Function at 0x437900
Capabilities:
Create thread
Enumerate gui resources
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x3b8
push esi
push edi
push str.Russian
push 0
call fcn.00445882
add esp, 8
call fcn.004356c0
test al, al
jne 0x437941
push 0
push str.Evelion
push str.Please_run_game_before_running_Evelion_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.00445617
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x435650
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x437dfd
mov esi, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 0x477368
push eax
mov dword [0x477304], eax
call esi
lea eax, [esp + 0x10]
push eax
push dword [0x477304]
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x437de2
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
sub ecx, dword [esp + 0x10]
sub eax, dword [esp + 0x14]
push 4
mov dword [0x477308], ecx
mov dword [0x477300], eax
call fcn.004389d5
add esp, 4
lea ecx, [esp + 0x6c]
mov dword [eax], 0x435750
push ecx
push 0
push eax
push 0x4385a0
push 0
push 0
call fcn.00445a16
add esp, 0x18
mov dword [esp + 0x68], eax
test eax, eax
je 0x437dd3
push 4
call fcn.004389d5
add esp, 4
lea ecx, [esp + 0x64]
mov dword [eax], 0x435c30
push ecx
push 0
push eax
push 0x4385a0
push 0
push 0
call fcn.00445a16
add esp, 0x18
mov dword [esp + 0x60], eax
test eax, eax
je 0x437dc4
push 4
call fcn.004389d5
add esp, 4
lea ecx, [esp + 0x5c]
mov dword [eax], 0x435ce0
push ecx
push 0
push eax
push 0x4385a0
push 0
push 0
call fcn.00445a16
add esp, 0x18
mov dword [esp + 0x58], eax
test eax, eax
je 0x437db5
push 4
call fcn.004389d5
add esp, 4
lea ecx, [esp + 0x54]
mov dword [eax], 0x436310
push ecx
push 0
push eax
push 0x4385a0
push 0
push 0
call fcn.00445a16
add esp, 0x18
mov dword [esp + 0x50], eax
test eax, eax
je 0x437da6
push 4
call fcn.004389d5
add esp, 4
lea ecx, [esp + 0x4c]
mov dword [eax], 0x436420
push ecx
push 0
push eax
push 0x4385a0
push 0
push 0
call fcn.00445a16
add esp, 0x18
mov dword [esp + 0x48], eax
test eax, eax
je 0x437d97
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
nop dword [eax + eax]
lea eax, [esp + 0xc]
push eax
call edi
push eax
call esi
mov eax, dword [0x477368]
cmp eax, dword [esp + 0xc]
jne 0x437ac0
mov eax, dword [0x477304]
lea ecx, [esp + 0x10]
push ecx
push eax
mov dword [0x4773f0], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
sub eax, edx
mov ecx, dword [esp + 0x14]
mov dword [0x4773e4], eax
mov eax, dword [esp + 0x1c]
sub eax, ecx
mov dword [0x4773f4], edx
mov dword [0x4773e8], eax
lea eax, [esp + 0xa8]
push 0x104
push eax
push dword [0x4773f0]
mov dword [0x4773ec], ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x104
lea eax, [esp + 0x1b4]
push eax
push dword [0x4773f0]
call dword [sym.imp.USER32.dll_GetClassNameA]
push 0x104
lea eax, [esp + 0x2bc]
push eax
push 0
push dword [0x4773f8]
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
mov esi, 0xa
mov dword [esp + 0x30], 0
xorps xmm0, xmm0
mov dword [esp + 0x34], 0xf
movaps xmmword [esp + 0x20], xmm0
mov byte [esp + 0x20], 0
lea edi, [esi + 0x34]
call fcn.00445aa7
xor edx, edx
mov ecx, dword [esp + 0x30]
div edi
mov edi, dword [esp + 0x34]
mov dl, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov byte [esp + 0xc], dl
cmp ecx, edi
jae 0x437bc3
lea eax, [ecx + 1]
cmp edi, 0xf
mov dword [esp + 0x30], eax
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x437bd5
push dword [esp + 0xc]
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00438390
mov edi, 0x3e
sub esi, 1
jne 0x437b87
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
cmova eax, dword [esp + 0x20]
push 0x7f00
push 0
mov dword [0x47736c], eax
mov dword [esp + 0x78], 0x30
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x4377c0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
call esi
push 0x7f00
push 0
mov dword [esp + 0x90], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push 0x7f00
mov dword [esp + 0x90], eax
mov eax, dword [0x47736c]
push 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], eax
call esi
movups xmm0, xmmword [esp + 0x70]
mov dword [esp + 0x9c], eax
push 0x4773b0
movups xmmword [0x4773b0], xmm0
movups xmm0, xmmword [esp + 0x84]
movups xmmword [0x4773c0], xmm0
movups xmm0, xmmword [esp + 0x94]
movups xmmword [0x4773d0], xmm0
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov eax, dword [0x4773f0]
test eax, eax
je 0x437d11
push 0x477460
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x477474
push dword [0x4773f0]
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x477474]
mov ecx, dword [0x47746c]
mov dword [0x477460], eax
mov eax, dword [0x477478]
mov dword [0x477464], eax
mov eax, dword [0x477468]
mov dword [0x4773e4], eax
mov dword [0x4773e8], ecx
jmp 0x437d1c
mov eax, dword [0x4773e4]
mov ecx, dword [0x4773e8]
push 0
push 0
push 0
push 0
push ecx
push eax
push dword [0x4773ec]
mov eax, dword [0x47736c]
push dword [0x4773f4]
push 0x90000000
push eax
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0x475960
push eax
mov dword [0x4773e0], eax
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push 0x80020
push 0xffffffffffffffec
push dword [0x4773e0]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 5
push dword [0x4773e0]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x4773e0]
call dword [sym.imp.USER32.dll_UpdateWindow]
call fcn.004374e0
nop dword [eax]
call fcn.004371c0
jmp 0x437d90
push 6
mov dword [esp + 0x50], 0
call fcn.00439b0c
push 6
mov dword [esp + 0x58], 0
call fcn.00439b0c
push 6
mov dword [esp + 0x60], 0
call fcn.00439b0c
push 6
mov dword [esp + 0x68], 0
call fcn.00439b0c
push 6
mov dword [esp + 0x70], 0
call fcn.00439b0c
push 0
push str.Evelion
push str.Failed_to_get_window_rect.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.00445617
push 0
push str.Evelion
push str.Get_ProcessHwnd_error.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call fcn.00445617
int3