Function at 0x1401fc7f0
Capabilities:
Enumerate gui resources

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x38
lea rbp, [rsp + 0x30]
mov esi, ecx
mov rax, qword [0x14082e958]
xor rax, rbp
mov qword [rbp], rax
mov eax, dword [0x140837e98]
mov ecx, dword [0x140837e9c]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 1]
cmp ecx, 0xa
setl byte [rbp - 2]
mov eax, 0xb0d6fdbc
mov r13d, 0x838f6273
mov r14d, 0x289d2a6a
mov r15d, 0xfc724b0
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, 0xf994ded5
jmp 0x1401fc890
mov eax, reloc.WS2_32.dll_recv
call fcn.1403844e0
sub rsp, rax
mov rdx, rsp
mov qword [rdx], 0
mov dword [rdx + 8], esi
sub rsp, 0x20
lea rcx, [0x140339dc0]
call qword [sym.imp.USER32.dll_EnumWindows]
add rsp, 0x20
mov eax, 0x951e9a6a
nop
cmp eax, 0x15fe19ac
jg 0x1401fc8d0
cmp eax, 0xf994ded4
jle 0x1401fc910
cmp eax, 0xfc724af
jg 0x1401fc9a9
cmp eax, 0xf994ded5
je 0x1401fca8a
cmp eax, 0x53d2e4c
jne 0x1401fc890
mov eax, 0x18cb290f
mov rdi, qword [rbp - 0x20]
jmp 0x1401fc890
cmp eax, 0x3747b29d
jle 0x1401fc950
cmp eax, 0x5eaf3ed3
jg 0x1401fc9e7
cmp eax, 0x3747b29e
je 0x1401fcaa0
cmp eax, 0x52ee9ae1
jne 0x1401fc890
sub rsp, 0x20
call r12
add rsp, 0x20
mov eax, 0x289d2a6a
jmp 0x1401fc890
cmp eax, 0xa9a462ab
jle 0x1401fca07
cmp eax, 0xa9a462ac
je 0x1401fcaac
cmp eax, 0xb0d6fdbc
jne 0x1401fc890
movzx ecx, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov eax, 0x5eaf3ed4
mov edx, 0x951e9a6a
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x1401fc890
cmp eax, 0x15fe19ad
je 0x1401fcac2
cmp eax, 0x18cb290f
je 0x1401fcae4
cmp eax, 0x289d2a6a
jne 0x1401fc890
sub rsp, 0x20
call r12
add rsp, 0x20
cmp eax, 0xffffffff
sete byte [rbp - 4]
mov eax, dword [0x140837e98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x52ee9ae1
cmove eax, ebx
cmp dword [0x140837e9c], 0xa
cmovl eax, ebx
jmp 0x1401fc890
cmp eax, 0xfc724b0
je 0x1401fcb14
cmp eax, 0x110014d4
jne 0x1401fc890
mov eax, dword [0x140837e98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x52ee9ae1
cmove eax, r14d
cmp dword [0x140837e9c], 0xa
cmovl eax, r14d
jmp 0x1401fc890
cmp eax, 0x5eaf3ed4
je 0x1401fc85a
cmp eax, 0x6c0d2723
jne 0x1401fc890
mov eax, 0xfc724b0
jmp 0x1401fc890
cmp eax, 0x951e9a6a
jne 0x1401fcb3c
mov eax, reloc.WS2_32.dll_recv
call fcn.1403844e0
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x18], rax
mov rax, qword [rbp - 0x18]
mov rax, qword [rbp - 0x10]
mov qword [rax], 0
mov dword [rax + 8], esi
mov rdx, qword [rbp - 0x10]
sub rsp, 0x20
lea rcx, [0x140339dc0]
call qword [sym.imp.USER32.dll_EnumWindows]
add rsp, 0x20
test eax, eax
setne byte [rbp - 3]
mov eax, dword [0x140837e98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x5eaf3ed4
mov ecx, 0xa9a462ac
cmove eax, ecx
cmp dword [0x140837e9c], 0xa
cmovl eax, ecx
jmp 0x1401fc890
cmp byte [rbp - 4], 0
mov eax, 0x3747b29e
mov ecx, 0x15fe19ad
cmovne eax, ecx
jmp 0x1401fc890
mov eax, 0x18cb290f
xor edi, edi
jmp 0x1401fc890
cmp byte [rbp - 3], 0
mov eax, 0x110014d4
mov ecx, 0x3747b29e
cmovne eax, ecx
jmp 0x1401fc890
mov rax, qword [rbp - 0x10]
mov rax, qword [rax]
mov qword [rbp - 0x20], rax
cmp qword [rbp - 0x20], 0
mov eax, 0x53d2e4c
mov ecx, 0x3747b29e
cmove eax, ecx
jmp 0x1401fc890
mov qword [rbp - 0x28], rdi
mov rax, qword [rbp - 0x18]
mov eax, dword [0x140837e98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6c0d2723
cmove eax, r15d
cmp dword [0x140837e9c], 0xa
cmovl eax, r15d
jmp 0x1401fc890
mov eax, dword [0x140837e98]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6c0d2723
cmove eax, r13d
cmp dword [0x140837e9c], 0xa
cmovl eax, r13d
jmp 0x1401fc890
cmp eax, 0x838f6273
jne 0x1401fc890
mov rsi, qword [rbp - 0x28]
mov rcx, qword [rbp]
xor rcx, rbp
sub rsp, 0x20
call fcn.140384540
add rsp, 0x20
mov rax, rsi
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret