Function at 0x100046784
Capabilities:
Hide graphical window

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x70
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [r11 + 0x18], rbx
mov qword [r11 + 0x20], rbp
mov r13, r9
mov rbp, r8
mov ebx, edx
mov rdi, rcx
lea rax, [0x1000c3470]
mov r12d, 0xa
mov rcx, qword [0x1000c3470]
cmp rcx, rax
je 0x1000467ec
test byte [rcx + 0x1c], 8
je 0x1000467ec
mov edx, r12d
mov qword [r11 - 0x78], rdi
lea r9, [0x1000056a8]
lea r8, [0x1000050d8]
mov rcx, qword [rcx + 0x10]
call fcn.10001eaec
mov r15d, 5
sub ebx, 0x8001
je 0x100046df5
lea esi, [r15 - 4]
sub ebx, esi
je 0x100046ca6
sub ebx, 3
je 0x100046c58
sub ebx, esi
je 0x100046c1d
sub ebx, esi
je 0x100046bbe
sub ebx, esi
je 0x100046b67
cmp ebx, r15d
jne 0x100046f6f
and dword [rdi + 0x49c], 0
lea rcx, [rdi + 0x50]
mov edx, 0x18ce
call fcn.10002c5f0
mov rdx, r12
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
lea edx, [rsi + 0x13]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
xor r9d, r9d
mov edx, 0x402
lea r8d, [rdx - 0x1a]
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_ShowWindow]
test byte [rdi + 0xf8], 2
je 0x1000468c4
mov r12, qword [rdi + 0xf0]
mov rcx, r12
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1000468d3
xor edx, edx
mov rcx, r12
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x1000468d3
xor edx, edx
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 3
lea rcx, [rdi + 0xf0]
call fcn.100045aa0
xor edx, edx
mov rcx, qword [rdi + 0x148]
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, qword [rdi + 0x408]
call qword [sym.imp.USER32.dll_ShowWindow]
cmp ebp, esi
jne 0x10004692c
lea rax, [rdi + 0x1e8]
lea rdx, [rdi + 0x1f0]
neg rax
sbb rcx, rcx
and rcx, rdx
mov edx, reloc.OLEAUT32.dll_VARIANT_UserFree
call fcn.10002c5f0
jmp 0x100046f6f
cmp ebp, 0x800704c7
jne 0x10004695a
lea rax, [rdi + 0x1e8]
lea rdx, [rdi + 0x1f0]
neg rax
sbb rcx, rcx
and rcx, rdx
mov edx, 0xf2
call fcn.10002c5f0
jmp 0x100046f6f
test ebp, ebp
js 0x100046984
lea rax, [rdi + 0x1e8]
lea rdx, [rdi + 0x1f0]
neg rax
sbb rcx, rcx
and rcx, rdx
mov edx, 0xf1
call fcn.10002c5f0
jmp 0x100046f6f
lea rcx, [0x1000c2120]
mov rax, qword [0x1000c2120]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rcx, [0x1000c2120]
mov rax, qword [0x1000c2120]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x40], rax
lea rcx, [0x1000c2120]
mov rax, qword [0x1000c2120]
call qword [rax + 0x18]
lea rbx, [rax + 0x18]
mov qword [rsp + 0x48], rbx
and qword [rsp + 0x60], 0
xor ecx, ecx
mov qword [rsp + 0x38], rcx
mov rsi, qword [0x1000c6ba0]
add rsi, reloc.OLEAUT32.dll_VARIANT_UserUnmarshal
je 0x100046af6
movsxd rax, dword [rsi + 0x7c]
lea rbx, [0x100004d28]
mov edx, dword [rbx + rax*8]
lea rcx, [rsp + 0x30]
call fcn.10002c01c
mov r8d, ebp
mov edx, 0xc04
lea rcx, [rsp + 0x40]
call fcn.10002bf40
mov r11, qword [rsp + 0x30]
cmp dword [r11 - 0x10], 0
jle 0x100046a3a
lea rdx, [0x10000553c]
lea rcx, [rsp + 0x30]
call fcn.10002bb50
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x30]
call fcn.10002bb50
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x100046a5e
call sub.MpClient.dll_MpFreeMemory
and qword [rsp + 0x38], 0
lea rdx, [rsp + 0x38]
mov ecx, ebp
call fcn.100023c54
test eax, eax
js 0x100046a99
mov rax, qword [rsp + 0x30]
cmp dword [rax - 0x10], 0
jle 0x100046a8a
lea rdx, [0x10000553c]
lea rcx, [rsp + 0x30]
call fcn.10002bb50
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.10002bb50
movsxd rax, dword [rsi + 0x7c]
mov edx, dword [rbx + rax*8 + 4]
lea rcx, [rsp + 0x48]
call fcn.10002c01c
mov rbx, qword [rsp + 0x48]
cmp dword [rbx - 0x10], 0
jle 0x100046adf
mov rax, qword [rsp + 0x30]
cmp dword [rax - 0x10], 0
jle 0x100046ad2
lea rdx, [0x1000077c0]
lea rcx, [rsp + 0x30]
call fcn.10002bb50
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.10002bb50
mov rdx, qword [rsp + 0x30]
mov rcx, qword [rdi + 0x1f0]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x100046b01
call sub.MpClient.dll_MpFreeMemory
nop
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x100046b1f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x100046b3f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x100046f6f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x100046f6f
xor r9d, r9d
mov edx, 0x402
mov r8d, 0x352
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
mov r8d, 0x1f4
mov rdx, r12
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetTimer]
lea r11, [rdi + 0x1e8]
lea rax, [rdi + 0x1f0]
neg r11
sbb rcx, rcx
and rcx, rax
mov edx, 0x177e
call fcn.10002c5f0
jmp 0x100046f6f
mov edx, r15d
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_ShowWindow]
test byte [rdi + 0xf8], 2
je 0x100046bf8
mov rsi, qword [rdi + 0xf0]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100046c07
