Function at 0x449890
Capabilities:
Check for foreground window switch
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x234
xor ecx, ecx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x18], ecx
xor edx, edx
mov dword [esp + 0x1c], ecx
xor eax, eax
mov dword [esp + 0x50], edx
mov dword [esp + 0x64], ecx
mov dword [esp + 0x54], edx
mov dword [esp + 0x68], ecx
push ebx
mov dword [esp + 0x5c], edx
mov dword [esp + 0x70], ecx
push esi
mov dword [esp + 0x64], edx
mov dword [esp + 0x78], ecx
xor ebx, ebx
push edi
mov dword [esp + 0x10], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x6c], edx
mov dword [esp + 0x80], ecx
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], ebx
lea ebx, [ebx]
cmp dword [ebx + 0x4958b8], eax
je 0x449c91
mov edi, dword [ebp + 8]
lea esi, [ebx + 0x4958bc]
mov ecx, 3
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
jne 0x449c24
mov edi, dword [ebp + 8]
mov eax, dword [edi + 8]
mov ecx, dword [edi + 4]
mov edx, dword [edi]
push eax
push ecx
push edx
push str.LASSO__PnPUpdateAdapter:_get_target_bus__d__dev__d__fun__d_
call fcn.0040aac0
mov al, byte [ebp + 0xc]
add esp, 0x10
test al, 8
mov dword [esp + 0x34], 1
je 0x449999
call fcn.0044e940
mov esi, dword [ebx + 0x4958d0]
mov ecx, dword [ebx + 0x4958d4]
add esi, 0x7d0
adc ecx, 0
cmp edx, ecx
ja 0x449999
jb 0x449982
cmp eax, esi
jae 0x449999
push 0x1f4
mov ecx, 0x491950
call fcn.00415670
mov dword [esp + 0x40], 1
lea eax, [esp + 0x18]
push eax
push edi
call fcn.00449070
mov al, byte [ebp + 0xc]
add esp, 8
test al, 4
je 0x4499e1
call fcn.0044e940
mov ecx, 0x491950
mov dword [ebx + 0x4958d0], eax
mov dword [ebx + 0x4958d4], edx
call fcn.00415a30
push edi
call fcn.00451e60
push str.Got_Adapter_Arrival__do_not_do_Lasso_operation_yet
call fcn.0040aac0
add esp, 4
jmp 0x449c91
mov esi, dword [ebx + 0x4958c8]
push esi
push str.LASSO__PnPUpdateAdapter:_old_NumOfMonitorsConnected___d
call fcn.0040aac0
push 0
lea ecx, [esp + 0x24]
push ecx
push edi
call fcn.00449570
push eax
push str.LASSO__PnPUpdateAdapter:_new_NumOfMonitorsConnected___d
mov dword [ebx + 0x4958c8], eax
call fcn.0040aac0
mov ecx, dword [ebx + 0x4958c8]
add esp, 0x1c
xor edi, edi
cmp esi, ecx
je 0x449be8
xor eax, eax
mov edx, dword [esp + eax*8 + 0x1c]
test edx, edx
jne 0x449a35
inc eax
cmp eax, 2
jb 0x449a25
jmp 0x449a3a
mov edi, 1
test ecx, ecx
jne 0x449b40
mov eax, dword [ebp + 8]
mov edx, dword [eax + 8]
mov ecx, dword [eax + 4]
push edx
mov edx, dword [eax]
push ecx
push edx
push str.Nothing_connected_on_adapter_bus__d__dev__d__fun__d_
call fcn.0040aac0
add esp, 0x10
test edi, edi
je 0x449be8
xor ebx, ebx
mov esi, 0x4958bc
xor edi, edi
mov edi, edi
cmp ebx, dword [esp + 0x30]
je 0x449ab7
mov eax, dword [esi - 4]
test eax, eax
je 0x449ab7
