Function at 0x180025c00
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], r8
mov dword [rsp + 0x10], edx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1eb0]
mov eax, 0x1fb0
call fcn.18006ce90
sub rsp, rax
mov rbx, qword [rbp + 0x1f08]
lea r15d, [rdx - 0x1f]
mov rsi, qword [rsp + 0x58]
xor edi, edi
mov eax, edx
mov qword [rbp - 0x60], rbx
mov r11, r8
mov r13, rcx
lea edx, [rdi + 1]
cmp eax, r15d
jbe 0x180026371
mov edx, dword [rbp + 0x1ef8]
lea r14d, [rax - 0x84]
movzx r12d, byte [rbp + 0x1ef8]
lea r8, [0x180000000]
mov dword [rsp + 0x50], edx
lea r10d, [rdi + 0x4f]
mov r9d, 0x7478
cmp r14d, 0x83
ja case.0x180025ca3.31
movzx eax, byte [r8 + r14 + 0x26b84]
mov ecx, dword [r8 + rax*4 + 0x26b04]
add rcx, r8
jmp rcx
movzx eax, word [rbp + 0x82a]
mov word [0x1800ce8f8], ax
jmp case.0x180025ca3.31
mov word [rbp - 0xc], di
jmp case.0x180025ca3.31
mov word [rsp + 0x79], 0x4e
jmp case.0x180025ca3.31
xor r9d, r9d
mov qword [rsp + 0x20], rdi
xor r8d, r8d
xor ecx, ecx
lea edx, [r9 + 0x56]
call fcn.18003d2a0
mov ecx, 0xffffff7e
lea rdx, [rbp + 0x8c0]
mov rbx, rax
call qword [0x1800ce8f0]
test bl, bl
je 0x180025d0e
xor r9d, r9d
xor edx, edx
xor ecx, ecx
mov r8d, 0xe7
call fcn.180029710
movzx eax, word [rbp + 0xe1a]
mov rbx, qword [rbp - 0x60]
mov word [0x1800ce8f8], ax
mov r11, qword [rbp + 0x1f00]
lea r8, [0x180000000]
mov r9d, 0x7478
mov r10d, 0x4f
jmp case.0x180025ca3.31
mov r8d, 1
lea rdx, [0x18009b7b2]
lea rcx, [rsp + 0x7a]
call fcn.180071f50
mov byte [rsp + 0x7b], dil
jmp 0x180025d20
mov rbx, qword [r11]
mov ecx, edi
mov qword [rbp - 0x60], rbx
mov dword [rsp + 0x50], ecx
jmp 0x180026232
movzx edx, word [rbx + 0x26]
lea rcx, str.glTexStorage2DImageCHROMIUM
call fcn.18006ac90
jmp 0x180025d20
movsd xmm0, qword [0x18009b7f0]
lea rdx, [0x18009b81c]
movzx eax, word [0x18009b7f8]
lea rcx, [rbp - 0x10]
mov r8d, 2
movsd qword [rbp - 0x1a], xmm0
mov word [rbp - 0x12], ax
mov word [rbp - 0x10], di
call fcn.180071234
jmp 0x180025d20
mov edx, dword [rbx + 0x40]
lea rcx, str.Copy_background_image_address
call fcn.18006ac90
jmp 0x180025d20
cmp word [rbx], 0x7f
jb 0x18002608a
mov r8d, dword [r11 + 0x10]
lea rcx, str.SLCoreServiceSynchronize:_NULL_service_reference_passed_in
mov edx, dword [rbx + 0x44]
add r8d, edx
mov r9d, dword [rbx + 0x48]
mov dword [rsp + 0x50], 0x7f
call fcn.18006ac90
jmp 0x180025d20
mov eax, dword [0x18009b9c4]
mov dword [rbp - 0x20], eax
movzx eax, word [0x18009b9c8]
mov word [rbp - 0x1c], ax
jmp case.0x180025ca3.31
mov r8d, 1
lea rdx, str.lahf_val___d__0x_08x
lea rcx, [rbp - 0xc]
call fcn.180071234
