Function at 0x140011fc0
Capabilities:
Enumerate gui resources

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
mov rbp, rsp
sub rsp, 0x80
mov qword [rbp - 0x30], 0xfffffffffffffffe
mov rax, qword [0x140160188]
xor rax, rsp
mov qword [rbp - 8], rax
mov r15, r9
mov r14, r8
mov ebx, edx
mov rdi, rcx
xor r12d, r12d
mov dword [rbp - 0x40], r12d
cmp edx, 0x466
ja 0x1400122a4
je 0x14001220c
mov eax, edx
sub eax, 0x10
je 0x1400121eb
sub eax, 0x93
je 0x14001255f
sub eax, 0x23d
je 0x1400121a2
sub eax, 0x170
je 0x140012062
cmp eax, 1
jne 0x1400122cf
lea edx, [rax + 0x68]
mov rcx, qword [rcx + 0x998]
call fcn.1400732a8
mov rcx, qword [rdi + 0x998]
lea rdx, str.node.dll
jmp 0x140012559
mov ecx, 0x5a8
call fcn.1400ce694
mov rbx, rax
mov qword [rbp - 0x38], rax
mov rcx, rax
call fcn.1400720cc
nop
lea rax, vtable.CWkeWebkitUI.0
mov qword [rbx], rax
mov qword [rbx + 0x5a0], r12
mov qword [rdi + 0x990], rbx
mov rax, qword [rbx]
lea rdx, str.wkeWebkit
mov rcx, rbx
call qword [rax + InitCommonControls]
mov rcx, qword [rdi + 0x988]
add rcx, 0x5a0
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x990]
call qword [rax + 0x20]
mov edx, 0xffffffff
mov rcx, qword [rdi + 0x990]
call fcn.140074a00
mov rcx, qword [rdi + 0x990]
mov rax, qword [rcx]
call qword [rax + 0x268]
mov rax, qword [rdi + 0x990]
mov rcx, qword [rax + 0x5a0]
mov rsi, qword [rcx + 0x28]
test rsi, rsi
je 0x140012195
lea rax, [rbp - 0x28]
mov qword [rbp - 0x38], rax
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
mov r8d, 0x3a
lea rdx, str.https:__pic.2345.cc_ktw_page_newapp_index.html_jointLogin
lea rcx, [rbp - 0x28]
call fcn.140003470
nop
lea rax, [rbp - 0x28]
mov qword [rsp + 0x20], rax
mov r9, qword [rdi + 8]
mov r8, rsi
mov rdx, qword [rdi + 0x9d0]
lea rcx, [rdi + 0x930]
call fcn.140015260
call fcn.1400771c4
mov r8, qword [rdi]
mov edx, eax
mov rcx, rdi
call qword [r8 + 0x120]
mov esi, eax
lea rcx, [rdi + 0x58]
mov edx, eax
call fcn.140070f58
mov rcx, qword [rdi + 0x938]
test rcx, rcx
je 0x140012195
movd xmm0, esi
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x14012f558]
cvtpd2ps xmm1, xmm0
call qword [0x140165aa0]
mov rcx, rdi
call fcn.1400126b0
jmp 0x14001255f
mov rax, qword [rcx]
movzx edx, r14w
call qword [rax + 0x120]
mov esi, eax
lea rcx, [rdi + 0x58]
mov edx, eax
call fcn.140070f58
mov rcx, qword [rdi + 0x938]
test rcx, rcx
je 0x1400122cf
movd xmm0, esi
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x14012f558]
cvtpd2ps xmm1, xmm0
call qword [0x140165aa0]
jmp 0x1400122cf
mov rcx, qword [rcx + 0x938]
test rcx, rcx
je 0x1400121fd
call qword [0x140165b08]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x14001255f
mov rcx, qword [rcx + 0x9b0]
test rcx, rcx
je 0x140012226
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x410]
mov rcx, qword [rdi + 0x9c8]
test rcx, rcx
je 0x14001223d
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x1f8]
mov rcx, qword [rdi + 0x9c0]
test rcx, rcx
je 0x140012254
mov rax, qword [rcx]
mov dl, 1
call qword [rax + 0x1f8]
mov rcx, qword [rdi + 0x9b8]
test rcx, rcx
je 0x14001226c
lea rdx, str.res1009_restypepng_dest0_0_364_430
call fcn.140074a1c
mov rcx, qword [rdi + 0x998]
