Function at 0x41bdd0
Capabilities:
Hide graphical window
Resolve function by parsing pe exports

Disassembly:
sub esp, 0xd8
push ebx
mov ebx, dword [esp + 0xe4]
test ebx, ebx
push ebp
mov ebp, dword [esp + 0xe4]
push esi
push edi
jl 0x41bfdb
cmp ebx, 0xa
jge 0x41bfdb
mov ecx, dword [0x4f4e90]
push ebx
call fcn.00408d00
mov ecx, dword [0x4f4e90]
mov esi, eax
push ebx
mov dword [esp + 0x28], esi
call fcn.00408d10
mov edi, eax
xor eax, eax
push 1
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
push 0x10ca0000
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], edi
call dword [sym.imp.USER32.dll_AdjustWindowRect]
mov eax, dword [0x8dd84c]
mov esi, dword [0x8dd848]
xor ecx, ecx
test eax, eax
setl cl
mov dword [esp + 0x28], esi
dec ecx
and eax, ecx
mov cl, byte [0x4f4ea8]
test cl, cl
mov dword [esp + 0x10], eax
je 0x41beb5
push 0
push 0
call dword [sym.imp.USER32.dll_ChangeDisplaySettingsA]
mov edx, dword [0x4c8588]
push edx
push 0xfffffffffffffff0
push ebp
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
push 0x40
sub eax, edx
mov edx, dword [esp + 0x14]
push eax
sub ecx, dword [esp + 0x1c]
push ecx
push edx
push esi
push 0
push ebp
mov byte [0x4f4ea8], 0
call dword [sym.imp.USER32.dll_SetWindowPos]
push ebp
call fcn.00418e80
add esp, 4
jmp 0x41bed6
mov edx, dword [esp + 0x18]
mov ecx, dword [esp + 0x20]
push 4
sub ecx, edx
mov edx, dword [esp + 0x20]
push ecx
sub edx, dword [esp + 0x1c]
push edx
push eax
push esi
push 0
push ebp
call dword [sym.imp.USER32.dll_SetWindowPos]
mov al, byte [0x8dd83d]
test al, al
je 0x41bf36
mov eax, dword [0x4f4e9c]
test eax, eax
jne 0x41bf19
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 0x3e9
push ebp
push 0
push 0x50000003
call dword [sym.imp.COMCTL32.dll_CreateStatusWindowA]
push 0
push 0x1000
push 0x401
push eax
mov dword [0x4f4e9c], eax
call dword [sym.imp.USER32.dll_SendMessageA]
mov eax, dword [0x4f4e9c]
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x4f4e9c]
mov al, 1
mov byte [0x4f4ea0], al
jmp 0x41bf56
mov ecx, dword [0x4f4e9c]
test ecx, ecx
je 0x41bf4f
push 0
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [0x4f4e9c]
xor al, al
mov byte [0x4f4ea0], al
test ecx, ecx
je 0x41bf74
test al, al
je 0x41bf74
lea edx, [esp + 0x2c]
push edx
push ecx
call dword [sym.imp.USER32.dll_GetWindowRect]
mov esi, dword [esp + 0x38]
sub esi, dword [esp + 0x30]
jmp 0x41bf76
xor esi, esi
lea eax, [esp + 0x3c]
push eax
push ebp
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [esp + 0x48]
lea ecx, [esi + edi]
cmp eax, ecx
je 0x41bfc2
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x1c]
sub esi, eax
mov eax, dword [esp + 0x20]
add esi, edi
add eax, esi
mov esi, dword [esp + 0x18]
push 4
mov dword [esp + 0x24], eax
sub eax, esi
push eax
mov eax, dword [esp + 0x18]
sub edx, ecx
mov ecx, dword [esp + 0x30]
push edx
push eax
push ecx
push 0
push ebp
call dword [sym.imp.USER32.dll_SetWindowPos]
mov edx, dword [esp + 0x24]
push 1
push edi
mov dword [0x4f4ea4], ebx
mov dword [0x8dd280], ebx
push edx
jmp 0x41c1c0
mov al, byte [0x4f4ea8]
test al, al
jne 0x41c1cb
cmp ebx, 0xffffffff
jne 0x41bffe
mov eax, dword [0x4f49b0]
mov esi, dword [0x4f45ac]
mov dword [esp + 0x10], eax
jmp 0x41c010
mov ecx, dword [ebx*4 + 0x4f4be4]