mov word [rbp - 0xa], di
jmp 0x180025d20
mov byte [rsp + 0x7e], dil
jmp case.0x180025ca3.31
mov dword [rbp - 0xa], 0x6c
jmp case.0x180025ca3.31
mov word [rsp + 0x7b], r9w
mov byte [rsp + 0x7d], 0x57
jmp case.0x180025ca3.31
movzx eax, word [r11]
mov word [rbp + 0x718], ax
movzx eax, word [r13]
mov word [rbp + 0x71a], ax
jmp case.0x180025ca3.31
mov edx, dword [rbx + 0x5c]
lea rcx, str.GetQuicktimeExportVideoCodecs
call fcn.18006ac90
lea rcx, [rbx + 0x60]
mov dword [rbp + 0x1f08], 0xc
lea r8, [rbp + 0x1f08]
mov edx, 0x11f
call fcn.18004f690
mov rdx, rax
lea rcx, str.Data_received___PAVP_Header
call fcn.18006ac90
movzx ecx, word [rbx + 0x74]
mov r8, qword [rbp + 0x1f00]
mov edx, dword [rbx + 0x6c]
mov r9d, dword [rbx + 0x70]
mov dword [rsp + 0x20], ecx
lea rcx, str.No__instance_effect__element_found_for_the__material__element_with_ID__
mov r8d, dword [r8 + 0x10]
add r8d, edx
call fcn.18006ac90
jmp 0x180025d20
movsxd rsi, dword [rbp + 0xe1c]
mov qword [rsp + 0x58], rsi
jmp case.0x180025ca3.31
mov ecx, dword [rsp + 0x50]
xor r12b, r12b
cmp byte [r11], 6
jne 0x180026232
movzx r12d, byte [r11 + 2]
jmp 0x180026232
mov r8d, dword [r11 + 0x10]
lea rcx, str.Getting_AccessibleHeightTextRect___call_to_CallIntMethod__
mov edx, dword [rbx + 0x18]
add r8d, edx
mov r9d, dword [rbx + 0x1c]
mov dword [rsp + 0x50], 0x3f
call fcn.18006ac90
movzx ecx, byte [rbx + 0x23]
movzx eax, byte [rbx + 0x24]
movzx r9d, byte [rbx + 0x22]
movzx r8d, byte [rbx + 0x21]
movzx edx, byte [rbx + 0x20]
mov dword [rsp + 0x28], eax
mov dword [rsp + 0x20], ecx
lea rcx, str.const_IDX_OPTIONS_MAX_RESERVED_REMOTE_STREAMS__1_
call fcn.18006ac90
movzx edx, byte [rbx + 0x25]
lea rcx, str.TableExcelSpreadsheetInsert
call fcn.18006ac90
jmp 0x180025d20
mov dword [rbp + 0xe1c], edi
mov word [rbp + 0xe1a], di
jmp case.0x180025ca3.31
mov ecx, 0xffffffef
mov qword [rbp + 0x822], rdi
lea rdx, [rbp + 0x2d0]
mov word [rbp + 0x82a], di
call qword [0x1800ce8f0]
jmp 0x180025d20
mov edx, dword [rbx + 0x4c]
lea rcx, str._____sessionTimeout:_integer.
call fcn.18006ac90
mov edx, dword [rbx + 0x50]
lea rcx, str._UnnamedClass_0x20f5858a_118_
call fcn.18006ac90
mov edx, dword [rbx + 0x54]
lea rcx, str._UnnamedClass_0x851fba8f_381_
call fcn.18006ac90
mov edx, dword [rbx + 0x58]
lea rcx, str.RequestClockSyncMarkerClosure
call fcn.18006ac90
jmp 0x180025d20
mov r8d, dword [r11 + 0x10]
lea rcx, str.NOD2_Road_Data:_________reloff0x_x_absoff0x_x_size0x_x_n
mov edx, dword [rbx + 0x28]
add r8d, edx
mov r9d, dword [rbx + 0x2c]
call fcn.18006ac90
mov edx, dword [rbx + 0x30]
lea rcx, str.No_executable_file_specified.
