Function at 0x14000f920
Capabilities:
Enumerate gui resources

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
push rbp
push r14
push r15
lea rbp, [rax - 0x318]
sub rsp, 0x400
movaps xmmword [rax - 0x28], xmm6
movaps xmmword [rax - 0x38], xmm7
movaps xmmword [rax - 0x48], xmm8
movaps xmmword [rax - 0x58], xmm9
mov rax, qword [0x140074010]
xor rax, rsp
mov qword [rbp + 0x2b0], rax
movss xmm8, dword [0x14006b5f8]
xor r12d, r12d
movsd xmm9, qword [0x14006b5d0]
movsd xmm6, qword [0x14006b5e0]
movsd xmm7, qword [0x14006b5c0]
lea r15d, [r12 + 2]
mov edx, dword [0x140074c44]
nop dword [rax]
cmp edx, 0x40
jg 0x14000fa0e
mov ecx, r12d
mov r8d, r12d
test edx, edx
jle 0x14000f9e8
mov r9, qword [0x140076b20]
add r9, 0xb0
nop dword [rax]
mov r10, qword [r9]
test r10, r10
je 0x14000f9d9
mov eax, ecx
inc ecx
mov dword [rbp + rax*4 - 0x50], r8d
mov qword [rbp + rax*8 + 0xb0], r10
inc r8d
add r9, 0xe8
cmp r8d, edx
jl 0x14000f9c0
mov r9d, 0x1f4
lea rdx, [rbp + 0xb0]
xor r8d, r8d
call qword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
cmp eax, dword [0x140074c44]
jae 0x14000fa24
mov eax, eax
mov esi, dword [rbp + rax*4 - 0x50]
jmp 0x14000fa3e
mov rcx, qword [0x1400769b8]
mov edx, 0x1f4
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x14000fa2b
mov esi, 0xffffffff
jmp 0x14000fa3e
mov rcx, qword [0x1400769c0]
mov esi, dword [0x1400769b0]
call qword [sym.imp.KERNEL32.dll_SetEvent]
cmp dword [0x140074c44], r12d
mov edi, r12d
jle 0x14000fb11
mov rcx, qword [0x140076b20]
mov rbx, r12
nop dword [rax + rax]
cmp qword [rbx + rcx + 0xb0], r12
je 0x14000fafc
mov r9, qword [rbx + rcx + 0x30]
test r9, r9
je 0x14000fab6
test byte [rbx + rcx + 0xd0], 1
jne 0x14000fa91
cmp dword [0x140074c50], r15d
mov r8d, 1
jne 0x14000fa94
mov r8d, r12d
lea rdx, [rcx + 0x50]
movsxd r14, edi
imul rax, r14, 0xe8
mov rcx, r9
add rdx, rax
call fcn.140010280
mov rcx, qword [0x140076b20]
jmp 0x14000fab9
movsxd r14, edi
mov r9, qword [rbx + rcx + 0x40]
test r9, r9
je 0x14000fafc
test byte [rbx + rcx + 0xd0], 1
jne 0x14000fad9
test byte [0x140074c50], r15b
mov r8d, r15d
jne 0x14000fadc
mov r8d, r12d
lea rdx, [rcx + 0x80]
mov rcx, r9
imul rax, r14, 0xe8
add rdx, rax
call fcn.140010280
mov rcx, qword [0x140076b20]
inc edi
add rbx, 0xe8
cmp edi, dword [0x140074c44]
jl 0x14000fa60
call fcn.1400402f4
mov edx, dword [0x140074c44]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
divss xmm0, xmm8
cvtps2pd xmm1, xmm0
comisd xmm9, xmm1
jbe 0x14000fb85
mov ebx, r12d
test edx, edx
jle 0x14000fb85
mov rdi, r12
nop dword [rax]
mov r8, qword [0x140076b20]
cmp qword [rdi + r8 + 0xb0], r12
je 0x14000fb78
movsxd rax, ebx
lea rdx, [r8 + 0xb0]
imul rcx, rax, 0xe8
add rdx, rcx
lea rcx, [0x140010930]
