Function at 0x140043fd0
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
movzx esi, r8b
mov ebx, edx
mov rdi, rcx
call fcn.140042ae0
mov r10d, eax
sub r10d, 2
je 0x140044043
sub r10d, 1
je 0x140044026
cmp r10d, 1
je 0x140044009
cmp eax, 2
jne 0x140044063
jmp 0x140044051
movzx r8d, sil
mov edx, ebx
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x1400444c0
movzx r8d, sil
mov edx, ebx
mov rcx, rdi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x140044310
movzx r8d, sil
mov edx, ebx
mov rcx, rdi
call fcn.140044080
mov edx, 1
lea rcx, [0x140040210]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
sub rsp, 0xe0
movzx ebp, r8b
mov rdi, rcx
cmp edx, 2
jne 0x140044486
lea rcx, [rsp + 0x40]
call fcn.14002bab0
mov rcx, qword [rdi + 0x70]
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rcx + 0x58]
call fcn.1400404e0
mov rax, qword [rdi + 0x70]
mov rcx, qword [rax + 0x58]
mov rsi, qword [rcx + 0x18]
cmp byte [rsi + 0xe9], 0
je 0x140044426
mov rax, qword [rsi + 0x18]
mov rbx, qword [rax + 0x70]
xorps xmm1, xmm1
movdqu xmmword [rsp + 0x20], xmm1
test rbx, rbx
je 0x1400443c2
mov qword [rsp + 0x20], rbx
mov eax, 1
lock xadd dword [rbx], eax
inc eax
cmp eax, 1
jle 0x1400443b0
mov rax, qword gs:[0x30]
mov ecx, dword [rax + 0x48]
cmp dword [rbx + 4], ecx
je 0x1400443bf
mov edx, 0xffffffff
mov rcx, qword [rbx + 0x10]
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov rax, qword gs:[0x30]
mov ecx, dword [rax + 0x48]
mov dword [rbx + 4], ecx
inc dword [rbx + 8]
lea rdx, str.DeviceDX11Ext::RenderPipHide_skipped_present_hide
mov ecx, reloc.SHLWAPI.dll_SHCreateMemStream
call fcn.140083970
nop
mov rcx, qword [rsp + 0x20]
test rcx, rcx
je 0x140044416
add dword [rcx + 8], 0xffffffff
mov edx, dword [rcx + 8]
jne 0x1400443ee
mov dword [rcx + 4], 0
mov eax, 0xffffffff
lock xadd dword [rcx], eax
cmp eax, 1
je 0x140044416
test edx, edx
jne 0x140044416
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, qword [rsp + 0x20]
mov rcx, qword [rcx + 0x10]
call qword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov rcx, qword [rsi + 0x18]
call fcn.140078f50
mov byte [rsi + 0xe9], 0
mov dword [rsp + 0x110], 2
lea rcx, [rdi + 0x28]
lea r8, [rsp + 0x110]
lea rdx, [rsp + 0x30]
call fcn.140038c90
mov rcx, qword [rax]
mov dword [rcx + 0x14], 1
lea rdx, str.Telling_RS_to_hide_Performance_Overlay
mov ecx, 6
call fcn.140083970
xor edx, edx
lea rcx, [0x1400400e0]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x140044486
lea rdx, str.Failed_to_send_in_content_UI_hide_request_to_CN
mov ecx, 6
call fcn.1400838f0
test bpl, bpl
jne 0x14004449c
mov rcx, qword [rdi + 0x70]
call fcn.14002fbe0
mov rcx, rax
call fcn.14002d660
xor edx, edx
mov rcx, qword [rdi + 0x70]
mov rbx, qword [rsp + 0x108]
add rsp, 0xe0
pop rdi
pop rsi
pop rbp
jmp fcn.140037980
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0xc0]
sub rsp, 0x1c0
movzx r15d, r8b
mov r14, rcx
sub edx, 1
je 0x140044612
sub edx, 1
je 0x14004458e
cmp edx, 1
jne 0x1400446b3
lea rcx, [rbp + 0x18]
call fcn.14002bab0
mov rsi, rax
mov qword [rbp + 0xf0], rax
mov rcx, qword [r14 + 0x70]
mov rbx, qword [rcx + 0x58]
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14000fad0
mov rdi, rax
mov qword [rbp + 0x108], rax
mov rbx, qword [rbx + 0x38]
mov rcx, qword [rbx + 0x1b8]
mov word [rcx + 0x508], 0
mov r8, qword [rcx]
xor edx, edx
call qword [r8 + 0xa0]
lea rdx, [rbx + 0x60]
and dword [rdx], 0xffffdfff
lea rcx, [rbp - 0x30]
call fcn.1400df360
mov rdx, rax
mov rcx, rbx
call fcn.1400df8d0
nop
mov rcx, rdi
call fcn.14000fbc0
nop
mov rcx, rsi
call fcn.14000fbc0
mov dword [rbp + 0x100], 3
jmp 0x140044694
lea rdx, str.Hide_the_overlay_metrics_desktop_UI
mov ecx, 6
call fcn.140083970
xor edx, edx
lea rcx, [0x1400400e0]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x1400445c3
lea rdx, str.Failed_to_send_in_content_UI_hide_request_to_CN
mov ecx, 6
call fcn.1400838f0
lea rcx, [rsp + 0x30]
call fcn.14002bab0
mov rcx, qword [r14 + 0x70]
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rcx + 0x58]
call fcn.140040260
lea rcx, [rsp + 0x30]
call fcn.14002bab0
mov rcx, qword [r14 + 0x70]
xor r9d, r9d
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rcx + 0x58]
call fcn.1400403a0
mov dword [rbp + 0x100], 2
jmp 0x140044694
lea rdx, str.Hide_the_over_desktop_UI
mov ecx, 6
call fcn.140083970
xor edx, edx
lea rcx, [0x140040130]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x140044647
lea rdx, str.Failed_to_send_in_content_UI_hide_request_to_CN
mov ecx, 6
call fcn.1400838f0
lea rcx, [rsp + 0x30]
call fcn.14002bab0
mov rdi, rax
mov qword [rbp + 0xf0], rax
mov rcx, qword [r14 + 0x70]
mov rbx, qword [rcx + 0x58]
mov rdx, rax
lea rcx, [rbp + 0x18]
call fcn.14000fad0
mov r9b, 1
xor r8d, r8d
mov rdx, rax
mov rcx, qword [rbx + 0x38]
call fcn.1400df5b0
nop
mov rcx, rdi
call fcn.14000fbc0
mov dword [rbp + 0x100], 1
lea r8, [rbp + 0x100]
lea rdx, [rsp + 0x20]
lea rcx, [r14 + 0x28]
call fcn.140038c90
mov rcx, qword [rax]
mov dword [rcx + 0x14], 1
test r15b, r15b
jne 0x1400446c9
mov rcx, qword [r14 + 0x70]
call fcn.14002fbe0
mov rcx, rax
call fcn.14002d660
xor edx, edx
mov rcx, qword [r14 + 0x70]
mov rbx, qword [rsp + 0x1f8]
add rsp, 0x1c0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
jmp fcn.140037980