Function at 0x43a960
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x54
mov eax, dword [0x5ac004]
xor eax, esp
mov dword [esp + 0x50], eax
mov eax, dword [ebp + 0x10]
push ebx
push esi
mov dword [esp + 0x10], eax
mov esi, ecx
mov eax, dword [ebp + 8]
push edi
mov edi, edx
test eax, eax
je 0x43a9bb
test edi, edi
jns 0x43a9bb
push 0
push eax
lea eax, [esi + 1]
mov dword [esi*4 + 0x5b223c], edi
push eax
push dword [0x5b2238]
call dword [sym.imp.USER32.dll_SetTimer]
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x50]
xor ecx, esp
call fcn.0051e068
mov esp, ebp
pop ebp
ret 0x10
lea eax, [esi + 1]
mov dword [esi*4 + 0x5b223c], 0
push eax
push dword [0x5b2238]
call dword [sym.imp.USER32.dll_KillTimer]
mov edx, dword [0x5b22b0]
xor ecx, ecx
add edx, dword [0x5b22ac]
add edx, dword [0x5b22a8]
add edx, dword [0x5b22a4]
mov eax, dword [esi*4 + 0x5b22a0]
add edx, dword [0x5b22a0]
mov ebx, dword [ebp + 0xc]
mov dword [esp + 0x10], eax
add eax, edi
test eax, eax
cmovle eax, ecx
mov ecx, dword [esi*4 + 0x54c524]
cmp eax, ecx
cmovl ecx, eax
mov dword [esi*4 + 0x5b22a0], ecx
test edx, edx
jne 0x43ac8b
cmp ecx, dword [esp + 0x10]
jle 0x43aca5
mov ecx, dword [ebp + 0x14]
test ecx, ecx
je 0x43aa49
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
mov dword [0x5b2230], eax
mov dword [0x5b2234], ecx
mov eax, dword [0x5b2238]
test eax, eax
jne 0x43abc3
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x58], eax
mov eax, dword [0x5b1d78]
push str.MiniInfoWindowClassName
mov dword [esp + 0x30], 0x30
mov dword [esp + 0x38], 0x43ace0
mov dword [esp + 0x44], eax
call sym.ProcessHacker.exe_PhGetStringSetting
push eax
call sym.ProcessHacker.exe_PhAutoDereferenceObject
test eax, eax
je 0x43aaa4
mov eax, dword [eax + 4]
jmp 0x43aaa9
mov eax, str.MiniInfoWindowClassName
push 0x7f00
push 0
mov dword [esp + 0x5c], eax
call dword [sym.imp.USER32.dll_LoadCursorW]
mov dword [esp + 0x48], eax
lea eax, [esp + 0x2c]
push eax
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0
push 0
push 0
push 0
push 0x190
push 0x190
push 0
push 0
push 0x80840000
push dword [0x5b1d7c]
movzx eax, ax
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov esi, eax
push 0xffffffffffffffec
push esi
mov dword [0x5b2238], esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 0x80
push eax
push 0xffffffffffffffec
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0
push 0x43b040
push dword [0x5b2238]
push 0xcf
push dword [0x5b1d78]
call dword [sym.imp.USER32.dll_CreateDialogParamW]
push 5
push eax
mov dword [0x5b2250], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push str.MiniInfoWindowPinned
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x43ab5b
mov cl, 1
call fcn.0043c160
push str.MiniInfoWindowRefreshAutomatically
call sym.ProcessHacker.exe_PhGetIntegerSetting
push str.MiniInfoWindowOpacity
mov dword [0x5b2258], eax
call sym.ProcessHacker.exe_PhGetIntegerSetting
test eax, eax
je 0x43ab85
mov ecx, dword [0x5b2238]
mov edx, eax
call fcn.0040a900
push 0x5b230c
push dword [0x5b2250]
mov dword [0x5b230c], 0
mov dword [0x5b2310], 0
mov dword [0x5b2314], 0xd2
mov dword [0x5b2318], 0x3c
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, dword [0x5b2238]
test bl, 2
jne 0x43abe5
lea edx, [esp + 0x1c]
call fcn.0043b980
push 0x10
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push dword [esp + 0x2c]
push dword [esp + 0x2c]
jmp 0x43abff
push eax
push str.MiniInfoWindowSize
push str.MiniInfoWindowPosition
call sym.ProcessHacker.exe_PhLoadWindowPlacementFromSetting
push 0x13
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
push dword [0x5b2238]
call dword [sym.imp.USER32.dll_SetWindowPos]
mov eax, ebx
and eax, 1
or eax, 4
push eax
push dword [0x5b2238]
lea esp, [esp]
call dword [sym.imp.USER32.dll_ShowWindow]
test bl, 1
je 0x43ac3b
mov eax, dword [0x5b2238]
test eax, eax
je 0x43ac3b
push eax
call dword [sym.imp.USER32.dll_SetForegroundWindow]
mov esi, dword ds:[esp + 0x14]
test esi, esi
je 0x43ac77
cmp byte [0x5b229c], 0
je 0x43ac52
test bl, 4
jne 0x43ac77
push esi
call sym.ProcessHacker.exe_PhCountStringZ
add eax, eax
mov dword [esp + 0x18], esi
mov dword [esp + 0x14], eax
lea eax, [esp + 0x14]
push eax
call fcn.0043bc40
test eax, eax
je 0x43ac77
mov ecx, eax
call fcn.0043bd80
mov ecx, dword [esp + 0x5c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0051e068
mov esp, ebp
pop ebp
ret 0x10
jle 0x43aca5
sub ecx, dword [esp + 0x10]
add ecx, edx
jne 0x43aca5
mov eax, dword [0x5b2238]
test eax, eax
je 0x43ac26
push ecx
push eax
jmp 0x43ac1c
test bl, 1
je 0x43ac3b
push dword [0x5b2238]
call dword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x43ac2b
push dword [0x5b2238]
call dword [sym.imp.USER32.dll_SetActiveWindow]
jmp 0x43ac2b