword [eax + 0x30], 0
je 0x477d6d
mov eax, dword [ebp - 4]
cmp byte [eax + 0x1e2], 0
je 0x477d6d
push 1
mov eax, dword [ebp - 4]
call fcn.00463aa8
push eax
call sub.user32.dll_ShowWindow
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x477d8c
mov eax, dword [ebp - 4]
and byte [eax + 0x374], 0xfb
ret