Function at 0x4831e0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x64c528
push eax
mov dword fs:[0], esp
sub esp, 0x38
push ebx
push esi
push edi
mov esi, ecx
call dword [sym.imp.USER32.dll_GetCapture]
cmp eax, dword [esi + 0x214]
jne 0x483214
call dword [sym.imp.USER32.dll_ReleaseCapture]
mov eax, dword [esi + 0x214]
push eax
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x483234
mov ecx, dword [esi + 0x214]
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [esi + 4]
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 0x10]
mov edi, dword [sym.imp.USER32.dll_GetScrollPos]
push 1
push ecx
mov dword [esi + 0x64], 1
mov dword [esi + 0xac], edx
mov dword [esi + 0xb0], eax
call edi
mov edx, dword [esi + 4]
push 0
push edx
mov ebx, eax
call edi
add eax, dword [ebp + 0xc]
add ebx, dword [ebp + 0x10]
mov dword [esi + 0xb4], eax
mov eax, dword [esi + 4]
push 0x3ec
push eax
mov dword [esi + 0xb8], ebx
call dword [sym.imp.USER32.dll_KillTimer]
xor edi, edi
cmp dword [esi + 0x134], edi
je 0x4832a7
mov ecx, dword [esi + 0x134]
push ecx
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp eax, edi
je 0x4832a7
mov dword [esi + 0x134], edi
mov edx, dword [esi + 4]
push 1
push edi
push edx
call dword [sym.imp.USER32.dll_InvalidateRect]
mov eax, dword [esi + 4]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
mov ecx, dword [esi + 4]
push ecx
call dword [sym.imp.USER32.dll_SetCapture]
mov ecx, dword [ebp + 0x10]
lea edx, [ebp - 0x14]
push edx
mov edx, dword [ebp + 0xc]
lea eax, [ebp - 0x10]
push eax
push ecx
or ebx, 0xffffffff
push edx
mov ecx, esi
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x14], edi
call fcn.00476250
test eax, eax
je 0x48345f
mov eax, dword [0x700724]
mov edx, dword [eax + 0xc]
mov ecx, 0x700724
call edx
add eax, 0x10
mov dword [ebp - 0x44], eax
mov dword [ebp - 4], 1
lea eax, [ebp - 0x24]
mov dword [ebp + 8], eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x1c], edi
mov dword [ebp - 4], 4
mov ebx, dword [ebp - 0x10]
cmp ebx, edi
jl 0x4833cb
cmp ebx, dword [esi + 0x380]
jge 0x4833cb
mov edi, ebx
imul edi, edi, 0x2c
add edi, dword [esi + 0x37c]
lea ecx, [ebp - 0x44]
push edi
call fcn.004078d0
mov ecx, dword [edi + 4]
mov dword [ebp - 0x40], ecx
mov edx, dword [edi + 8]
mov dword [ebp - 0x3c], edx
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x38], eax
mov ecx, dword [edi + 0x10]
mov dword [ebp - 0x34], ecx
mov edx, dword [edi + 0x14]
mov dword [ebp - 0x30], edx
mov eax, dword [edi + 0x18]
mov dword [ebp - 0x2c], eax
mov ecx, dword [edi + 0x1c]
mov dword [ebp - 0x28], ecx
add edi, 0x20
push edi
lea ecx, [ebp - 0x24]
call fcn.00472a10
cmp dword [ebp - 0x3c], 0
jne 0x483420
test byte [ebp - 0x14], 1
je 0x483420
mov eax, dword [esi + 0x1a8]
push eax
call dword [sym.imp.USER32.dll_SetCursor]
mov ecx, dword [ebp - 0x40]
mov dword [esi + 0x6c], 1
mov dword [esi + 0x10c], ebx
mov dword [esi + 0x120], ecx
call dword [sym.imp.USER32.dll_GetMessagePos]
movsx edx, ax
mov dword [esi + 0x124], edx
jmp 0x48342d