call fcn.18006ac90
movzx ecx, word [rbx + 0x3c]
mov r8, qword [rbp + 0x1f00]
mov edx, dword [rbx + 0x34]
mov r9d, dword [rbx + 0x38]
mov dword [rsp + 0x20], ecx
lea rcx, str.FilePlayerImpl::StartPlayingFile___failed_to_initialize_stream_playout.
mov r8d, dword [r8 + 0x10]
add r8d, edx
call fcn.18006ac90
jmp 0x180025d20
mov r8d, 5
mov dword [rsp + 0x70], 0x636f7250
lea rdx, [0x18009bc7c]
mov byte [rsp + 0x74], dil
lea rcx, [rsp + 0x74]
call fcn.180071f50
jmp 0x180025d20
mov rcx, qword [r11]
mov edx, 0x121
call fcn.180020d40
lea rcx, str._NOD_HEADER__n
call fcn.18006ac90
cmp word [rbx], 0x3f
jae 0x180025d20
mov ecx, dword [rbp + 0x1ef8]
mov rdx, qword [rbp + 0x1f08]
mov rax, qword [rbp + 0x1f08]
mov r15d, dword [rbp + 0x1ef8]
mov r14, qword [rbp + 0x1f08]
mov r13d, dword [rbp + 0x1ef8]
mov dword [rsp + 0x54], ecx
mov rcx, qword [rbp + 0x1f08]
mov qword [rsp + 0x58], rcx
mov rcx, qword [rbp + 0x1f08]
mov qword [rsp + 0x68], rcx
mov rcx, qword [rbp + 0x1f08]
mov qword [rbp - 0x28], rcx
mov rcx, qword [rbp + 0x1f08]
mov qword [rbp - 0x38], rcx
mov ecx, dword [rsp + 0x50]
mov qword [rbp - 0x30], rdx
mov qword [rsp + 0x60], rax
movzx eax, word [rbx]
mov r12d, 0x67c3
cmp eax, ecx
jle 0x180026140
sub eax, ecx
lea r8, [rbp + 0x1f08]
movsxd rcx, ecx
mov edx, 0x11f
add rcx, rbx
mov dword [rbp + 0x1f08], eax
call fcn.18004f690
movzx r8d, word [rbx]
lea rcx, str.WriteAdapterBridgeFlag:__s_failed
mov edx, dword [rsp + 0x50]
mov r9d, r8d
sub r9d, edx
mov qword [rsp + 0x20], rax
dec r8d
call fcn.18006ac90
cmp dword [rbx + 0x1c], edi
je 0x180026190
lea rcx, str.OOBEPDAppP7AXFB
call fcn.18006ac90
mov eax, dword [rbx + 0x1c]
lea rcx, [rbp + 0x1f08]
mov r8, qword [rbp + 0x1f00]
xor r9d, r9d
mov qword [rsp + 0x30], rcx
mov edx, 0x115
mov dword [rbp + 0x1f08], eax
xor ecx, ecx
mov eax, dword [rbx + 0x18]
add rax, qword [r8 + 8]
xor r8d, r8d
mov qword [rsp + 0x28], rdi
mov qword [rsp + 0x20], rax
call fcn.18004f560
cmp dword [rbx + 0x2c], edi
je 0x180026a4f
lea rcx, str.Zimbabwen_dollaria
call fcn.18006ac90
mov eax, dword [rbx + 0x2c]
lea rdx, [rbp + 0x1f08]
mov r8d, dword [rbx + 0x28]
xor r9d, r9d
mov dword [rbp + 0x1f08], eax
mov rax, qword [rbp + 0x1f00]
lea ecx, [r9 + 0x68]
add r8, qword [rax + 8]
call fcn.180012c80
jmp 0x180026a4f
mov eax, 0x70
mov word [rbp], r10w
lea rdx, [0x18009bcb4]
mov word [rbp + 1], ax
lea rcx, [rbp]
lea r8d, [rax - 0x6d]
call fcn.180071b90
mov r8d, 6
lea rdx, str.rocess
lea rcx, [rbp]
call fcn.180071b90
jmp 0x180025d20
movsd xmm0, qword [0x18009bcc8]
movzx eax, word [0x18009bcd0]
movsd qword [rbp + 0x30], xmm0
mov word [rbp + 0x38], ax
mov word [rbp + 0x3a], di
mov ecx, dword [rsp + 0x50]
dec r14d
lea eax, [r14 + 0x84]
cmp eax, r15d
ja 0x180025c82
mov eax, dword [rbp + 0x1ef8]
mov edx, 1
mov r10, qword [rbp + 0x1f08]
mov r12d, eax
mov rax, qword [rbp + 0x1f08]
mov r8, qword [rbp + 0x1f08]
mov r9d, dword [rbp + 0x1ef8]
mov r15d, dword [rbp + 0x1ef8]
mov r14, qword [rbp + 0x1f08]
mov r13d, dword [rbp + 0x1ef8]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp + 0x1f08]
mov qword [rsp + 0x68], rax
mov rax, qword [rbp + 0x1f08]
mov qword [rbp - 0x28], rax
mov rax, qword [rbp + 0x1f08]
mov qword [rbp - 0x38], rax
mov qword [rsp + 0x60], r10
mov dword [rsp + 0x54], r9d
mov qword [rsp + 0x58], r8
imul eax, dword [rbp + 0x1ef8], 0x640
cmp r12d, eax
ja case.0x180025ca3.4
cmp r12d, 0x1f131
ja 0x180026596
je 0x180026552
cmp r12d, 0xb55f
ja 0x18002648b
je 0x180026476
cmp r12d, 0x5b23
ja 0x1800263f2
je 0x1800263e4
mov eax, r12d
sub eax, 0xe7
je 0x1800263c6
sub eax, 0x20
je 0x18002639c
sub eax, 0x2cfe
je 0x180026380
cmp eax, 0x660
jne 0x180026a62
mov edx, dword [rbx + 0x84]
lea rcx, str.Kijerumani_cha_Juu_cha_Uswisi
call fcn.18006ac90
jmp 0x180026a4f
cmp word [0x1800ce8f8], di
jne 0x18002635a
mov rax, qword [rbp + 0x8a6]
jmp 0x180026ae9
mov rax, rdi
jmp 0x180026ae9
mov byte [rsp + 0x58], r12b
mov rax, qword [rsp + 0x58]
jmp 0x180026ae9
mov ecx, dword [rbp + 0x1ef8]
mov dword [rsp + 0x50], ecx
jmp 0x180026250
mov r8, rdx
lea rcx, [rbp + 0x46]
lea rdx, [0x18009bda8]
call fcn.180071234
mov word [rbp + 0x48], di
jmp 0x180026a4f
movzx ecx, word [rbx + 0x80]
mov r8d, dword [r11 + 0x10]
mov edx, dword [rbx + 0x78]
add r8d, edx
mov r9d, dword [rbx + 0x7c]
mov dword [rsp + 0x20], ecx
lea rcx, str._mozilla.org_intl_stringcharsetdetect_1_typeuniversal_charset_detector
call fcn.18006ac90
jmp 0x180026a4f
movabs rax, 0x6c0064002e0032
mov dword [rbp + 0x3a], 0x33006c
mov qword [rbp + 0x3e], rax
mov word [rbp + 0x46], di
jmp 0x180026a62
mov eax, 0x50
mov word [rbp - 0x58], ax
jmp 0x180026a62
cmp r12d, 0x67c3
je 0x1800260f2
cmp r12d, 0x8841
je 0x180026468
cmp r12d, 0x9b21
jne 0x180026a62
cmp dword [rbx + 0x38], edi
je 0x180026a62
lea rcx, str.communicationInitFailed
call fcn.18006ac90
movzx eax, word [rbx + 0x3c]
lea rdx, [rbp - 0x48]
mov r8, qword [rbp + 0x1f00]
mov ecx, 0xa
mov r9d, dword [rbx + 0x34]
