Function at 0x4099c0
Capabilities:
Hide graphical window

Disassembly:
push 0xffffffffffffffff
push 0x46eaa9
mov eax, dword fs:[0]
push eax
sub esp, 0x8c
push ebx
push ebp
push esi
push edi
mov eax, dword [0x487550]
xor eax, esp
push eax
lea eax, [esp + 0xa0]
mov dword fs:[0], eax
mov edi, ecx
mov esi, dword [esp + 0xb0]
mov eax, dword [esi + 0x1c]
sub eax, dword [esi + 0x18]
sar eax, 2
cmp edi, eax
jb 0x409a08
call fcn.0044cae8
mov ecx, dword [esi + 0x18]
mov eax, dword [ecx + edi*4]
mov eax, dword [eax + 8]
xor ebx, ebx
cmp eax, 1
jne 0x409b5c
call fcn.0041fe10
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0xc]
call eax
mov edi, 0xf
push edi
push str.pCloseStartPage
lea ecx, [esp + 0x1c]
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], ebx
mov byte [esp + 0x20], bl
call fcn.00403b10
mov dword [esp + 0xa8], ebx
call fcn.0041fe10
mov ecx, dword [eax]
lea edx, [esp + 0x14]
push edx
push eax
mov eax, dword [ecx + 8]
call eax
mov ebp, 0x10
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x2c], ebp
jb 0x409a85
mov ecx, dword [esp + 0x18]
push ecx
call fcn.0044caf8
add esp, 4
push 4
push 0x477dfc
lea ecx, [esp + 0x38]
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.00403b10
mov dword [esp + 0xa8], 1
push 4
push 0x477df4
lea ecx, [esp + 0x54]
mov dword [esp + 0x6c], edi
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
call fcn.00403b10
call fcn.0041fe10
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0xb0], 3
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x54]
push ecx
push eax
call edx
cmp dword [esp + 0x2c], ebp
jb 0x409b0a
mov eax, dword [esp + 0x18]
push eax
call fcn.0044caf8
add esp, 4
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x64], ebp
jb 0x409b29
mov ecx, dword [esp + 0x50]
push ecx
call fcn.0044caf8
add esp, 4
mov dword [esp + 0xa8], 0xffffffff
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebx
mov byte [esp + 0x50], bl
cmp dword [esp + 0x48], ebp
jb 0x409da2
mov edx, dword [esp + 0x34]
push edx
call fcn.0044caf8
add esp, 4
jmp 0x409da2
cmp eax, 2
jne 0x409da2
call fcn.0041fe10
mov ecx, dword [eax]
mov edx, dword [ecx + 0xc]
push eax
call edx
push 0xd
mov edi, 0xf
push str.pImmediateUse
lea ecx, [esp + 0x38]
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.00403b10
mov dword [esp + 0xa8], 4
call fcn.0041fe10
mov ecx, dword [eax]
lea edx, [esp + 0x30]
push edx
push eax
mov eax, dword [ecx + 8]
call eax
mov ebp, 0x10
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x48], ebp
jb 0x409bd3
mov ecx, dword [esp + 0x34]
push ecx
call fcn.0044caf8
add esp, 4
push 4
push 0x477e04
lea ecx, [esp + 0x38]
mov dword [esp + 0x50], edi
mov dword [esp + 0x4c], ebx
mov byte [esp + 0x3c], bl
call fcn.00403b10
mov dword [esp + 0xa8], 5
push 4
push 0x477df4
lea ecx, [esp + 0x54]
mov dword [esp + 0x6c], edi
mov dword [esp + 0x68], ebx
mov byte [esp + 0x58], bl
call fcn.00403b10
call fcn.0041fe10
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
lea ecx, [esp + 0x14]
push ecx
lea ecx, [esp + 0x34]
push ecx
mov byte [esp + 0xb0], 7
mov edx, dword [eax]
mov edx, dword [edx]
lea ecx, [esp + 0x54]
push ecx
push eax
call edx
cmp dword [esp + 0x2c], ebp
jb 0x409c58
mov eax, dword [esp + 0x18]
push eax
call fcn.0044caf8
add esp, 4
mov dword [esp + 0x2c], edi
mov dword [esp + 0x28], ebx
mov byte [esp + 0x18], bl
cmp dword [esp + 0x64], ebp
jb 0x409c77
mov ecx, dword [esp + 0x50]
push ecx
call fcn.0044caf8
add esp, 4
mov dword [esp + 0xa8], 0xffffffff
mov dword [esp + 0x64], edi
mov dword [esp + 0x60], ebx
mov byte [esp + 0x50], bl
cmp dword [esp + 0x48], ebp
jb 0x409ca1
mov edx, dword [esp + 0x34]
push edx
call fcn.0044caf8
add esp, 4
cmp dword [esi + 0x44], 8
jb 0x409cac
mov eax, dword [esi + 0x30]
jmp 0x409caf
lea eax, [esi + 0x30]
xor ecx, ecx
mov word [esp + 0x6c], cx
mov ecx, eax
mov dword [esp + 0x80], 7
mov dword [esp + 0x7c], ebx
lea esi, [ecx + 2]
lea ebx, [ebx]
mov dx, word [ecx]
add ecx, 2
cmp dx, bx
jne 0x409cd0
sub ecx, esi
sar ecx, 1
push ecx
lea esi, [esp + 0x6c]
call fcn.00403ee0
mov dword [esp + 0xa8], 8
call fcn.0041fe10
lea edx, [esp + 0x68]
push edx
lea ecx, [esp + 0x88]
mov esi, eax
call fcn.0042c040
add esp, 4
mov byte [esp + 0xa8], 9
cmp dword [eax + 0x18], ebp
jb 0x409d21
mov eax, dword [eax + 4]
jmp 0x409d24
add eax, 4
mov ecx, dword [esi]
mov edx, dword [ecx + 0x3c]
push ebx
push ebx
push ebx
push eax
push str.open
push esi
call edx
cmp dword [esp + 0x9c], ebp
jb 0x409d4e
mov eax, dword [esp + 0x88]
push eax
call fcn.0044caf8
add esp, 4
mov dword [esp + 0xa8], 0xffffffff
cmp dword [esp + 0x80], 8
mov dword [esp + 0x9c], edi
mov dword [esp + 0x98], ebx
mov byte [esp + 0x88], bl
jb 0x409d85
mov ecx, dword [esp + 0x6c]
push ecx
call fcn.0044caf8
add esp, 4
mov esi, dword [esp + 0xb0]
xor edx, edx
mov dword [esp + 0x80], 7
mov dword [esp + 0x7c], ebx
mov word [esp + 0x6c], dx
mov edi, 8
cmp dword [esi + 0x44], edi
jb 0x409db1
mov ecx, dword [esi + 0x30]
jmp 0x409db4
lea ecx, [esi + 0x30]
push closesocket
call fcn.00409510
add esp, 4
cmp dword [esi + 0x44], edi
jb 0x409dcb
mov ecx, dword [esi + 0x30]
jmp 0x409dce
lea ecx, [esi + 0x30]
push closesocket
call fcn.00409510
add esp, 4
push ebx
push ebx
push 0x2000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
mov eax, dword [esi + 4]
push ebx
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
xor eax, eax
mov ecx, dword [esp + 0xa0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x98
ret 4