Function at 0x4492a0
Capabilities:
Access peb ldr_data
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x59eb8d
mov eax, dword fs:[0]
push eax
sub esp, 0x148
mov eax, dword [0x615e80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x108], edi
mov eax, dword [ebp + 8]
xorps xmm0, xmm0
mov dword [ebp - 0x148], edi
xor ecx, ecx
mov byte [edi], 0
mov dword [edi + 4], eax
mov dword [edi + 8], 0
movups xmmword [edi + 0xc], xmm0
mov dword [edi + 0x1c], 0
mov dword [edi + 0x20], 7
mov dword [ebp - 0x110], eax
mov word [edi + 0xc], cx
mov dword [ebp - 4], ecx
mov dword [edi + 0x24], ecx
mov dword [edi + 0x28], ecx
mov esi, dword [sym.imp.gdiplus.dll_GdipNewPrivateFontCollection]
lea eax, [edi + 0x30]
push eax
mov dword [edi + 0x2c], vtable.Gdiplus::PrivateFontCollection.0
mov dword [eax], ecx
call esi
mov dword [edi + 0x34], eax
lea eax, [edi + 0x3c]
mov dword [edi + 0x38], vtable.Gdiplus::PrivateFontCollection.0
push eax
mov dword [eax], 0
call esi
mov dword [edi + 0x40], eax
mov dword [edi + 0x44], 0
mov dword [edi + 0x48], 0
mov dword [edi + 0x4c], 0
mov dword [edi + 0x50], 0
mov dword [edi + 0x54], 0
mov dword [edi + 0x58], 0
mov dword [edi + 0x5c], 0
mov dword [edi + 0x60], 0
mov dword [edi + 0x64], 0
mov dword [edi + 0x68], 0
mov dword [edi + 0x6c], 0
mov dword [edi + 0x70], 0
mov dword [edi + 0x74], 0
mov dword [edi + 0x78], 0
mov dword [edi + 0x7c], 0
mov dword [edi + 0x80], 0
push 0x451450
push 0x452130
push 3
push 4
lea eax, [edi + 0x84]
mov byte [ebp - 4], 0x14
push eax
call fcn.0057351f
xorps xmm0, xmm0
xor eax, eax
movups xmmword [edi + 0x90], xmm0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 7
mov word [edi + 0x90], ax
mov byte [edi + 0xa8], al
mov dword [edi + 0xac], eax
mov dword [edi + 0xb0], eax
mov dword [edi + 0xb4], eax
mov word [edi + 0xb8], ax
mov byte [edi + 0xba], al
mov dword [edi + 0xbc], eax
mov dword [edi + 0xc0], eax
mov dword [edi + 0xc4], eax
mov byte [edi + 0xc8], al
mov dword [edi + 0xcc], eax
movups xmmword [edi + 0xd0], xmm0
mov dword [edi + 0xe0], eax
mov dword [edi + 0xe4], eax
mov dword [edi + 0xe8], eax
mov dword [edi + 0xec], eax
mov dword [edi + 0xf0], eax
mov dword [edi + 0xf4], eax
mov dword [edi + 0xf8], eax
mov dword [edi + 0xfc], eax
mov dword [edi + 0x100], eax
mov dword [edi + 0x104], eax
mov dword [edi + 0x108], eax
mov dword [edi + 0x10c], eax
mov dword [edi + 0x110], eax
mov dword [edi + 0x114], eax
mov dword [edi + 0x118], eax
mov dword [edi + 0x11c], eax
mov dword [edi + 0x120], eax
mov dword [edi + 0x124], eax
movups xmmword [edi + 0x128], xmm0
movups xmmword [edi + 0x138], xmm0
movups xmmword [edi + 0x148], xmm0
mov byte [edi + 0x158], al
movups xmmword [edi + 0x15c], xmm0
mov dword [edi + 0x16c], eax
mov dword [edi + 0x170], 7
mov word [edi + 0x15c], ax
mov byte [edi + 0x174], al
movq qword [edi + 0x178], xmm0
mov dword [edi + 0x180], eax
movq qword [edi + 0x184], xmm0
mov byte [ebp - 4], 0x1a
mov dword [edi + 0x190], eax
mov dword [edi + 0x194], eax
movsd qword [edi + 0x198], xmm0
mov dword [edi + 0x1a0], eax
mov dword [edi + 0x1a4], eax
push 0x10
mov dword [edi + 0x1a8], eax
mov dword [edi + 0x1ac], eax
call fcn.0057317f
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [edi + 0x1a8], eax
mov dword [edi + 0x1b0], 0
mov byte [edi + 0x1b4], 0
mov dword [edi + 0x1b8], 0
push 3
mov byte [ebp - 4], 0x1c
call fcn.005233f0
push 0xb8
call fcn.0057317f
add esp, 0xc
mov dword [ebp - 0x108], eax
mov ecx, eax
mov byte [ebp - 4], 0x1d
call fcn.00457340
mov byte [ebp - 4], 0x1c
mov esi, dword [edi + 0x180]
mov dword [edi + 0x180], eax
test esi, esi
je 0x4495b5
mov ecx, esi
call fcn.00451bc0
push 0xb8
push esi
call fcn.0057314e
add esp, 8
push 0xdc
lea eax, [ebp - 0x104]
push 0
push eax
call fcn.00577820
add esp, 0xc
lea eax, [ebp - 0x104]
push eax
