Function at 0x401a90
Capabilities:
Hide graphical window

Disassembly:
mov eax, dword [edi + 4]
push ebx
mov ebx, dword [sym.imp.USER32.dll_GetDlgItem]
push ebp
push esi
push 0x27e6
push eax
call ebx
mov ecx, dword [edi + 0x2c]
mov ebp, dword [sym.imp.USER32.dll_SendMessageW]
push ecx
push 0
push 0x172
push eax
call ebp
mov edx, dword [edi + 4]
push 0x27e5
push edx
call ebx
push 5
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [edi + 4]
push 0x27e5
push eax
call ebx
push 0
push 0
mov esi, eax
push 0x40a
push esi
call ebp
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_GetWindowLongW]
or eax, 8
push eax
push 0xfffffffffffffff0
push esi
call dword [sym.imp.USER32.dll_SetWindowLongW]
push 0x1e
push 1
push 0x40a
push esi
call ebp
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerRunMRU
call fcn.00401ca0
test eax, eax
je 0x401b1e
cmp eax, 2
je 0x401b1e
xor esi, esi
jmp 0x401b23
mov esi, 1
push str.SoftwareClassesLocal_SettingsSoftwareMicrosoftWindowsShellMuiCache
call fcn.00401ca0
test eax, eax
je 0x401b3a
cmp eax, 2
je 0x401b3a
xor esi, esi
jmp 0x401b3d
and esi, 1
push str.SoftwareMicrosoftInternet_ExplorerTypedURLs
call fcn.00401ca0
test eax, eax
je 0x401b54
cmp eax, 2
je 0x401b54
xor esi, esi
jmp 0x401b57
and esi, 1
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32LastVisitedMRU
call fcn.00401ca0
test eax, eax
je 0x401b6e
cmp eax, 2
je 0x401b6e
xor esi, esi
jmp 0x401b71
and esi, 1
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerComDlg32OpenSaveMRU
call fcn.00401ca0
test eax, eax
je 0x401b88
cmp eax, 2
je 0x401b88
xor esi, esi
jmp 0x401b8b
and esi, 1
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerRecentDocs
call fcn.00401ca0
test eax, eax
je 0x401ba2
cmp eax, 2
je 0x401ba2
xor esi, esi
jmp 0x401ba5
and esi, 1
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerUserAssist
call fcn.00401ca0
test eax, eax
je 0x401bbc
cmp eax, 2
je 0x401bbc
xor esi, esi
jmp 0x401bbf
and esi, 1
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerMap_Network_Drive_MRU
call fcn.00401ca0
test eax, eax
je 0x401bd6
cmp eax, 2
je 0x401bd6
xor esi, esi
jmp 0x401bd9
and esi, 1
push str.SoftwareMicrosoftInternet_ExplorerIntelliFormsStorage1
call fcn.00401ca0
test eax, eax
je 0x401bf0
cmp eax, 2
je 0x401bf0
xor esi, esi
jmp 0x401bf3
and esi, 1
push str.SoftwareMicrosoftInternet_ExplorerIntelliFormsStorage2
call fcn.00401ca0
test eax, eax
je 0x401c0a
cmp eax, 2
je 0x401c0a
xor esi, esi
jmp 0x401c0d
and esi, 1
push str.SoftwareMicrosoftInternet_ExplorerIntelliFormsSPW
call fcn.00401ca0
test eax, eax
je 0x401c24
cmp eax, 2
je 0x401c24
xor esi, esi
jmp 0x401c27
and esi, 1
push str.SoftwareMicrosoftMediaPlayerPlayerRecentFileList
call fcn.00401ca0
test eax, eax
je 0x401c3e
cmp eax, 2
je 0x401c3e
xor esi, esi
jmp 0x401c41
and esi, 1
push str.SoftwareMicrosoftInternet_ExplorerTypedURLs
call fcn.00401ca0
test eax, eax
je 0x401c58
cmp eax, 2
je 0x401c58
xor esi, esi
jmp 0x401c5b
and esi, 1
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [edi + 4]
push 0x27e5
push ecx
call ebx
push 0
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov edx, dword [edi + 4]
push 0x27e6
push edx
call ebx
mov ecx, dword [edi + 0x30]
push ecx
push 0
push 0x172
push eax
call ebp
mov eax, esi
pop esi
pop ebp
pop ebx
ret