call qword [sym.imp.USER32.dll_EnumWindows]
mov edx, dword [0x140074c44]
inc ebx
add rdi, 0xe8
cmp ebx, edx
jl 0x14000fb40
test esi, esi
jns 0x14000fce0
cmp dword [0x140074c70], r12d
jle 0x14000f9a0
mov esi, r12d
mov rdi, r12
test edx, edx
jle 0x14000f9a0
mov rbx, r12
nop dword [rax + rax]
mov rax, qword [0x140076b20]
mov rcx, qword [rbx + rax + 0xb0]
test rcx, rcx
je 0x14000fc70
lea rax, [rsp + 0x60]
lea r9, [rsp + 0x68]
mov qword [rsp + 0x20], rax
lea r8, [rsp + 0x70]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
je 0x14000fc55
lea rcx, [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
mov eax, dword [rsp + 0x30]
xorps xmm1, xmm1
not eax
xorps xmm0, xmm0
lea r8d, [rax + 1]
shr eax, 0x1f
mov edx, r8d
not edx
shr edx, 0x1f
and edx, eax
mov eax, dword [rsp + 0x34]
not eax
add edx, eax
mov rax, qword [rsp + 0x38]
lea ecx, [r8 + rax]
or r8d, eax
mov eax, ecx
shr r8d, 0x1f
not eax
shr eax, 0x1f
and eax, r8d
add eax, edx
add eax, dword [rsp + 0x3c]
cvtsi2sd xmm1, rax
mov eax, ecx
cvtsi2sd xmm0, rax
mulsd xmm1, xmm6
mulsd xmm0, xmm7
addsd xmm1, xmm0
jmp 0x14000fc58
xorps xmm1, xmm1
movd xmm0, dword [0x140074c70]
cvtdq2pd xmm0, xmm0
comisd xmm1, xmm0
ja 0x14000fc89
mov edx, dword [0x140074c44]
inc esi
inc rdi
add rbx, 0xe8
cmp esi, edx
jl 0x14000fbb0
jmp 0x14000f9a0
mov rdx, qword [0x140076b20]
movsxd rax, esi
add rdx, 0xb0
imul rcx, rax, 0xe8
add rdx, rcx
lea rcx, [0x140010930]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [0x140076b20]
imul rcx, rdi, 0xe8
mov rdx, qword [rcx + rax + 0xb0]
mov ecx, dword [rcx + rax + 0xc0]
call fcn.140010610
test esi, esi
js 0x14000f993
mov ebx, r15d
jmp 0x14000fce3
mov ebx, r12d
movsxd rax, esi
lea rcx, [rsp + 0x48]
imul rdi, rax, 0xe8
mov rax, qword [0x140076b20]
lea r9, [rsp + 0x40]
mov qword [rsp + 0x20], rcx
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x50]
mov rcx, qword [rdi + rax + 0xb0]
call qword [sym.imp.KERNEL32.dll_GetProcessTimes]
test eax, eax
je 0x14000fdee
mov rcx, qword [rsp + 0x50]
xorps xmm0, xmm0
mov eax, dword [rsp + 0x40]
xorps xmm1, xmm1
xorps xmm2, xmm2
movabs r9, 0xd6bf94d5e57a42bd
movabs r10, 0xfffffffd49ef6f00
cvtsi2sd xmm1, rax
mov eax, dword [rsp + 0x44]
cvtsi2sd xmm0, rax
mov eax, dword [rsp + 0x48]
cvtsi2sd xmm2, rax
mov eax, dword [rsp + 0x4c]
mulsd xmm0, xmm6
mulsd xmm1, xmm7
mulsd xmm2, xmm7
addsd xmm1, xmm0
xorps xmm0, xmm0
cvtsi2sd xmm0, rax
mov rax, r9
imul rcx
mulsd xmm0, xmm6
movsd qword [rsp + 0x78], xmm1
mov rax, r9
add rdx, rcx
addsd xmm2, xmm0
sar rdx, 0x17
mov r8, rdx
shr r8, 0x3f
add rdx, r8
movsd qword [rbp - 0x80], xmm2
lea r8, [rdx + r10]
imul edx, edx, 0x989680
mov qword [rbp - 0x78], r8
sub ecx, edx
imul edx, ecx, 0x64