mov eax, dword [esi + 8]
mov ecx, dword [esi + 4]
mov edx, dword [esi]
push eax
push ecx
push edx
push str.Lasso:_UpdateAdapter__look_for_other_adapters_device_connection_bus__d__dev__d__fun__d_
call fcn.0040aac0
lea eax, [esp + 0x94]
push eax
push esi
call fcn.00449070
push 0
lea ecx, [esp + 0xa0]
push ecx
push esi
call fcn.00449570
add esp, 0x24
test eax, eax
jne 0x449ae0
add edi, 0x128
inc ebx
add esi, 0x128
cmp edi, 0x5c8
jb 0x449a70
push str.Lasso:_UpdateAdapter__look_for_other_adapters__Other_adapter_has_nothing_connected
call fcn.0040aac0
add esp, 4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov dword [esp + 0x14], 1
xor esi, esi
lea ebx, [ebx]
mov eax, dword [esp + esi*8 + 0x1c]
test eax, eax
je 0x449b19
mov edx, dword [esp + 0x28]
cmp dword [esp + esi*8 + 0x18], edx
je 0x449b19
push str.Remove_ext_desltop
call fcn.0040aac0
mov eax, dword [esp + esi*8 + 0x1c]
add esp, 4
push eax
call fcn.00453bd0
inc esi
cmp esi, 2
jb 0x449af0
cmp dword [esp + 0x28], 0xffffffff
je 0x449be8
mov ebx, dword [esp + 0x2c]
mov eax, 1
mov dword [esp + 0x10], eax
mov dword [esp + 0x38], eax
jmp 0x449c91
test esi, esi
jne 0x449be8
mov edx, dword [ebp + 8]
lea ecx, [esp + 0x18]
push ecx
push edx
call fcn.00449100
add esp, 8
cmp eax, 2
jne 0x449be8
test edi, edi
jne 0x449c0b
xor ebx, ebx
lea esp, [esp]
cmp dword [esp + ebx*8 + 0x18], 0xffffffff
je 0x449be2
call fcn.004284f0
test eax, eax
je 0x449b96
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfa
call esi
call fcn.004284f0
test eax, eax
jne 0x449b86
mov eax, dword [esp + ebx*8 + 0x18]
push eax
call fcn.00453b60
test eax, eax
je 0x449be2
mov edx, dword [esp + ebx*8 + 0x18]
xor eax, eax
mov ecx, 0x6a
lea edi, [esp + 0x98]
rep stosd dword es:[edi], eax
push eax
lea ecx, [esp + 0x9c]
push ecx
push edx
push eax
mov dword [esp + 0xa8], 0x1a8
call dword [sym.imp.USER32.dll_EnumDisplayDevicesA]
test eax, eax
je 0x449be2
test byte [esp + 0x13c], 1
jne 0x449bfd
inc ebx
cmp ebx, 2
jb 0x449b70
mov eax, dword [esp + 0x10]
test eax, eax
je 0x449ddb
mov ebx, dword [esp + 0x2c]
jmp 0x449c91
push 0x14
mov ecx, 0x491a60
call fcn.00431dd0
jmp 0x449be8
mov eax, dword [esp + 0x40]
test eax, eax
je 0x449be8
cmp dword [esp + 0x28], 0xffffffff
je 0x449be8
mov dword [esp + 0x10], 1
jmp 0x449c91
lea eax, [esp + 0x48]
push eax
lea esi, [ebx + 0x4958bc]
push esi
call fcn.00449070
push 0
lea ecx, [esp + 0x54]
push ecx
push esi
call fcn.00449570
add esp, 0x14
test eax, eax
je 0x449c91
xor eax, eax
jmp 0x449c50
mov ecx, dword [esp + eax*8 + 0x4c]
test ecx, ecx
jne 0x449cb3
inc eax
cmp eax, 2
jb 0x449c50
mov ecx, dword [esp + 0x48]
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x50]
mov dword [esp + 0x70], ecx
mov ecx, dword [esp + 0x54]
mov dword [esp + 0x74], edx
