Function at 0x18002b060
Capabilities:
Hide graphical window

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rdi
sub rsp, 0x2d0
mov rdi, rsp
mov ecx, VariantTimeToSystemTime
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x2e0]
mov qword [rsp + 0x268], 0xfffffffffffffffe
lea rcx, [rsp + 0x48]
call fcn.18004682c
nop
lea rcx, [rsp + 0x88]
call fcn.18004682c
nop
mov dword [rsp + 0xb4], 0
mov dword [rsp + 0xb8], 0
mov rax, qword [rsp + 0x2e0]
add rax, 0x158
mov rcx, rax
call fcn.180010350
mov dword [rsp + 0xbc], eax
mov dword [rsp + 0xb4], 0
jmp 0x18002b0fd
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
mov eax, dword [rsp + 0xbc]
cmp dword [rsp + 0xb4], eax
jge 0x18002b1ae
mov rax, qword [rsp + 0x2e0]
add rax, 0x158
mov r9d, 1
mov r8d, dword [rsp + 0xb4]
lea rdx, [rsp + 0xc8]
mov rcx, rax
call fcn.180045888
nop
lea rcx, [rsp + 0xc8]
call fcn.180006c80
mov rcx, rax
call fcn.180190f40
mov dword [rsp + 0xd4], eax
cmp dword [rsp + 0xd4], 0
jne 0x18002b176
lea rcx, [rsp + 0xc8]
call fcn.1800064d0
jmp 0x18002b0ed
mov edx, dword [rsp + 0xd4]
lea rcx, [rsp + 0x48]
call fcn.180010300
mov edx, dword [rsp + 0xb4]
lea rcx, [rsp + 0x88]
call fcn.180010300
nop
lea rcx, [rsp + 0xc8]
call fcn.1800064d0
jmp 0x18002b0ed
lea rcx, [rsp + 0x48]
call fcn.1800133b0
test rax, rax
jne 0x18002b1da
lea rcx, [rsp + 0x88]
call fcn.18004684c
nop
lea rcx, [rsp + 0x48]
call fcn.18004684c
jmp 0x18002b8ec
lea rcx, [rsp + 0xe8]
call fcn.18002c4e0
nop
lea rcx, [rsp + 0x128]
call fcn.18004682c
nop
mov dword [rsp + 0x168], 0
lea rax, [rsp + 0x170]
mov rdi, rax
xor eax, eax
mov ecx, 0x18
rep stosb byte [rdi], al
mov dword [rsp + 0x168], 2
lea rax, [rsp + 0x48]
mov qword [rsp + 0x170], rax
lea rax, [rsp + 0xe8]
mov qword [rsp + 0x178], rax
lea rax, [rsp + 0x128]
mov qword [rsp + 0x180], rax
lea r8, [rsp + 0x168]
lea rdx, [0x18002bed0]
xor ecx, ecx
call qword [sym.imp.USER32.dll_EnumDesktopWindows]
lea rcx, [rsp + 0xe8]
call fcn.1800133b0
test rax, rax
jne 0x18002b40c
mov dword [rsp + 0xb8], 0
jmp 0x18002b297
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
movsxd rax, dword [rsp + 0xb8]
mov qword [rsp + 0x270], rax
lea rcx, [rsp + 0x48]
call fcn.1800133b0
mov rcx, qword [rsp + 0x270]
cmp rcx, rax
jge 0x18002b3d3
mov dword [rsp + 0x1a4], 0
movsxd rax, dword [rsp + 0xb8]
mov rdx, rax
lea rcx, [rsp + 0x48]
call fcn.1800102c0
lea rdx, [rsp + 0x1a4]
mov ecx, dword [rax]
call fcn.18002bdc0
test eax, eax
jne 0x18002b3ce
movsxd rax, dword [rsp + 0xb8]
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1800102c0
mov rcx, qword [rsp + 0x2e0]
add rcx, 0x158
mov r9d, 2
mov r8d, dword [rax]
lea rdx, [rsp + 0x1c8]