mov rcx, qword [rsp + 0x58]
mov dword [rbp - 0x70], edx
imul rcx
add rdx, rcx
sar rdx, 0x17
mov rax, rdx
shr rax, 0x3f
add rdx, rax
lea rax, [rdx + r10]
mov qword [rbp - 0x68], rax
imul eax, edx, 0x989680
sub ecx, eax
imul eax, ecx, 0x64
mov dword [rbp - 0x60], eax
mov rcx, qword [0x140076b20]
cmp dword [rdi + rcx + 8], r12d
je 0x14000fe0c
mov rcx, qword [rdi + rcx]
call fcn.140049320
mov rcx, qword [0x140076b20]
mov rcx, qword [rdi + rcx + 0xb0]
lea rdx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [0x140076b18], r12d
jne 0x14000fe34
cmp dword [rsp + 0x30], r12d
mov r15d, r12d
setne r15b
mov r10, qword [0x140076b20]
lea r8, [rsp + 0x78]
mov dword [rsp + 0x28], ebx
mov edx, r15d
mov rax, qword [rdi + r10 + 0x80]
mov r9, qword [rdi + r10 + 0x50]
mov rcx, qword [rdi + r10 + 0xe0]
mov qword [rsp + 0x20], rax
call qword [rdi + r10 + 0xd8]
mov rbx, qword [0x140076b20]
mov rcx, qword [rdi + rbx + 0xb0]
test rcx, rcx
je 0x14000fe92
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + rbx + 0xb0], r12
mov rbx, qword [0x140076b20]
mov rcx, qword [rdi + rbx + 0xb8]
test rcx, rcx
je 0x14000feb4
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + rbx + 0xb8], r12
mov rbx, qword [0x140076b20]
mov rcx, qword [rdi + rbx + 0x30]
test rcx, rcx
je 0x14000fed0
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + rbx + 0x30], r12
mov rbx, qword [0x140076b20]
mov rcx, qword [rdi + rbx + 0x38]
test rcx, rcx
je 0x14000feec
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + rbx + 0x38], r12
mov rbx, qword [0x140076b20]
mov rcx, qword [rdi + rbx + 0x40]
test rcx, rcx
je 0x14000ff08
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + rbx + 0x40], r12
mov rbx, qword [0x140076b20]
mov rcx, qword [rdi + rbx + 0x48]
test rcx, rcx
je 0x14000ff24
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov qword [rdi + rbx + 0x48], r12
mov rbx, qword [0x140076b20]
mov rcx, qword [rdi + rbx + 0x50]
lea rsi, [rdi + rbx]
lea r14, [rsi + 0x60]
cmp rcx, r14
je 0x14000ff42
call fcn.14003e73c
mov rbx, qword [0x140076b20]
mov qword [rsi + 0x50], r14
mov dword [rsi + 0x58], r12d
mov dword [rsi + 0x5c], 0x20
lea rsi, [rbx + 0x90]
mov byte [r14], r12b
add rsi, rdi
mov rcx, qword [rdi + rbx + 0x80]
cmp rcx, rsi
je 0x14000ff70
call fcn.14003e73c
mov qword [rdi + rbx + 0x80], rsi
mov dword [rdi + rbx + 0x88], r12d
mov dword [rdi + rbx + 0x8c], 0x20
mov byte [rsi], r12b
mov rcx, qword [rbp + 0x2b0]
xor rcx, rsp
call fcn.140036060
lea r11, [rsp + 0x400]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
movaps xmm6, xmmword [r11 - 0x10]
movaps xmm7, xmmword [r11 - 0x20]
movaps xmm8, xmmword [r11 - 0x30]
movaps xmm9, xmmword [r11 - 0x40]
mov rsp, r11
pop r15
pop r14
pop rbp
ret