Function at 0x140012090
Capabilities:
Enumerate gui resources

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1470]
mov eax, 0x1570
call fcn.1400249d0
sub rsp, rax
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x15c0], rbx
mov rax, qword [0x140040490]
xor rax, rsp
mov qword [rbp + 0x1460], rax
mov r12, rdx
mov r15, rcx
xor esi, esi
mov ebx, esi
mov dword [rsp + 0x20], ebx
mov rcx, rdx
call fcn.1400104a0
movzx r13d, al
lea rax, [rsp + 0x48]
mov qword [rsp + 0x28], rax
xor edx, edx
lea ecx, [rsi + 6]
call qword [sym.imp.KERNEL32.dll_CreateToolhelp32Snapshot]
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x50], rsi
lea rdx, [rsp + 0x48]
lea rcx, [rsp + 0x38]
call fcn.14000e9c0
nop
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov r14d, eax
lea rdx, [rbp + 0xdc0]
lea rcx, [rsp + 0x38]
call fcn.140013400
nop
lea rcx, [rbp - 0x80]
call fcn.140013540
nop
mov rax, qword [rax]
cmp qword [rbp + 0xdc0], rax
setne dil
mov rax, qword [rbp - 0x78]
test rax, rax
jne 0x140012176
mov rcx, qword [rbp - 0x80]
cmp rcx, 0xffffffffffffffff
je 0x140012199
test rcx, rcx
je 0x140012199
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp - 0x78]
test rax, rax
je 0x140012199
dec qword [rax]
jne 0x140012199
mov rcx, qword [rbp - 0x80]
cmp rcx, 0xffffffffffffffff
je 0x140012190
test rcx, rcx
je 0x140012190
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp - 0x78]
call fcn.140018e2c
mov qword [rbp - 0x78], rsi
mov qword [rbp - 0x80], 0xffffffffffffffff
test dil, dil
je 0x140013171
cmp r14d, dword [rbp + 0xdd8]
je 0x140012c6a
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0xdd0]
call fcn.14000e8b0
nop
mov qword [rbp + 0xaf0], 7
mov qword [rbp + 0xae8], rsi
mov word [rbp + 0xad8], si
lea rdx, [rbp + 0x1010]
lea rcx, [rsp + 0x28]
call fcn.140013580
nop
nop dword [rax + rax]
lea rcx, [rbp + 0x620]
call fcn.1400136c0
nop
mov rax, qword [rax]
cmp qword [rbp + 0x1010], rax
setne dil
mov rax, qword [rbp + 0x628]
test rax, rax
jne 0x14001224b
mov rcx, qword [rbp + 0x620]
cmp rcx, 0xffffffffffffffff
je 0x140012274
test rcx, rcx
je 0x140012274
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x628]
test rax, rax
je 0x140012274
dec qword [rax]
jne 0x140012274
mov rcx, qword [rbp + 0x620]
cmp rcx, 0xffffffffffffffff
je 0x140012268
test rcx, rcx
je 0x140012268
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x628]
call fcn.140018e2c
mov qword [rbp + 0x628], rsi
mov qword [rbp + 0x620], 0xffffffffffffffff
test dil, dil
je 0x140012b75
lea rdx, [rbp + 0xc30]
lea rcx, [rbp + 0xdd0]
call fcn.140013c90
mov rdi, rax
lea rdx, [rbp + 0xd20]
lea rcx, [rbp + 0x1020]
call fcn.140013c20
nop
mov qword [rbp + 0xbb8], 7
mov qword [rbp + 0xbb0], rsi
mov word [rbp + 0xba0], si
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0xba0]
call fcn.140003920
nop
lea rcx, [rbp + 0xba0]
call fcn.140010c30
nop
mov rdx, rdi
lea rcx, [rbp + 0xba0]
