Function at 0x442ce0
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd0
mov eax, dword [0x4cdbf8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [sym.imp.USER32.dll_GetParent]
push ebx
mov ebx, dword [ebp + 8]
push edi
push ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xd0], eax
call eax
mov edi, eax
mov dword [ebp - 0xb8], edi
test edi, edi
je 0x44345b
mov eax, dword [0x4eeef8]
test eax, eax
je 0x442d67
mov ecx, dword [eax + 4]
test ecx, 0x40000000
je 0x442d67
mov edx, dword [eax + 0x1f0c]
test edx, edx
je 0x442d43
mov dword [0x4eeefc], edx
mov ecx, dword [eax + 4]
test ecx, 0x40000000
je 0x442d67
mov eax, dword [eax + 0x1f2c]
test eax, eax
je 0x442d67
push 0x4a16e4
push edi
call eax
mov edx, eax
mov dword [ebp - 0xbc], edx
jmp 0x442d7a
push 0x4a16e4
push edi
call fcn.00436f40
mov edx, eax
mov dword [ebp - 0xbc], eax
add esp, 8
test edx, edx
je 0x44345b
push esi
mov esi, dword [edx + 0x11c]
test esi, esi
je 0x44345a
mov eax, dword [esi + 0x90]
test eax, eax
je 0x442e0e
cmp eax, ebx
je 0x442e0e
cmp dword [ebp + 0xc], 2
je 0x442e22
mov edi, dword [esi]
xor ecx, ecx
test edi, edi
jle 0x44345a
mov esi, dword [esi + 4]
mov edx, esi
nop dword [eax]
mov eax, dword [edx]
cmp dword [eax], ebx
je 0x442ddf
inc ecx
add edx, 4
cmp ecx, edi
jl 0x442dc0
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
cmp ecx, edi
jge 0x44345a
push dword [ebp + 0xc]
mov eax, dword [esi + ecx*4]
add eax, 0x88
push 8
push eax
call fcn.00422f10
add esp, 0xc
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp + 0xc]
cmp ecx, 2
jne 0x443026
cmp eax, ebx
je 0x44345a
mov eax, dword [sym.imp.USER32.dll_ShowWindow]
mov dword [esi + 0x90], ebx
mov dword [ebp - 0xbc], eax
mov eax, dword [0x4eeef8]
test eax, eax
je 0x442e7e
mov ecx, dword [eax + 4]
test ecx, 0x40000000
je 0x442e7e
mov edx, dword [eax + 0x1f0c]
test edx, edx
je 0x442e5a
mov dword [0x4eeefc], edx
mov ecx, dword [eax + 4]
test ecx, 0x40000000
je 0x442e7e
mov eax, dword [eax + 0x1f2c]
test eax, eax
je 0x442e7e
push 0x4a16e4
push edi
call eax
mov edi, eax
mov dword [ebp - 0xcc], edi
jmp 0x442e91
push 0x4a16e4
push edi
call fcn.00436f40
mov edi, eax
mov dword [ebp - 0xcc], eax
add esp, 8
test edi, edi
je 0x442ff2
mov ebx, dword [edi + 0x11c]
test ebx, ebx
je 0x442ff2
mov ecx, dword [ebx]
xor eax, eax
mov dword [ebp - 0xc4], eax
test ecx, ecx
jle 0x442fa7
nop dword [eax]
lea esi, [eax*4]
mov eax, dword [ebx + 4]
mov dword [ebp - 0xc8], esi
mov ecx, dword [eax + esi]
mov eax, dword [ecx + 0x88]
add ecx, 0x88
and eax, 1
push eax
push 8
push ecx
call fcn.00422f10
mov eax, dword [ebx + 4]
add esp, 0xc
mov edx, dword [esi + eax]
mov eax, dword [ebp - 0xc0]
cmp eax, dword [edx]
je 0x442f47
mov ecx, dword [edx + 0x88]
mov eax, ecx
and eax, 0xfffffffe
or ecx, 2
cmp dword [edi + 0x130], 0
push 0
cmove ecx, eax
mov dword [edx + 0x88], ecx
mov eax, dword [ebx + 4]
mov eax, dword [esi + eax]
push dword [eax]
call dword [ebp - 0xbc]
mov eax, dword [ebx + 4]
mov eax, dword [eax + esi]
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x442f90
push 0
push eax
call dword [ebp - 0xbc]
jmp 0x442f90
mov ecx, 0x2c
lea edi, [ebp - 0xb4]
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xc8]
mov dword [edx + 0x44], 0
mov eax, dword [ebx + 4]
mov edi, dword [ebp - 0xcc]
mov eax, dword [eax + ecx]
mov dword [eax + 0x40], 0
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx]
