Function at 0x14007b770
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rsi, rcx
mov rcx, r9
mov rbp, r9
mov rdi, r8
mov rbx, rdx
call fcn.140017c20
lea rcx, [rsi + 0x118]
call fcn.140017c20
mov r11b, byte [rsp + 0xf8]
mov al, byte [rsp + 0xf0]
lea rcx, [rsi + 0x18]
mov rdx, rbx
mov byte [rsi + 8], r11b
mov byte [rsi + 9], al
call fcn.140001110
lea rcx, [rsi + 0x38]
mov rdx, rdi
call fcn.140001110
lea rbx, [rsi + 0xd8]
lea rdx, [0x14009a680]
mov rcx, rbx
call fcn.1400089b0
mov eax, dword [rsp + 0xe0]
xor r13d, r13d
mov edi, 1
lea rcx, [rsp + 0x30]
mov dword [rsi + 0xc], r13d
mov dword [rsi + 0x14], eax
mov dword [rsi + 0xfc], r13d
mov dword [rsi + 0x110], r13d
mov dword [rsi + 0xf8], edi
mov byte [rsi + 0x10], dil
call fcn.1400083e0
lea rcx, [rsp + 0x50]
call fcn.1400083e0
lea rcx, [rsp + 0x70]
call fcn.1400083e0
mov ecx, dword [rsi + 0x14]
cmp ecx, r13d
jge 0x14007b853
call fcn.14001a0e0
mov byte [rsi + 0x10], r13b
mov dword [rsi + 0x14], eax
cmp dword [rsi + 0x14], 4
jne 0x14007b868
lea rdx, [rsi + 0x18]
mov rcx, rsi
call fcn.140065410
mov dword [rsi + 0x14], edi
lea rcx, [rsi + 0x18]
call fcn.140042300
cmp al, r13b
je 0x14007b8a8
lea rcx, [rsi + 0x38]
call fcn.140042300
cmp al, r13b
je 0x14007b8a8
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rsi
mov rdx, rax
call fcn.14005dd90
mov r11, qword [rsi]
mov rcx, qword [r11]
mov qword [rsp + 0xc0], rcx
jmp 0x14007bbf6
lea rcx, [rsi + 0x18]
xor edx, edx
call fcn.140001540
cmp word [rax], 0x5b
jne 0x14007bc3b
mov rdx, qword [rsi + 0x20]
lea rcx, [rsi + 0x18]
dec rdx
call fcn.140001540
cmp word [rax], 0x5d
jne 0x14007bc3b
mov r13, qword [rsi + 0x20]
mov qword [rsp + 0xc0], rdi
sub r13, 2
lea rax, [rsp + 0xc0]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
lea rdx, [rsi + 0x18]
mov rcx, rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call fcn.1400652a0
test al, al
je 0x14007bc38
lea rdx, str.LAST
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
jne 0x14007bc0b
lea rdx, str.ACTIVE
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
jne 0x14007bbc2
lea rdx, [0x14009a998]
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
jne 0x14007bb94
lea rdx, str.REGEXPTITLE
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007b998
mov eax, dword [rsi + 0xc]
test dil, al
jne 0x14007bb80
or eax, 2
lea rcx, [rsi + 0x58]
mov dword [rsi + 0xc], eax
call fcn.140013b00
lea rcx, [rsi + 0x58]
jmp 0x14007b9e5
lea rdx, str.CLASS
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007b9b9
or dword [rsi + 0xc], 8
mov rcx, rbx
jmp 0x14007bb46
lea rdx, str.REGEXPCLASS
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007ba03
or dword [rsi + 0xc], 0x10
lea rcx, [rsi + 0x98]
call fcn.140013b00
lea rcx, [rsi + 0x98]
lea rdx, [rsp + 0x50]
call fcn.14007b6c0
test eax, eax
jne 0x14007bb76
lea rbx, [rsi + 0xd8]
jmp 0x14007b8e7
lea rdx, str.XYWH
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007ba32
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 7
call fcn.140019d30
mov dword [rsi + 0x100], eax
jmp 0x14007b8e7
lea rdx, [0x14009a868]
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007ba61
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 8
call fcn.140019d30
mov dword [rsi + 0x104], eax
jmp 0x14007b8e7
lea rdx, [0x14009a86c]
