Function at 0x1401228c0
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
push rsi
sub rsp, 0x60
mov rax, qword [0x1406de900]
xor rax, rsp
mov qword [rsp + 0x58], rax
mov byte [0x1406eed68], 1
mov rsi, qword [0x1406ee778]
test rsi, rsi
je 0x14012294d
cmp dword [0x1406f15e8], 0xa
jl 0x140122901
mov eax, dword [0x1406f15ec]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x14012292e
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x150]
mov rcx, qword [0x1406ee778]
cmp dword [0x1406f15e8], 0xa
jl 0x14012293c
mov eax, dword [0x1406f15ec]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
je 0x14012293c
mov rax, qword [rsi]
mov rcx, rsi
call qword [rax + 0x150]
jmp 0x140122901
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1406ee778], 0
mov ecx, dword [0x1406f15ec]
mov esi, dword [0x1406f15e8]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
sete al
cmp esi, 0xa
setl cl
or cl, al
nop dword [rax]
test cl, cl
je 0x140122970
mov rcx, qword [0x1406ee770]
test rcx, rcx
je 0x1401229a6
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov qword [0x1406ee770], 0
mov eax, dword [0x1406f15ec]
mov esi, dword [0x1406f15e8]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
mov rcx, qword [0x1406ee7c0]
cmp esi, 0xa
jl 0x1401229c2
test edx, edx
je 0x1401229c2
nop word cs:[rax + rax]
jmp 0x1401229c0
test rcx, rcx
je 0x1401229ed
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x1406ee7c0], 0
mov eax, dword [0x1406f15ec]
mov esi, dword [0x1406f15e8]
lea edx, [rax - 1]
imul edx, eax
and edx, 1
mov rcx, qword [0x1406ee7c8]
cmp esi, 0xa
jl 0x140122a02
test edx, edx
je 0x140122a02
nop dword [rax]
jmp 0x140122a00
test rcx, rcx
je 0x140122a18
call qword [sym.imp.USER32.dll_DestroyWindow]
mov qword [0x1406ee7c8], 0
mov rsi, qword [sym.imp.USER32.dll_GetSystemMetrics]
xor ecx, ecx
call rsi
mov dword [0x1406ee5f0], eax
mov ecx, 1
call rsi
mov dword [0x1406ee5f4], eax
mov ecx, dword [0x1406ee5f0]
mov edx, ecx
shr edx, 0x1f
add edx, ecx
sar edx, 1
mov dword [0x1406ee5e8], edx
mov ecx, eax
shr ecx, 0x1f
add ecx, eax
sar ecx, 1
mov dword [0x1406ee5ec], ecx
mov ecx, dword [0x1406ee5a8]
mov qword [rsp + 0x48], 0
mov eax, dword [0x1406df0a8]
cmp dword [0x1406df0ac], 0xa
mov dword [rsp + 0x50], ecx
jl 0x140122a92
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140122a92
nop word [rax + rax]
jmp 0x140122a90
lea rcx, [0x140173700]
lea rdx, [rsp + 0x48]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
je 0x140122ad2
xor eax, eax
cmp dword [0x1406dff24], 0xa
jl 0x140122ae7
mov ecx, dword [0x1406dff20]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x140122ae7
nop word cs:[rax + rax]
nop
jmp 0x140122ad0
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xffffffff
jne 0x140122aa8
mov rax, qword [rsp + 0x48]
test rax, rax
je 0x140122aa8
mov qword [0x1406ee7c8], rax
call fcn.1400c08c0
mov qword [0x1406ee7c0], rax
mov rcx, qword [0x1406ee7c8]
lea rdx, [0x1406ee804]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov qword [rsp + 0x48], 0
mov eax, dword [0x1406ee5f0]
mov dword [rsp + 0x50], eax
mov eax, dword [0x1406ee5f4]
mov dword [rsp + 0x54], eax
cmp dword [0x1406f15e8], 0xa
jl 0x140122b45
mov eax, dword [0x1406f15ec]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140122b9a
mov rcx, qword [0x1406ee7c0]