call fcn.140011070
movzx edi, al
cmp qword [rbp + 0xbb8], 8
jb 0x14001231e
mov rcx, qword [rbp + 0xba0]
call fcn.140018e2c
mov qword [rbp + 0xbb8], 7
mov qword [rbp + 0xbb0], rsi
mov word [rbp + 0xba0], si
cmp qword [rbp + 0xd38], 8
jb 0x14001234d
mov rcx, qword [rbp + 0xd20]
call fcn.140018e2c
mov qword [rbp + 0xd38], 7
mov qword [rbp + 0xd30], rsi
mov word [rbp + 0xd20], si
cmp qword [rbp + 0xc48], 8
jb 0x14001237c
mov rcx, qword [rbp + 0xc30]
call fcn.140018e2c
mov qword [rbp + 0xc48], 7
mov qword [rbp + 0xc40], rsi
mov word [rbp + 0xc30], si
test dil, dil
je 0x1400123f9
lea rdx, [rbp + 0xc58]
lea rcx, [rbp + 0x1020]
call fcn.140013ba0
nop
or rdi, 0xffffffffffffffff
mov r9, rdi
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0xad8]
call fcn.140003920
nop
cmp qword [rbp + 0xc70], 8
jb 0x1400123de
mov rcx, qword [rbp + 0xc58]
call fcn.140018e2c
mov qword [rbp + 0xc70], 7
mov qword [rbp + 0xc68], rsi
mov word [rbp + 0xc58], si
jmp 0x1400123fd
or rdi, 0xffffffffffffffff
lea rcx, [rbp + 0x1020]
test r13b, r13b
je 0x14001242e
lea rdx, [rbp + 0xd98]
call fcn.140013ba0
nop
or ebx, 1
mov dword [rsp + 0x20], ebx
mov rdx, r12
mov rcx, rax
call fcn.140011070
test al, al
jne 0x140012498
jmp 0x14001249d
lea rdx, [rbp + 0xd48]
call fcn.140013c20
nop
or ebx, 2
mov dword [rsp + 0x20], ebx
mov qword [rbp + 0xb90], 7
mov qword [rbp + 0xb88], rsi
mov word [rbp + 0xb78], si
mov r9, rdi
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0xb78]
call fcn.140003920
nop
lea rcx, [rbp + 0xb78]
call fcn.140010c30
nop
or ebx, 4
mov dword [rsp + 0x20], ebx
mov rdx, r12
lea rcx, [rbp + 0xb78]
call fcn.140011070
test al, al
je 0x14001249d
mov dil, 1
jmp 0x1400124a0
xor dil, dil
test bl, 4
je 0x1400124db
and ebx, 0xfffffffb
mov dword [rsp + 0x20], ebx
cmp qword [rbp + 0xb90], 8
jb 0x1400124c2
mov rcx, qword [rbp + 0xb78]
call fcn.140018e2c
mov qword [rbp + 0xb90], 7
mov qword [rbp + 0xb88], rsi
mov word [rbp + 0xb78], si
test bl, 2
je 0x140012516
and ebx, 0xfffffffd
mov dword [rsp + 0x20], ebx
cmp qword [rbp + 0xd60], 8
jb 0x1400124fd
mov rcx, qword [rbp + 0xd48]
call fcn.140018e2c
mov qword [rbp + 0xd60], 7
mov qword [rbp + 0xd58], rsi
mov word [rbp + 0xd48], si
test bl, 1
je 0x140012551
and ebx, 0xfffffffe
mov dword [rsp + 0x20], ebx
cmp qword [rbp + 0xdb0], 8
jb 0x140012538
mov rcx, qword [rbp + 0xd98]
call fcn.140018e2c
mov qword [rbp + 0xdb0], 7
mov qword [rbp + 0xda8], rsi
mov word [rbp + 0xd98], si
test dil, dil
je 0x140012abd
mov esi, dword [rbp + 0x1028]
lea rdx, [rbp + 0xb50]
lea rcx, [rbp + 0x1020]
call fcn.140013ba0
nop
lea rdx, [rbp + 0xb28]
lea rcx, [rbp + 0x1020]
call fcn.140013c20
nop
cmp qword [rbp + 0xae8], 0
jne 0x140012862
nop word [rax + rax]
lea rcx, [rbp + 0x1d0]
call fcn.1400136c0
nop
mov rax, qword [rax]
cmp qword [rbp + 0x1010], rax
setne dil
mov rax, qword [rbp + 0x1d8]
test rax, rax
jne 0x1400125eb