mov dword [rbp + 0x1f08], eax
mov eax, dword [rbx + 0x38]
add r9, qword [r8 + 8]
lea r8, [rbp + 0x1f08]
mov dword [rbp - 0x48], eax
mov qword [rsp + 0x20], rdi
call fcn.180061fe0
jmp 0x180026a4f
mov eax, 0x6f72
mov word [rbp - 0x57], ax
jmp 0x180026a62
mov eax, 0x63
mov word [rbp - 0x55], ax
mov dword [rbp - 0x54], 0x737365
jmp 0x180026a62
cmp r12d, 0x13cb9
ja 0x1800264f6
je 0x1800264da
cmp r12d, 0xce7f
je case.0x180025ca3.4
cmp r12d, 0xe27d
je 0x1800264ce
cmp r12d, 0x10f9b
jne 0x180026a62
mov eax, 0x69
mov word [rbp - 0x4e], ax
mov dword [rbp - 0x4d], 0x747372
jmp 0x180026a62
mov dword [rbp - 0x51], 0x463233
jmp 0x180026a62
mov eax, 0x57
mov dword [rbp + 0x10], 0x65006b
mov word [rbp - 0x4a], ax
mov dword [rbp + 0x14], 0x6e0072
jmp 0x180026a62
cmp r12d, 0x169d7
je 0x18002653f
cmp r12d, 0x196f5
je 0x18002652a
cmp r12d, 0x1c413
jne 0x180026a62
mov eax, 0x43
mov dword [rbp + 0x26], 0x6c
mov word [rbp - 0x80], ax
jmp 0x180026a62
mov eax, 0x6c
mov dword [rbp + 0x20], 0x64002e
mov word [rbp + 0x24], ax
jmp 0x180026a62
mov dword [rbp + 0x18], 0x6c0065
mov dword [rbp + 0x1c], 0x320033
jmp 0x180026a62
mov r8d, 2
lea rdx, [0x18009bd18]
lea rcx, [rbp - 0x80]
call fcn.180071b90
movzx eax, word [0x18009bd1c]
mov word [rbp - 0x7d], ax
mov eax, 0x65
mov word [rbp - 0x7b], ax
movzx eax, word [0x18009bd20]
mov word [rbp - 0x7a], ax
movzx eax, byte [0x18009bd22]
mov byte [rbp - 0x78], al
jmp 0x180026a4f
cmp r12d, 0x35a21
ja 0x18002674f
je 0x180026705
cmp r12d, 0x2a5a9
ja 0x180026686
je 0x180026637
cmp r12d, 0x21e4f
je 0x18002661f
cmp r12d, 0x24b6d
je 0x180026603
cmp r12d, 0x2788b
jne 0x180026a62
mov eax, 0x73
mov word [rbp - 0x6c], ax
mov eax, 0x68
mov word [rbp - 0x6b], ax
movzx eax, word [0x18009bdbc]
mov word [rbp - 0x6a], ax
movzx eax, byte [0x18009bdbe]
mov byte [rbp - 0x68], al
jmp 0x180026a62
movsd xmm0, qword [str.lp32Snap]
movzx eax, byte [0x18009be00]
movsd qword [rbp - 0x74], xmm0
mov byte [rbp - 0x6c], al
jmp 0x180026a62
mov eax, dword [str.olhe]
mov dword [rbp - 0x78], eax
movzx eax, byte [0x18009bdb8]
mov byte [rbp - 0x74], al
jmp 0x180026a62
mov eax, dword [0x18009bd30]
lea rdx, [rbp + 0x5c]
movsd xmm0, qword [str.kernel]
mov r8d, 0xa
mov dword [rbp + 0x58], eax
movzx eax, word [0x18009bd34]
movsd qword [rbp + 0x50], xmm0
lea ecx, [r8 - 7]
mov word [rbp + 0x5c], ax
call fcn.1800723fc
movsd xmm0, qword [str.2.dl]
mov eax, 0x6c
movsd qword [rbp + 0x5e], xmm0
mov word [rbp + 0x66], ax
jmp 0x180026a4f
cmp r12d, 0x2d2c7
je 0x1800266fc
cmp r12d, 0x2ffe5
je 0x1800266c2
cmp r12d, 0x32d03
jne 0x180026a62
lea r9, [rbp - 0x58]
mov edx, 0xe5
lea r8, [rbp + 0x10]
xor ecx, ecx
call fcn.1800588e0
mov qword [rbp - 0x28], rax
jmp 0x180026a4f
lea r9, [rsp + 0x70]
mov edx, 0xe5
lea r8, [rbp - 0x20]
xor ecx, ecx
call fcn.1800588e0
lea r9, [rbp]
mov qword [rbp - 0x30], rax
lea r8, [rbp + 0x30]
mov edx, 0xe5
xor ecx, ecx
call fcn.1800588e0
mov r10, rax
mov qword [rsp + 0x60], rax
jmp 0x180026a54
mov word [rbp + 0x68], di
jmp 0x180026a62
lea r9, [rbp - 0x80]
mov edx, 0xe5
lea r8, [rbp + 0x50]
xor ecx, ecx
call fcn.1800588e0
xor edx, edx
mov qword [rbp - 0x38], rax
mov r8d, 0x800
lea rcx, [rbp + 0x16b0]
call fcn.18006e5e0
lea rcx, [rbp + 0xeb0]
mov r8d, 0x800
lea rdx, [rbp + 0x16b0]
call fcn.18006e1d0
jmp 0x180026a4f
cmp r12d, 0x40e99
ja 0x18002686e
je 0x18002685f
cmp r12d, 0x3873f
je 0x180026848
cmp r12d, 0x3b45d
je 0x1800267df
cmp r12d, 0x3e17b
jne 0x180026a62
mov eax, 3
lea r8, [rbp + 0x1f08]
mov word [rbp + 0x1f08], ax
lea rdx, [rsp + 0x58]
mov rax, qword [r11]
mov ecx, 0x42
mov qword [rsp + 0x58], rax
call fcn.180018420
mov ecx, edi
cmp eax, 1
sete cl
xor edx, edx
mov dword [rsp + 0x54], ecx
lea ecx, [rdx + 2]
call qword [rbp - 0x38]
mov qword [rsp + 0x58], rax
mov r8, rax
cmp rax, 0xffffffffffffffff
je 0x180026a91
mov r10, qword [rsp + 0x60]
jmp 0x180026a59
mov rax, qword [r11]
lea r8, [rbp - 0x40]
mov word [rbp - 0x40], dx
lea rcx, [rbp + 0xeb0]
lea rdx, [rbp + 0x1f08]
mov qword [rbp + 0x1f08], rax
mov r9d, 0x53
call fcn.18002dab0
mov eax, 2
lea r8, [rbp + 0x1f08]
mov word [rbp + 0x1f08], ax
lea rdx, [rsp + 0x68]
mov rax, qword [rbp + 0x1f00]
mov ecx, 0x42
mov rax, qword [rax]
mov qword [rsp + 0x68], rax
call fcn.180018420
movsxd rcx, eax
mov qword [rsp + 0x68], rcx
jmp 0x180026a4f
mov qword [rsp + 0x68], rdx
mov r15d, edi
mov r9d, edi
mov dword [rsp + 0x54], edi
mov r13d, edi
jmp 0x180026a62
mov dword [rbp + 0x90], 0x238
jmp 0x180026a62
cmp r12d, 0x43bb7
je 0x180026a3e
cmp r12d, 0x468d5
je 0x1800268dd
cmp r12d, 0x495f3
jne 0x180026a62
mov qword [rsp + 0x40], rdi
lea r9, [rbp + 0x1f08]
mov qword [rsp + 0x38], rdi
lea rcx, [rbp + 0x70]
mov eax, r15d
xor r8d, r8d
neg eax
xor edx, edx
mov dword [rbp + 0x1f08], eax
mov rax, qword [r11]
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x48]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x28
call fcn.180036ed0
jmp 0x180026a4f
