Function at 0x670b67b0
Capabilities:
Enumerate gui resources
Resolve function by parsing pe exports
Terminate process

Disassembly:
test edx, edx
jne 0x670b692d
push rbx
sub rsp, 0x20
mov rbx, r9
mov r10, rcx
cmp r8d, 0xe
ja case.default.0x670b67e1
lea rcx, [0x67000000]
movsxd rax, r8d
mov edx, dword [rcx + rax*4 + 0xb6930]
add rdx, rcx
jmp rdx
lea rdx, sym.QtCoreVBox4.dll_struct_QMetaObject_const_QProcess::staticMetaObject
xor r9d, r9d
xor r8d, r8d
mov rcx, r10
add rsp, 0x20
pop rbx
jmp sym.QtCoreVBox4.dll_public:_static_void___cdecl_QMetaObject::activate_class_QObject____ptr64__struct_QMetaObject_const____ptr64__int__void____ptr64____ptr64_
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp sym.QtCoreVBox4.dll_protected:_void___cdecl_QProcess::finished_int____ptr64
mov rcx, qword [r9 + 8]
mov rax, qword [r9 + 0x10]
mov edx, dword [rcx]
mov r8d, dword [rax]
mov rcx, r10
add rsp, 0x20
pop rbx
jmp sym.QtCoreVBox4.dll_protected:_void___cdecl_QProcess::finished_int__enum_QProcess::ExitStatus____ptr64
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp sym.QtCoreVBox4.dll_protected:_void___cdecl_QProcess::error_enum_QProcess::ProcessError____ptr64
mov rax, qword [r9 + 8]
mov rcx, r10
mov edx, dword [rax]
add rsp, 0x20
pop rbx
jmp sym.QtCoreVBox4.dll_protected:_void___cdecl_QProcess::stateChanged_enum_QProcess::ProcessState____ptr64
xor r9d, r9d
lea rdx, sym.QtCoreVBox4.dll_struct_QMetaObject_const_QProcess::staticMetaObject
mov rcx, r10
lea r8d, [r9 + 5]
add rsp, 0x20
pop rbx
jmp sym.QtCoreVBox4.dll_public:_static_void___cdecl_QMetaObject::activate_class_QObject____ptr64__struct_QMetaObject_const____ptr64__int__void____ptr64____ptr64_
xor r9d, r9d
lea rdx, sym.QtCoreVBox4.dll_struct_QMetaObject_const_QProcess::staticMetaObject
mov rcx, r10
lea r8d, [r9 + 6]
add rsp, 0x20
pop rbx
jmp sym.QtCoreVBox4.dll_public:_static_void___cdecl_QMetaObject::activate_class_QObject____ptr64__struct_QMetaObject_const____ptr64__int__void____ptr64____ptr64_
mov rcx, qword [r10 + 8]
add rsp, 0x20
pop rbx
jmp 0x670e7a60
mov rcx, qword [r10 + 8]
add rsp, 0x20
pop rbx
jmp fcn.670e7ab0
mov rcx, qword [r10 + 8]
call fcn.670b5bc0
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x670b67e1
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [r10 + 8]
call fcn.670b5d60
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x670b67e1
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [r10 + 8]
call fcn.670b5f00
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x670b67e1
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [r10 + 8]
call fcn.670b4170
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x670b67e1
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [r10 + 8]
call fcn.670b60c0
mov rcx, qword [rbx]
test rcx, rcx
je case.default.0x670b67e1
mov byte [rcx], al
add rsp, 0x20
pop rbx
ret
mov rcx, qword [r10 + 8]
call fcn.670e84a0
add rsp, 0x20
pop rbx
repz ret
push rbx
sub rsp, 0x20
mov rax, qword [rcx + 0x100]
mov rbx, rcx
test rax, rax
je 0x670e7aa0
mov edx, dword [rax + 0x10]
lea rcx, [0x670e7a10]
call qword [sym.imp.USER32.dll_EnumWindows]
mov r11, qword [rbx + 0x100]
xor r9d, r9d
mov ecx, dword [r11 + 0x14]
lea edx, [r9 + 0x10]
xor r8d, r8d
call qword [sym.imp.USER32.dll_PostThreadMessageW]
add rsp, 0x20
pop rbx
ret