call fcn.180045888
nop
lea rcx, [rsp + 0x1c8]
call fcn.180008380
movzx eax, al
test eax, eax
je 0x18002b3c1
movsxd rax, dword [rsp + 0xb8]
mov rdx, rax
lea rcx, [rsp + 0x88]
call fcn.1800102c0
mov rcx, qword [rsp + 0x2e0]
add rcx, 0x158
xor r9d, r9d
mov r8d, dword [rax]
lea rdx, [rsp + 0x260]
call fcn.180045888
mov qword [rsp + 0x278], rax
mov rax, qword [rsp + 0x278]
mov qword [rsp + 0x280], rax
mov rdx, qword [rsp + 0x280]
lea rcx, [rsp + 0x1c8]
call fcn.1800085f0
nop
lea rcx, [rsp + 0x260]
call fcn.1800064d0
nop
lea rcx, [rsp + 0x1c8]
call fcn.1800064d0
jmp 0x18002b287
lea rcx, [rsp + 0x128]
call fcn.18004684c
nop
lea rcx, [rsp + 0xe8]
call fcn.18002c5f0
nop
lea rcx, [rsp + 0x88]
call fcn.18004684c
nop
lea rcx, [rsp + 0x48]
call fcn.18004684c
jmp 0x18002b8ec
cmp dword [rsp + 0x2e8], 0
je 0x18002b44f
lea rcx, [rsp + 0x128]
call fcn.18004684c
nop
lea rcx, [rsp + 0xe8]
call fcn.18002c5f0
nop
lea rcx, [rsp + 0x88]
call fcn.18004684c
nop
lea rcx, [rsp + 0x48]
call fcn.18004684c
jmp 0x18002b8ec
lea rcx, [rsp + 0x1e8]
call fcn.18004682c
nop
lea rdx, [rsp + 0x1e8]
lea rcx, [rsp + 0x48]
call fcn.18002ba90
mov dword [rsp + 0xb4], 0
jmp 0x18002b48c
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
movsxd rax, dword [rsp + 0xb4]
mov qword [rsp + 0x288], rax
lea rcx, [rsp + 0x1e8]
call fcn.1800133b0
mov rcx, qword [rsp + 0x288]
cmp rcx, rax
jge 0x18002b4ea
mov dword [rsp + 0x224], 0
movsxd rax, dword [rsp + 0xb8]
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.1800102c0
lea rdx, [rsp + 0x224]
mov ecx, dword [rax]
call fcn.18002bdc0
jmp 0x18002b47c
mov dword [rsp + 0xb4], 0
jmp 0x18002b507
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
movsxd rax, dword [rsp + 0xb4]
mov qword [rsp + 0x290], rax
lea rcx, [rsp + 0x128]
call fcn.1800133b0
mov rcx, qword [rsp + 0x290]
cmp rcx, rax
jge 0x18002b6d3
mov dword [rsp + 0x234], 0
mov dword [rsp + 0xb8], 0
jmp 0x18002b55d
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
movsxd rax, dword [rsp + 0xb8]
mov qword [rsp + 0x298], rax
lea rcx, [rsp + 0x1e8]
call fcn.1800133b0
mov rcx, qword [rsp + 0x298]
cmp rcx, rax
jge 0x18002b5df
movsxd rax, dword [rsp + 0xb4]
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1800102c0
mov qword [rsp + 0x2a0], rax
movsxd rcx, dword [rsp + 0xb8]
mov rdx, rcx
lea rcx, [rsp + 0x1e8]
call fcn.1800102c0
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2a0]
cmp dword [rcx], eax
jne 0x18002b5da
mov dword [rsp + 0x234], 1
jmp 0x18002b5df
jmp 0x18002b54d
cmp dword [rsp + 0x234], 0
je 0x18002b5ee
jmp 0x18002b4f7
mov dword [rsp + 0xb8], 0
jmp 0x18002b60b
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
movsxd rax, dword [rsp + 0xb8]
mov qword [rsp + 0x2a8], rax
lea rcx, [rsp + 0xe8]
call fcn.1800133b0
mov rcx, qword [rsp + 0x2a8]
cmp rcx, rax
jge 0x18002b68d
movsxd rax, dword [rsp + 0xb4]
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1800102c0
mov qword [rsp + 0x2b0], rax
movsxd rcx, dword [rsp + 0xb8]
mov rdx, rcx
lea rcx, [rsp + 0xe8]
call fcn.18002c5b0
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2b0]
cmp dword [rcx], eax
jne 0x18002b688
mov dword [rsp + 0x234], 1
jmp 0x18002b68d
jmp 0x18002b5fb
cmp dword [rsp + 0x234], 0
je 0x18002b69c
jmp 0x18002b4f7
mov dword [rsp + 0x244], 0
movsxd rax, dword [rsp + 0xb8]
mov rdx, rax
lea rcx, [rsp + 0x1e8]
call fcn.1800102c0
lea rdx, [rsp + 0x244]
mov ecx, dword [rax]
call fcn.18002bdc0
jmp 0x18002b4f7
mov dword [rsp + 0xb4], 0
jmp 0x18002b6f0
mov eax, dword [rsp + 0xb4]
inc eax
mov dword [rsp + 0xb4], eax
movsxd rax, dword [rsp + 0xb4]
mov qword [rsp + 0x2b8], rax
lea rcx, [rsp + 0xe8]
call fcn.1800133b0
mov rcx, qword [rsp + 0x2b8]
cmp rcx, rax
jge 0x18002b8a0
mov dword [rsp + 0x254], 0
mov dword [rsp + 0xb8], 0
jmp 0x18002b746
mov eax, dword [rsp + 0xb8]
inc eax
mov dword [rsp + 0xb8], eax
movsxd rax, dword [rsp + 0xb8]
mov qword [rsp + 0x2c0], rax
lea rcx, [rsp + 0x1e8]
call fcn.1800133b0
mov rcx, qword [rsp + 0x2c0]
cmp rcx, rax
jge 0x18002b7c8
movsxd rax, dword [rsp + 0xb4]
mov rdx, rax
lea rcx, [rsp + 0x128]
call fcn.1800102c0
mov qword [rsp + 0x2c8], rax
movsxd rcx, dword [rsp + 0xb8]
mov rdx, rcx
lea rcx, [rsp + 0x1e8]
call fcn.1800102c0
mov eax, dword [rax]
mov rcx, qword [rsp + 0x2c8]
cmp dword [rcx], eax
jne 0x18002b7c3
mov dword [rsp + 0x254], 1
jmp 0x18002b7c8
jmp 0x18002b736
cmp dword [rsp + 0x254], 0
je 0x18002b7d7
jmp 0x18002b6e0
movsxd rax, dword [rsp + 0xb4]
mov rdx, rax
lea rcx, [rsp + 0xe8]
call fcn.18002c5b0
mov rax, qword [rax + 8]
mov qword [rsp + 0x258], rax
mov edx, 1
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.USER32.dll_ShowWindow]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xffffffffffffffff
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
xor r9d, r9d
xor r8d, r8d
mov rdx, 0xfffffffffffffffe
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x10
mov rcx, qword [rsp + 0x258]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x18002b6e0
lea rcx, [rsp + 0x1e8]
call fcn.18004684c
nop
lea rcx, [rsp + 0x128]
call fcn.18004684c
nop
lea rcx, [rsp + 0xe8]
call fcn.18002c5f0
nop
lea rcx, [rsp + 0x88]
call fcn.18004684c
nop
lea rcx, [rsp + 0x48]
call fcn.18004684c
xor eax, eax
test eax, eax
jne 0x18002b094
mov rcx, rsp
lea rdx, [0x180200890]
call fcn.18019270c
add rsp, 0x2d0
pop rdi
ret