Function at 0x10008560
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c
mov eax, dword [0x1001c004]
xor eax, ebp
mov dword [ebp - 4], eax
test byte [0x1001d1e4], 1
push ebx
push esi
push edi
je 0x100085ad
cmp dword [0x1001d2d0], 0
jne 0x100085a6
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0
push 0
push 0x21
push 0x32
call esi
push eax
push 0x31
call esi
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [0x1001d2d0], eax
test byte [0x1001d1e4], 1
mov ebx, dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
mov eax, dword [0x1001d1f0]
je 0x10008758
test eax, eax
jne 0x10008758
push eax
push eax
push eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
mov eax, dword [sym.imp.ProcessHacker.exe_PhMainWndHandle]
mov dword [ebp - 0x10], 0xc
push dword [eax]
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x56002241
push 0
push str.ReBarWindow32
push 0x80
call ebx
lea ecx, [ebp - 0x10]
mov dword [0x1001d1f0], eax
push ecx
push 0
push 0x404
push eax
call edi
push 0
push 0
push 0
push dword [0x1001d1f0]
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x5600995c
push 0
push str.ToolbarWindow32
push 0
call ebx
push 0
push 0x14
push 0x41e
push eax
mov dword [0x1001d1e0], eax
call edi
push 0x98
push 0
push 0x454
push dword [0x1001d1e0]
call edi
push dword [0x1001d2d0]
push 0
push 0x430
push dword [0x1001d1e0]
call edi
call fcn.10009160
push 0
push 0
push 0x43a
push dword [0x1001d1e0]
call edi
mov esi, eax
mov eax, dword [0x1001d1e8]
sub eax, 1
je 0x100086c8
sub eax, 1
jne 0x100086f0
push str.Communications
push eax
push 0x200b
push dword [0x1001d1f0]
call edi
push str.Communications
jmp 0x100086e1
push str.Media
push 0
push 0x200b
push dword [0x1001d1f0]
call edi
push str.Media
push 0
push 0x200b
push dword [0x1001d1e0]
call edi
push 0x58
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x78], 0x50
push 0
push eax
mov dword [ebp - 0x74], 0x131
mov dword [ebp - 0x70], 0x200
call fcn.1000a5d0
mov eax, dword [0x1001d1e0]
add esp, 0xc
mov dword [ebp - 0x58], eax
movzx eax, si
shr esi, 0x10
test byte [0x1001d1e4], 8
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], esi
je 0x10008740
or dword [ebp - 0x70], 0x100
lea eax, [ebp - 0x78]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x1001d1f0]
call edi
mov eax, dword [0x1001d1f0]
test byte [0x1001d1e4], 2
je 0x100087ba
cmp dword [0x1001d28c], 0
jne 0x100087ba
call dword [sym.imp.ProcessHacker.exe__PhReferenceEmptyString_0]
push 0
push 0x10007050
mov dword [0x1001d288], eax
call dword [sym.imp.ProcessHacker.exe__PhGetFilterSupportProcessTreeList_0]
mov esi, dword [sym.imp.ProcessHacker.exe__PhAddTreeNewFilter_12]
push eax
call esi
push 0
push 0x100075a0
call dword [sym.imp.ProcessHacker.exe__PhGetFilterSupportServiceTreeList_0]
push eax
call esi
push 0
push 0x10007730
call dword [sym.imp.ProcessHacker.exe__PhGetFilterSupportNetworkTreeList_0]
push eax
call esi
call fcn.10006c80
mov dword [0x1001d28c], eax
mov eax, dword [0x1001d1f0]
test byte [0x1001d1e4], 4
je 0x10008807
cmp dword [0x1001d2c0], 0
jne 0x10008807
mov eax, dword [sym.imp.ProcessHacker.exe_PhMainWndHandle]
push 0
push 0
push 0
push dword [eax]
push 0x80000000
push 0x80000000
push 0x80000000
push 0x80000000
push 0x50000103
push 0
push str.msctls_statusbar32
push 0
call ebx
mov dword [0x1001d2c0], eax
mov eax, dword [0x1001d1f0]
test byte [0x1001d1e4], 1
mov ebx, dword [sym.imp.USER32.dll_IsWindowVisible]
mov esi, dword [sym.imp.USER32.dll_ShowWindow]
je 0x1000882b
test eax, eax
je 0x10008845
push eax
call ebx
test eax, eax
jne 0x10008840
push 5
jmp 0x10008838
test eax, eax
je 0x10008845
push eax
call ebx
test eax, eax
je 0x10008840
push 0
push dword [0x1001d1f0]
call esi
mov eax, dword [0x1001d1f0]
test byte [0x1001d1e4], 2
je 0x10008942
test eax, eax
je 0x10008942
cmp dword [0x1001d28c], 0
je 0x10008942
push 0
push 0
push 0x40e
push eax
call edi
push 0
push 1
push 0x410
push dword [0x1001d1f0]
mov dword [ebp - 0x7c], eax
call edi
cmp eax, 0xffffffff
jne 0x100088fd
push 0x58
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x78], 0x50
push 0
push eax
mov dword [ebp - 0x74], 0x131
mov dword [ebp - 0x70], 0x200
call fcn.1000a5d0
mov eax, dword [0x1001d28c]
add esp, 0xc
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x7c]
add eax, 0xfffffffe
mov dword [ebp - 0x44], 1
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x70]
or eax, 2
mov dword [ebp - 0x54], 0xb4
test byte [0x1001d1e4], 8
mov dword [ebp - 0x70], eax
je 0x100088ea
or eax, 0x100
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x78]
push eax
push 0xffffffffffffffff
push 0x40a
push dword [0x1001d1f0]
call edi
push dword [0x1001d28c]
call ebx
test eax, eax
jne 0x10008913
push 5
push dword [0x1001d28c]
call esi
cmp dword [0x1001d1dc], 1
jne 0x100089b0
push 0
push 1
push 0x410
push dword [0x1001d1f0]
call edi
cmp eax, 0xffffffff
je 0x100089b0
mov ecx, 1
call fcn.10008510
jmp 0x100089b0
push 0
push 1
push 0x410
push eax
call edi
cmp eax, 0xffffffff
je 0x10008979
push 0
push 1
push 0x410
push dword [0x1001d1f0]
call edi
cmp eax, 0xffffffff
je 0x10008979
push 0
push eax
push 0x402
push dword [0x1001d1f0]
call edi
mov eax, dword [0x1001d28c]
test eax, eax
je 0x100089b0
push eax
call dword [sym.imp.USER32.dll_SetFocus]
push 0x10017d28
push dword [0x1001d28c]
call dword [sym.imp.USER32.dll_SetWindowTextW]
push dword [0x1001d28c]
call ebx
test eax, eax
je 0x100089b0
push 0
push dword [0x1001d28c]
call esi
test byte [0x1001d1e4], 4
mov eax, dword [0x1001d2c0]
je 0x100089cd
test eax, eax
je 0x100089e2
push eax
call ebx
test eax, eax
jne 0x100089e2
push 5
jmp 0x100089da
test eax, eax
je 0x100089e2
push eax
call ebx
test eax, eax
je 0x100089e2
push 0
push dword [0x1001d2c0]
call esi
call fcn.10002e60
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000960d
mov esp, ebp
pop ebp
ret