Function at 0x410044
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.004362e7
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x4aedbd
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], 0
push 0
mov ebx, 0x2d4
call fcn.004382e0
add esp, 4
mov dword [ebp - 4], eax
push 0
mov ebx, 0x2d8
call fcn.004382f0
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp + 0x14], 0
jne 0x4100d6
mov eax, 0x4b3364
push eax
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4100d0
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x10]
push dword [ebx]
push 0x4b336f
mov ecx, 2
call fcn.00401178
add esp, 8
mov dword [ebp - 0x18], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x410103
mov eax, 0x45c2f8
push eax
push 1
mov ebx, 0x24c
call fcn.00437a60
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410129
push ebx
call fcn.004362ed
add esp, 4
cmp dword [ebp - 0x1c], 0
jne 0x410151
mov eax, 0x4b3381
push eax
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
test ebx, ebx
je 0x41014b
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
mov ebx, dword [ebp + 0x10]
push dword [ebx]
push 0x4b336f
mov ecx, 2
call fcn.00401178
add esp, 8
mov dword [ebp - 0x18], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0x18]
test eax, eax
jne 0x41017e
mov eax, 0x45c2f8
push eax
push 1
mov ebx, 0x24c
call fcn.00437a60
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x4101a4
push ebx
call fcn.004362ed
add esp, 4
cmp dword [ebp - 0x1c], 0
jne 0x4101cc
mov eax, 0x4b338c
push eax
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
test ebx, ebx
je 0x4101c6
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov ebx, dword [ebp + 0x10]
mov dword [ebx], eax
mov eax, 0x4b3397
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4101e2
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x4101f9
mov eax, 0x45c2f8
push eax
push 1
mov ebx, 0x24c
call fcn.00437a60
add esp, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x410233
mov eax, 0x4b33b3
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41022f
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x410246
mov eax, 0x45c2f8
push eax
push 1
mov ebx, 0x24c
call fcn.00437a60
add esp, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x410280
mov eax, 0x4b3397
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x41027c
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
push 0x80000004
push 0
mov eax, dword [ebp - 0xc]
test eax, eax
jne 0x410293
mov eax, 0x45c2f8
push eax
push 1
mov ebx, 0x24c
call fcn.00437a60
add esp, 0x10
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 0
jne 0x4102cd
mov eax, 0x4b33d8
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x4102c9
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, dword [ebp + 0xc]
mov dword [0xd95f61], eax
cmp dword [0xd95f65], 0
jne 0x4106ee
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00437740
add esp, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
push 0x4b33f4
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.USER32.dll_FindWindowA]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x410334
push 0x488
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410347
push ebx
call fcn.004362ed
add esp, 4
mov dword [ebp - 0x24], esp
push 0
push 0
push 0x10
push dword [ebp - 0x20]
xor eax, eax
call dword [sym.imp.USER32.dll_PostMessageA]
nop
nop
cmp dword [ebp - 0x24], esp
je 0x410382
push 0x488
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
push 0x80000301
push 0
push 1
push 0x80000002
push 0
push 1
push 0x80000004
push 0
push 0x4b33ff
push 3
mov ebx, 0x2c0
call fcn.004369d0
add esp, 0x28
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00437740
add esp, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
push 0x4b33f4
push dword [ebp - 0x18]
xor eax, eax
call dword [sym.imp.USER32.dll_FindWindowA]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x41040a
push 0x538
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x20], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x41041d
push ebx
call fcn.004362ed
add esp, 4
mov eax, dword [ebp - 0x20]
mov dword [0xd95f65], eax
mov dword [ebp - 0x18], 0
push 0
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x10]
push eax
push 1
push dword [0xd95f65]
call fcn.00410b78
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410456
push ebx
call fcn.004362ed
add esp, 4
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
push eax
lea eax, [ebp - 0x14]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x4104c1
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebx]
inc ecx
shl ecx, 2
add ebx, ecx
push ebx
mov eax, dword [ebp - 0x14]
dec eax
pop ebx
shl eax, 2
add ebx, eax
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], esp
push 0
mov ebx, dword [ebp - 0x18]
push dword [ebx]
xor eax, eax
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x4104bc
push 0x5a2
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
pop eax
pop ebx
pop ecx
jmp 0x410462
add esp, 0xc
push 0x80000006
push 0
push 0x410ec6
push 1
mov ebx, 8
mov eax, 0x43a6e0
call fcn.00436930
add esp, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x18]
push 0xfffffffc
push dword [0xd95f65]
xor eax, eax
call dword [0xd96029]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x410521
push 0x602
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
push 0x80000301
push 0
push 0x80000
push 0x80000301
push 0
push 0x80
push 0x80000301
push 0
push 0x20
push 3
mov ebx, 0xc8
call fcn.00438300
add esp, 0x28
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x18]
push 0xffffffec
push dword [0xd95f65]
xor eax, eax
