Function at 0x140077bd0
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov rsi, rcx
mov rcx, r9
mov rbp, r9
mov rdi, r8
mov rbx, rdx
call fcn.140015140
lea rcx, [rsi + 0x118]
call fcn.140015140
mov r11b, byte [rsp + 0xf8]
mov al, byte [rsp + 0xf0]
lea rcx, [rsi + 0x18]
mov rdx, rbx
mov byte [rsi + 8], r11b
mov byte [rsi + 9], al
call fcn.140013690
lea rcx, [rsi + 0x38]
mov rdx, rdi
call fcn.140013690
lea rbx, [rsi + 0xd8]
lea rdx, [0x140096618]
mov rcx, rbx
call fcn.140011cb0
mov eax, dword [rsp + 0xe0]
xor r13d, r13d
mov edi, 1
lea rcx, [rsp + 0x30]
mov dword [rsi + 0xc], r13d
mov dword [rsi + 0x14], eax
mov dword [rsi + 0xfc], r13d
mov dword [rsi + 0x110], r13d
mov dword [rsi + 0xf8], edi
mov byte [rsi + 0x10], dil
call fcn.140008640
lea rcx, [rsp + 0x50]
call fcn.140008640
lea rcx, [rsp + 0x70]
call fcn.140008640
mov ecx, dword [rsi + 0x14]
cmp ecx, r13d
jge 0x140077cb3
call fcn.1400190b0
mov byte [rsi + 0x10], r13b
mov dword [rsi + 0x14], eax
cmp dword [rsi + 0x14], 4
jne 0x140077cc8
lea rdx, [rsi + 0x18]
mov rcx, rsi
call fcn.140064550
mov dword [rsi + 0x14], edi
lea rcx, [rsi + 0x18]
call fcn.140040ab0
cmp al, r13b
je 0x140077d08
lea rcx, [rsi + 0x38]
call fcn.140040ab0
cmp al, r13b
je 0x140077d08
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rsi
mov rdx, rax
call fcn.14005b530
mov r11, qword [rsi]
mov rcx, qword [r11]
mov qword [rsp + 0xc0], rcx
jmp 0x140078056
lea rcx, [rsi + 0x18]
xor edx, edx
call fcn.140012100
cmp word [rax], 0x5b
jne 0x14007809b
mov rdx, qword [rsi + 0x20]
lea rcx, [rsi + 0x18]
dec rdx
call fcn.140012100
cmp word [rax], 0x5d
jne 0x14007809b
mov r13, qword [rsi + 0x20]
mov qword [rsp + 0xc0], rdi
sub r13, 2
lea rax, [rsp + 0xc0]
lea r9, [rsp + 0x50]
lea r8, [rsp + 0x30]
lea rdx, [rsi + 0x18]
mov rcx, rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call fcn.1400643e0
test al, al
je 0x140078098
lea rdx, str.LAST
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
jne 0x14007806b
lea rdx, str.ACTIVE
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
jne 0x140078022
lea rdx, [0x1400968f8]
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
jne 0x140077ff4
lea rdx, str.REGEXPTITLE
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077df8
mov eax, dword [rsi + 0xc]
test dil, al
jne 0x140077fe0
or eax, 2
lea rcx, [rsi + 0x58]
mov dword [rsi + 0xc], eax
call fcn.1400131d0
lea rcx, [rsi + 0x58]
jmp 0x140077e45
lea rdx, str.CLASS
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077e19
or dword [rsi + 0xc], 8
mov rcx, rbx
jmp 0x140077fa6
lea rdx, str.REGEXPCLASS
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077e63
or dword [rsi + 0xc], 0x10
lea rcx, [rsi + 0x98]
call fcn.1400131d0
lea rcx, [rsi + 0x98]
lea rdx, [rsp + 0x50]
call fcn.140077b20
test eax, eax
jne 0x140077fd6
lea rbx, [rsi + 0xd8]
jmp 0x140077d47
lea rdx, str.XYWH
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077e92
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 7
call fcn.140018d00
mov dword [rsi + 0x100], eax
jmp 0x140077d47
lea rdx, [0x1400967cc]
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077ec1
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 8
call fcn.140018d00
mov dword [rsi + 0x104], eax
jmp 0x140077d47
lea rdx, [0x1400967d0]