mov rcx, qword [rbp + 0x1d0]
cmp rcx, 0xffffffffffffffff
je 0x140012614
test rcx, rcx
je 0x140012614
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x1d8]
test rax, rax
je 0x140012614
dec qword [rax]
jne 0x140012614
mov rcx, qword [rbp + 0x1d0]
cmp rcx, 0xffffffffffffffff
je 0x140012608
test rcx, rcx
je 0x140012608
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x1d8]
call fcn.140018e2c
xor ecx, ecx
mov qword [rbp + 0x1d8], rcx
mov qword [rbp + 0x1d0], 0xffffffffffffffff
test dil, dil
je 0x140012864
lea rdx, [rbp + 0xc80]
lea rcx, [rbp + 0xdd0]
call fcn.140013c90
mov rdi, rax
lea rdx, [rbp + 0xcd0]
lea rcx, [rbp + 0x1020]
call fcn.140013c20
nop
mov qword [rbp + 0xac8], 7
xor ecx, ecx
mov qword [rbp + 0xac0], rcx
mov word [rbp + 0xab0], cx
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0xab0]
call fcn.140003920
nop
lea rcx, [rbp + 0xab0]
call fcn.140010c30
nop
mov rdx, rdi
lea rcx, [rbp + 0xab0]
call fcn.140011070
movzx edi, al
cmp qword [rbp + 0xac8], 8
jb 0x1400126c2
mov rcx, qword [rbp + 0xab0]
call fcn.140018e2c
mov qword [rbp + 0xac8], 7
xor eax, eax
mov qword [rbp + 0xac0], rax
mov word [rbp + 0xab0], ax
cmp qword [rbp + 0xce8], 8
jb 0x1400126f5
mov rcx, qword [rbp + 0xcd0]
call fcn.140018e2c
xor eax, eax
mov qword [rbp + 0xce8], 7
mov qword [rbp + 0xce0], rax
mov word [rbp + 0xcd0], ax
cmp qword [rbp + 0xc98], 8
jb 0x140012726
mov rcx, qword [rbp + 0xc80]
call fcn.140018e2c
xor eax, eax
mov qword [rbp + 0xc98], 7
mov qword [rbp + 0xc90], rax
mov word [rbp + 0xc80], ax
test dil, dil
jne 0x140012804
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x140012771
test rcx, rcx
je 0x140012771
lea rdx, [rbp + 0x1020]
call qword [0x140042110]
test eax, eax
jne 0x1400125a0
xor eax, eax
or rdi, 0xffffffffffffffff
mov qword [rsp + 0x48], rdi
mov qword [rsp + 0x50], rax
mov rax, qword [rbp + 0x1018]
test rax, rax
jne 0x1400127ae
mov rcx, qword [rbp + 0x1010]
cmp rcx, rdi
je 0x1400127d7
test rcx, rcx
je 0x1400127d7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x1018]
test rax, rax
je 0x1400127d7
dec qword [rax]
jne 0x1400127d7
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x1400127cb
test rcx, rcx
je 0x1400127cb
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x1018]
call fcn.140018e2c
xor eax, eax
mov qword [rbp + 0x1018], rax
mov qword [rbp + 0x1010], rdi
mov qword [rbp + 0x1018], rax
mov qword [rbp + 0x1010], rdi
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rdi
jmp 0x1400125a0
lea rdx, [rbp + 0xca8]
lea rcx, [rbp + 0x1020]
call fcn.140013ba0
nop
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rax
lea rcx, [rbp + 0xad8]
call fcn.140003920
nop
cmp qword [rbp + 0xcc0], 8
jb 0x140012845
mov rcx, qword [rbp + 0xca8]
call fcn.140018e2c
mov qword [rbp + 0xcc0], 7
xor ecx, ecx
mov qword [rbp + 0xcb8], rcx
mov word [rbp + 0xca8], cx
jmp 0x140012864
xor ecx, ecx
mov qword [rbp + 0xbe8], 7
