Function at 0x41fd30
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0x70
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x84]
mov eax, dword [edi + 0x614]
test eax, eax
je 0x41fe22
cmp byte [eax], 0
je 0x41fe22
push 0x2c
lea eax, [esp + 0x18]
push 0
push eax
call fcn.0049c1f0
mov ecx, dword [0x4bb43c]
add esp, 0xc
push 0
push 0
push 0
push 0xffffff61
push 0
mov dword [esp + 0x24], 0x30
mov dword [esp + 0x4c], str.AutoHotkey
mov dword [esp + 0x38], ecx
mov dword [esp + 0x2c], 0x445790
call fcn.004814f0
add esp, 0x14
push 0
push 0
push 0x31
mov dword [0x4ba1e8], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0xffffff61
push 0
call fcn.004814f0
mov edx, dword [0x4ba1e8]
add esp, 0x14
push 0x7f00
push 0
mov dword [0x4ba1ec], eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_RegisterClassExA]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x34], 0x10
mov dword [esp + 0x38], 0xd3
call esi
test ax, ax
jne 0x41fe2e
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push str.RegClass
call fcn.00484510
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x70
ret 4
lea ecx, [esp + 0x10]
push ecx
mov dword [esp + 0x3c], str.AutoHotkey2
mov dword [esp + 0x38], 0
call esi
test ax, ax
je 0x41fe04
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x41fe80
push 0x40
lea edx, [esp + 0x44]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClassNameA]
test eax, eax
je 0x41fe7c
lea eax, [esp + 0x40]
push str.Shell_TrayWnd
push eax
call fcn.00492c11
add esp, 8
test eax, eax
je 0x41fe80
xor bl, bl
jmp 0x41fe82
mov bl, 1
mov ecx, dword [0x4bb43c]
mov edx, dword [edi + 0x614]
push 0
mov ebp, dword [sym.imp.USER32.dll_CreateWindowExA]
push ecx
push 0
push 0
push connect
push connect
push connect
push connect
movzx eax, bl
push 0xcf0000
neg eax
push edx
sbb eax, eax
push str.AutoHotkey
and eax, 0x80
push eax
call ebp
mov dword [0x4bb448], eax
test eax, eax
jne 0x41fefc
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push str.CreateWindow
call fcn.00484510
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x70
ret 4
cmp dword [edi + 0x618], 1
jne 0x41ff3b
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 3
mov edi, eax
push 0xff79
push edi
call dword [sym.imp.USER32.dll_EnableMenuItem]
cmp byte [0x4b7492], 0
jne 0x41ff2f
mov esi, 3
call fcn.00420140
mov edi, dword [esp + 0x84]
mov eax, dword [0x4bb448]
mov ecx, dword [0x4bb43c]
push 0
push ecx
push 1
push eax
push 0
push 0
push 0
push 0
push 0x50a00804
push 0
push str.edit
push 0
call ebp
mov dword [0x4bb44c], eax
test eax, eax
je 0x41fed2
push eax
call dword [sym.imp.USER32.dll_GetDC]
cmp byte [0x4bcc4e], 0
mov esi, eax
mov eax, str.Consolas
jne 0x41ff88
mov eax, str.Lucida_Console
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x48
push 0x5a
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0xa
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
push eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov edx, dword [0x4bb44c]
push esi
push edx
mov dword [0x4bb454], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0x4bb454]
mov ecx, dword [0x4bb44c]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push eax
push 0x30
push ecx
call esi
mov edx, dword [0x4bb44c]
push 0
push 0
push 0xc5
push edx
call esi
mov eax, dword [0x4bb448]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [0x4bb448]
push 0
push ecx
call esi
test bl, bl
je 0x420036
mov edx, dword [0x4bb448]
push 6
push edx
call esi
mov eax, dword [0x4bb448]
push 0
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ecx, dword [0x4bb43c]
push 0xd4
push ecx
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
cmp byte [0x4bb586], 0
mov dword [0x4bb45c], eax
je 0x420062
mov dword [edi + 0x17e], 0
jmp 0x420069
mov esi, edi
call fcn.00420170
cmp dword [edi + 0x5c4], 0
je 0x42007b
mov bl, 1
mov esi, edi
call fcn.00420090
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x70
ret 4