Function at 0x48fad8
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0xd
push 0
push 0
dec ecx
jne 0x48fae0
push ebx
push esi
push edi
mov ebx, eax
xor eax, eax
push ebp
push 0x49005d
push dword fs:[eax]
mov dword fs:[eax], esp
test bl, bl
jne 0x48fb0c
push 1
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_ShowWindow
push ebp
mov eax, 0x66
call fcn.0048fa98
pop ecx
push ebp
mov eax, 0x67
call fcn.0048fa98
pop ecx
push ebp
mov eax, 0x68
call fcn.0048fa98
pop ecx
push ebp
mov eax, 0x69
call fcn.0048fa98
pop ecx
push ebp
mov eax, 0xbb8
call fcn.0048fa98
pop ecx
push ebp
mov eax, 0xfa0
call fcn.0048fa98
pop ecx
push ebp
mov eax, 0x1388
call fcn.0048fa98
pop ecx
push 0xfffffffffffffff0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_GetWindowLongW
mov esi, 0x50000
mov edx, dword [0x531d88]
test byte [edx + 0x314], 0x40
jne 0x48fb88
or esi, 0x80000
test bl, bl
je 0x48fb90
or eax, esi
jmp 0x48fb97
or edx, 0xffffffff
sub edx, esi
and eax, edx
push eax
push 0xfffffffffffffff0
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_SetWindowLongW
lea ecx, [ebp - 4]
mov dl, 0x14
mov eax, dword [0x531d88]
call fcn.00447d84
test bl, bl
je 0x48fc75
lea eax, [ebp - 4]
mov ecx, dword [ebp - 4]
mov edx, 0x490078
call fcn.00406bd0
lea ecx, [ebp - 0x28]
mov dl, 4
mov eax, dword [0x531d88]
call fcn.00447d84
mov eax, dword [ebp - 0x28]
call fcn.00406f24
push eax
push 0
push 0xc
push 0x65
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp + 8]
push eax
call fcn.0048f474
pop ecx
mov eax, dword [ebp + 8]
push eax
mov eax, dword [0x5322ac]
call fcn.0048fa60
pop ecx
push 8
push 0x3e8
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_ShowWindow
mov eax, dword [ebp + 8]
push eax
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x68]
mov edx, dword [ebp + 8]
add eax, dword [edx - 0x60]
add eax, dword [0x5322fc]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp + 8]
mov ecx, dword [eax - 0x64]
mov eax, dword [ebp + 8]
add ecx, dword [eax - 0x5c]
mov eax, dword [ebp + 8]
mov edx, dword [eax - 0x68]
mov eax, dword [ebp + 8]
mov eax, dword [eax - 0x64]
call fcn.0042f590
lea eax, [ebp - 0x38]
call fcn.0048f42c
pop ecx
jmp 0x48ffd4
lea eax, [ebp - 4]
mov edx, 0x490088
call fcn.00406b08
lea eax, [ebp - 0x3c]
call fcn.0048d0a4
mov eax, dword [ebp - 0x3c]
call fcn.00406f24
push eax
push 0
push 0xc
push 0x65
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SendMessageA
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_GetWindowDC
mov dword [ebp - 0x10], eax
mov eax, dword [0x5320b8]
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_SelectObject
xor eax, eax
mov dword [ebp - 0x18], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
push 0x20
call sub.user32.dll_GetSystemMetrics
dec eax
add eax, eax
add eax, 0x3c
mov dword [ebp - 0x14], eax
mov dl, 1
mov eax, dword [0x429178]
call fcn.004351f0
mov dword [ebp - 0x20], eax
xor edx, edx
push ebp
push 0x48fe56
push dword fs:[edx]
mov dword fs:[edx], esp
lea eax, [ebp - 0x44]
call fcn.0048d0a4
mov edx, dword [ebp - 0x44]
lea eax, [ebp - 0x40]
call fcn.004078a0
mov edx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x2c]
lea ecx, [ebp - 0x50]
mov dl, 0x16
mov eax, dword [0x531d88]
call fcn.00447d84
push dword [ebp - 0x50]
push 0x490098
lea ecx, [ebp - 0x54]
mov dl, 0x18
mov eax, dword [0x531d88]
call fcn.00447d84
push dword [ebp - 0x54]
lea eax, [ebp - 0x4c]
mov edx, 3
call fcn.00406cc0
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x48]
call fcn.004078a0
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov eax, dword [ebp - 0x20]
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x48fe40
inc eax
mov dword [ebp - 0x24], eax
xor ebx, ebx
lea ecx, [ebp - 0x58]
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
call dword [esi + 0xc]
cmp dword [ebp - 0x58], 0
jne 0x48fda3
mov ecx, 0x4900ac
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
call dword [esi + 0x20]
lea ecx, [ebp - 0x5c]
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x60], eax
mov esi, dword [ebp - 0x60]
test esi, esi
je 0x48fdc2
sub esi, 4
mov esi, dword [esi]
lea ecx, [ebp - 0x68]
mov edx, ebx
mov eax, dword [ebp - 0x20]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x68]
call fcn.00407700
mov edx, eax
lea eax, [ebp - 0x64]
mov ecx, 0
call fcn.00406a08
mov edi, dword [ebp - 0x64]
lea eax, [ebp - 0xc]
push eax
push esi
mov dword [ebp - 0x60], edi
mov eax, dword [ebp - 0x60]
call fcn.00406f24
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.gdi32.dll_GetTextExtentPoint32A
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x18]
jle 0x48fe30
add eax, 0x10
mov dword [ebp - 0x18], eax
mov ecx, 0x280
sub ecx, dword [ebp - 0x14]
cmp ecx, dword [ebp - 0x18]
jge 0x48fe30
mov eax, dword [ebp - 0x18]
sub eax, ecx
cdq
idiv ecx
inc eax
imul dword [ebp - 8]
add dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 8]
add dword [ebp - 0x1c], eax
inc ebx
dec dword [ebp - 0x24]
jne 0x48fd81
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x48fe5d
mov eax, dword [ebp - 0x20]
call fcn.00405374
ret
mov eax, dword [ebp - 4]
call fcn.00406f24
push eax
push 0
push 0xc
push 0x68
mov eax, dword [ebp + 8]
mov eax, dword [eax + 8]
push eax
call sub.user32.dll_GetDlgItem
push eax
call sub.user32.dll_SendMessageA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x490064
lea eax, [ebp - 0x68]
call fcn.00407664
lea eax, [ebp - 0x64]
call fcn.004066e0
lea eax, [ebp - 0x5c]
mov edx, 2
call fcn.0040766c
lea eax, [ebp - 0x54]
mov edx, 3
call fcn.00406704
lea eax, [ebp - 0x48]
call fcn.00407664
lea eax, [ebp - 0x44]
call fcn.004066e0
lea eax, [ebp - 0x40]
call fcn.00407664
lea eax, [ebp - 0x3c]
call fcn.004066e0
lea eax, [ebp - 0x28]
call fcn.004066e0
lea eax, [ebp - 4]
call fcn.004066e0
ret