Function at 0x439070
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
mov eax, dword [0x542040]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 3
mov ebx, edx
push ecx
mov dword [ebp - 0x24], ebx
call dword [sym.imp.USER32.dll_GetAncestor]
mov edi, eax
mov dword [ebp - 0x20], edi
test edi, edi
jne 0x4390c3
push 0x40
push 0x51e308
push 0x51e2dc
push dword [0x5482c0]
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004dadd7
mov esp, ebp
pop ebp
ret
push ebx
push edi
call dword [sym.imp.USER32.dll_GetPropW]
mov ebx, eax
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x18], ebx
push eax
push edi
mov dword [ebp - 0x10], 0
call dword [sym.imp.USER32.dll_GetWindowThreadProcessId]
mov eax, dword [ebp - 0x14]
push 0x54a14c
test ebx, ebx
je 0x439254
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 8]
push eax
call fcn.00435a80
push 0x54a14c
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 8]
mov dword [esi + 0x24], ecx
mov ecx, esi
call fcn.00468d10
mov dword [ebp - 0xc], eax
test eax, eax
jne 0x439155
push 0x40
push 0x51e308
push 0x51e330
push dword [0x5482c0]
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004dadd7
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
lea ecx, [ebp - 0x10]
push 0
push 4
push ecx
push ebx
push eax
call esi
test eax, eax
je 0x439214
mov edi, dword [ebp - 0x10]
test edi, edi
je 0x439211
xor ebx, ebx
mov ecx, 4
mov eax, edi
mul ecx
seto bl
neg ebx
or ebx, eax
push ebx
call fcn.004dadf8
add esp, 4
push ebx
mov ebx, eax
push 0
push ebx
call fcn.004ded20
mov eax, dword [ebp - 0x18]
lea ecx, [edi*4]
add esp, 0xc
mov dword [ebx], 0
add eax, 4
push 0
push ecx
push ebx
push eax
push dword [ebp - 0xc]
call esi
test eax, eax
je 0x439205
xor esi, esi
cmp dword [ebp + 8], esi
je 0x4391e7
nop dword [eax + eax]
mov eax, dword [ebx + esi*4]
test eax, eax
je 0x4391e0
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
inc esi
cmp esi, edi
jb 0x4391d0
jmp 0x439205
xor esi, esi
nop dword [eax]
mov eax, dword [ebx + esi*4]
test eax, eax
je 0x439200
push 0
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
inc esi
cmp esi, edi
jb 0x4391f0
push ebx
call fcn.004dade5
mov ebx, dword [ebp - 0x18]
add esp, 4
mov edi, dword [ebp - 0x20]
push 0x8000
push 0
push ebx
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov esi, dword [ebp - 0x24]
push 0
push esi
push edi
call dword [sym.imp.USER32.dll_SetPropW]
push esi
push edi
call dword [sym.imp.USER32.dll_RemovePropW]
mov esi, dword [ebp + 0xc]
mov edi, dword [0x549d30]
push 0
push esi
push edi
call dword [sym.imp.USER32.dll_GetMenuState]
push 0
jmp 0x43942b
mov dword [ebp - 0xc], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0xc]
push eax
call fcn.00435a80
push 0x54a14c
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 0xc]
mov dword [esi + 0x24], ecx
mov ecx, esi
call fcn.00468d10
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x4392b0
push 0x40
push 0x51e308
push 0x51e310
push dword [0x5482c0]
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004dadd7
mov esp, ebp
pop ebp
ret
push 5
push edi
call dword [sym.imp.USER32.dll_GetWindow]
push 0x190
mov dword [ebp - 0x10], eax
mov esi, 0x64
call fcn.004dadf8
add esp, 4
mov ebx, eax
mov dword [ebp - 0x18], ebx
push 0x190
push 0
push ebx
call fcn.004ded20
mov dword [ebx], 0
add esp, 0xc
mov eax, dword [ebp - 0x10]
xor edi, edi
test eax, eax
je 0x4393c2
xor ecx, ecx
mov dword [ebp - 8], ecx
nop dword [eax + eax]
cmp dword [ebp + 8], 0
push eax
je 0x43930f
call dword [sym.imp.USER32.dll_IsWindowVisible]
jmp 0x439315
call dword [sym.imp.USER32.dll_IsWindowEnabled]
test eax, eax
sete al
test al, al
je 0x4393ac
inc edi
lea eax, [esi - 1]
cmp edi, eax
jbe 0x439388
add dword [ebp - 8], 0x190
add esi, 0x64
xor ebx, ebx
mov dword [ebp - 0x28], esi
mov ecx, 4
mov eax, esi
mul ecx
seto bl
neg ebx
or ebx, eax
push ebx
call fcn.004dadf8
add esp, 4
mov esi, eax
push ebx
push 0
push esi
call fcn.004ded20
mov ecx, dword [ebp - 8]
add esp, 0xc
mov ebx, dword [ebp - 0x18]
mov dword [esi], 0
push ecx
push ebx
push esi
call fcn.004def30
add esp, 0xc
push ebx
call fcn.004dade5
mov ebx, esi
add esp, 4
mov esi, dword [ebp - 0x28]
mov dword [ebp - 0x18], ebx
cmp dword [ebp + 8], 0
mov eax, dword [ebp - 0x10]
mov dword [ebx + edi*4], eax
je 0x4393a1
push 8
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_ShowWindow]
jmp 0x4393ac
push 1
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_EnableWindow]
push 2
push dword [ebp - 0x10]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x439300
inc edi
push 4
push 0x1000
mov dword [ebx], edi
lea edi, [edi*4 + 4]
push edi
push 0
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, eax
test esi, esi
je 0x439408
push 0
push edi
push ebx
mov ebx, dword [ebp - 0x1c]
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x439408
push 0x8000
push eax
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
xor esi, esi
push esi
mov esi, dword [ebp - 0x24]
push esi
push dword [ebp - 0x20]
call dword [sym.imp.USER32.dll_SetPropW]
mov esi, dword [ebp + 0xc]
mov edi, dword [0x549d30]
push 0
push esi
push edi
call dword [sym.imp.USER32.dll_GetMenuState]
push 8
push esi
push edi
call dword [sym.imp.USER32.dll_CheckMenuItem]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004dadd7
mov esp, ebp
pop ebp
ret