Function at 0x4190f5
Capabilities:
Create thread
Get graphical window text
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x43a57d
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [0x44e278]
xor eax, esp
mov dword [esp + 0x30], eax
push ebx
push esi
push edi
mov eax, dword [0x44e278]
xor eax, esp
push eax
lea eax, [esp + 0x48]
mov dword fs:[0], eax
mov edi, ecx
mov dword [esp + 0x2c], edi
mov eax, dword [edi + 0x1120]
mov ebx, dword [ebp + 8]
push dword [eax + 0x38c]
push 0xfffffffffffffff2
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetClassLongW]
mov eax, dword [edi + 0x1120]
push dword [eax + 0x38c]
push 1
push 0x80
push ebx
call dword [sym.imp.USER32.dll_SendMessageW]
push 0x442f98
lea ecx, [esp + 0x18]
call fcn.00401590
and dword [esp + 0x50], 0
lea esi, [edi + 0x5a0]
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0x409
push ebx
call dword [eax + 8]
lea ecx, [edi + 0x78]
mov dword [edi + 0x80], 0xffffff
mov eax, dword [ecx]
push 0x3ed
push ebx
call dword [eax + 8]
push 0x442e10
lea ecx, [esp + 0x18]
call fcn.00401590
lea esi, [edi + 0x168]
mov dword [esp + 0x50], 1
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0x3ea
push ebx
call dword [eax + 8]
push 0x442ddc
lea ecx, [esp + 0x18]
mov dword [edi + 0x170], 0xfaffff
mov byte [edi + 0x1d0], 1
call fcn.00401590
lea esi, [edi + 0x1e0]
mov dword [esp + 0x50], 2
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov dword [edi + 0x1e8], 0xfaffff
push 0x3eb
push ebx
mov ecx, esi
call dword [eax + 8]
push 0x442ea0
lea ecx, [esp + 0x18]
mov byte [edi + 0x248], 1
call fcn.00401590
lea esi, [edi + 0x258]
mov dword [esp + 0x50], 3
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0x3ef
push ebx
call dword [eax + 8]
lea esi, [edi + 0x438]
mov dword [edi + 0x260], 0xfaffff
mov eax, dword [esi]
mov ecx, esi
push 0x4252e8
call dword [eax + 0x7c]
mov eax, dword [esi]
mov ecx, esi
push 0x40a
push ebx
mov dword [edi + 0x440], 0xf9ffff
call dword [eax + 8]
push 0x442e4c
lea ecx, [esp + 0x18]
call fcn.00401590
lea esi, [edi + 0x2d0]
mov dword [esp + 0x50], 4
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0xffffff
call dword [eax + 0x7c]
mov eax, dword [esi]
mov ecx, esi
push 0x40d
push ebx
call dword [eax + 8]
lea esi, [edi + 0x4b0]
mov eax, dword [esi]
mov ecx, esi
push 0x53b57c
call dword [eax + 0x7c]
mov eax, dword [esi]
mov ecx, esi
push 0x40b
push ebx
mov dword [edi + 0x4b8], 0xf9ffff
call dword [eax + 8]
push 0x442c5c
lea ecx, [esp + 0x18]
call fcn.00401590
lea esi, [edi + 0x348]
mov dword [esp + 0x50], 5
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
mov eax, dword [esi]
mov ecx, esi
push 0x40e
push ebx
mov dword [edi + 0x350], 0x717171
call dword [eax + 8]
lea esi, [edi + 0x528]
mov eax, dword [esi]
mov ecx, esi
push 0x3bb4f5
call dword [eax + 0x7c]
mov eax, dword [esi]
mov ecx, esi
push 0x40c
push ebx
mov dword [edi + 0x530], 0xf9ffff
call dword [eax + 8]
push 0x442bac
lea ecx, [esp + 0x18]
call fcn.00401590
lea esi, [edi + 0x3c0]
mov dword [esp + 0x50], 6
mov eax, dword [esi]
lea ecx, [esp + 0x14]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
mov eax, dword [esi]
mov ecx, esi
push 0x40f
push ebx
mov dword [edi + 0x3c8], 0x717171
call dword [eax + 8]
lea esi, [edi + 0x6bc]
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
push 0x442d70
lea ecx, [esp + 0x18]
mov dword [edi + 0x6c4], 0x717171
call fcn.00401590
mov dword [esp + 0x50], 7
lea ecx, [esp + 0x14]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0x3f5
push ebx
call dword [eax + 8]
lea esi, [edi + 0x734]
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
push 0x442ce4
lea ecx, [esp + 0x18]
mov dword [edi + 0x73c], 0xd77800
mov dword [edi + 0x748], 0xed8e16
mov dword [edi + 0x74c], 0xc16200
call fcn.00401590
mov dword [esp + 0x50], 8
lea ecx, [esp + 0x14]
mov eax, dword [esi]
push ecx
mov ecx, esi
call dword [eax + 0x8c]
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0x3f7
push ebx
call dword [eax + 8]
lea esi, [edi + 0x618]
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
mov eax, 0xffffff
mov dword [edi + 0x6ac], 0xd6d6d5
mov dword [edi + 0x620], eax
mov ecx, esi
mov dword [edi + 0x62c], eax
mov dword [edi + 0x630], eax
mov eax, dword [esi]
push 0x3f1
push ebx
mov dword [edi + 0x6b0], 0xd77800
mov dword [edi + 0x6b4], 0xed8e16
mov dword [edi + 0x6b8], 0xc16200
call dword [eax + 8]
lea ecx, [edi + 0x7bc]
mov byte [edi + 0x648], 0
mov eax, dword [ecx]
mov esi, 0xd6d6d5
push 0x404
push dword [edi + 4]
mov byte [edi + 0x660], 1
mov dword [edi + 0x7c4], esi
call dword [eax + 8]
lea ecx, [edi + 0x820]
mov dword [edi + 0x828], esi
mov eax, dword [ecx]
push 0x43d
push dword [edi + 4]
call dword [eax + 8]
add edi, 0x884
mov esi, 0xffffff
push esi
mov ecx, edi
mov eax, dword [edi]
call dword [eax + 0x7c]
push 0x383226
push 2
mov ecx, edi
call fcn.00423cc7
push esi
push 0
mov ecx, edi
call fcn.00423cc7
push esi
push 4
mov ecx, edi
call fcn.00423cc7
push 0xf7f7f7
push 5
mov ecx, edi
call fcn.00423cc7
mov esi, 0xd77800
mov ecx, edi
push esi
push 1
call fcn.00423cc7
push 0x717171
push 6
mov ecx, edi
call fcn.00423cc7
push 0xffffff
push 3
mov ecx, edi
call fcn.00423cc7
push esi
push 8
mov ecx, edi
call fcn.00423cc7
push esi
push 0xa
mov ecx, edi
call fcn.00423cc7
push 0xed8e16
push 0xb
mov ecx, edi
call fcn.00423cc7
push 0xffffff
push 9
mov ecx, edi
call fcn.00423cc7
push 0x717171
push 7
mov ecx, edi
call fcn.00423cc7
push 0x744710
push 0xc
mov ecx, edi
call fcn.00423cc7
push 0xfbb561
push 0xd
mov ecx, edi
call fcn.00423cc7
mov ecx, edi
call fcn.00423d99
push ecx
lea ecx, [edi + 0x110]
call fcn.0041529f
mov ecx, edi
call fcn.00423b61
lea ecx, [edi + 0x184]
call fcn.0042247f
lea ecx, [edi + 0x15c]
call fcn.0040654f
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [edi]
mov ecx, edi
push 0x3e9
push ebx
call dword [eax + 8]
push 0
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [edi]
mov ecx, ebx
call fcn.0041d1a4
push eax
mov eax, dword [esp + 0x30]
mov ecx, edi
push dword [eax + 0x2c]
call dword [esi + 0x58]
mov edi, dword [esp + 0x2c]
push 0xbb
lea esi, [edi + 0xa44]
mov ecx, esi
call fcn.00415b3d
mov eax, dword [esi]
mov ecx, esi
push 0x456
push ebx
call dword [eax + 8]
lea ecx, [edi + 0xac0]
mov esi, 0x717171
mov eax, dword [ecx]
push 0x44b
push ebx
mov dword [edi + 0xac8], esi
call dword [eax + 8]
lea ecx, [edi + 0xb38]
mov dword [edi + 0xb40], esi
mov eax, dword [ecx]
push 0x44d
push ebx
call dword [eax + 8]
lea ecx, [edi + 0xbb0]
mov dword [edi + 0xbb8], esi
mov eax, dword [ecx]
push 0x44c
push ebx
call dword [eax + 8]
lea ecx, [edi + 0xc28]
mov dword [edi + 0xc30], esi
mov eax, dword [ecx]
push 0x44e
push ebx
call dword [eax + 8]
lea ecx, [edi + 0xca0]
mov dword [edi + 0xca8], esi
mov eax, dword [ecx]
push 0x44f
push ebx
call dword [eax + 8]
push 0x445020
lea ecx, [esp + 0x18]
mov dword [edi + 0xd20], esi
mov dword [edi + 0xdac], 0xd77800
mov dword [edi + 0xd30], 0xc16200
mov dword [edi + 0xd2c], 0xed8e16
call fcn.00401590
push 0xffffffffffffffff
lea eax, [esp + 0x18]
mov dword [esp + 0x54], 9
lea esi, [edi + 0xd18]
push eax
mov ecx, esi
call fcn.004022fd
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
push 0x445100
lea ecx, [esp + 0x18]
call fcn.00401590
push 0x3f7
lea eax, [esp + 0x18]
mov dword [esp + 0x54], 0xa
push eax
mov ecx, esi
call fcn.004022fd
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0x450
push ebx
call dword [eax + 8]
push 0x4450a0
lea ecx, [esp + 0x18]
mov dword [edi + 0xdc0], 0x717171
mov dword [edi + 0xe4c], 0xd77800
mov dword [edi + 0xdcc], 0xed8e16
mov dword [edi + 0xdd0], 0xc16200
call fcn.00401590
mov dword [esp + 0x50], 0xb
push 0xffffffffffffffff
lea eax, [esp + 0x18]
lea esi, [edi + 0xdb8]
push eax
mov ecx, esi
call fcn.004022fd
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
push 0x441bec
lea ecx, [esp + 0x18]
call fcn.00401590
push 0x3f7
lea eax, [esp + 0x18]
mov dword [esp + 0x54], 0xc
push eax
mov ecx, esi
call fcn.004022fd
or dword [esp + 0x50], 0xffffffff
lea ecx, [esp + 0x14]
push 0
push 1
call fcn.004017dc
mov eax, dword [esi]
mov ecx, esi
push 0x455
push ebx
call dword [eax + 8]
lea ecx, [edi + 0xe58]
mov esi, 0xd77800
mov eax, dword [ecx]
push 0x46a
push ebx
mov dword [edi + 0xe60], esi
call dword [eax + 8]
lea ecx, [edi + 0xed0]
mov dword [edi + 0xed8], esi
mov eax, dword [ecx]
push 0x46b
push ebx
call dword [eax + 8]
lea ecx, [edi + 0xf48]
mov dword [edi + 0xf50], esi
mov eax, dword [ecx]
push 0x46c
push ebx
call dword [eax + 8]
lea esi, [edi + 0xfc0]
mov eax, dword [esi]
mov ecx, esi
push 0xf2f2f2
call dword [eax + 0x7c]
mov eax, 0xffffff
mov dword [edi + 0x1054], 0xd6d6d5
mov dword [edi + 0xfc8], eax
mov ecx, esi
mov dword [edi + 0xfd4], eax
mov dword [edi + 0xfd8], eax
mov eax, dword [esi]
push 0x469
push ebx
mov dword [edi + 0x1058], 0xd77800
mov dword [edi + 0x105c], 0xed8e16
mov dword [edi + 0x1060], 0xc16200
call dword [eax + 8]
lea esi, [edi + 0x1064]
mov byte [edi + 0x1008], 1
mov eax, dword [esi]
mov ecx, esi
push 0xd6d6d5
call dword [eax + 0x7c]
mov eax, dword [esi]
mov ecx, esi
push 0x459
push ebx
mov dword [edi + 0x106c], 0x383226
call dword [eax + 8]
push dword [edi + 4]
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov esi, dword [edi + 0x1120]
xor ebx, ebx
mov eax, dword [esi + 0x394]
mov dword [eax + 4], ebx
cmp dword [esi + 0x398], ebx
jne 0x419a01
push ebx
push ebx
push ebx
push 0x41fcf8
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x398], eax
push 1
mov ecx, edi
call fcn.00419fb5
cmp dword [edi + 0x10f8], ebx
je 0x419a34
lea eax, [esp + 0x30]
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_GetClientRect]
mov eax, dword [edi + 0x10f8]
lea ecx, [esp + 0x30]
push ecx
push dword [edi + 4]
mov edx, dword [eax]
push eax
call dword [edx + 0x50]
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x4c]
mov ecx, dword [esp + 0x48]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x30]
xor ecx, esp
call fcn.00424209
mov esp, ebp
pop ebp
ret 4