Function at 0xa42ac7
Capabilities:
Hide graphical window

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, dword [0xc940a0]
xor eax, esp
mov dword [esp + 0x40], eax
push ebx
push esi
push edi
mov ebx, ecx
push 0x7d7
push dword [ebx + 0x28]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
cmp dword [ebx + 0x3c], 0
jne 0xa42b84
push 3
lea eax, [esp + 0x2c]
mov dword [ebx + 0x3c], 1
push eax
mov ecx, ebx
mov dword [esp + 0x30], 0x20
mov dword [esp + 0x34], 0x21
mov dword [esp + 0x38], 0x22
call fcn.00a42b98
push 0
push 0
push 0x1f
push dword [ebx + 0x28]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SendMessageW]
push dword [ebx + 0x28]
xor esi, esi
xor edi, edi
mov dword [esp + 0x18], esi
mov dword [esp + 0x10], edi
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_IsWindowVisible]
test eax, eax
jne 0xb19286
cmp dword [ebp + 8], 0
je 0xa42b66
cmp dword [ebx + 0x10c], 0
jne 0xb1940d
and dword [ebx + 0x3c], 0
mov eax, dword [0xc958b8]
test eax, eax
jne 0xb19446
mov eax, dword [0xc958bc]
test eax, eax
jne 0xb19459
mov ecx, dword [esp + 0x4c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00ab3c50
mov esp, ebp
pop ebp
ret 4
push 0x7d6
push dword [ebx + 0x28]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_KillTimer]
xor esi, esi
mov ecx, ebx
inc esi
push esi
push 0xfffffffffffffff6
call fcn.00bdb3b0
push 0
mov ecx, ebx
call fcn.00bdb69a
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetFocus]
push eax
push dword [ebx + 0x28]
call dword [sym.imp.api_ms_win_shlwapi_winrt_storage_l1_1_1.dll_SHIsChildOrSelf]
test eax, eax
jne 0xb192d7
lea eax, [ebx + 8]
mov dword [esp + 0x14], esi
push eax
call fcn.00bd47b0
push eax
mov ecx, ebx
call fcn.00bd8325
mov dword [esp + 0xc], eax
mov ecx, dword [ebx + 0x38]
test ecx, ecx
je 0xb192e4
push ecx
call fcn.00bd3de6
and dword [ebx + 0x38], edi
mov edi, dword [ebx + 0x10c]
mov dword [esp + 0x34], 0x23
mov dword [esp + 0x38], 0x24
mov dword [esp + 0x3c], 0x16
mov dword [esp + 0x40], 0x17
mov dword [esp + 0x44], 0x25
mov dword [esp + 0x48], 0x26
test edi, edi
je 0xb19325
mov edi, dword [edi]
jmp 0xb19327
xor edi, edi
xor ecx, ecx
mov dword [esp + 0x10], ecx
test edi, edi
jle 0xb19364
mov eax, dword [ebx + 0x10c]
push 6
mov eax, dword [eax + 4]
mov eax, dword [eax + ecx*4]
lea ecx, [esp + 0x38]
push ecx
push eax
mov esi, dword [eax]
mov esi, dword [esi + 0x80]
mov ecx, esi
call dword [0xc99200]
call esi
mov ecx, dword [esp + 0x10]
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, edi
jl 0xb19331
push 2
push 0
push 0
push dword [ebx + 0x28]
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 0
push 0
push dword [ebx + 0x28]
call dword [sym.imp.ext_ms_win_ntuser_draw_l1_1_0.dll_SetWindowRgn]
push dword [ebx + 0x28]
call dword [sym.imp.USER32.dll_GetDC]
mov esi, eax
test esi, esi
je 0xb193d0
xor eax, eax
lea edi, [esp + 0x18]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
lea eax, [esp + 0x18]
push eax
push dword [ebx + 0x28]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetClientRect]
mov eax, dword [esp + 0x24]
sub eax, dword [esp + 0x1c]
push 0x42
push eax
mov eax, dword [esp + 0x28]
sub eax, dword [esp + 0x20]
push eax
push 0
push 0
push esi
call dword [sym.imp.ext_ms_win_gdi_draw_l1_1_1.dll_PatBlt]
push esi
push dword [ebx + 0x28]
call dword [sym.imp.USER32.dll_ReleaseDC]
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0xc]
test esi, esi
je 0xb193f6
mov eax, dword [ebx + 0x23c]
test edi, edi
jne 0xb193ef
push 2
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_GetAncestor]
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_SetFocus]
push 0
push dword [ebx + 0x28]
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_ShowWindow]
mov ecx, ebx
call fcn.00bd781a
jmp 0xa42b53
mov ecx, ebx
call fcn.00bd73e0
push 2
mov ecx, ebx
call fcn.00bda8fb
mov ecx, dword [ebx + 0x2c]
mov byte [ebx + 0x241], 0
test ecx, ecx
je 0xa42b66
mov eax, dword [ecx]
push edi
push esi
push ecx
mov esi, dword [eax + 0x2c]
mov ecx, esi
call dword [0xc99200]
call esi
jmp 0xa42b66
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_UnhookWindowsHookEx]
and dword [0xc958b8], 0
jmp 0xa42b77
push eax
call dword [sym.imp.ext_ms_win_rtcore_ntuser_window_ext_l1_1_0.dll_UnhookWindowsHookEx]
and dword [0xc958bc], 0
jmp 0xa42b84