test rcx, rcx
je 0x140012282
mov edx, 0x69
call fcn.1400732a8
mov rcx, qword [rdi + 0x938]
test rcx, rcx
je 0x14001255f
lea rdx, str.document.body.style.overflowhidden
call qword [0x140165c20]
jmp 0x14001255f
mov eax, ebx
sub eax, 0x467
je 0x14001250c
sub eax, 2
je 0x140012434
sub eax, 1
je 0x14001234b
sub eax, 2
je 0x14001233f
cmp eax, 0x37c
je 0x1400122e4
mov r9, r15
mov r8, r14
mov edx, ebx
mov rcx, rdi
call fcn.140077814
jmp 0x140012561
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 1]
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
xor r9d, r9d
xor r8d, r8d
lea rdx, [r9 - 2]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x14001255f
mov dl, 1
call fcn.140012880
jmp 0x14001255f
mov rcx, qword [rcx + 0x998]
test rcx, rcx
je 0x140012373
mov edx, 0x69
call fcn.1400732a8
mov rcx, qword [rdi + 0x998]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x1f8]
mov rcx, qword [rdi + 0x9b0]
test rcx, rcx
je 0x14001238a
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x410]
mov rcx, qword [rdi + 0x9a0]
test rcx, rcx
je 0x14001255f
mov rax, qword [rcx]
mov dl, 1
call qword [rax + 0x1f8]
nop
lea rdx, [rdi + 0x968]
lea rcx, [rbp - 0x28]
call fcn.1400032d0
mov rdx, rax
mov ebx, 1
mov dword [rbp - 0x40], ebx
cmp qword [rax + 0x18], 8
jb 0x1400123cb
mov rdx, qword [rax]
mov rcx, qword [rdi + 0x9a0]
mov rax, qword [rcx]
call qword [rax + 0x58]
and ebx, 0xfffffffe
mov dword [rbp - 0x40], ebx
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x14001241e
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140012419
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140012585
call fcn.1400cea54
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
jmp 0x14001255f
mov r8b, 1
xor edx, edx
call fcn.140076e28
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], r12
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
xor r8d, r8d
lea rdx, [0x140125f54]
lea rcx, [rbp - 0x28]
call fcn.140003470
nop
lea rdx, [rbp - 0x28]
mov rcx, qword [rdi + 0x9d0]
call fcn.140008db0
test al, al
sete bl
mov rdx, qword [rbp - 0x10]
cmp rdx, 8
jb 0x1400124c0
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400124bb
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14001257f
call fcn.1400cea54
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], 7
mov word [rbp - 0x28], r12w
test bl, bl
jne 0x14001255f
mov edx, 0x17ec
lea rcx, [0x140009d00]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [rdi + 0x938]
test rcx, rcx
je 0x1400124fd
call qword [0x140165b08]
mov edx, 1
mov rcx, rdi
call fcn.140076588
jmp 0x14001255f
mov rcx, qword [rcx + 0x998]
test rcx, rcx
je 0x140012534
mov edx, 0x69
call fcn.1400732a8
mov rcx, qword [rdi + 0x998]
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x1f8]
mov rcx, qword [rdi + 0x9a0]
test rcx, rcx
je 0x14001255f
mov rax, qword [rcx]
mov dl, 1
call qword [rax + 0x1f8]
mov rcx, qword [rdi + 0x9a0]
lea rdx, [0x14012a258]
mov rax, qword [rcx]
call qword [rax + 0x58]
xor eax, eax
mov rcx, qword [rbp - 8]
xor rcx, rsp
call fcn.1400ce670
add rsp, 0x80
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1400d3cc4
int3
call fcn.1400d3cc4
int3