mov dword [eax + 0x6c], 1
mov eax, dword [ebx + 4]
mov eax, dword [eax + ecx]
mov dword [eax + 0x68], 1
mov eax, dword [ebp - 0xc4]
mov ecx, dword [ebx]
inc eax
mov dword [ebp - 0xc4], eax
cmp eax, ecx
jl 0x442ec0
cmp dword [edi + 0x130], 0
jne 0x442fc2
push 0
push dword [ebp - 0xb8]
call fcn.0043ff80
mov ecx, dword [ebx]
add esp, 8
xor edx, edx
test ecx, ecx
jle 0x442ff2
nop dword [eax + eax]
mov eax, dword [ebx + 4]
mov edi, dword [eax + edx*4]
mov eax, dword [ebp - 0xc0]
cmp eax, dword [edi]
jne 0x442fed
mov ecx, 0x2c
lea esi, [ebp - 0xb4]
rep movsd dword es:[edi], dword [esi]
inc edx
cmp edx, dword [ebx]
jl 0x442fd0
mov eax, dword [ebp - 0xb8]
push eax
mov dword [ebp - 0xc0], eax
call dword [ebp - 0xd0]
mov edi, eax
mov dword [ebp - 0xb8], eax
test edi, edi
jne 0x442e33
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
test eax, eax
je 0x4431dc
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
mov dword [esi + 0x90], 0
mov dword [ebp - 0xc8], ebx
mov eax, dword [0x4eeef8]
test eax, eax
je 0x443087
mov ecx, dword [eax + 4]
test ecx, 0x40000000
je 0x443087
mov edx, dword [eax + 0x1f0c]
test edx, edx
je 0x44306b
mov dword [0x4eeefc], edx
mov ecx, dword [eax + 4]
test ecx, 0x40000000
je 0x443087
mov eax, dword [eax + 0x1f2c]
test eax, eax
je 0x443087
push 0x4a16e4
push edi
call eax
jmp 0x443092
push 0x4a16e4
push edi
call fcn.00436f40
add esp, 8
mov dword [ebp - 0xc4], eax
test eax, eax
je 0x4431b4
mov esi, dword [eax + 0x11c]
test esi, esi
je 0x4431b4
xor edi, edi
cmp dword [esi], edi
jle 0x44315d
nop dword [eax + eax]
mov eax, dword [esi + 4]
mov ecx, dword [eax + edi*4]
mov eax, dword [ebp - 0xc0]
cmp eax, dword [ecx]
je 0x443119
mov ebx, dword [ebp - 0xc4]
mov eax, dword [ecx + 0x88]
mov edx, eax
and edx, 8
cmp dword [ebx + 0x130], 0
mov ebx, dword [ebp - 0xc8]
je 0x4430ff
test edx, edx
jne 0x443103
or eax, 2
mov dword [ecx + 0x88], eax
jmp 0x443133
test edx, edx
je 0x44310e
or eax, 1
mov dword [ecx + 0x88], eax
jmp 0x443154
and eax, 0xfffffffe
mov dword [ecx + 0x88], eax
jmp 0x443133
cmp dword [ebp + 0xc], 0
jne 0x443154
and dword [ecx + 0x88], 0xfffffffe
mov eax, dword [esi + 4]
mov eax, dword [eax + edi*4]
and dword [eax + 0x88], 0xfffffff7
mov eax, dword [esi + 4]
push 0
mov eax, dword [eax + edi*4]
push dword [eax]
call ebx
mov eax, dword [esi + 4]
mov eax, dword [eax + edi*4]
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x443154
push 0
push eax
call ebx
inc edi
cmp edi, dword [esi]
jl 0x4430c0
push 0
push dword [ebp - 0xb8]
call fcn.0043ff80
xor edi, edi
add esp, 8
cmp dword [esi], edi
jle 0x4431ae
mov eax, dword [esi + 4]
mov eax, dword [eax + edi*4]
test byte [eax + 0x88], 8
je 0x4431a9
push 5
push dword [eax]
call ebx
mov eax, dword [esi + 4]
mov eax, dword [eax + edi*4]
mov ecx, dword [eax + 0xa0]
test ecx, ecx
je 0x4431a9
mov eax, dword [eax + 0x88]
and al, 0x11
cmp al, 1
jne 0x4431a9
push 5
push ecx
call ebx
inc edi
cmp edi, dword [esi]
jl 0x443173
mov edi, dword [ebp - 0xb8]
push edi
call dword [ebp - 0xd0]
mov edi, eax
mov dword [ebp - 0xb8], eax
test edi, edi
jne 0x443044
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
test ebx, ebx
jne 0x443307
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
xor edi, edi
cmp dword [esi], edi
jle 0x44328f
cmp dword [edx + 0x130], 0
je 0x443217
test ecx, ecx
jne 0x443217
mov eax, dword [esi + 4]
lea ebx, [edi*4]