lea rdx, [rsp + 0x48]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1406ee7c0]
xor edx, edx
mov r8b, 0xff
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rdx, [0x1406ee770]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9Ex
cmp dword [0x1406f15e8], 0xa
jl 0x140122bda
mov ecx, dword [0x1406f15ec]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x140122bda
mov rcx, qword [0x1406ee7c0]
lea rdx, [rsp + 0x48]
call qword [sym.imp.dwmapi.dll_DwmExtendFrameIntoClientArea]
mov rcx, qword [0x1406ee7c0]
xor edx, edx
mov r8b, 0xff
mov r9d, 2
call qword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
lea rdx, [0x1406ee770]
mov ecx, reloc.WLDAP32.dll_Ordinal_32
call sub.d3d9.dll_Direct3DCreate9Ex
jmp 0x140122b45
test eax, eax
js 0x140122ccf
xorps xmm0, xmm0
movups xmmword [0x1406ee7a8], xmm0
movups xmmword [0x1406ee798], xmm0
movups xmmword [0x1406ee788], xmm0
mov qword [0x1406ee7b8], 0
lea rax, [0x1406ee780]
mov dword [0x1406ee7a8], 1
mov dword [0x1406ee798], 1
mov r9, qword [0x1406ee7c0]
mov qword [0x1406ee7a0], r9
mov dword [0x1406ee794], 0
mov dword [0x1406ee788], 0x15
mov ecx, dword [0x1406ee5f0]
mov dword [0x1406ee780], ecx
mov ecx, dword [0x1406ee5f4]
mov dword [0x1406ee784], ecx
movabs rcx, 0x5000000001
mov qword [0x1406ee7ac], rcx
mov dword [0x1406ee7bc], 0
mov rcx, qword [0x1406ee770]
mov rsi, qword [rcx]
lea rdx, [0x1406ee778]
mov qword [rsp + 0x38], rdx
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x30], 0
mov dword [rsp + 0x20], 0x40
xor edx, edx
mov r8d, 1
call qword [rsi + 0xa0]
test eax, eax
js 0x140122cda
cmp dword [0x1406f15e8], 0xa
jl 0x140122cf2
mov eax, dword [0x1406f15ec]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
jne 0x140122d49
jmp 0x140122cf2
mov ecx, 3
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov rcx, qword [0x1406ee770]
mov rax, qword [rcx]
call qword [rax + reloc.WS2_32.dll_recv]
mov ecx, 4
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
lea rcx, str.1.88
mov edx, 0x37d0
mov r8d, 0x418
mov r9d, 8
call fcn.140025130
call fcn.14000ab20
cmp dword [0x1406f15e8], 0xa
jl 0x140122d8b
mov ecx, dword [0x1406f15ec]
lea edx, [rcx - 1]
imul edx, ecx
and edx, 1
je 0x140122d8b
mov qword [rsp + 0x30], 2
mov qword [rsp + 0x28], reloc.WS2_32.dll_sendto
mov qword [rsp + 0x20], reloc.WS2_32.dll_recv
lea rcx, str.1.88
mov edx, 0x37d0
mov r8d, 0x418
mov r9d, 8
call fcn.140025130
call fcn.14000ab20
jmp 0x140122cf2
test rax, rax
je 0x140122e29
call fcn.1400c09f0
mov rcx, qword [0x1406ee7c0]
call fcn.140052d30
mov rcx, qword [0x1406ee778]
call fcn.140052420
mov rcx, qword [0x1406ee7c0]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov eax, dword [0x1406ee5f4]
mov r9d, dword [0x1406ee5f0]
mov r8d, dword [0x1406ee808]
mov edx, dword [0x1406ee804]
mov rcx, qword [0x1406ee7c0]
mov dword [rsp + 0x20], eax
mov dword [rsp + 0x28], 1
call qword [sym.imp.USER32.dll_MoveWindow]
mov rcx, qword [0x1406ee7c0]
call qword [sym.imp.USER32.dll_UpdateWindow]
mov dl, byte [0x1406eeec2]
lea rcx, [0x1406ee528]
call fcn.1400c1470
mov rcx, qword [rsp + 0x58]
xor rcx, rsp
call fcn.1401fc630
nop
add rsp, 0x60
pop rsi
ret
xor ecx, ecx
call fcn.14000ab30
call fcn.14000e260
cmp dword [0x1406f15e8], 0xa
jl 0x140122d94
mov eax, dword [0x1406f15ec]
lea ecx, [rax - 1]
imul ecx, eax
and ecx, 1
je 0x140122d94
nop word [rax + rax]
jmp 0x140122e60