Function at 0x437950
Capabilities:
Create thread
Enumerate gui resources
Get graphical window text
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x3b8
push esi
push edi
push str.Russian
push 0
call dword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
add esp, 8
call fcn.00435710
test al, al
jne 0x437993
push 0
push str.Evelion
push str.Please_run_game_before_running_Evelion_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x4356a0
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x437e46
mov esi, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 0x444100
push eax
mov dword [0x44409c], eax
call esi
lea eax, [esp + 0x10]
push eax
push dword [0x44409c]
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x437e2a
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
sub ecx, dword [esp + 0x10]
sub eax, dword [esp + 0x14]
push 4
mov dword [0x4440a0], ecx
mov dword [0x444098], eax
call fcn.00438906
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
lea ecx, [esp + 0x70]
add esp, 4
mov dword [eax], 0x4357a0
push ecx
push 0
push eax
push 0x4384d0
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x68], eax
test eax, eax
je 0x437e1a
push 4
call fcn.00438906
add esp, 4
lea ecx, [esp + 0x64]
mov dword [eax], 0x435c80
push ecx
push 0
push eax
push 0x4384d0
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x60], eax
test eax, eax
je 0x437e0a
push 4
call fcn.00438906
add esp, 4
lea ecx, [esp + 0x5c]
mov dword [eax], 0x435d30
push ecx
push 0
push eax
push 0x4384d0
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x58], eax
test eax, eax
je 0x437dfa
push 4
call fcn.00438906
add esp, 4
lea ecx, [esp + 0x54]
mov dword [eax], 0x436360
push ecx
push 0
push eax
push 0x4384d0
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x50], eax
test eax, eax
je 0x437dea
push 4
call fcn.00438906
add esp, 4
lea ecx, [esp + 0x4c]
mov dword [eax], 0x436470
push ecx
push 0
push eax
push 0x4384d0
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x48], eax
test eax, eax
je 0x437dda
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
lea eax, [esp + 0xc]
push eax
call edi
push eax
call esi
mov eax, dword [0x444100]
cmp eax, dword [esp + 0xc]
jne 0x437b04
mov eax, dword [0x44409c]
lea ecx, [esp + 0x10]
push ecx
push eax
mov dword [0x444188], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
sub eax, edx
mov ecx, dword [esp + 0x14]
mov dword [0x44417c], eax
mov eax, dword [esp + 0x1c]
sub eax, ecx
mov dword [0x44418c], edx
mov dword [0x444180], eax
lea eax, [esp + 0xa8]
push 0x104
push eax
push dword [0x444188]
mov dword [0x444184], ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x104
lea eax, [esp + 0x1b4]
push eax
push dword [0x444188]
call dword [sym.imp.USER32.dll_GetClassNameA]
push 0x104
lea eax, [esp + 0x2bc]
push eax
push 0
push dword [0x444190]
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
mov esi, 0xa
mov dword [esp + 0x30], 0
xorps xmm0, xmm0
mov dword [esp + 0x34], 0xf
movaps xmmword [esp + 0x20], xmm0
mov byte [esp + 0x20], 0
lea edi, [esi + 0x34]
nop dword [eax + eax]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xor edx, edx
mov ecx, dword [esp + 0x30]
div edi
mov edi, dword [esp + 0x34]
mov dl, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov byte [esp + 0xc], dl
cmp ecx, edi
jae 0x437c0d
lea eax, [ecx + 1]
cmp edi, 0xf
mov dword [esp + 0x30], eax
lea eax, [esp + 0x20]
cmova eax, dword [esp + 0x20]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x437c1f
push dword [esp + 0xc]
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00438390
mov edi, 0x3e
sub esi, 1
jne 0x437bd0
cmp dword [esp + 0x34], 0xf
lea eax, [esp + 0x20]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
cmova eax, dword [esp + 0x20]
push 0x7f00
push 0
mov dword [0x444104], eax
mov dword [esp + 0x78], 0x30
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x437810
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
call esi
push 0x7f00
push 0
mov dword [esp + 0x90], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push 0x7f00
mov dword [esp + 0x90], eax
mov eax, dword [0x444104]
push 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], eax
call esi
movups xmm0, xmmword [esp + 0x70]
mov dword [esp + 0x9c], eax
push 0x444148
movups xmmword [0x444148], xmm0
movups xmm0, xmmword [esp + 0x84]
movups xmmword [0x444158], xmm0
movups xmm0, xmmword [esp + 0x94]
movups xmmword [0x444168], xmm0
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov eax, dword [0x444188]
test eax, eax
je 0x437d5b
push 0x4441f8
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x44420c
push dword [0x444188]
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x44420c]
mov ecx, dword [0x444204]
mov dword [0x4441f8], eax
mov eax, dword [0x444210]
mov dword [0x4441fc], eax
mov eax, dword [0x444200]
mov dword [0x44417c], eax
mov dword [0x444180], ecx
jmp 0x437d66
mov eax, dword [0x44417c]
mov ecx, dword [0x444180]
push 0
push 0
push 0
push 0
push ecx
push eax
push dword [0x444184]
mov eax, dword [0x444104]
push dword [0x44418c]
push 0x90000000
push eax
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0x443088
push eax
mov dword [0x444178], eax
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push 0x80020
push 0xffffffffffffffec
push dword [0x444178]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 5
push dword [0x444178]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x444178]
call dword [sym.imp.USER32.dll_UpdateWindow]
call fcn.00437530
call fcn.00437210
jmp 0x437dd3
push 6
mov dword [esp + 0x50], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x58], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x60], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x68], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x70], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 0
push str.Evelion
push str.Failed_to_get_window_rect.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0
push str.Evelion
push str.Get_ProcessHwnd_error.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3