push 0xffffffffffffffff
push 0
call dword [sym.imp.USER32.dll_EnumDisplaySettingsW]
mov eax, dword [ebp - 0x4c]
mov dword [edi + 0xe8], eax
cmp eax, 0x1e
jl 0x4495f1
cmp eax, 0xf0
jle 0x449600
mov dword [edi + 0xe8], 0x3c
mov eax, 0x3c
movsd xmm1, qword [0x60d8a8]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
push 0
divsd xmm1, xmm0
cvttsd2si eax, xmm1
mov dword [edi + 0xec], eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push 0
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
call esi
push 1
mov dword [edi + 0xe0], eax
call esi
movsd xmm1, qword [0x60d840]
mov esi, eax
mov dword [edi + 0xe4], esi
movd xmm0, esi
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm1
cvttsd2si edx, xmm0
mov dword [edi + 0xf4], edx
cmp edx, 0x1e0
jge 0x449680
mov dword [edi + 0xf4], 0x1e0
mov edx, 0x1e0
movd xmm0, edx
sub esi, edx
cvtdq2pd xmm0, xmm0
mov eax, dword [edi + 0xe0]
mulsd xmm0, qword [0x60d870]
cvttsd2si ecx, xmm0
movd xmm0, edx
cvtdq2ps xmm0, xmm0
sub eax, ecx
mov dword [edi + 0xf0], ecx
divss xmm0, dword [0x60d8c8]
movss dword [edi + 0xf8], xmm0
movd xmm0, eax
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
movd xmm0, esi
xor esi, esi
cvtdq2pd xmm0, xmm0
mov dword [edi + 0xfc], eax
mov dword [ebp - 0x10c], esi
mulsd xmm0, xmm1
cvttsd2si eax, xmm0
mov dword [edi + 0x100], eax
lea eax, [ebp - 0x10c]
push eax
push 8
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x44973a
lea eax, [ebp - 0x114]
mov dword [ebp - 0x114], 4
push eax
push 4
lea eax, [ebp - 0x108]
push eax
push 0x14
push dword [ebp - 0x10c]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne esi, dword [ebp - 0x108]
mov eax, dword [ebp - 0x10c]
test eax, eax
je 0x44974b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test esi, esi
mov ecx, edi
setne al
mov byte [edi + 0xa8], al
call fcn.00449940
mov ecx, edi
call fcn.0044a580
mov ecx, edi
call fcn.0044b000
mov eax, dword [ebp - 0x110]
mov esi, dword [sym.imp.USER32.dll_LoadIconW]
push 0xc2
push eax
mov dword [ebp - 0x144], 0x30
mov dword [ebp - 0x140], 3
mov dword [ebp - 0x13c], 0x44b200
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], eax
call esi
push 0x7f00
push 0
mov dword [ebp - 0x12c], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
push 4
mov dword [ebp - 0x128], eax
call dword [sym.imp.GDI32.dll_GetStockObject]
cmp dword [0x61c6bc], 7
mov dword [ebp - 0x124], eax
mov eax, 0x61c6a8
cmova eax, dword [0x61c6a8]
push 0xc2
push dword [ebp - 0x110]
mov dword [ebp - 0x120], 0x6d
mov dword [ebp - 0x11c], eax
call esi
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x144]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExW]
cmp dword [edi + 0x20], 7
lea ecx, [edi + 0xc]
jbe 0x44982c
mov ecx, dword [ecx]
cmp dword [0x61c6bc], 7
mov eax, 0x61c6a8
push 0
cmova eax, dword [0x61c6a8]
push 0
push 0
push 0
push dword [edi + 0xf4]
push dword [edi + 0xf0]
push dword [edi + 0x100]
push dword [edi + 0xfc]
push connect
push ecx
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov dword [edi + 8], eax
test eax, eax
je 0x4498d8
push edi
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
push dword [edi + 0xf4]
push dword [edi + 0xf0]
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateRectRgn]
push 1
push eax
push dword [edi + 8]
call dword [sym.imp.USER32.dll_SetWindowRgn]
push dword [ebp + 0xc]
push dword [edi + 8]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [edi + 8]
call dword [sym.imp.USER32.dll_UpdateWindow]
mov byte [edi], 1
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00573140
mov esp, ebp
pop ebp
ret 8
push 0x18
mov edx, str.Failed_to_create_window_
lea ecx, [ebp - 0x28]
call fcn.004471a0
add esp, 4
push eax
lea ecx, [ebp - 0x154]
mov byte [ebp - 4], 0x1e
call fcn.004471d0
push 0x612bdc
lea eax, [ebp - 0x154]
push eax
call fcn.0057821e
int3