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x100046c07
xor edx, edx
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 3
lea rcx, [rdi + 0xf0]
call fcn.100045aa0
jmp 0x100046f6f
mov eax, 0x64
cmp ebp, eax
cmova ebp, eax
imul ebp, ebp, 0x226
mov eax, 0x51eb851f
mul ebp
shr edx, 5
lea r8d, [rdx + 0x12c]
xor r9d, r9d
mov edx, 0x402
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x100046f6f
mov rdx, r12
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_KillTimer]
xor r9d, r9d
mov edx, 0x402
mov r8d, 0x12c
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
lea r11, [rdi + 0x1e8]
lea rax, [rdi + 0x1f0]
neg r11
sbb rcx, rcx
and rcx, rax
mov edx, 0x177d
call fcn.10002c5f0
jmp 0x100046f6f
cmp ebp, 3
jne 0x100046d68
mov edx, r15d
mov rcx, qword [rdi + 0x408]
call qword [sym.imp.USER32.dll_ShowWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, r15d
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_ShowWindow]
test byte [rdi + 0xf8], 2
je 0x100046d30
mov rbp, qword [rdi + 0xf0]
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100046d3f
and dword [rsp + 0xa8], 0
lea rcx, [rsp + 0xa8]
call fcn.10002c594
test eax, eax
cmovns esi, dword [rsp + 0xa8]
mov edx, esi
mov rcx, rbp
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x100046d3f
mov edx, esi
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_EnableWindow]
xor edx, edx
lea rcx, [rdi + 0xf0]
call fcn.100045aa0
xor r9d, r9d
mov r8d, 0x1f4
mov rdx, r12
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetTimer]
jmp 0x100046f6f
xor edx, edx
mov rcx, qword [rdi + 0x408]
call qword [sym.imp.USER32.dll_ShowWindow]
mov edx, r15d
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_ShowWindow]
test byte [rdi + 0xf8], 2
je 0x100046dd0
mov rbp, qword [rdi + 0xf0]
mov rcx, rbp
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100046ddf
and dword [rsp + 0xa0], 0
lea rcx, [rsp + 0xa0]
call fcn.10002c594
test eax, eax
cmovns esi, dword [rsp + 0xa0]
mov edx, esi
mov rcx, rbp
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x100046ddf
mov edx, esi
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 3
lea rcx, [rdi + 0xf0]
call fcn.100045aa0
jmp 0x100046f6f
mov esi, 1
mov dword [rdi + 0x49c], esi
lea rcx, [rdi + 0x50]
mov edx, 0x17dc
call fcn.10002c5f0
mov edx, r15d
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_ShowWindow]
test byte [rdi + 0xf8], 2
je 0x100046e48
mov rsi, qword [rdi + 0xf0]
mov rcx, rsi
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x100046e57
xor edx, edx
mov rcx, rsi
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x100046e57
xor edx, edx
mov rcx, qword [rdi + 0xf0]
call qword [sym.imp.USER32.dll_EnableWindow]
mov edx, 3
lea rcx, [rdi + 0xf0]
call fcn.100045aa0
mov edx, r15d
mov rcx, qword [rdi + 0x148]
call qword [sym.imp.USER32.dll_ShowWindow]
xor eax, eax
mov qword [rdi + 0x48c], rax
mov qword [rdi + 0x494], rax
lea rcx, [rdi + 0x48c]
call qword [sym.imp.KERNEL32.dll_GetLocalTime]
lea rcx, [0x1000c2120]
mov rax, qword [0x1000c2120]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x50], rax
mov r8d, 2
lea rdx, [rsp + 0x50]
lea rcx, [rdi + 0x48c]
call fcn.10002ddb8
mov rbx, qword [rsp + 0x50]
mov rdx, rbx
mov rcx, qword [rdi + 0x318]
call qword [sym.imp.USER32.dll_SetWindowTextW]
xor r9d, r9d
lea edx, [r9 + 0x14]
mov r8d, 0x3e8
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetTimer]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x402
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_SendMessageW]
mov edx, r15d
mov rcx, qword [rdi + 0xa0]
call qword [sym.imp.USER32.dll_ShowWindow]
xor r9d, r9d
mov r8d, 0x1f4
mov rdx, r12
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetTimer]
lea r11, [rdi + 0x1e8]
lea rax, [rdi + 0x1f0]
neg r11
sbb rcx, rcx
and rcx, rax
mov edx, 0x177c
call fcn.10002c5f0
nop
lea rdx, [rbx - 0x18]
or ebx, 0xffffffff
mov eax, ebx
lock xadd dword [rdx + 0x10], eax
add eax, ebx
test eax, eax
jg 0x100046f6f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
test r13, r13
je 0x100046f84
mov rdx, r13
mov rcx, qword [rdi + 0x318]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov rdx, qword [rsp + 0xc0]
test rdx, rdx
je 0x100046f9e
mov rcx, qword [rdi + 0x3b8]
call qword [sym.imp.USER32.dll_SetWindowTextW]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_GetParent]
xor r9d, r9d
xor r8d, r8d
mov edx, r15d
mov rcx, rax
call qword [sym.imp.USER32.dll_PostMessageW]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_GetParent]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x44a
mov rcx, rax
lea r11, [rsp + 0x70]
mov rbx, qword [r11 + 0x40]
mov rbp, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r13
pop r12
pop rdi
pop rsi
jmp qword [sym.imp.USER32.dll_PostMessageW]