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077ef0
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 9
call fcn.140018d00
mov dword [rsi + 0x108], eax
jmp 0x140077d47
lea rdx, [0x1400967d4]
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077f1f
mov rcx, qword [rsp + 0x50]
bts dword [rsi + 0xc], 0xa
call fcn.140018d00
mov dword [rsi + 0x10c], eax
jmp 0x140077d47
lea rdx, [0x1400967d8]
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077f4d
mov rcx, qword [rsp + 0x50]
or dword [rsi + 0xc], 0x20
call fcn.140018d00
mov dword [rsi + 0xf8], eax
jmp 0x140077d47
lea rdx, [0x1400968e0]
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077f80
lea rdx, [0x140096618]
lea rcx, [rsp + 0x50]
call fcn.140040ac0
test al, al
je 0x140077fce
or dword [rsi + 0xc], 0x40
jmp 0x140077d47
lea rdx, str.TITLE
lea rcx, [rsp + 0x30]
call fcn.140040ac0
test al, al
je 0x140077fb5
mov eax, dword [rsi + 0xc]
test al, 2
jne 0x140077fea
or eax, edi
lea rcx, [rsp + 0x70]
mov dword [rsi + 0xc], eax
lea rdx, [rsp + 0x50]
call fcn.140013690
jmp 0x140077d47
lea rdx, [0x140096618]
lea rcx, [rsp + 0x30]
call fcn.140044c40
test al, al
je 0x140077d47
or edi, 0xffffffff
jmp 0x140078159
mov edi, 0xfffffffe
jmp 0x140078159
mov edi, 0xfffffffd
jmp 0x140078159
mov edi, 0xfffffffc
jmp 0x140078159
mov rcx, qword [rsp + 0x50]
lea rdx, [rsp + 0xc0]
call fcn.140040f20
mov rcx, qword [rsp + 0xc0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x140078091
mov rdx, qword [rsp + 0xc0]
jmp 0x140078040
lea rdx, [0x140096618]
lea rcx, [rsp + 0x50]
call fcn.140040ac0
test al, al
je 0x140077fce
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdx, rax
mov rcx, rsi
call fcn.14005b530
mov r11, qword [rsi]
mov rax, qword [r11]
mov qword [rsp + 0xc0], rax
lea rdx, [rsp + 0xc0]
mov rcx, rbp
call fcn.140043d30
jmp 0x140078159
lea rdx, [0x140096618]
lea rcx, [rsp + 0x50]
call fcn.140040ac0
test al, al
je 0x140077fce
mov rax, qword [rsi]
test rax, rax
je 0x140078091
mov rax, qword [rax]
jmp 0x14007804e
xor edi, edi
jmp 0x140078159
xor r13d, r13d
lea rcx, [rsp + 0x70]
call fcn.140040ab0
cmp al, r13b
jne 0x1400780b8
lea rdx, [rsp + 0x70]
lea rcx, [rsi + 0x18]
call fcn.140013690
cmp dword [rsi + 0xc], r13d
jne 0x1400780c1
mov dword [rsi + 0xc], edi
or dword [rsi + 0xc], 4
cmp byte [rsi + 0x10], r13b
jne 0x1400780d4
lea rcx, [rsi + 0x38]
call fcn.140014ab0
test byte [rsi + 0xc], dil
je 0x1400780e9
cmp byte [rsi + 0x10], r13b
jne 0x1400780e9
lea rcx, [rsi + 0x18]
call fcn.140014ab0
cmp byte [rsp + 0xe8], r13b
je 0x14007810e
call qword [sym.imp.USER32.dll_GetDesktopWindow]
lea rdx, [0x14005b470]
mov r8, rsi
mov rcx, rax
call qword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x14007811e
lea rcx, [0x14005b470]
mov rdx, rsi
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, [rsi + 0x118]
mov rcx, rbp
call fcn.1400527a0
lea rcx, [rsi + 0x118]
call fcn.140015140
cmp dword [rsi + 0x110], edi
jl 0x140078153
mov rax, qword [rbp + 8]
mov rcx, rsi
mov rdx, qword [rax]
mov rdx, qword [rdx]
call fcn.14005b530
mov edi, dword [rsi + 0x110]
lea rcx, [rsp + 0x70]
call fcn.1400036e0
lea rcx, [rsp + 0x50]
call fcn.1400036e0
lea rcx, [rsp + 0x30]
call fcn.1400036e0
lea r11, [rsp + 0x90]
mov eax, edi
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret