Function at 0x14003ec10
Capabilities:
Enumerate gui resources
Terminate process

Disassembly:
push rbx
sub rsp, 0x20
mov rbx, r9
mov r10, rcx
test edx, edx
jne 0x14003ed69
cmp r8d, 0xe
ja case.default.0x14003ec42
lea rcx, [0x140000000]
movsxd rax, r8d
mov edx, dword [rcx + rax*4 + 0x3ee00]
add rdx, rcx
jmp rdx
lea rdx, [0x1415535e0]
xor r9d, r9d
xor r8d, r8d
mov rcx, r10
add rsp, 0x20
pop rbx
jmp fcn.14005b870
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp 0x140040230
mov rcx, qword [r9 + 8]
mov rax, qword [r9 + 0x10]
mov edx, dword [rcx]
mov r8d, dword [rax]
mov rcx, r10
add rsp, 0x20
pop rbx
jmp fcn.140040270
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp fcn.140040060
mov rax, qword [r9 + 8]
xor ecx, ecx
mov edx, dword [rax]
movzx r8d, cl
mov rcx, r10
add rsp, 0x20
pop rbx
jmp 0x140040ff0
xor r9d, r9d
lea rdx, [0x1415535e0]
mov rcx, r10
lea r8d, [r9 + 5]
add rsp, 0x20
pop rbx
jmp fcn.14005b870
xor r9d, r9d
lea rdx, [0x1415535e0]
mov rcx, r10
lea r8d, [r9 + 6]
add rsp, 0x20
pop rbx
jmp fcn.14005b870
mov rcx, qword [r10 + 8]
add rsp, 0x20
pop rbx
jmp 0x14007df80
mov rcx, qword [r10 + 8]
add rsp, 0x20
pop rbx
jmp fcn.14007bfd0
mov rcx, qword [r10 + 8]
lea rdx, [rcx + 0x158]
call fcn.140041070
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x14003ec42
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [r10 + 8]
lea rdx, [rcx + 0x1b0]
jmp 0x14003ed14
mov rcx, qword [r10 + 8]
call fcn.14003f520
jmp 0x14003ed19
mov rcx, qword [r10 + 8]
call fcn.14003f890
jmp 0x14003ed19
mov rcx, qword [r10 + 8]
call fcn.14003f6e0
jmp 0x14003ed19
mov rcx, qword [r10 + 8]
add rsp, 0x20
pop rbx
jmp 0x14007bc00
cmp edx, 0xa
jne case.default.0x14003ec42
mov rcx, qword [r9 + 8]
mov rax, qword [r9]
lea rdx, [0x140040fd0]
cmp qword [rcx], rdx
jne 0x14003ed8b
mov dword [rax], 0
lea rdx, [0x140040230]
cmp qword [rcx], rdx
jne 0x14003ed9d
mov dword [rax], 1
lea rdx, [fcn.140040270]
cmp qword [rcx], rdx
jne 0x14003edaf
mov dword [rax], 2
lea rdx, [fcn.140040060]
cmp qword [rcx], rdx
jne 0x14003edc1
mov dword [rax], 3
lea rdx, [0x140040ff0]
cmp qword [rcx], rdx
jne 0x14003edd3
mov dword [rax], 4
lea rdx, [0x140040a90]
cmp qword [rcx], rdx
jne 0x14003ede5
mov dword [rax], 5
lea rdx, [0x140040a70]
cmp qword [rcx], rdx
jne case.default.0x14003ec42
mov dword [rax], 6
add rsp, 0x20
pop rbx
ret
mov dword [rsp + 0x10], edx
sub rsp, 0x38
lea rax, [rsp + 0x48]
lea r9, [rsp + 0x20]
lea rdx, [0x1415535e0]
mov r8d, 1
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], rax
call fcn.14005b870
add rsp, 0x38
ret
mov dword [rsp + 0x10], edx
sub rsp, 0x38
lea rax, [rsp + 0x48]
lea r9, [rsp + 0x20]
lea rdx, [0x1415535e0]
mov r8d, 4
mov qword [rsp + 0x20], 0
mov qword [rsp + 0x28], rax
call fcn.14005b870
add rsp, 0x38
ret
push rbx
sub rsp, 0x20
mov rbx, rcx
mov rcx, qword [rcx + 0x258]
call fcn.1400b2cc0
cmp dword [rbx + 0x130], 0
jne 0x14007bc27
cmp dword [rbx + 0x12c], 0
je 0x14007bc46
mov rcx, qword [rbx + 0x118]
test rcx, rcx
je 0x14007bc3e
xor edx, edx
call fcn.1400b2910
test al, al
je 0x14007bc46
mov rcx, rbx
call fcn.14003f520
cmp dword [rbx + 0xe0], 0
je 0x14007bc65
mov rcx, qword [rbx + 0x258]
mov edx, WSAAsyncSelect
add rsp, 0x20
pop rbx
jmp fcn.1400b2c00
add rsp, 0x20
pop rbx
ret
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0xf0]
mov rbx, rcx
test rax, rax
je 0x14007dfc5
mov edx, dword [rax + 0x10]
lea rcx, [0x14007d7a0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rax, qword [rbx + 0xf0]
xor r9d, r9d
mov ecx, dword [rax + 0x14]
lea edx, [r9 + 0x10]
xor r8d, r8d
add rsp, 0x20
pop rbx
jmp qword [sym.imp.USER32.dll_PostThreadMessageW]
add rsp, 0x20
pop rbx
ret