mov eax, dword [eax + ebx]
or dword [eax + 0x88], 2
jmp 0x443244
cmp dword [ebp + 0xc], 0
lea ebx, [edi*4]
mov eax, dword [esi + 4]
mov ecx, dword [eax + ebx]
mov eax, dword [ecx + 0x88]
je 0x44323b
or eax, 9
mov dword [ecx + 0x88], eax
jmp 0x44327d
and eax, 0xfffffff6
mov dword [ecx + 0x88], eax
mov eax, dword [esi + 4]
push 0
mov eax, dword [ebx + eax]
push dword [eax]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esi + 4]
mov eax, dword [eax + ebx]
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x443277
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
push 0
push eax
call ebx
mov edx, dword [ebp - 0xbc]
jmp 0x443283
mov edx, dword [ebp - 0xbc]
mov ebx, dword [sym.imp.USER32.dll_ShowWindow]
mov ecx, dword [ebp + 0xc]
inc edi
cmp edi, dword [esi]
jl 0x4431f4
cmp dword [edx + 0x130], 0
je 0x4432a0
test ecx, ecx
je 0x44345a
push 0
push dword [ebp - 0xb8]
call fcn.0043ff80
add esp, 8
cmp dword [ebp + 0xc], 0
je 0x44345a
xor edi, edi
cmp dword [esi], edi
jle 0x44345a
mov eax, dword [esi + 4]
push 5
mov eax, dword [eax + edi*4]
push dword [eax]
call ebx
mov eax, dword [esi + 4]
mov eax, dword [eax + edi*4]
mov ecx, dword [eax + 0xa0]
test ecx, ecx
je 0x4432f1
mov eax, dword [eax + 0x88]
and al, 0x11
cmp al, 1
jne 0x4432f1
push 5
push ecx
call ebx
inc edi
cmp edi, dword [esi]
jl 0x4432c4
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
push 0x4a16e4
push ebx
call fcn.004370f0
add esp, 8
test eax, eax
je 0x44345a
xor ebx, ebx
cmp dword [esi], ebx
jle 0x44345a
mov edx, dword [esi + 4]
mov ecx, dword [ebp - 0xc0]
mov eax, dword [edx]
cmp dword [eax], ecx
je 0x44334f
inc ebx
add edx, 4
cmp ebx, dword [esi]
jl 0x443330
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
cmp ebx, dword [esi]
jge 0x44345a
mov eax, dword [ebp - 0xbc]
cmp dword [eax + 0x130], 0
je 0x4433b5
cmp dword [ebp + 0xc], 0
jne 0x4433b5
mov eax, dword [esi + 4]
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
push 0
mov eax, dword [eax + ebx*4]
or dword [eax + 0x88], 2
mov eax, dword [esi + 4]
mov eax, dword [eax + ebx*4]
push dword [eax]
call edi
mov eax, dword [esi + 4]
mov eax, dword [eax + ebx*4]
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x44345a
push 0
push eax
call edi
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
cmp dword [ebp + 0xc], 0
mov eax, dword [esi + 4]
push 0
mov eax, dword [eax + ebx*4]
mov ecx, dword [eax + 0x88]
je 0x44341f
or ecx, 9
push edi
mov dword [eax + 0x88], ecx
call fcn.0043ff80
mov eax, dword [esi + 4]
add esp, 8
mov edi, dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [eax + ebx*4]
push 0
push dword [eax]
call edi
mov eax, dword [esi + 4]
push 5
mov eax, dword [eax + ebx*4]
push dword [eax]
call edi
mov eax, dword [esi + 4]
mov eax, dword [eax + ebx*4]
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x44345a
push 5
push eax
call edi
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret
and ecx, 0xfffffff6
mov dword [eax + 0x88], ecx
mov eax, dword [esi + 4]
mov eax, dword [eax + ebx*4]
push dword [eax]
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [esi + 4]
push 0
mov eax, dword [eax + ebx*4]
mov eax, dword [eax + 0xa0]
test eax, eax
je 0x443451
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 0
push edi
call fcn.0043ff80
add esp, 8
pop esi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.0047fe8c
mov esp, ebp
pop ebp
ret