mov qword [rbp + 0xbe0], rcx
mov word [rbp + 0xbd0], cx
mov qword [rbp + 0xc10], 7
mov qword [rbp + 0xc08], rcx
mov word [rbp + 0xbf8], cx
mov byte [rbp + 0xc20], 0
mov qword [rbp + 0xc28], rcx
lea rdx, [rbp + 0xb50]
lea rax, [rbp + 0xad8]
cmp qword [rbp + 0xae8], 0
cmovne rdx, rax
mov qword [rbp + 0xb18], 7
mov qword [rbp + 0xb10], rcx
mov word [rbp + 0xb00], cx
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rcx, [rbp + 0xb00]
call fcn.140003920
nop
lea rdx, [rbp + 0xd70]
lea rcx, [rbp + 0xb00]
call fcn.140010520
nop
mov rdx, rax
lea rcx, [rbp + 0xcf8]
call fcn.140003a60
mov rdx, rax
mov r8, qword [rax + 0x10]
cmp r8, r8
cmp qword [rax + 0x18], 8
jb 0x140012922
mov rdx, qword [rax]
mov edi, 3
cmp r8, rdi
cmovb rdi, r8
lea rcx, [0x1400344e8]
test rdi, rdi
je 0x14001296b
nop word [rax + rax]
movzx eax, word [rcx]
cmp word [rdx], ax
jne 0x140012957
add rdx, 2
add rcx, 2
dec rdi
jne 0x140012940
jmp 0x14001296b
mov edi, 1
cmp word [rdx], ax
mov rcx, 0xffffffffffffffff
cmovb edi, ecx
jmp 0x140012971
xor edi, edi
or rcx, 0xffffffffffffffff
movsxd rax, edi
test edi, edi
jne 0x14001298b
cmp r8, 3
jae 0x140012982
mov eax, ecx
jmp 0x14001298b
xor eax, eax
cmp r8, 3
setne al
test eax, eax
sete dil
cmp qword [rbp + 0xd10], 8
jb 0x1400129a7
mov rcx, qword [rbp + 0xcf8]
call fcn.140018e2c
mov qword [rbp + 0xd10], 7
xor eax, eax
mov qword [rbp + 0xd08], rax
mov word [rbp + 0xcf8], ax
cmp qword [rbp + 0xd88], 8
jb 0x1400129da
mov rcx, qword [rbp + 0xd70]
call fcn.140018e2c
xor eax, eax
mov qword [rbp + 0xd88], 7
mov qword [rbp + 0xd80], rax
mov word [rbp + 0xd70], ax
test dil, dil
je 0x140012d23
cmp qword [rbp + 0xb18], 8
jb 0x140012a12
mov rcx, qword [rbp + 0xb00]
call fcn.140018e2c
mov qword [rbp + 0xb18], 7
xor esi, esi
mov qword [rbp + 0xb10], rsi
mov word [rbp + 0xb00], si
mov qword [rbp + 0xc10], 7
mov qword [rbp + 0xc08], rsi
mov word [rbp + 0xbf8], si
mov qword [rbp + 0xbe8], 7
mov qword [rbp + 0xbe0], rsi
mov word [rbp + 0xbd0], si
cmp qword [rbp + 0xb40], 8
jb 0x140012a75
mov rcx, qword [rbp + 0xb28]
call fcn.140018e2c
mov qword [rbp + 0xb40], 7
mov qword [rbp + 0xb38], rsi
mov word [rbp + 0xb28], si
cmp qword [rbp + 0xb68], 8
jb 0x140012aa4
mov rcx, qword [rbp + 0xb50]
call fcn.140018e2c
mov qword [rbp + 0xb68], 7
mov qword [rbp + 0xb60], rsi
mov word [rbp + 0xb50], si
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x140012ae4
test rcx, rcx
je 0x140012ae4
lea rdx, [rbp + 0x1020]
call qword [0x140042110]
test eax, eax
jne 0x140012200
or rdi, 0xffffffffffffffff
mov qword [rsp + 0x68], rdi
mov qword [rsp + 0x70], rsi
mov rax, qword [rbp + 0x1018]
test rax, rax
jne 0x140012b21
mov rcx, qword [rbp + 0x1010]
cmp rcx, rdi
je 0x140012b4a
test rcx, rcx
je 0x140012b4a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x1018]
test rax, rax
je 0x140012b4a
dec qword [rax]
jne 0x140012b4a
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x140012b3e
