Function at 0x403054
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffe8
push esi
push edi
xor eax, eax
mov dword [ebp - 0x18], eax
mov dword [0x4162e9], eax
mov dword [0x416a1e], eax
mov dword [0x416a12], eax
inc eax
mov dword [ebp - 4], eax
call fcn.00403471
mov esi, dword [0x416216]
mov edi, dword [0x41622e]
mov dword [ebp - 8], esi
mov dword [ebp - 0xc], edi
mov esi, dword [ebp - 8]
mov edi, 0x4162f6
xor ecx, ecx
pushfd
cld
lodsw ax, word [esi]
stosw word es:[edi], ax
inc ecx
test ax, ax
jne 0x403097
popfd
shl ecx, 1
mov dword [ebp - 0x10], ecx
mov esi, dword [ebp - 0xc]
mov edi, 0x4164fe
xor ecx, ecx
pushfd
cld
lodsw ax, word [esi]
stosw word es:[edi], ax
inc ecx
test ax, ax
jne 0x4030b3
popfd
shl ecx, 1
mov dword [ebp - 0x14], ecx
push dword [ebp - 4]
push dword [ebp + 8]
call fcn.0040349c
test eax, eax
je 0x403461
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
add dword [ebp - 8], esi
add dword [ebp - 0xc], edi
inc dword [ebp - 4]
movzx eax, word [0x4162f3]
cmp eax, dword [ebp - 4]
jae 0x40308b
mov ebx, dword [0x416918]
mov edi, 0x157
mov esi, 0x4e
test ebx, ebx
je 0x403115
cmp ebx, 0x121eac0
jbe 0x40315b
cmp ebx, 0x1406f40
jae 0x40315b
mov ecx, dword [0x41691c]
jecxz 0x403142
inc esi
cmp ecx, 0x121eac0
jbe 0x40315b
cmp ecx, 0x1406f40
jae 0x40315b
test ebx, ebx
je 0x403142
cmp ecx, ebx
ja 0x403142
mov esi, 0x4f
mov edi, 0x158
jmp 0x40315b
call fcn.0041272f
test eax, eax
je 0x4031fc
mov esi, 0x50
sub esi, eax
mov edi, 0x157
push 0
push 0
push 0x130b
push dword [0x4162dc]
call fcn.0041349c
cmp eax, 2
je 0x403188
push 0
push 2
push 0x1330
push dword [0x4162dc]
call fcn.0041349c
push esi
push dword [0x4162e0]
call sub.USER32.dll_GetDlgItem
push eax
call sub.USER32.dll_SetFocus
push 0xffffffffffffffff
push 0
push 0xb1
push esi
push dword [0x4162e0]
call fcn.00413573
push 0x200
push dword [0x416146]
push 0x156
push dword [0x4161e3]
call fcn.004136a0
push 0x200
push dword [0x41614a]
push edi
push dword [0x4161e3]
call fcn.004136a0
push 0x10
push dword [0x416146]
push dword [0x41614a]
push dword [ebp + 8]
call fcn.0041361f
jmp 0x403461
mov esi, dword [0x416920]
xor edi, edi
mov ecx, 0xa
shl esi, 1
rol edi, 1
loop 0x403209
mov dword [0x416946], esi
mov dword [0x41694a], edi
mov esi, dword [0x416924]
xor edi, edi
mov ecx, 0xa
shl esi, 1
rol edi, 1
loop 0x403228
mov dword [0x41694e], esi
mov dword [0x416952], edi
test dword [0x4161c2], 1
jne 0x403461
push dword [ebp + 8]
call fcn.0040b478
test eax, eax
je 0x403468
call fcn.0040eb03
call fcn.0041017e
push 0
push dword [ebp + 8]
call sub.USER32.dll_ShowWindow
call sub.USER32.dll_GetDesktopWindow
push 0
push 0x40919e
push eax
push 0x6c
push dword [0x4161e3]
call fcn.00413548
mov esi, eax
push dword [0x416202]
call fcn.00412a16
cmp dword [0x416252], 0
je 0x4032b4
push dword [0x41625a]
call sub.KERNEL32.dll_GlobalUnlock
push dword [0x41625a]
call sub.KERNEL32.dll_GlobalFree
cmp esi, 0xffffffff
jne 0x4032ee
mov byte [0x4161d1], 0xe8
cmp dword [0x4161d5], 0xffffffff
je 0x4032d4
push dword [0x4161d5]
call sub.KERNEL32.dll_CloseHandle
push dword [0x4169e6]
call fcn.004081a6
mov dword [0x4162bc], 3
jmp 0x403468
cmp dword [0x4161d5], 0xffffffff
je 0x403302
push dword [0x4161d5]
call sub.KERNEL32.dll_CloseHandle
cmp byte [0x4161d3], 0
je 0x40332f
cmp byte [0x4161d0], 0
je 0x40332f
test dword [0x4161c2], 8
je 0x40332f
mov dword [0x4162bc], 2
jmp 0x403468
push 9
push dword [ebp + 8]
call sub.USER32.dll_ShowWindow
cmp byte [0x4161d3], 0
je 0x403352
test dword [0x4161c2], 4
jne 0x403461
cmp word [0x416706], 0
je 0x403406
cmp dword [0x4161d5], 0xffffffff
je 0x403461
cmp dword [0x4162e9], 0
je 0x403406
mov esi, 0x194
cmp byte [0x4161ce], 0
jne 0x403398
cmp byte [0x4161d2], 2
jne 0x4033ab
mov esi, 0x196
jmp 0x4033ab
mov esi, 0x195
cmp byte [0x4161d2], 2
jne 0x4033ab
mov esi, 0x197
push 0x200
push dword [0x416146]
push esi
push dword [0x4161e3]
call fcn.004136a0
push 0x200
push dword [0x41614a]
push 0x198
push dword [0x4161e3]
call fcn.004136a0
push 0x24
push dword [0x416146]
push dword [0x41614a]
push dword [ebp + 8]
call fcn.0041361f
cmp eax, 6
jne 0x403461
call fcn.00408b03
mov byte [0x4161cf], 1
jmp 0x403461
mov esi, 0x194
cmp byte [0x4161ce], 0
je 0x403419
mov esi, 0x195
push 0x200
push dword [0x41614a]
push esi
push dword [0x4161e3]
call fcn.004136a0
push 0x200
push dword [0x416146]
push 0x199
push dword [0x4161e3]
call fcn.004136a0
push 0x40
push dword [0x41614a]
push dword [0x416146]
push dword [ebp + 8]
call fcn.0041361f
mov dword [ebp - 0x18], 1
mov eax, dword [ebp - 0x18]
pop edi
pop esi
leave
ret 4