call dword [0xd96029]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x410591
push 0x63d
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 0x9c000000
push 0xfffffff0
push dword [0xd95f65]
xor eax, eax
call dword [0xd96029]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4105ca
push 0x66c
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 0xa
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4105fe
push 0x6a6
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 1
push dword [ebp - 8]
push dword [ebp - 4]
push 0
push 0
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_MoveWindow]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x410642
push 0x6c9
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
mov ebx, 0x4b341b
call fcn.00410024
push ebx
push dword [0xd95f65]
xor eax, eax
call dword [0xd9602d]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x41067c
push 0x70c
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push dword [0xd95f65]
xor eax, eax
call dword [0xd96031]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4106ab
push 0x74c
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 2
push 0xd2
push 0
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4106e9
push 0x766
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
jmp 0x4109c5
mov dword [ebp - 0x18], esp
push 1
push dword [ebp - 8]
push dword [ebp - 4]
push 0
push 0
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_MoveWindow]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x410732
push 0x79c
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
push 0x80000006
push 0
push 0x410ec6
push 1
mov ebx, 8
mov eax, 0x43a6e0
call fcn.00436930
add esp, 0x10
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], esp
push dword [ebp - 0x18]
push 0xfffffffc
push dword [0xd95f65]
xor eax, eax
call dword [0xd96029]
nop
nop
cmp dword [ebp - 0x1c], esp
je 0x41078f
push 0x801
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 0xffffffec
push dword [0xd95f65]
xor eax, eax
call dword [0xd96035]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4107c3
push 0x84e
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push 0x8000000
push 0x80000301
push 0
push 0x1f003f
push 0x80000301
push 0
push dword [ebp - 0x1c]
push 3
mov ebx, 0xc8
call fcn.00438300
add esp, 0x28
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], esp
push dword [ebp - 0x20]
push 0xffffffec
push dword [0xd95f65]
xor eax, eax
call dword [0xd96029]
nop
nop
cmp dword [ebp - 0x24], esp
je 0x410834
push 0x84e
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 0x16010000
push 0xfffffff0
push dword [0xd95f65]
xor eax, eax
call dword [0xd96029]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x41086d
push 0x885
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 0x80800a8
push 0xffffffec
push dword [0xd95f65]
xor eax, eax
call dword [0xd96029]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4108a6
push 0x8b1
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 0xa
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_ShowWindow]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4108da
push 0x8dd
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 1
push dword [ebp - 8]
push dword [ebp - 4]
push 0
push 0
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_MoveWindow]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x41091e
push 0x900
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
mov ebx, 0x4b341b
call fcn.00410024
push ebx
push dword [0xd95f65]
xor eax, eax
call dword [0xd9602d]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x410958
push 0x943
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push dword [0xd95f65]
xor eax, eax
call dword [0xd96031]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x410987
push 0x983
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 2
push 0xd2
push 0
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x4109c5
push 0x99d
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x18], esp
push 3
push 0
push 0
push 0
push 0
push 0xffffffff
push dword [0xd95f65]
xor eax, eax
call dword [sym.imp.USER32.dll_SetWindowPos]
nop
nop
cmp dword [ebp - 0x18], esp
je 0x410a12
push 0x9d4
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
push 0x80000002
push 0
push dword [ebp + 0x18]
push 1
mov ebx, 0x9dc
call fcn.00438200
add esp, 0x10
mov dword [0xd95f69], eax
mov ebx, dword [ebp + 0x10]
push dword [ebx]
push 0x4b336f
mov ecx, 2
call fcn.00401178
add esp, 8
mov dword [ebp - 0x18], eax
push 0
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x18]
push eax
push dword [ebp + 0xc]
push dword [0xd95f65]
call fcn.00410caf
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x410a78
push ebx
call fcn.004362ed
add esp, 4
push 0x80000006
push 0
push 0x41114a
push 1
mov ebx, 0x9dc
call fcn.00438200
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0x80000006
push 0
push dword [ebp + 8]
push 1
mov ebx, 0x9dc
call fcn.00438200
add esp, 0x10
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], esp
mov eax, 0
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push 0
push dword [ebp - 0x1c]
push dword [ebp - 0x18]
push 0
push 0
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
cmp dword [ebp - 0x20], esp
je 0x410b02
push 0xba7
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x410b31
push 0xba7
push 0x403ff1b
push 6
call fcn.004362f9
add esp, 0xc
mov eax, dword [0xd95f65]
jmp 0x410b3b
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x410b4c
push ebx
call fcn.004362ed
add esp, 4
mov ebx, dword [ebp - 0x10]
push ebx
call fcn.004362ed
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x18