Function at 0x4094d3
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov eax, dword [0x45a040]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 0x18]
push 0
mov dword [ebp - 0x30], eax
mov eax, dword [ebp + 0x1c]
push ebx
mov dword [ebp - 0x34], eax
call dword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
lea edi, [ebp - 0x14]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x14]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov edi, dword [ebp - 0xc]
mov eax, dword [ebp - 8]
sub edi, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov esi, dword [ebp + 0x14]
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x24], eax
test esi, esi
js 0x40971d
test esi, 0x100000
jne 0x40971d
and dword [ebp - 0x20], 0
and dword [ebp - 0x28], 0
push 2
call fcn.0040e5a4
test eax, eax
je 0x4095b5
movd xmm0, edi
cvtdq2ps xmm0, xmm0
push ecx
movss dword [esp], xmm0
call fcn.0040e3f1
movd xmm0, dword [ebp - 0x24]
fstp dword [ebp - 0x20]
cvttss2si edi, dword [ebp - 0x20]
push ecx
cvtdq2ps xmm0, xmm0
mov dword [ebp - 0x2c], edi
movss dword [esp], xmm0
call fcn.0040e3f1
mov ecx, dword [ebp - 0x14]
fstp dword [ebp - 0x28]
cvttss2si eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov eax, edi
sub eax, dword [ebp - 0xc]
mov edi, dword [ebp - 0x10]
add eax, ecx
cdq
sub eax, edx
sar eax, 1
mov dword [ebp - 0x20], eax
cvttss2si eax, dword [ebp - 0x28]
sub eax, dword [ebp - 8]
add eax, edi
cdq
sub eax, edx
sar eax, 1
jmp 0x4095be
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x20]
sub edi, eax
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x2c]
push edi
push ecx
push ebx
call dword [sym.imp.USER32.dll_MoveWindow]
push 0xfffffffffffffff8
push ebx
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov edi, eax
mov dword [ebp - 0x28], edi
test esi, 0x20000
je 0x4095fa
mov ecx, esi
shr ecx, 9
and ecx, 1
push ecx
push edi
push ebx
call fcn.00408ffc
lea eax, [ebp - 0x14]
push eax
push ebx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
push 1
mov dword [ebp - 0x2c], eax
xor eax, eax
push 0x80000
push ebx
mov dword [ebp - 0x24], eax
call fcn.0040bb5a
test eax, eax
jne 0x409631
test esi, esi
jns 0x409637
push 4
pop eax
mov dword [ebp - 0x24], eax
test edi, edi
je 0x40964a
push edi
call fcn.00408ad3
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0xf0], eax
push 0xffffffffffffffe0
push ebx
call dword [sym.imp.USER32.dll_GetClassLongW]
mov edi, dword [ebp - 0x24]
cmp eax, 0x8002
jne 0x409663
or edi, 0x1002
mov eax, dword [ebp - 0x30]
test eax, eax
push ebx
cmove eax, dword [0x45b0d8]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x88], esi
call sub.IMM32.dll_ImmGetContext
mov ecx, dword [ebp - 0x18]
or edi, 0x2000
push 0
push 0x100
mov dword [ecx + 0x8c], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + 8]
mov dword [eax + 0x94], ebx
mov eax, dword [ebp - 0x18]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x30]
mov dword [eax + 0x18], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 0x4c], ecx
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x2c]
mov dword [eax + 0x50], ecx
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x138], 0xff
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x10], edi
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp + 0x20]
mov dword [ecx + 0xec], eax
call fcn.00414e8d
push eax
call fcn.004159e1
mov ecx, dword [ebp - 0x18]
push 0x4155e5
push 0x11
mov dword [ecx + 0xf4], eax
call fcn.004159e1
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0xf8], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x34]
test esi, esi
jns 0x409744
mov dword [eax + 0xe4], ecx
jmp 0x40974a
xor eax, eax
mov dword [ebp - 0x20], eax
test esi, esi
jns 0x4095d4
push eax
push eax
push eax
push eax
lea eax, [ebp - 0x20]
push eax
mov eax, dword [ebp - 0x34]
push dword [eax]
call fcn.00409ee3
mov edi, dword [ebp - 0x20]
jmp 0x4095df
mov dword [eax + 0xa4], ecx
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x2c]
push 0xffffffffffffffe6
push ebx
lea eax, [ecx + 0x44]
mov dword [ecx + 0x24], eax
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + 0x4c]
mov dword [ecx + 0x28], eax
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + 0x54]
mov dword [ecx + 0x30], eax
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + 0x5c]
mov dword [ecx + 0x38], eax
mov ecx, dword [ebp - 0x18]