mov eax, 5
mov dword [ebp - 4], eax
lea edx, [ebp - 0x24]
mov dword [ebp + 8], edx
mov byte [ebp - 4], al
mov ecx, edx
call fcn.00470ea0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x48362e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, esi
mov dword [esi + 0x100], ebx
call fcn.00477a30
mov eax, 9
mov dword [ebp - 4], eax
lea ecx, [ebp - 0x24]
mov dword [ebp + 8], ecx
mov byte [ebp - 4], al
call fcn.00470ea0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x44]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jmp 0x4833fd
mov eax, dword [ebp + 0x10]
lea ecx, [ebp - 0x10]
push ecx
mov ecx, dword [ebp + 0xc]
lea edx, [ebp - 0x14]
push edx
push eax
push ecx
mov ecx, esi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
call fcn.00478dd0
test eax, eax
jne 0x4834a0
pop edi
mov dword [esi + 0xd4], ebx
mov dword [esi + 0x70], 1
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
mov ebx, dword [ebp + 8]
mov edi, dword [ebp - 0x14]
mov eax, ebx
and eax, 4
jne 0x4834c5
test bl, 8
jne 0x4834c5
cmp dword [ebp - 0x10], 0
je 0x4834c5
mov dword [esi + 0x70], 1
mov dword [esi + 0xd4], edi
test eax, eax
jne 0x4834e3
test bl, 8
jne 0x4834e3
push edi
mov ecx, esi
call fcn.00478b50
test eax, eax
je 0x4834e3
cmp dword [esi + 0x390], 1
ja 0x4834f0
mov edx, dword [ebp - 0x10]
push ebx
push edx
push edi
mov ecx, esi
call fcn.00482dc0
mov eax, dword [ebp - 0x10]
push eax
mov ecx, esi
call fcn.00479f40
mov ebx, eax
push ebx
push edi
mov ecx, esi
call fcn.0047e640
test al, 8
jne 0x48362e
push ebx
push edi
mov ecx, esi
call fcn.0047e740
sub eax, 4
je 0x4835c6
dec eax
je 0x48355e
dec eax
jne 0x48362e
mov ecx, dword [esi + 0x1ac]
push ecx
mov dword [esi + 0x70], eax
call dword [sym.imp.USER32.dll_SetCursor]
mov edx, dword [ebp - 0x10]
push 0xfffffa1d
push edx
push edi
mov ecx, esi
call fcn.0047b740
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc
push ebx
push edi
lea eax, [ebp + 8]
push eax
mov ecx, esi
mov dword [esi + 0x70], 0
call fcn.0047f4f0
mov dword [ebp - 4], 0xe
mov eax, dword [eax]
push eax
call fcn.006115cb
add esp, 4
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 8]
call fcn.004014a0
mov eax, dword [ebp - 0x14]
test eax, eax
jns 0x4835a4
push 0x66ecc4
jmp 0x4835b2
jle 0x4835ad
push 0x672ba8
jmp 0x4835b2
push 0x66ecc8
push ebx
push edi
mov ecx, esi
call fcn.0047f670
mov ecx, dword [ebp - 0x10]
push 0xfffffa1e
push ecx
jmp 0x48361c
push ebx
push edi
lea edx, [ebp - 0x18]
push edx
mov ecx, esi
mov dword [esi + 0x70], 0
call fcn.0047f4f0
mov dword [ebp - 4], 0xd
mov eax, dword [eax]
push eax
call fcn.006115cb
add esp, 4
test eax, eax
mov eax, 0x66ecc4
jg 0x4835fa
mov eax, 0x66ecc8
push eax
push ebx
push edi
mov ecx, esi
call fcn.0047f670
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x18]
call fcn.004014a0
mov eax, dword [ebp - 0x10]
push 0xfffffa1e
push eax
push edi
mov ecx, esi
call fcn.0047b740
push 0xffffffffffffffff
push edi
mov ecx, esi
call fcn.0047c670
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 0xc