Function at 0x140012f70
Capabilities:
Enumerate gui resources

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r14
sub rsp, 0x80
mov qword [rsp + 0x48], 0xfffffffffffffffe
mov rax, qword [0x140160188]
xor rax, rsp
mov qword [rsp + 0x70], rax
mov r14, r9
mov rbp, r8
mov ebx, edx
mov rdi, rcx
cmp edx, 0x466
ja 0x140013229
je 0x1400131bf
mov eax, edx
sub eax, 0x10
je 0x1400131b0
sub eax, 0x93
je 0x1400133c4
sub eax, 0x23d
je 0x140013168
sub eax, 0x170
je 0x140013021
cmp eax, 1
jne 0x14001324b
mov rcx, qword [rcx + 0x998]
test rcx, rcx
je 0x140012ffb
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x410]
mov rcx, qword [rdi + 0x9a0]
test rcx, rcx
je 0x1400133c4
mov edx, 0x67
call fcn.1400732a8
lea rdx, str.node.dll
jmp 0x1400133b7
mov ecx, 0x5a8
call fcn.1400ce694
mov rbx, rax
mov qword [rsp + 0x40], rax
mov rcx, rax
call fcn.1400720cc
nop
lea rax, vtable.CWkeWebkitUI.0
mov qword [rbx], rax
xor esi, esi
mov qword [rbx + 0x5a0], rsi
mov qword [rdi + 0x9b0], rbx
mov rax, qword [rbx]
lea rdx, str.wkeWebkit
mov rcx, rbx
call qword [rax + InitCommonControls]
mov rcx, qword [rdi + 0x9a8]
add rcx, 0x5a0
mov rax, qword [rcx]
mov rdx, qword [rdi + 0x9b0]
call qword [rax + 0x20]
mov edx, 0xffffffff
mov rcx, qword [rdi + 0x9b0]
call fcn.140074a00
mov rcx, qword [rdi + 0x9b0]
mov rax, qword [rcx]
call qword [rax + 0x268]
mov rax, qword [rdi + 0x9b0]
mov rcx, qword [rax + 0x5a0]
mov rbp, qword [rcx + 0x28]
test rbp, rbp
je 0x14001315b
lea rax, [rsp + 0x50]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
lea r8d, [rsi + 0x3f]
lea rdx, str.https:__pic.2345.cc_ktw_page_newapp_index.html_jointCheckstand
lea rcx, [rsp + 0x50]
call fcn.140003470
nop
lea rax, [rsp + 0x50]
mov qword [rsp + 0x20], rax
mov r9, qword [rdi + 8]
mov r8, rbp
mov rdx, qword [rdi + 0x9b8]
lea rcx, [rdi + 0x930]
call fcn.140015260
call fcn.1400771c4
mov r8, qword [rdi]
mov edx, eax
mov rcx, rdi
call qword [r8 + 0x120]
mov esi, eax
lea rcx, [rdi + 0x58]
mov edx, eax
call fcn.140070f58
mov rcx, qword [rdi + 0x938]
test rcx, rcx
je 0x14001315b
movd xmm0, esi
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x14012f558]
cvtpd2ps xmm1, xmm0
call qword [0x140165aa0]
mov rcx, rdi
call fcn.140013510
jmp 0x1400133c4
mov rax, qword [rcx]
movzx edx, bp
call qword [rax + 0x120]
mov esi, eax
lea rcx, [rdi + 0x58]
mov edx, eax
call fcn.140070f58
mov rcx, qword [rdi + 0x938]
test rcx, rcx
je 0x14001324b
movd xmm0, esi
cvtdq2pd xmm0, xmm0
divsd xmm0, qword [0x14012f558]
cvtpd2ps xmm1, xmm0
call qword [0x140165aa0]
jmp 0x14001324b
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1400133c4
mov rcx, qword [rcx + 0x990]
test rcx, rcx
je 0x1400131d7
lea rdx, str.res1010_restypepng
call fcn.140074a1c
mov rcx, qword [rdi + 0x9a0]
test rcx, rcx
je 0x1400131ed
mov edx, 0x67
call fcn.1400732a8
mov rcx, qword [rdi + 0x998]
test rcx, rcx
je 0x140013207
mov rax, qword [rcx]
mov edx, 1
call qword [rax + 0x410]
mov rcx, qword [rdi + 0x938]
test rcx, rcx
je 0x1400133c4
lea rdx, str.document.body.style.overflowhidden
call qword [0x140165c20]
jmp 0x1400133c4
mov eax, ebx
sub eax, 0x467
je 0x140013383
sub eax, 0xc
je 0x1400132b9
sub eax, 1
je 0x1400133c4
cmp eax, 0x374
je 0x140013260
mov r9, r14
mov r8, rbp
mov edx, ebx
mov rcx, rdi
call fcn.140077814
jmp 0x1400133c6
mov dword [rsp + 0x30], 3
xor esi, esi
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsi - 1]
mov rcx, qword [rcx + 8]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov dword [rsp + 0x30], 3
mov dword [rsp + 0x28], esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rsi - 2]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetWindowPos]
mov rcx, qword [rdi + 8]
call qword [sym.imp.USER32.dll_SetForegroundWindow]
jmp 0x1400133c4
cmp qword [rcx + 0x9b8], 0
je 0x140013374
xor esi, esi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
xor r8d, r8d
lea rdx, [0x140125f54]
lea rcx, [rsp + 0x50]
call fcn.140003470
nop
lea rdx, [rsp + 0x50]
mov rcx, qword [rdi + 0x9b8]
call fcn.140008db0
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x14001334f
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14001334a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400133e1
call fcn.1400cea54
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], si
mov edx, 0x1850
lea rcx, [0x140009d00]
call qword [sym.imp.USER32.dll_EnumWindows]
mov edx, 8
mov rcx, rdi
call fcn.140076588
jmp 0x1400133c4
mov rcx, qword [rcx + 0x9a0]
test rcx, rcx
je 0x140013399
mov edx, 0x67
call fcn.1400732a8
mov rcx, qword [rdi + 0x998]
test rcx, rcx
je 0x1400133b0
mov rax, qword [rcx]
xor edx, edx
call qword [rax + 0x410]
lea rdx, [0x14012a418]
mov rcx, qword [rdi + 0x9a0]
mov rax, qword [rcx]
call qword [rax + 0x58]
xor eax, eax
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1400ce670
add rsp, 0x80
pop r14
pop rdi
pop rsi
pop rbp
pop rbx
ret
call fcn.1400d3cc4
int3