lea eax, [ecx + 0x60]
mov dword [ecx + 0x40], eax
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x1c], 0x28
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x3c], 2
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x5f], 1
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x5d], 0
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x5c], 0
mov eax, dword [ebp - 0x18]
mov byte [eax + 0x5e], 0xff
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14]
mov dword [ecx + 0x44], eax
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x10]
mov dword [ecx + 0x48], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x20]
mov dword [eax + 0x4c], ecx
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x50], edx
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x68], ecx
mov eax, dword [ebp - 0x18]
mov dword [eax + 0x6c], edx
call dword [sym.imp.USER32.dll_GetClassLongW]
test eax, 0x20000
je 0x4097f6
and eax, 0xfffdffff
push eax
push 0xffffffffffffffe6
push ebx
call dword [sym.imp.USER32.dll_SetClassLongW]
xor eax, eax
mov esi, dword [sym.imp.USER32.dll_CreateWindowExW]
push eax
push eax
push eax
push ebx
push eax
push eax
push eax
push eax
mov edi, Ordinal_1
push edi
push eax
movzx eax, word [0x45b0ba]
push eax
push 0x80800a8
call esi
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x134], eax
lea ecx, [ebp - 0x1c]
and dword [ebp - 0x1c], 0
push ecx
push 1
push 0x40c1bb
push eax
call fcn.004091f8
xor eax, eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push eax
push edi
push eax
push str.tooltips_class32
push 0x8000088
call esi
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
mov edi, eax
push 0x800
push 0
push 0x418
push edi
call esi
mov ecx, dword [ebp - 0x18]
lea eax, [ebp - 0x1c]
push eax
push 0x2c
push 0xdc
mov dword [ecx + 0x98], edi
push dword [ebp - 0x18]
and dword [ebp - 0x1c], 0
call fcn.0041541a
push eax
push 0
push 0x432
push edi
mov dword [eax], 0x2c
mov dword [eax + 4], 0x1110
mov dword [eax + 8], ebx
mov dword [eax + 0xc], eax
call esi
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x1c]
push eax
push 0x2c
push 0xe0
push dword [ebp - 0x18]
call fcn.0041541a
push eax
push 0
push 0x432
push edi
mov dword [eax], 0x2c
mov dword [eax + 4], 0x11a0
mov dword [eax + 8], ebx
mov dword [eax + 0xc], eax
call esi
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
push 0x40c88d
push edi
call fcn.004091f8
push dword [ebp - 0x18]
call fcn.00409dff
mov esi, dword [ebp - 8]
lea eax, [ebp - 0x1c]
mov edi, dword [ebp - 0xc]
sub esi, dword [ebp - 0x10]
sub edi, dword [ebp - 0x14]
and dword [ebp - 0x1c], 0
push eax
push 0x40000000
push esi
push edi
push dword [ebp - 0x18]
call fcn.0040f0c7
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x80], eax
lea eax, [ebp - 0x1c]
and dword [ebp - 0x1c], 0
push eax
push 0
push esi
push edi
push dword [ebp - 0x18]
call fcn.0040f0c7
mov ecx, dword [ebp - 0x18]
mov dword [ecx + 0x7c], eax
mov eax, dword [ebp - 0x1c]
test eax, eax
jne 0x409a2a
push dword [ebp - 0x30]
push ebx
push dword [ebp - 0x18]
call fcn.0040a108
mov esi, dword [ebp + 0x14]
test esi, 0x40000000
jne 0x40996c
push esi
push dword [ebp - 0x18]
push ebx
call fcn.0040c26b
push 0
mov edi, 0x40000
push edi
push ebx
call fcn.0040931c
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x18]
push 0x40b37f
push ebx
call fcn.004091f8
push 0
push edi
push ebx
call fcn.00409a45
push 0
push dword [ebp - 0x18]
push ebx
call fcn.0040e5bb
test esi, 0x80000
je 0x409a27
mov eax, dword [ebp - 0x18]
mov esi, dword [ebp - 0x34]
mov dword [eax + 0x104], esi
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x18]
push eax
mov eax, dword [ebp - 0x18]
push 1
push dword [eax + 0xf0]
call fcn.00416120
test eax, eax
je 0x409a23
mov ecx, dword [ebp - 0x18]
mov eax, dword [ecx + 0x108]
push eax
mov dword [ecx + 0x108], ebx
call dword [sym.imp.USER32.dll_DestroyWindow]
mov eax, dword [ebp - 0x18]
or dword [eax + 0x10], 0x100
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x20]
push eax
push 2
push esi
call fcn.00416120
test eax, eax
je 0x409a23
push 0
push dword [ebp + 8]
push 0xfffffffffffffffa
push dword [ebp - 0x20]
push esi
mov esi, dword [ebp - 0x28]
push esi
call fcn.00405f77
push 1
push dword [ebp - 0x18]
push esi
call fcn.0040e5bb
xor eax, eax
jmp 0x409a2a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00430697
leave
ret 0x1c