Function at 0x437c10
Capabilities:
Create thread
Enumerate gui resources
Get graphical window text
Hide graphical window
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x3b8
push esi
push edi
push str.Russian
push 0
call dword [sym.imp.api_ms_win_crt_locale_l1_1_0.dll_setlocale]
add esp, 8
call fcn.004358d0
test al, al
jne 0x437c53
push 0
push str.Evelion
push str.Please_run_game_before_running_Evelion_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
lea eax, [esp + 0xc]
mov dword [esp + 0xc], 0
push eax
push 0x435860
call dword [sym.imp.USER32.dll_EnumWindows]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x438106
mov esi, dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
push 0x4430a0
push eax
mov dword [0x44303c], eax
call esi
lea eax, [esp + 0x10]
push eax
push dword [0x44303c]
call dword [sym.imp.USER32.dll_GetClientRect]
test eax, eax
je 0x4380ea
mov ecx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
sub ecx, dword [esp + 0x10]
sub eax, dword [esp + 0x14]
push 4
mov dword [0x443040], ecx
mov dword [0x443038], eax
call fcn.00438b96
mov edi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__beginthreadex]
lea ecx, [esp + 0x70]
add esp, 4
mov dword [eax], 0x435960
push ecx
push 0
push eax
push 0x438760
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x68], eax
test eax, eax
je 0x4380da
push 4
call fcn.00438b96
add esp, 4
lea ecx, [esp + 0x64]
mov dword [eax], 0x435ee0
push ecx
push 0
push eax
push 0x438760
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x60], eax
test eax, eax
je 0x4380ca
push 4
call fcn.00438b96
add esp, 4
lea ecx, [esp + 0x5c]
mov dword [eax], 0x435f90
push ecx
push 0
push eax
push 0x438760
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x58], eax
test eax, eax
je 0x4380ba
push 4
call fcn.00438b96
add esp, 4
lea ecx, [esp + 0x54]
mov dword [eax], 0x4365d0
push ecx
push 0
push eax
push 0x438760
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x50], eax
test eax, eax
je 0x4380aa
push 4
call fcn.00438b96
add esp, 4
lea ecx, [esp + 0x4c]
mov dword [eax], 0x4366e0
push ecx
push 0
push eax
push 0x438760
push 0
push 0
call edi
add esp, 0x18
mov dword [esp + 0x48], eax
test eax, eax
je 0x43809a
mov edi, dword [sym.imp.USER32.dll_GetForegroundWindow]
lea eax, [esp + 0xc]
push eax
call edi
push eax
call esi
mov eax, dword [0x4430a0]
cmp eax, dword [esp + 0xc]
jne 0x437dc4
mov eax, dword [0x44303c]
lea ecx, [esp + 0x10]
push ecx
push eax
mov dword [0x443128], eax
call dword [sym.imp.USER32.dll_GetWindowRect]
mov eax, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
sub eax, edx
mov ecx, dword [esp + 0x14]
mov dword [0x44311c], eax
mov eax, dword [esp + 0x1c]
sub eax, ecx
mov dword [0x44312c], edx
mov dword [0x443120], eax
lea eax, [esp + 0xa8]
push 0x104
push eax
push dword [0x443128]
mov dword [0x443124], ecx
call dword [sym.imp.USER32.dll_GetWindowTextA]
push 0x104
lea eax, [esp + 0x1b4]
push eax
push dword [0x443128]
call dword [sym.imp.USER32.dll_GetClassNameA]
push 0x104
lea eax, [esp + 0x2bc]
push eax
push 0
push dword [0x443130]
call dword [sym.imp.KERNEL32.dll_K32GetModuleFileNameExA]
mov esi, 0xa
mov dword [esp + 0x30], 0
xorps xmm0, xmm0
mov dword [esp + 0x34], 0xf
movaps xmmword [esp + 0x20], xmm0
mov byte [esp + 0x20], 0
lea edi, [esi + 0x34]
nop dword [eax + eax]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xor edx, edx
mov ecx, dword [esp + 0x30]
div edi
mov edi, dword [esp + 0x34]
mov dl, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov byte [esp + 0xc], dl
cmp ecx, edi
jae 0x437ecd
lea eax, [ecx + 1]
cmp edi, 0x10
mov dword [esp + 0x30], eax
lea eax, [esp + 0x20]
cmovae eax, dword [esp + 0x20]
mov byte [eax + ecx], dl
mov byte [eax + ecx + 1], 0
jmp 0x437edf
push dword [esp + 0xc]
push dword [esp + 0x10]
push ecx
lea ecx, [esp + 0x2c]
call fcn.00438620
mov edi, 0x3e
sub esi, 1
jne 0x437e90
cmp dword [esp + 0x34], 0x10
lea eax, [esp + 0x20]
mov esi, dword [sym.imp.USER32.dll_LoadIconA]
cmovae eax, dword [esp + 0x20]
push 0x7f00
push 0
mov dword [0x4430a4], eax
mov dword [esp + 0x78], 0x30
mov dword [esp + 0x7c], 0
mov dword [esp + 0x80], 0x437ac0
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], 0
mov dword [esp + 0x8c], 0
call esi
push 0x7f00
push 0
mov dword [esp + 0x90], eax
call dword [sym.imp.USER32.dll_LoadCursorA]
push 0x7f00
mov dword [esp + 0x90], eax
mov eax, dword [0x4430a4]
push 0
mov dword [esp + 0x98], 0
mov dword [esp + 0x9c], 0
mov dword [esp + 0xa0], eax
call esi
movups xmm0, xmmword [esp + 0x70]
mov dword [esp + 0x9c], eax
push 0x4430e8
movups xmmword [0x4430e8], xmm0
movups xmm0, xmmword [esp + 0x84]
movups xmmword [0x4430f8], xmm0
movups xmm0, xmmword [esp + 0x94]
movups xmmword [0x443108], xmm0
call dword [sym.imp.USER32.dll_RegisterClassExA]
mov eax, dword [0x443128]
test eax, eax
je 0x43801b
push 0x443198
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x4431ac
push dword [0x443128]
call dword [sym.imp.USER32.dll_ClientToScreen]
mov eax, dword [0x4431ac]
mov ecx, dword [0x4431a4]
mov dword [0x443198], eax
mov eax, dword [0x4431b0]
mov dword [0x44319c], eax
mov eax, dword [0x4431a0]
mov dword [0x44311c], eax
mov dword [0x443120], ecx
jmp 0x438026
mov eax, dword [0x44311c]
mov ecx, dword [0x443120]
push 0
push 0
push 0
push 0
push ecx
push eax
push dword [0x443124]
mov eax, dword [0x4430a4]
push dword [0x44312c]
push 0x90000000
push eax
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0x442028
push eax
mov dword [0x443118], eax
call dword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
push 0x80020
push 0xffffffffffffffec
push dword [0x443118]
call dword [sym.imp.USER32.dll_SetWindowLongA]
push 5
push dword [0x443118]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x443118]
call dword [sym.imp.USER32.dll_UpdateWindow]
call fcn.004377e0
call fcn.004374c0
jmp 0x438093
push 6
mov dword [esp + 0x50], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x58], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x60], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x68], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 6
mov dword [esp + 0x70], 0
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
push 0
push str.Evelion
push str.Failed_to_get_window_rect.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0
push str.Evelion
push str.Get_ProcessHwnd_error.
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3