mov esi, dword [ebx*4 + 0x4f4ab0]
mov dword [esp + 0x10], ecx
mov edx, dword [0x4f4c04]
xor eax, eax
mov ecx, 0x27
lea edi, [esp + 0x4c]
rep stosd dword es:[edi], eax
mov eax, dword [esp + 0x10]
mov edi, dword [sym.imp.USER32.dll_ChangeDisplaySettingsA]
push 2
lea ecx, [esp + 0x50]
push ecx
mov word [esp + 0x78], 0x9c
mov dword [esp + 0x7c], 0x1c0000
mov dword [esp + 0xbc], edx
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], esi
call edi
test eax, eax
jne 0x41c1cb
push 4
lea edx, [esp + 0x50]
push edx
call edi
push 0xfffffffffffffff0
push ebp
call dword [sym.imp.USER32.dll_GetWindowLongA]
push 0x10000000
push 0xfffffffffffffff0
push ebp
mov dword [0x4c8588], eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov edi, dword [esp + 0x10]
push 0x40
push esi
push edi
push 0
push 0
push 0
push ebp
mov byte [0x4f4ea8], 1
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, esi
cdq
sub eax, edx
sar eax, 1
push eax
mov eax, edi
cdq
sub eax, edx
sar eax, 1
push eax
call dword [sym.imp.USER32.dll_SetCursorPos]
cmp ebx, 0xffffffff
jne 0x41c0f2
mov ecx, dword [0x4f4ba0]
xor eax, eax
test ecx, ecx
jle 0x41c0f2
mov edx, dword [eax*4 + 0x4f4c0c]
cmp edx, dword [0x4f49b0]
jne 0x41c0e8
mov edx, dword [0x4f45ac]
cmp dword [eax*4 + 0x4f4ad8], edx
je 0x41c0ef
inc eax
cmp eax, ecx
jl 0x41c0ca
jmp 0x41c0f2
lea ebx, [eax + 0xa]
mov eax, dword [0x4f4e94]
test eax, eax
mov dword [0x8dd280], ebx
je 0x41c1a3
mov ebx, dword [sym.imp.USER32.dll_IsMenu]
push eax
call ebx
test eax, eax
je 0x41c1a3
mov eax, dword [0x4f4e64]
test eax, eax
mov edi, dword [sym.imp.USER32.dll_DestroyMenu]
je 0x41c13e
push eax
call ebx
test eax, eax
je 0x41c13e
mov eax, dword [0x4f4e64]
push eax
call edi
mov dword [0x4f4e64], 0
mov eax, dword [0x4f4e68]
test eax, eax
je 0x41c161
push eax
call ebx
test eax, eax
je 0x41c161
mov ecx, dword [0x4f4e68]
push ecx
call edi
mov dword [0x4f4e68], 0
mov eax, dword [0x4f4e70]
test eax, eax
je 0x41c184
push eax
call ebx
test eax, eax
je 0x41c184
mov edx, dword [0x4f4e70]
push edx
call edi
mov dword [0x4f4e70], 0
push 0
push ebp
call dword [sym.imp.USER32.dll_SetMenu]
mov eax, dword [0x4f4e94]
push eax
call edi
mov edi, dword [esp + 0x10]
mov dword [0x4f4e94], 0
mov eax, dword [0x4f4e9c]
test eax, eax
je 0x41c1b5
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push esi
mov byte [0x4f4ea0], 0
push edi
mov ecx, dword [0x4f4e90]
call fcn.00408d20
mov ecx, dword [0x4f4e88]
push ecx
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x41c23e
lea edx, [esp + 0x14]
push edx
push ebp
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [0x4f4e9c]
test eax, eax
je 0x41c211
mov cl, byte [0x4f4ea0]
test cl, cl
je 0x41c211
lea ecx, [esp + 0x2c]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x38]
sub eax, dword [esp + 0x30]
jmp 0x41c213
xor eax, eax
mov edx, dword [esp + 0x20]
mov ebp, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
mov ecx, dword [0x4f4e88]
push 1
sub edx, eax
mov eax, dword [esp + 0x20]
sub edx, ebp
push edx
sub eax, edi
push eax
push 0
push 0
push ecx
call dword [sym.imp.USER32.dll_MoveWindow]
mov edx, dword [0x4f4e90]
pop edi
pop esi
mov dword [0x4c8100], 1
mov eax, dword [edx + 4]
pop ebp
mov byte [eax + 0xa04], 1
pop ebx
add esp, 0xd8
ret