Function at 0x41dd40
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0xb4
push ebx
push esi
push edi
mov edi, dword [esp + 0xc4]
mov eax, dword [edi + 0xadc]
test eax, eax
je 0x41de40
cmp word [eax], 0
je 0x41de40
push 0x2c
lea eax, [esp + 0x18]
push 0
push eax
call fcn.004ce290
mov ecx, dword [0x5193bc]
mov edx, dword [0x515ed0]
add esp, 0xc
push 0
push 0
push 0
push 0xffffff61
push 0
mov dword [esp + 0x24], 0x30
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x38], edx
mov dword [esp + 0x2c], 0x43a840
call fcn.004a9010
add esp, 0x14
push 0
push 0
push 0x31
mov dword [0x514c18], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0xffffff61
push 0
call fcn.004a9010
mov ecx, dword [0x514c18]
add esp, 0x14
push 0x7f00
push 0
mov dword [0x514c1c], eax
mov dword [esp + 0x30], ecx
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov esi, dword [sym.imp.USER32.dll_RegisterClassExW]
lea edx, [esp + 0x10]
push edx
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], 0x10
mov dword [esp + 0x38], 0xd3
call esi
test ax, ax
jne 0x41de4e
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push 0x4e9970
call fcn.0049fc00
add esp, 4
push eax
call fcn.004abe70
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebx
add esp, 0xb4
ret 4
mov eax, dword [0x5193d4]
lea ecx, [esp + 0x10]
push ecx
mov dword [esp + 0x3c], eax
mov dword [esp + 0x38], 0
call esi
test ax, ax
je 0x41de19
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x41dead
push 0x40
lea edx, [esp + 0x44]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x41dea6
push 0x4e9994
call fcn.0049fc00
add esp, 4
push eax
lea eax, [esp + 0x44]
push eax
call fcn.004c4e9d
add esp, 8
test eax, eax
je 0x41dead
mov byte [esp + 0xf], 0
jmp 0x41deb2
mov byte [esp + 0xf], 1
mov ecx, dword [0x515ed0]
mov edx, dword [edi + 0xadc]
mov eax, dword [0x5193bc]
push 0
push ecx
movzx ecx, byte [esp + 0x17]
mov ebx, dword [sym.imp.USER32.dll_CreateWindowExW]
push 0
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
push 0xcf0000
neg ecx
push edx
sbb ecx, ecx
push eax
and ecx, 0x80
push ecx
call ebx
mov dword [0x515edc], eax
test eax, eax
jne 0x41df21
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push 0x4e99c0
jmp 0x41de2f
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 3
mov edi, eax
push 0xff79
push edi
call dword [sym.imp.USER32.dll_EnableMenuItem]
mov esi, 3
call fcn.0041e160
mov edx, dword [0x515ed0]
mov eax, dword [0x515edc]
push 0
push edx
push 1
push eax
push 0
push 0
push 0
push 0
push 0x50a00804
push 0
push 0x4e99ec
call fcn.0049fc00
add esp, 4
push eax
push 0
call ebx
mov dword [0x515ee0], eax
test eax, eax
je 0x41df06
push eax
call dword [sym.imp.USER32.dll_GetDC]
cmp byte [0x517b6e], 0
mov esi, eax
jne 0x41df96
push 0x4e9a08
jmp 0x41df9b
push 0x4e9a38
call fcn.0049fc00
add esp, 4
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x48
push 0x5a
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0xa
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
push eax
call dword [sym.imp.GDI32.dll_CreateFontW]
mov ecx, dword [0x515ee0]
push esi
push ecx
mov dword [0x515ee8], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov edx, dword [0x515ee8]
mov eax, dword [0x515ee0]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push edx
push 0x30
push eax
call esi
mov ecx, dword [0x515ee0]
push 0
push 0
push 0xc5
push ecx
call esi
mov edx, dword [0x515edc]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push edx
call esi
mov eax, dword [0x515edc]
push 0
push eax
call esi
cmp byte [esp + 0xf], 0
je 0x41e055
mov ecx, dword [0x515edc]
push 6
push ecx
call esi
mov edx, dword [0x515edc]
push 0
push 0xffffffffffffffec
push edx
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov eax, dword [0x515ed0]
push 0xd4
push eax
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
cmp byte [0x51601a], 0
mov esi, dword [esp + 0xc4]
mov dword [0x515ef0], eax
je 0x41e087
mov dword [esi + 0x27e], 0
jmp 0x41e08c
call fcn.0041e190
cmp dword [esi + 0xa8c], 0
je 0x41e09c
mov bl, 1
call fcn.0041e0b0
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0xb4
ret 4