Function at 0x41fdd0
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0x70
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x84]
mov eax, dword [edi + 0x614]
test eax, eax
je 0x41fec2
cmp byte [eax], 0
je 0x41fec2
push 0x2c
lea eax, [esp + 0x18]
push 0
push eax
call fcn.0049c740
mov ecx, dword [0x4bb4a0]
add esp, 0xc
push 0
push 0
push 0
push 0xffffff61
push 0
mov dword [esp + 0x24], 0x30
mov dword [esp + 0x4c], 0x4a79b8
mov dword [esp + 0x38], ecx
mov dword [esp + 0x2c], 0x4457d0
call fcn.00481bc0
add esp, 0x14
push 0
push 0
push 0x31
mov dword [0x4ba248], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0xffffff61
push 0
call fcn.00481bc0
mov edx, dword [0x4ba248]
add esp, 0x14
push 0x7f00
push 0
mov dword [0x4ba24c], eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
mov esi, dword [sym.imp.USER32.dll_RegisterClassExA]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x34], 0x10
mov dword [esp + 0x38], 0xd3
call esi
test ax, ax
jne 0x41fece
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push str.RegClass
call fcn.00484bc0
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x70
ret 4
lea ecx, [esp + 0x10]
push ecx
mov dword [esp + 0x3c], str.AutoHotkey2
mov dword [esp + 0x38], 0
call esi
test ax, ax
je 0x41fea4
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x41ff20
push 0x40
lea edx, [esp + 0x44]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClassNameA]
test eax, eax
je 0x41ff1c
lea eax, [esp + 0x40]
push str.Shell_TrayWnd
push eax
call fcn.004932c1
add esp, 8
test eax, eax
je 0x41ff20
xor bl, bl
jmp 0x41ff22
mov bl, 1
mov ecx, dword [0x4bb4a0]
mov edx, dword [edi + 0x614]
push 0
mov ebp, dword [sym.imp.USER32.dll_CreateWindowExA]
push ecx
push 0
push 0
push connect
push connect
push connect
push connect
movzx eax, bl
push 0xcf0000
neg eax
push edx
sbb eax, eax
push 0x4a79b8
and eax, 0x80
push eax
call ebp
mov dword [0x4bb4ac], eax
test eax, eax
jne 0x41ff9c
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push str.CreateWindow
call fcn.00484bc0
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x70
ret 4
cmp dword [edi + 0x618], 1
jne 0x41ffdb
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 3
mov edi, eax
push 0xff79
push edi
call dword [sym.imp.USER32.dll_EnableMenuItem]
cmp byte [0x4b7492], 0
jne 0x41ffcf
mov esi, 3
call fcn.004201e0
mov edi, dword [esp + 0x84]
mov eax, dword [0x4bb4ac]
mov ecx, dword [0x4bb4a0]
push 0
push ecx
push 1
push eax
push 0
push 0
push 0
push 0
push 0x50a00804
push 0
push str.edit
push 0
call ebp
mov dword [0x4bb4b0], eax
test eax, eax
je 0x41ff72
push eax
call dword [sym.imp.USER32.dll_GetDC]
cmp byte [0x4bccb6], 0
mov esi, eax
mov eax, str.Consolas
jne 0x420028
mov eax, str.Lucida_Console
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x48
push 0x5a
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0xa
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
push eax
call dword [sym.imp.GDI32.dll_CreateFontA]
mov edx, dword [0x4bb4b0]
push esi
push edx
mov dword [0x4bb4b8], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0x4bb4b8]
mov ecx, dword [0x4bb4b0]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push eax
push 0x30
push ecx
call esi
mov edx, dword [0x4bb4b0]
push 0
push 0
push 0xc5
push edx
call esi
mov eax, dword [0x4bb4ac]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [0x4bb4ac]
push 0
push ecx
call esi
test bl, bl
je 0x4200d6
mov edx, dword [0x4bb4ac]
push 6
push edx
call esi
mov eax, dword [0x4bb4ac]
push 0
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_SetWindowLongA]
mov ecx, dword [0x4bb4a0]
push 0xd4
push ecx
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
cmp byte [0x4bb5eb], 0
mov dword [0x4bb4c0], eax
je 0x420102
mov dword [edi + 0x17e], 0
jmp 0x420109
mov esi, edi
call fcn.00420210
cmp dword [edi + 0x5c4], 0
je 0x42011b
mov bl, 1
mov esi, edi
call fcn.00420130
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0x70
ret 4