Function at 0x140036b60
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, r9
mov r10, rcx
test edx, edx
jne 0x140036cb6
cmp r8d, 0xe
ja case.default.0x140036b92
lea rcx, [0x140000000]
movsxd rax, r8d
mov edx, dword [rcx + rax*4 + 0x36d8c]
add rdx, rcx
jmp rdx
movzx edx, byte [rsp + 0x38]
mov rcx, r10
add rsp, 0x20
pop rbx
jmp 0x1400393b0
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp 0x1400382b0
mov rcx, qword [r9 + 8]
mov rax, qword [r9 + 0x10]
mov edx, dword [rcx]
mov rcx, r10
mov r8d, dword [rax]
add rsp, 0x20
pop rbx
jmp fcn.1400382f0
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp 0x140038100
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp 0x140038140
mov rax, qword [r9 + 8]
mov rcx, r10
movzx r8d, byte [rsp + 0x38]
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp 0x1400393f0
movzx edx, byte [rsp + 0x38]
mov rcx, r10
add rsp, 0x20
pop rbx
jmp fcn.140038860
movzx edx, byte [rsp + 0x38]
mov rcx, r10
add rsp, 0x20
pop rbx
jmp fcn.140038820
mov rcx, qword [r10 + 8]
add rsp, 0x20
pop rbx
jmp 0x140087280
mov rcx, qword [r10 + 8]
add rsp, 0x20
pop rbx
jmp fcn.140084fc0
mov rcx, qword [r10 + 8]
lea rdx, [rcx + 0x138]
call fcn.140039540
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x140036b92
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [r10 + 8]
lea rdx, [rcx + 0x170]
jmp 0x140036c5d
mov rcx, qword [r10 + 8]
call fcn.140037610
jmp 0x140036c62
mov rcx, qword [r10 + 8]
call fcn.140037840
jmp 0x140036c62
mov rcx, qword [r10 + 8]
call fcn.1400376d0
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x140036b92
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
cmp edx, 0xa
jne case.default.0x140036b92
mov rax, qword [r9 + 8]
mov rcx, qword [r9]
mov rdx, qword [rax]
lea rax, [0x1400393b0]
cmp rdx, rax
jne 0x140036ce1
mov dword [rcx], 0
add rsp, 0x20
pop rbx
ret
lea rax, [0x1400382b0]
cmp rdx, rax
jne 0x140036cf9
mov dword [rcx], 1
add rsp, 0x20
pop rbx
ret
lea rax, [fcn.1400382f0]
cmp rdx, rax
jne 0x140036d11
mov dword [rcx], 2
add rsp, 0x20
pop rbx
ret
lea rax, [0x140038100]
cmp rdx, rax
jne 0x140036d29
mov dword [rcx], 3
add rsp, 0x20
pop rbx
ret
lea rax, [0x140038140]
cmp rdx, rax
jne 0x140036d41
mov dword [rcx], 4
add rsp, 0x20
pop rbx
ret
lea rax, [0x1400393f0]
cmp rdx, rax
jne 0x140036d59
mov dword [rcx], 5
add rsp, 0x20
pop rbx
ret
lea rax, [fcn.140038860]
cmp rdx, rax
jne 0x140036d71
mov dword [rcx], 6
add rsp, 0x20
pop rbx
ret
lea rax, [fcn.140038820]
cmp rdx, rax
jne case.default.0x140036b92
mov dword [rcx], 7
add rsp, 0x20
pop rbx
ret
mov dword [rsp + 0x10], edx
sub rsp, 0x38
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x20]
mov qword [rsp + 0x28], rax
mov r8d, 3
lea rdx, [0x1401943f0]
call fcn.140053780
add rsp, 0x38
ret
mov dword [rsp + 0x10], edx
sub rsp, 0x38
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x20]
mov qword [rsp + 0x28], rax
mov r8d, 4
lea rdx, [0x1401943f0]
call fcn.140053780
add rsp, 0x38
ret
mov dword [rsp + 0x10], edx
sub rsp, 0x38
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x20]
mov qword [rsp + 0x28], rax
mov r8d, 1
lea rdx, [0x1401943f0]
call fcn.140053780
add rsp, 0x38
ret
mov byte [rsp + 0x10], dl
sub rsp, 0x38
lea rax, [rsp + 0x48]
mov qword [rsp + 0x20], 0
lea r9, [rsp + 0x20]
mov qword [rsp + 0x28], rax
xor r8d, r8d
lea rdx, [0x1401943f0]
call fcn.140053780
add rsp, 0x38
ret
mov r11, rsp
sub rsp, 0x58
mov rax, qword [0x14042b130]
xor rax, rsp
mov qword [rsp + 0x48], rax
mov dword [rsp + 0x28], edx
lea rax, [r11 - 0x30]
mov byte [r11 - 0x38], r8b
lea r9, [r11 - 0x28]
mov qword [r11 - 0x20], rax
lea rdx, [0x1401943f0]
lea rax, [r11 - 0x38]
mov qword [r11 - 0x28], 0
mov r8d, 5
mov qword [r11 - 0x18], rax
call fcn.140053780
mov rcx, qword [rsp + 0x48]
xor rcx, rsp
call fcn.14010b650
add rsp, 0x58
ret
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0xf0]
mov rbx, rcx
test rax, rax
je 0x1400872c5
mov edx, dword [rax + 0x10]
lea rcx, [0x140086490]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [rbx + 0xf0]
xor r9d, r9d
xor r8d, r8d
mov ecx, dword [rax + 0x14]
lea edx, [r9 + 0x10]
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_PostThreadMessageW]
add rsp, 0x20
pop rbx
ret