test rcx, rcx
je 0x140012b3e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x1018]
call fcn.140018e2c
mov qword [rbp + 0x1018], rsi
mov qword [rbp + 0x1010], rdi
mov qword [rbp + 0x1018], rsi
mov qword [rbp + 0x1010], rdi
mov qword [rsp + 0x70], rsi
mov qword [rsp + 0x68], rdi
jmp 0x140012200
mov rax, qword [rbp + 0x1018]
test rax, rax
jne 0x140012ba5
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x140012bce
test rcx, rcx
je 0x140012bce
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x1018]
test rax, rax
je 0x140012bce
dec qword [rax]
jne 0x140012bce
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x140012bc2
test rcx, rcx
je 0x140012bc2
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x1018]
call fcn.140018e2c
mov qword [rbp + 0x1018], rsi
or rdi, 0xffffffffffffffff
mov qword [rbp + 0x1010], rdi
cmp qword [rbp + 0xaf0], 8
jb 0x140012bf6
mov rcx, qword [rbp + 0xad8]
call fcn.140018e2c
mov qword [rbp + 0xaf0], 7
mov qword [rbp + 0xae8], rsi
mov word [rbp + 0xad8], si
mov rax, qword [rsp + 0x30]
test rax, rax
jne 0x140012c39
mov rcx, qword [rsp + 0x28]
cmp rcx, 0xffffffffffffffff
je 0x140012c5e
test rcx, rcx
je 0x140012c5e
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x140012c5e
dec qword [rax]
jne 0x140012c5e
mov rcx, qword [rsp + 0x28]
cmp rcx, 0xffffffffffffffff
je 0x140012c54
test rcx, rcx
je 0x140012c54
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x30]
call fcn.140018e2c
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rdi
jmp 0x140012c6e
or rdi, 0xffffffffffffffff
mov rcx, qword [rbp + 0xdc0]
cmp rcx, 0xffffffffffffffff
je 0x140012c95
test rcx, rcx
je 0x140012c95
lea rdx, [rbp + 0xdd0]
call qword [0x140042100]
test eax, eax
jne 0x140012137
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], rsi
mov rax, qword [rbp + 0xdc8]
test rax, rax
jne 0x140012ccf
mov rcx, qword [rbp + 0xdc0]
cmp rcx, 0xffffffffffffffff
je 0x140012cf8
test rcx, rcx
je 0x140012cf8
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0xdc8]
test rax, rax
je 0x140012cf8
dec qword [rax]
jne 0x140012cf8
mov rcx, qword [rbp + 0xdc0]
cmp rcx, 0xffffffffffffffff
je 0x140012cec
test rcx, rcx
je 0x140012cec
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xdc8]
call fcn.140018e2c
mov qword [rbp + 0xdc8], rsi
mov qword [rbp + 0xdc0], rdi
mov qword [rbp + 0xdc8], rsi
mov qword [rbp + 0xdc0], rdi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x58], rdi
jmp 0x140012137
mov qword [rbp + 0xa90], 7
mov qword [rbp + 0xa88], rax
mov word [rbp + 0xa78], ax
mov byte [rbp + 0xaa0], 0
mov qword [rbp + 0xaa8], rax
mov dword [rbp + 0xa70], esi
mov byte [rbp + 0xaa0], 0
mov qword [rbp + 0xaa8], rax
lea rdx, [rbp + 0xa70]
lea rcx, [0x140013310]
call qword [sym.imp.USER32.dll_EnumWindows]
or r12, 0xffffffffffffffff
mov r9, r12
xor r8d, r8d
lea rdx, [rbp + 0xb00]
mov rcx, r15
call fcn.140003920
