Function at 0x417aa0
Capabilities:
Hide graphical window

Disassembly:
sub esp, 0xb0
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xc4]
mov eax, dword [edi + 0xadc]
test eax, eax
je 0x417b96
cmp word [eax], 0
je 0x417b96
push 0x2c
lea eax, [esp + 0x18]
push 0
push eax
call fcn.004998e0
mov ecx, dword [0x4cb550]
add esp, 0xc
push 0
push 0
push 0
push 0xffffff61
push 0
mov dword [esp + 0x24], 0x30
mov dword [esp + 0x4c], 0x4a4984
mov dword [esp + 0x38], ecx
mov dword [esp + 0x2c], 0x43bea0
call fcn.00479290
add esp, 0x14
push 0
push 0
push 0x31
mov dword [0x4ca2a0], eax
call dword [sym.imp.USER32.dll_GetSystemMetrics]
push eax
push 0xffffff61
push 0
call fcn.00479290
mov edx, dword [0x4ca2a0]
add esp, 0x14
push 0x7f00
push 0
mov dword [0x4ca2a4], eax
mov dword [esp + 0x30], edx
mov dword [esp + 0x44], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov esi, dword [sym.imp.USER32.dll_RegisterClassExW]
mov dword [esp + 0x2c], eax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x34], 0x10
mov dword [esp + 0x38], 0xd3
call esi
test ax, ax
jne 0x417ba5
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push 0x4a95e8
call fcn.0047c260
add esp, 0x18
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb0
ret 4
lea ecx, [esp + 0x10]
push ecx
mov dword [esp + 0x3c], 0x4a95fc
mov dword [esp + 0x38], 0
call esi
test ax, ax
je 0x417b78
call dword [sym.imp.USER32.dll_GetForegroundWindow]
test eax, eax
je 0x417bf7
push 0x40
lea edx, [esp + 0x44]
push edx
push eax
call dword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x417bf3
lea eax, [esp + 0x40]
push 0x4a9614
push eax
call fcn.00490f59
add esp, 8
test eax, eax
je 0x417bf7
xor bl, bl
jmp 0x417bf9
mov bl, 1
mov ecx, dword [0x4cb550]
mov edx, dword [edi + 0xadc]
push 0
mov ebp, dword [sym.imp.USER32.dll_CreateWindowExW]
push ecx
push 0
push 0
push SysReAllocString
push SysReAllocString
push SysReAllocString
push SysReAllocString
movzx eax, bl
push 0xcf0000
neg eax
push edx
sbb eax, eax
push 0x4a4984
and eax, 0x80
push eax
call ebp
mov dword [0x4cb558], eax
test eax, eax
jne 0x417c64
fldz
sub esp, 8
fstp qword [esp]
push 0
push 0
push 0x10000
push 0x4a9630
jmp 0x417b8e
cmp dword [edi + 0xae0], 1
jne 0x417ca3
push eax
call dword [sym.imp.USER32.dll_GetMenu]
push 3
mov edi, eax
push 0xff79
push edi
call dword [sym.imp.USER32.dll_EnableMenuItem]
cmp byte [0x4cb6b4], 0
jne 0x417c97
mov esi, 3
call fcn.00417eb0
mov edi, dword [esp + 0xc4]
mov eax, dword [0x4cb558]
mov ecx, dword [0x4cb550]
push 0
push ecx
push 1
push eax
push 0
push 0
push 0
push 0
push 0x50a00804
push 0
push 0x4a964c
push 0
call ebp
mov dword [0x4cb55c], eax
test eax, eax
je 0x417c49
push eax
call dword [sym.imp.USER32.dll_GetDC]
cmp byte [0x4cd1c6], 0
mov esi, eax
mov eax, 0x4a9658
jne 0x417cf0
mov eax, 0x4a966c
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x48
push 0x5a
push esi
call dword [sym.imp.GDI32.dll_GetDeviceCaps]
push eax
push 0xa
call dword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
push eax
call dword [sym.imp.GDI32.dll_CreateFontW]
mov edx, dword [0x4cb55c]
push esi
push edx
mov dword [0x4cb564], eax
call dword [sym.imp.USER32.dll_ReleaseDC]
mov eax, dword [0x4cb564]
mov ecx, dword [0x4cb55c]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push eax
push 0x30
push ecx
call esi
mov edx, dword [0x4cb55c]
push 0
push 0
push 0xc5
push edx
call esi
mov eax, dword [0x4cb558]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call esi
mov ecx, dword [0x4cb558]
push 0
push ecx
call esi
test bl, bl
je 0x417d9e
mov edx, dword [0x4cb558]
push 6
push edx
call esi
mov eax, dword [0x4cb558]
push 0
push 0xffffffffffffffec
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
mov ecx, dword [0x4cb550]
push 0xd4
push ecx
call dword [sym.imp.USER32.dll_LoadAcceleratorsW]
cmp byte [0x4cb697], 0
mov dword [0x4cb56c], eax
je 0x417dca
mov dword [edi + 0x27e], 0
jmp 0x417dd1
mov esi, edi
call fcn.00417ee0
cmp dword [edi + 0xa8c], 0
je 0x417de3
mov bl, 1
mov esi, edi
call fcn.00417e00
pop edi
pop esi
pop ebp
mov eax, 1
pop ebx
add esp, 0xb0
ret 4