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007ba90
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 9
call fcn.140019d30
mov dword [rsi + 0x108], eax
jmp 0x14007b8e7
lea rdx, [0x14009a870]
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007babf
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 0xa
call fcn.140019d30
mov dword [rsi + 0x10c], eax
jmp 0x14007b8e7
lea rdx, str.INSTANCE
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007baed
mov rcx, qword [rsp + 0x50]
or dword [rsi + 0xc], 0x20
call fcn.140019d30
mov dword [rsi + 0xf8], eax
jmp 0x14007b8e7
lea rdx, [0x14009a980]
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007bb20
lea rdx, [0x14009a680]
lea rcx, [rsp + 0x50]
call fcn.140042310
test al, al
je 0x14007bb6e
or dword [rsi + 0xc], 0x40
jmp 0x14007b8e7
lea rdx, str.TITLE
lea rcx, [rsp + 0x30]
call fcn.140042310
test al, al
je 0x14007bb55
mov eax, dword [rsi + 0xc]
test al, 2
jne 0x14007bb8a
or eax, edi
lea rcx, [rsp + 0x70]
mov dword [rsi + 0xc], eax
lea rdx, [rsp + 0x50]
call fcn.140001110
jmp 0x14007b8e7
lea rdx, [0x14009a680]
lea rcx, [rsp + 0x30]
call fcn.140046560
test al, al
je 0x14007b8e7
or edi, 0xffffffff
jmp 0x14007bcf9
mov edi, 0xfffffffe
jmp 0x14007bcf9
mov edi, 0xfffffffd
jmp 0x14007bcf9
mov edi, 0xfffffffc
jmp 0x14007bcf9
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0xc0]
call fcn.140042770
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x14007bc31
mov rdx, qword [rsp + 0xc0]
jmp 0x14007bbe0
lea rdx, [0x14009a680]
lea rcx, [rsp + 0x50]
call fcn.140042310
test al, al
je 0x14007bb6e
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdx, rax
mov rcx, rsi
call fcn.14005dd90
mov r11, qword [rsi]
mov rax, qword [r11]
mov qword [rsp + 0xc0], rax
lea rdx, [rsp + 0xc0]
mov rcx, rbp
call fcn.140046290
jmp 0x14007bcf9
lea rdx, [0x14009a680]
lea rcx, [rsp + 0x50]
call fcn.140042310
test al, al
je 0x14007bb6e
mov rax, qword [rsi]
test rax, rax
je 0x14007bc31
mov rax, qword [rax]
jmp 0x14007bbee
xor edi, edi
jmp 0x14007bcf9
xor r13d, r13d
lea rcx, [rsp + 0x70]
call fcn.140042300
cmp al, r13b
jne 0x14007bc58
lea rdx, [rsp + 0x70]
lea rcx, [rsi + 0x18]
call fcn.140001110
cmp dword [rsi + 0xc], r13d
jne 0x14007bc61
mov dword [rsi + 0xc], edi
or dword [rsi + 0xc], 4
cmp byte [rsi + 0x10], r13b
jne 0x14007bc74
lea rcx, [rsi + 0x38]
call fcn.140015530
test byte [rsi + 0xc], dil
je 0x14007bc89
cmp byte [rsi + 0x10], r13b
jne 0x14007bc89
lea rcx, [rsi + 0x18]
call fcn.140015530
cmp byte [rsp + 0xe8], r13b
je 0x14007bcae
call qword [sym.imp.USER32.dll_GetDesktopWindow]
lea rdx, [0x14005dcd0]
mov r8, rsi
mov rcx, rax
call qword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x14007bcbe
lea rcx, [0x14005dcd0]
mov rdx, rsi
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, [rsi + 0x118]
mov rcx, rbp
call fcn.140054a30
lea rcx, [rsi + 0x118]
call fcn.140017c20
cmp dword [rsi + 0x110], edi
jl 0x14007bcf3
mov rax, qword [rbp + 8]
mov rcx, rsi
mov rdx, qword [rax]
mov rdx, qword [rdx]
call fcn.14005dd90
mov edi, dword [rsi + 0x110]
lea rcx, [rsp + 0x70]
call fcn.140003410
lea rcx, [rsp + 0x50]
call fcn.140003410
lea rcx, [rsp + 0x30]
call fcn.140003410
lea r11, [rsp + 0x90]
mov eax, edi
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret