Function at 0x4997a0
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0x40
push ebx
push ebp
push esi
push edi
mov ecx, 0xa
xor eax, eax
lea edi, [esp + 0x28]
xor esi, esi
rep stosd dword es:[edi], eax
mov eax, dword [0xe6f52c]
push 1
push eax
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], 0x499af0
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x40], eax
call dword [sym.imp.USER32.dll_LoadIconA]
push 0x7f00
push esi
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov dword [esp + 0x40], eax
lea eax, [esp + 0x28]
push eax
mov dword [esp + 0x48], 5
mov dword [esp + 0x4c], esi
mov dword [esp + 0x50], str.MOHTA_WinConsole
call dword [sym.imp.USER32.dll_RegisterClassA]
test ax, ax
je 0x499ade
push esi
lea ecx, [esp + 0x1c]
push 0x80ca0000
push ecx
mov dword [esp + 0x24], esi
mov dword [esp + 0x2c], 0x21c
mov dword [esp + 0x28], esi
mov dword [esp + 0x30], 0x1d0
call dword [sym.imp.USER32.dll_AdjustWindowRect]
mov ebp, dword [sym.imp.USER32.dll_GetDesktopWindow]
call ebp
mov edi, dword [sym.imp.USER32.dll_GetDC]
push eax
call edi
mov ebx, dword [sym.imp.GDI32.dll_GetDeviceCaps]
mov esi, eax
push 8
push esi
call ebx
push 0xa
push esi
mov dword [esp + 0x1c], eax
call ebx
push esi
mov dword [esp + 0x14], eax
call ebp
mov ebp, dword [sym.imp.USER32.dll_ReleaseDC]
push eax
call ebp
mov edx, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x24]
mov esi, dword [esp + 0x1c]
sub edx, eax
sub ecx, esi
push 0
inc ecx
lea eax, [edx + 1]
mov edx, dword [0xe6f52c]
push edx
push 0
push 0
push ecx
mov dword [0x99c1f8], eax
push eax
mov eax, dword [esp + 0x28]
mov dword [0x99c1fc], ecx
mov ecx, dword [esp + 0x2c]
add eax, 0xfffffe3e
cdq
sub eax, edx
mov esi, dword [sym.imp.USER32.dll_CreateWindowExA]
sar eax, 1
push eax
lea eax, [ecx - 0x258]
cdq
sub eax, edx
sar eax, 1
push eax
push 0x80ca0000
push str.MOHAAS_Console
push str.MOHTA_WinConsole
push 0
call esi
test eax, eax
mov dword [0x99bd70], eax
je 0x499ade
push eax
call edi
mov edi, eax
push 0x48
push 0x5a
push edi
call ebx
push eax
push 8
call dword [sym.imp.KERNEL32.dll_MulDiv]
push str.Courier_New
push 0x31
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x12c
push 0
push 0
neg eax
push 0
push eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov edx, dword [0x99bd70]
push edi
push edx
mov dword [0x99bd94], eax
call ebp
mov eax, dword [0xe6f52c]
mov ecx, dword [0x99bd70]
push 0
push eax
push 0x65
push ecx
push 0x14
push 0x210
push 0x195
push 6
push 0x50800080
push 0
push str.edit
push 0
call esi
mov edx, dword [0xe6f52c]
mov dword [0x99bd9c], eax
mov eax, dword [0x99bd70]
push 0
push edx
push 1
push eax
push 0x18
push 0x48
push 0x1b2
push 5
push 0x50000001
push 0
push str.button
push 0
call esi
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push str.copy
push 0
push 0xc
push eax
mov dword [0x99bd7c], eax
call edi
mov ecx, dword [0xe6f52c]
mov edx, dword [0x99bd70]
push 0
push ecx
push 3
push edx
push 0x18
push 0x48
push 0x1b2
push 0x52
push 0x50000001
push 0
push str.button
push 0
call esi
push str.clear
push 0
push 0xc
push eax
mov dword [0x99bd78], eax
call edi
mov eax, dword [0xe6f52c]
mov ecx, dword [0x99bd70]
push 0
push eax
push 2
push ecx
push 0x18
push 0x48
push 0x1b2
push 0x1ce
push 0x50000001
push 0
push str.button
push 0
call esi
push str.quit
push 0
push 0xc
push eax
mov dword [0x99bd80], eax
call edi
mov edx, dword [0xe6f52c]
mov eax, dword [0x99bd70]
push 0
push edx
push 0x64
push eax
push 0x186
push 0x20e
push 6
push 6
push 0x50a00844
push 0
push str.edit
push 0
call esi
mov ecx, dword [0x99bd94]
push 0
push ecx
push 0x30
push eax
mov dword [0x99bd74], eax
call edi
mov edx, dword [0x99bd9c]
push 0x499690
push 0xfffffffffffffffc
push edx
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ecx, dword [0x99bd9c]
mov dword [0x99c200], eax
mov eax, dword [0x99bd94]
push 0
push eax
push 0x30
push ecx
call edi
mov edx, dword [0x99bd70]
push 0xa
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x99bd70]
push eax
call dword [sym.imp.USER32.dll_UpdateWindow]
mov ecx, dword [0x99bd70]
push ecx
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov edx, dword [0x99bd9c]
push edx
call dword [sym.imp.USER32.dll_SetFocus]
mov dword [0x99c1f0], 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x40
ret