mov edx, dword [esp + 0x58]
mov dword [esp + 0x44], 1
mov dword [esp + 0x78], eax
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edx
mov edx, dword [esp + 0x30]
add ebx, 0x128
inc edx
cmp ebx, 0x5c8
mov dword [esp + 0x30], edx
mov dword [esp + 0x2c], ebx
jae 0x449ce5
xor eax, eax
jmp 0x449910
mov edx, dword [esp + 0x48]
mov eax, dword [esp + 0x4c]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x5c], edx
mov edx, dword [esp + 0x54]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 0x3c], 1
mov dword [esp + 0x64], ecx
mov dword [esp + 0x68], edx
mov dword [esp + 0x6c], eax
jmp 0x449c91
mov eax, dword [esp + 0x10]
test eax, eax
je 0x449ddb
mov eax, dword [esp + 0x34]
test eax, eax
je 0x449ddb
push str.bNeedsToSwitchPrimaryAndRemove
call fcn.0040aac0
add esp, 4
call fcn.004284f0
test eax, eax
je 0x449d30
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
lea esp, [esp]
push 0xfa
call esi
call fcn.004284f0
test eax, eax
jne 0x449d20
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x449d7c
xor esi, esi
lea ebx, [ebx]
mov eax, dword [esp + esi*8 + 0x60]
test eax, eax
je 0x449d74
mov eax, dword [esp + 0x28]
push eax
mov ecx, 0x491a60
call fcn.0042fca0
mov ecx, dword [esp + esi*8 + 0x5c]
push eax
push ecx
mov ecx, 0x491a60
call fcn.0042fca0
push eax
call fcn.00448ec0
add esp, 8
test eax, eax
jne 0x449dc9
inc esi
cmp esi, 2
jb 0x449d40
jmp 0x449ddb
mov eax, dword [esp + 0x44]
test eax, eax
je 0x449ddb
xor edi, edi
mov esi, dword [esp + edi*8 + 0x70]
cmp esi, 0xffffffff
je 0x449dc1
push esi
call fcn.00453b60
test eax, eax
je 0x449dc1
mov edx, dword [esp + 0x28]
push edx
mov ecx, 0x491a60
call fcn.0042fca0
push eax
push esi
mov ecx, 0x491a60
call fcn.0042fca0
push eax
call fcn.00448ec0
add esp, 8
test eax, eax
jne 0x449dc9
inc edi
cmp edi, 2
jb 0x449d86
jmp 0x449ddb
mov eax, dword [esp + 0x38]
test eax, eax
je 0x449ddb
mov eax, dword [esp + 0x28]
push eax
call fcn.00453bd0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x449e0f
push 0x14
mov ecx, 0x491a60
call fcn.00431dd0
mov esi, dword [ebp + 8]
push esi
push 0
lea ecx, [esp + 0x8c]
push ecx
push 0x10
call fcn.0040aad0
push eax
call fcn.0044c3c0
add esp, 0x14
jmp 0x449e12
mov esi, dword [ebp + 8]
mov eax, dword [esp + 0x34]
test eax, eax
je 0x449e7a
mov eax, dword [ebp + 0xc]
test eax, eax
jns 0x449e7a
lea edx, [esp + 0x18]
push edx
push esi
call fcn.00449100
add esp, 8
cmp eax, 2
jne 0x449e7a
test esi, esi
je 0x449e7a
push esi
call fcn.00448e20
add esp, 4
test eax, eax
jne 0x449e7a
push str.LASSO_UPDATE_NOTIFY_CCC.
call fcn.0040aac0
mov eax, dword [0x4929e0]
push eax
lea ecx, [esp + 0x1c]
push ecx
push 0
push 0
push 0x4493b0
mov dword [esp + 0x2c], 0
call fcn.00423c00
add esp, 0x18
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret