Function at 0x41dfb0
Capabilities:
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x457b61
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x40c
mov eax, dword [0x469c0c]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ebp
push esi
mov esi, ecx
mov ecx, dword [eax - 8]
push edi
test ecx, ecx
mov dword [esp + 0x18], 0
jne 0x41e08a
lea eax, [esp + 0x1c]
push pe_nt_image_headers32
push eax
push 0xa7
call fcn.00403f40
mov ecx, pe_nt_image_headers32
sub ecx, eax
cmp ecx, 1
jle 0x41e034
lea edx, [esp + 0x1c]
test edx, edx
jne 0x41e01b
xor eax, eax
jmp 0x41e022
lea eax, [esp + 0x1c]
push eax
call ebx
lea ecx, [esp + 0x1c]
push ecx
push eax
mov ecx, 0x469c0c
call fcn.00403e10
jmp 0x41e085
push 0x1ff
mov ecx, 0x469c0c
mov edi, 0x200
call fcn.00403bf0
test eax, eax
je 0x41e079
push edi
push eax
push 0xa7
call fcn.00403f40
mov edx, edi
sub edx, eax
cmp edx, 1
jg 0x41e079
add edi, 0x100
mov ecx, 0x469c0c
lea eax, [edi - 1]
push eax
call fcn.00403bf0
test eax, eax
jne 0x41e04c
push 0xffffffffffffffff
mov ecx, 0x469c0c
call fcn.00403cb0
mov eax, dword [0x469c0c]
mov ecx, dword [esi + 0x110]
cmp ecx, 0x5002
jne 0x41e0db
mov al, byte [0x46aed0]
test al, 1
jne 0x41e0c3
mov dl, al
mov ecx, 0x46aee0
or dl, 1
mov byte [0x46aed0], dl
call fcn.00433620
push 0x403fb0
call fcn.00442500
add esp, 4
push 0x20
mov ecx, 0x46aee0
call fcn.004338f0
mov ecx, esi
call fcn.0041d870
jmp 0x41e316
cmp ecx, 0x5000
jne 0x41e387
push eax
lea ecx, [esi + 0x114]
push 0x93
push ecx
call fcn.00403530
mov edx, dword [esi + 0x304]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
add esp, 0xc
push 5
push edx
call edi
mov eax, dword [esi + 0x304]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 1
push 0xf1
push eax
call ebp
mov ecx, dword [esi + 0x304]
mov ebx, dword [sym.imp.USER32.dll_MoveWindow]
push 1
push 0x12
push 0xb4
push 0xb4
push 0xb7
push ecx
call ebx
call fcn.00434df0
test eax, eax
jne 0x41e1cf
mov al, byte [0x46aed0]
test al, 1
jne 0x41e17b
mov dl, al
mov ecx, 0x46aee0
or dl, 1
mov byte [0x46aed0], dl
call fcn.00433620
push 0x403fb0
call fcn.00442500
add esp, 4
push 0x14
mov ecx, 0x46aee0
call fcn.004338f0
mov edx, dword [esi + 0x3cc]
push 5
push edx
call edi
mov eax, dword [esi + 0x3cc]
push 0
push 1
push 0xf1
push eax
call ebp
mov ecx, dword [esi + 0x3cc]
push 1
push 0x12
push 0x12c
push 0xc8
push 0xb7
push ecx
call ebx
mov dword [esi + 0x5a8], 1
jmp 0x41e2f1
call fcn.00434920
test eax, eax
jne 0x41e2bd
mov al, byte [0x46aed0]
test al, 1
jne 0x41e207
mov dl, al
mov ecx, 0x46aee0
or dl, 1
mov byte [0x46aed0], dl
call fcn.00433620
push 0x403fb0
call fcn.00442500
add esp, 4
push 0x33
mov ecx, 0x46aee0
call fcn.004338f0
lea edx, [esp + 0x14]
push 0xb3
push edx
call fcn.0041c990
add esp, 8
mov eax, dword [eax]
lea ecx, [esi + 0x38c]
push eax
mov dword [esp + 0x428], 0
call fcn.00415870
mov eax, dword [esp + 0x14]
mov edx, dword [0x46305c]
mov dword [esp + 0x424], 0xffffffff
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x41e278
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41e278
mov edx, dword [esp + 0x14]
lea eax, [edx - 0xc]
push eax
call fcn.0043733c
add esp, 4
mov eax, dword [esi + 0x3cc]
push 5
push eax
call edi
mov ecx, dword [esi + 0x3cc]
push 0
push 1
push 0xf1
push ecx
call ebp
mov edx, dword [esi + 0x3cc]
push 1
push 0x12
push 0x12c
push 0xc8
push 0xb7
push edx
call ebx
mov dword [esi + 0x5a8], 0xb3
jmp 0x41e2f1
mov eax, dword [esi + 0x70]
mov dword [esi + 0x5a8], 0
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push eax
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x41e2f1
mov dword [esp + 0x18], 1
call fcn.0041cb00
mov eax, dword [esi + 0x70]
push eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov eax, dword [esi + 0x494]
push 1
push 0x2a
push 0x74
push 0xe6
push 0xda
push eax
call ebx
mov eax, dword [esp + 0x18]
test eax, eax
jne 0x41e64f
mov ecx, dword [0x463058]
mov dword [esp + 0x10], ecx
mov eax, dword [esi + 0x110]
mov dword [esp + 0x424], 2
cmp eax, 0x5000
jne 0x41e5a2
mov edx, dword [0x469708]
lea ecx, [esp + 0x1c]
push pe_nt_image_headers32
push ecx
mov eax, dword [edx + 8]
push 0xa1
push eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
jne 0x41e364
mov word [esp + 0x1c], ax
mov edx, pe_nt_image_headers32
sub edx, eax
cmp edx, 1
jle 0x41e555
lea eax, [esp + 0x1c]
lea ecx, [esp + 0x10]
push eax
call fcn.004030c0
jmp 0x41e626
cmp ecx, 0x5001
push eax
jne 0x41e501
lea ecx, [esi + 0x114]
push 0x92
push ecx
call fcn.00403530
add esp, 0xc
lea edx, [esp + 0x1c]
lea ebp, [esi + 0x118]
push pe_nt_image_headers32
push edx
push 0x97
call fcn.00403f40
mov ecx, pe_nt_image_headers32
sub ecx, eax
cmp ecx, 1
jle 0x41e3f0
lea edx, [esp + 0x1c]
test edx, edx
jne 0x41e3da
xor eax, eax
jmp 0x41e3e1
lea eax, [esp + 0x1c]
push eax
call ebx
lea ecx, [esp + 0x1c]
push ecx
push eax
mov ecx, ebp
call fcn.00403e10
jmp 0x41e438
push 0x1ff
mov ecx, ebp
mov edi, 0x200
call fcn.00403bf0
test eax, eax
je 0x41e42f
push edi
push eax
push 0x97
call fcn.00403f40
mov edx, edi
sub edx, eax
cmp edx, 1
jg 0x41e42f
add edi, 0x100
mov ecx, ebp
lea eax, [edi - 1]
push eax
call fcn.00403bf0
test eax, eax
jne 0x41e405
push 0xffffffffffffffff
mov ecx, ebp
call fcn.00403cb0
mov ebp, dword [ebp]
lea edi, [esi + 0xa0]
push ebp
mov ecx, edi
call fcn.00417050
mov ecx, edi
call fcn.00417120
mov ecx, dword [esi + 0xe0]
push 5
push ecx
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [esi + 0x494]
mov edi, dword [sym.imp.USER32.dll_MoveWindow]
push 1
push 0x2a
push 0x74
push 0xe4
push 0xda
push edx
call edi
mov eax, dword [esi + 0xe0]
push 1
push 0x1e
push 0xf0
push 0xa7
push 0xa2
push eax
call edi
lea ecx, [esp + 0x14]
push 0xbb
push ecx
call fcn.0041c990
add esp, 8
mov eax, dword [eax]
lea ecx, [esi + 0x454]
push eax
mov dword [esp + 0x428], 1
call fcn.00415870
mov eax, dword [esp + 0x14]
mov ecx, dword [0x46305c]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x41e316
add eax, 0xfffffff4
push eax
call dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
test eax, eax
jg 0x41e316
mov eax, dword [esp + 0x14]
add eax, 0xfffffff4
push eax
call fcn.0043733c
add esp, 4
jmp 0x41e316
lea ecx, [esi + 0x114]
push 0xa6
push ecx
call fcn.00403530
mov edx, dword [esi + 0x494]
add esp, 0xc
mov edi, dword [sym.imp.USER32.dll_MoveWindow]
push 1
push 0x2a
push 0x74
push 0xe4
push 0xda
push edx
call edi
mov eax, dword [esi + 0xe0]
push 1
push 0x1e
push 0xf0
push 0xa7
push 0xa2
push eax
call edi
jmp 0x41e316
push 0x1ff
lea ecx, [esp + 0x14]
mov edi, 0x200
call fcn.00403bf0
test eax, eax
je 0x41e61b
push edi
push eax
push 0xa1
call fcn.00403f40
mov ecx, edi
sub ecx, eax
cmp ecx, 1
jg 0x41e61b
add edi, 0x100
lea ecx, [esp + 0x10]
lea edx, [edi - 1]
push edx
call fcn.00403bf0
test eax, eax
jne 0x41e570
jmp 0x41e61b
lea eax, [esp + 0x21c]
push pe_nt_image_headers32
push eax
push 0xa0
call fcn.00403f40
mov ecx, pe_nt_image_headers32
sub ecx, eax
cmp ecx, 1
jle 0x41e5d8
lea edx, [esp + 0x21c]
lea ecx, [esp + 0x10]
push edx
call fcn.004030c0
jmp 0x41e626
push 0x1ff
lea ecx, [esp + 0x14]
mov edi, 0x200
call fcn.00403bf0
test eax, eax
je 0x41e61b
push edi
push eax
push 0xa0
call fcn.00403f40
mov ecx, edi
sub ecx, eax
cmp ecx, 1
jg 0x41e61b
add edi, 0x100
lea ecx, [esp + 0x10]
lea edx, [edi - 1]
push edx
call fcn.00403bf0
test eax, eax
jne 0x41e5ef
push 0xffffffffffffffff
lea ecx, [esp + 0x14]
call fcn.00403cb0
mov esi, dword [esi + 0x70]
mov ecx, dword [esp + 0x10]
push 0x1d4c0
push ecx
mov eax, dword [esi]
push 1
push esi
call dword [eax + 0x3c]
lea ecx, [esp + 0x10]
mov dword [esp + 0x424], 0xffffffff
call fcn.00403d80
mov ecx, dword [esp + 0x41c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x418
ret