mov rbx, qword [rsp + 0x58]
lea rax, [rbp + 0xbc]
lea r8, [rbp + 0xeb0]
sub r8, rax
movzx edx, byte [rax]
movzx ecx, byte [rax + r8]
sub edx, ecx
jne 0x180026906
inc rax
test ecx, ecx
jne 0x1800268f3
test edx, edx
jne 0x180026952
mov ebx, 0x11f
nop
cmp ebx, 0x11f
je 0x180026a36
cmp ebx, 0x47c0
je 0x18002698f
cmp ebx, 0x8e61
jne 0x18002693f
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r10, qword [rsp + 0x60]
mov r9d, dword [rsp + 0x54]
add ebx, 0x46a1
cmp ebx, 0xd3e3
jbe 0x180026910
mov rbx, qword [rsp + 0x58]
lea rdx, [rbp + 0x90]
mov rcx, rbx
call qword [rbp - 0x30]
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x12
je 0x18002697d
mov r9d, dword [rsp + 0x54]
mov r10, qword [rsp + 0x60]
test r13d, r13d
je 0x1800268e2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rbx, qword [rbp - 0x60]
jmp 0x180026a4f
mov r8d, dword [rbp + 0x98]
xor edx, edx
mov ecx, 0x100001
call r10
mov r14, rax
test rax, rax
je 0x180026a86
test r15d, r15d
je 0x1800269e5
mov edx, dword [rbp + 0x98]
lea rcx, [0x180047d70]
call qword [sym.imp.USER32.dll_EnumWindows]
mov edx, 0x1f4
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x180026935
mov r15d, 1
jmp 0x180026935
mov edx, 1
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
je 0x180026a18
cmp qword [rsp + 0x68], 1
mov r9d, dword [rsp + 0x54]
mov r10, qword [rsp + 0x60]
jne 0x18002693f
mov r13d, 1
jmp 0x18002693f
mov eax, 0x7c
nop dword [rax]
cmp eax, 0x7c
je 0x180026a7d
add eax, 0x406c
cmp eax, 0x406c
jbe 0x180026a20
jmp 0x180026935
mov r15d, r9d
jmp 0x18002693f
lea rdx, [rbp + 0x90]
mov rcx, r8
call qword [rbp - 0x28]
test eax, eax
je 0x180026a86
mov r10, qword [rsp + 0x60]
mov r8, qword [rsp + 0x58]
mov ecx, dword [rsp + 0x50]
mov r9d, dword [rsp + 0x54]
imul eax, dword [rbp + 0x1ef8], 0x32
mov edx, 1
mov r11, qword [rbp + 0x1f00]
add r12d, eax
jmp 0x1800262b9
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x58]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov qword [rsp + 0x40], rdi
lea r9, [rbp + 0x1ef8]
mov dword [rbp + 0x1ef8], eax
lea rcx, [rbp + 0x70]
mov rax, qword [rbp + 0x1f00]
xor r8d, r8d
mov qword [rsp + 0x38], rdi
xor edx, edx
mov rax, qword [rax]
mov qword [rbp + 0x1f08], rax
lea rax, [rbp + 0x1f08]
mov qword [rsp + 0x30], rax
mov qword [rsp + 0x28], rdi
mov dword [rsp + 0x20], 0x28
call fcn.180036ed0
mov rax, rsi
mov rbx, qword [rsp + 0x1ff0]
add rsp, 0x1fb0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret