Function at 0xb4ebb3
Capabilities:
Hide graphical window

Disassembly:
push 0x44
mov eax, 0xbc9596
call fcn.00bc132b
mov ebx, ecx
push 0x7d7
push dword [ebx + 0x24]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
cmp dword [ebx + 0x34], 0
jne 0xb4ec5d
push 3
lea eax, [ebp - 0x1c]
mov dword [ebx + 0x34], 1
push eax
mov ecx, ebx
mov dword [ebp - 0x1c], 0x20
mov dword [ebp - 0x18], 0x21
mov dword [ebp - 0x14], 0x22
call fcn.00b4e9d8
push 0
push 0
push 0x1f
push dword [ebx + 0x24]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SendMessageW]
push dword [ebx + 0x24]
xor esi, esi
xor edi, edi
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0x50], edi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_IsWindowVisible]
test eax, eax
jne 0xbdaf0f
cmp dword [ebp + 8], 0
je 0xb4ec3f
cmp dword [ebx + 0x104], 0
jne 0xbdb0b2
and dword [ebx + 0x34], 0
mov eax, dword [0xd0a158]
test eax, eax
jne 0xbdb0eb
mov eax, dword [0xd0a154]
test eax, eax
jne 0xbdb0fe
call fcn.00bc12da
ret 4
push 0x7d6
push dword [ebx + 0x24]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
xor esi, esi
mov ecx, ebx
inc esi
push esi
push 0xfffffffffffffff6
call fcn.00c9633f
push 0
mov ecx, ebx
call fcn.00c92aff
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetFocus]
push eax
push dword [ebx + 0x24]
call dword [sym.imp.api_ms_win_shlwapi_winrt_storage_l1_1_1.dll_SHIsChildOrSelf]
test eax, eax
jne 0xbdaf5e
lea eax, [ebx + 8]
mov dword [ebp - 0x4c], esi
push eax
call fcn.00c8f420
push eax
mov ecx, ebx
call fcn.00c930e7
mov dword [ebp - 0x50], eax
mov edi, dword [ebx + 0x30]
mov dword [ebp - 0x48], edi
test edi, edi
je 0xbdafa8
and dword [ebp - 4], 0
lea esi, [edi + 4]
cmp dword [esi], 0
je 0xbdaf85
push 0
push 0xb51950
push dword [esi]
call fcn.00b51d9e
and dword [esi], 0
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x48], esi
cmp dword [esi], 0
je 0xbdaf98
mov ecx, esi
call fcn.00c1ea56
push edi
push 0
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_GetProcessHeap]
push eax
call dword [sym.imp.api_ms_win_core_heap_l1_1_0.dll_HeapFree]
and dword [ebx + 0x30], 0
mov edi, dword [ebx + 0x104]
mov dword [ebp - 0x34], 0x23
mov dword [ebp - 0x30], 0x24
mov dword [ebp - 0x2c], 0x16
mov dword [ebp - 0x28], 0x17
mov dword [ebp - 0x24], 0x25
mov dword [ebp - 0x20], 0x26
test edi, edi
je 0xbdafe4
mov edi, dword [edi]
jmp 0xbdafe6
xor edi, edi
xor ecx, ecx
mov dword [ebp - 0x48], ecx
test edi, edi
jle 0xbdb01f
mov eax, dword [ebx + 0x104]
push 6
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [ebp - 0x34]
push ecx
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x80]
mov ecx, esi
call dword [0xd0cffc]
call esi
mov ecx, dword [ebp - 0x48]
inc ecx
mov dword [ebp - 0x48], ecx
cmp ecx, edi
jl 0xbdafef
push 2
push 0
push 0
push dword [ebx + 0x24]
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 0
push 0
push dword [ebx + 0x24]
call dword [sym.imp.ext_ms_win_ntuser_draw_l1_1_0.dll_SetWindowRgn]
push dword [ebx + 0x24]
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
test esi, esi
je 0xbdb085
xor eax, eax
lea edi, [ebp - 0x44]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [ebp - 0x44]
push eax
push dword [ebx + 0x24]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetClientRect]
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x40]
push 0x42
push eax
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x44]
push eax
push 0
push 0
push esi
call dword [sym.imp.GDI32.dll_PatBlt]
push esi
push dword [ebx + 0x24]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esi, dword [ebp - 0x4c]
test esi, esi
je 0xbdb098
push dword [ebx + 0x230]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetFocus]
push 0
push dword [ebx + 0x24]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_ShowWindow]
mov ecx, ebx
call fcn.00c925a6
mov edi, dword [ebp - 0x50]
jmp 0xb4ec2c
mov ecx, ebx
call fcn.00c921d6
push 2
mov ecx, ebx
call fcn.00c9581e
mov ecx, dword [ebx + 0x28]
mov byte [ebx + 0x235], 0
test ecx, ecx
je 0xb4ec3f
mov eax, dword [ecx]
push edi
push esi
push ecx
mov esi, dword [eax + 0x2c]
mov ecx, esi
call dword [0xd0cffc]
call esi
jmp 0xb4ec3f
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_UnhookWindowsHookEx]
and dword [0xd0a158], 0
jmp 0xb4ec50
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_UnhookWindowsHookEx]
and dword [0xd0a154], 0
jmp 0xb4ec5d