movzx eax, byte [rbp + 0xaa0]
mov byte [r15 + 0x50], al
mov rax, qword [rbp + 0xaa8]
mov qword [r15 + 0x58], rax
lea rcx, [r15 + 0x28]
mov r9, r12
xor r8d, r8d
lea rdx, [rbp + 0xa78]
call fcn.140003920
cmp byte [rbp + 0xaa0], 0
jne 0x140012ed2
lea rdx, [rbp + 0xb28]
lea rcx, [rbp + 0xab0]
call fcn.140003a60
nop
xor esi, esi
mov r10d, esi
mov rdx, qword [str.saplogon.exe]
test rdx, rdx
je 0x140012ea1
lea r13, str.saplogon.exe
mov r11, qword [rbp + 0xac8]
mov r9, qword [rbp + 0xac0]
mov rbx, qword [rbp + 0xab0]
nop dword [rax]
xor eax, eax
mov rcx, r12
mov rdi, rdx
repne scasw ax, word [rdi]
not rcx
lea r8, [rcx - 1]
lea rcx, [rbp + 0xab0]
cmp r11, 8
cmovae rcx, rbx
mov rdi, r8
cmp r9, r8
cmovb rdi, r9
test rdi, rdi
je 0x140012e65
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x140012e57
add rcx, 2
add rdx, 2
dec rdi
jne 0x140012e40
jmp 0x140012e65
mov edi, 1
cmp word [rcx], ax
cmovb edi, r12d
jmp 0x140012e67
mov edi, esi
movsxd rax, edi
test edi, edi
jne 0x140012e80
cmp r9, r8
jae 0x140012e78
mov eax, r12d
jmp 0x140012e80
mov eax, esi
cmp r9, r8
setne al
test eax, eax
sete al
test al, al
jne 0x140012e9c
inc r10
mov rdx, qword [r13 + r10*8]
test rdx, rdx
jne 0x140012e10
jmp 0x140012ea1
mov byte [r15 + 0x50], 1
cmp qword [rbp + 0xac8], 8
jb 0x140012eb7
mov rcx, qword [rbp + 0xab0]
call fcn.140018e2c
mov qword [rbp + 0xac8], 7
mov qword [rbp + 0xac0], rsi
mov word [rbp + 0xab0], si
jmp 0x140012ed4
xor esi, esi
cmp qword [rbp + 0xa90], 8
jb 0x140012eea
mov rcx, qword [rbp + 0xa78]
call fcn.140018e2c
mov qword [rbp + 0xa90], 7
mov qword [rbp + 0xa88], rsi
mov word [rbp + 0xa78], si
cmp qword [rbp + 0xb18], 8
jb 0x140012f19
mov rcx, qword [rbp + 0xb00]
call fcn.140018e2c
mov qword [rbp + 0xb18], 7
mov qword [rbp + 0xb10], rsi
mov word [rbp + 0xb00], si
mov qword [rbp + 0xc10], 7
mov qword [rbp + 0xc08], rsi
mov word [rbp + 0xbf8], si
mov qword [rbp + 0xbe8], 7
mov qword [rbp + 0xbe0], rsi
mov word [rbp + 0xbd0], si
cmp qword [rbp + 0xb40], 8
jb 0x140012f7a
mov rcx, qword [rbp + 0xb28]
call fcn.140018e2c
mov qword [rbp + 0xb40], 7
mov qword [rbp + 0xb38], rsi
mov word [rbp + 0xb28], si
cmp qword [rbp + 0xb68], 8
jb 0x140012fa9
mov rcx, qword [rbp + 0xb50]
call fcn.140018e2c
mov qword [rbp + 0xb68], 7
mov qword [rbp + 0xb60], rsi
mov word [rbp + 0xb50], si
mov rax, qword [rbp + 0x1018]
test rax, rax
jne 0x140012ff2
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x14001301b
test rcx, rcx
je 0x14001301b
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0x1018]
test rax, rax
je 0x14001301b
dec qword [rax]
jne 0x14001301b
mov rcx, qword [rbp + 0x1010]
cmp rcx, 0xffffffffffffffff
je 0x14001300f
test rcx, rcx
je 0x14001300f
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0x1018]
call fcn.140018e2c
mov qword [rbp + 0x1018], rsi
mov qword [rbp + 0x1010], r12
cmp qword [rbp + 0xaf0], 8
jb 0x14001303f
mov rcx, qword [rbp + 0xad8]
call fcn.140018e2c
mov qword [rbp + 0xaf0], 7
mov qword [rbp + 0xae8], rsi
mov word [rbp + 0xad8], si
mov rax, qword [rsp + 0x30]
test rax, rax
jne 0x140013082
mov rcx, qword [rsp + 0x28]
cmp rcx, 0xffffffffffffffff
je 0x1400130a7
test rcx, rcx
je 0x1400130a7
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x30]
test rax, rax
je 0x1400130a7
dec qword [rax]
jne 0x1400130a7
mov rcx, qword [rsp + 0x28]
cmp rcx, 0xffffffffffffffff
je 0x14001309d
test rcx, rcx
je 0x14001309d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x30]
call fcn.140018e2c
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], r12
mov rax, qword [rbp + 0xdc8]
test rax, rax
jne 0x1400130e1
mov rcx, qword [rbp + 0xdc0]
cmp rcx, 0xffffffffffffffff
je 0x14001310a
test rcx, rcx
je 0x14001310a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0xdc8]
test rax, rax
je 0x14001310a
dec qword [rax]
jne 0x14001310a
mov rcx, qword [rbp + 0xdc0]
cmp rcx, 0xffffffffffffffff
je 0x1400130fe
test rcx, rcx
je 0x1400130fe
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xdc8]
call fcn.140018e2c
mov qword [rbp + 0xdc8], rsi
mov qword [rbp + 0xdc0], r12
mov rax, qword [rsp + 0x40]
test rax, rax
jne 0x140013142
mov rcx, qword [rsp + 0x38]
cmp rcx, 0xffffffffffffffff
je 0x140013167
test rcx, rcx
je 0x140013167
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x140013167
dec qword [rax]
jne 0x140013167
mov rcx, qword [rsp + 0x38]
cmp rcx, 0xffffffffffffffff
je 0x14001315d
test rcx, rcx
je 0x14001315d
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x40]
call fcn.140018e2c
mov qword [rsp + 0x38], r12
jmp 0x14001322f
mov rax, qword [rbp + 0xdc8]
test rax, rax
jne 0x1400131a1
mov rcx, qword [rbp + 0xdc0]
cmp rcx, 0xffffffffffffffff
je 0x1400131ca
test rcx, rcx
je 0x1400131ca
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rbp + 0xdc8]
test rax, rax
je 0x1400131ca
dec qword [rax]
jne 0x1400131ca
mov rcx, qword [rbp + 0xdc0]
cmp rcx, 0xffffffffffffffff
je 0x1400131be
test rcx, rcx
je 0x1400131be
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rbp + 0xdc8]
call fcn.140018e2c
mov qword [rbp + 0xdc8], rsi
or rdi, 0xffffffffffffffff
mov qword [rbp + 0xdc0], rdi
mov rax, qword [rsp + 0x40]
test rax, rax
jne 0x140013205
mov rcx, qword [rsp + 0x38]
cmp rcx, rdi
je 0x14001322a
test rcx, rcx
je 0x14001322a
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rax, qword [rsp + 0x40]
test rax, rax
je 0x14001322a
dec qword [rax]
jne 0x14001322a
mov rcx, qword [rsp + 0x38]
cmp rcx, 0xffffffffffffffff
je 0x140013220
test rcx, rcx
je 0x140013220
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov rcx, qword [rsp + 0x40]
call fcn.140018e2c
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x40], rsi
mov rcx, qword [rbp + 0x1460]
xor rcx, rsp
call fcn.140018e50
mov rbx, qword [rsp + 0x15c0]
add rsp, 0x1570
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret