Function at 0x1400031d7
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
push rbp
push r15
push r14
mov rax, 0x19
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x1400031ed
sub rsp, 0x28
call fcn.14003d0e0
mov rdx, qword [rsp + 0x118]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14003d1b0
add rsp, 0x10
jmp 0x140003239
movabs rdx, str.msedge.exe
lea rcx, [rsp + 0x30]
call fcn.14003ce60
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push 2
xor rax, rax
push rax
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14003cd10
add rsp, 0x28
mov rbp, qword [rsp + 0x138]
mov rcx, qword [rbp + 0x10]
sub rsp, 0x28
call fcn.14003cd10
add rsp, 0x28
call fcn.14003cfb0
push qword [rsp + 0x58]
push rax
call fcn.14003cf80
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140027f58
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e84
add rsp, 0x28
pop rax
and rax, rax
je 0x1400038a9
push 0x64
pop rcx
call fcn.14002d84c
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14003ccc0
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.14000392a
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14003cd80
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
movabs rcx, str.__crwg_container
sub rsp, 0x28
call fcn.14003cd10
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14003cd10
add rsp, 0x28
call fcn.14003cfb0
push qword [rsp + 0x50]
push rax
call fcn.14003cf80
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036750
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e84
add rsp, 0x28
pop rax
and rax, rax
je 0x1400033c0
mov qword [rsp + 0x48], 1
jmp 0x1400033da
call fcn.14002d880
mov r15, rax
sub r15, qword [rsp + 0x50]
cmp r15, 0x3e8
jle 0x1400032e9
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
mov rbp, qword [rsp + 0x128]
movsxd rax, dword [rbp]
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400366f0
add rsp, 0x28
lea rcx, [rsp + 0x48]
pop rdx
call fcn.14003cd80
cmp qword [rsp + 0x48], 0
je 0x1400036d8
mov qword [rsp + 0x58], 1
jmp 0x14000343c
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x40]
pop rcx
pop rdx
call fcn.140036a80
cmp rax, qword [rsp + 0x58]
jl 0x1400036d8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x78]
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140036b20
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.14003cd80
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
movabs rcx, str.__crwg_container
sub rsp, 0x28
call fcn.14003cd10
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14003cd10
add rsp, 0x28
call fcn.14003cfb0
push qword [rsp + 0x78]
push rax
call fcn.14003cf80
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036750
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e84
add rsp, 0x28
pop rax
and rax, rax
je 0x1400036cd
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push 1
push qword [rsp + 0x98]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140036b20
add rsp, 0x28
push rax
call fcn.14003cf80
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140036ca0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e84
add rsp, 0x28
pop rax
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x68], eax
call fcn.14002d880
mov qword [rsp + 0x50], rax
push 0x64
pop rcx
call fcn.14002d84c
movsxd rax, dword [rsp + 0x68]
push rax
pop rax
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov rax, rax
push rax
lea rax, [0x1400043b5]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_EnumWindows
mov r15, qword [rsp + 0x70]
movsxd rax, dword [rsp + 0x68]
cmp r15, rax
je 0x1400036b3
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003ccc0
add rsp, 0x28
pop rcx
push rax
push 0x104
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036900
add rsp, 0x28
lea rcx, [rsp + 0x80]
pop rdx
call fcn.14003cd80
push 0x104
mov rax, qword [rsp + 0x80]
mov rax, rax
push rax
push qword [rsp + 0x80]
pop rcx
pop rdx
pop r8
call sub.USER32.dll_GetClassNameW
push qword [rsp + 0x78]
movabs rcx, str.Chrome_WidgetWin_1
pop rdx
call fcn.14003d030
or rax, rax
je 0x1400036b3
mov qword [rsp + 0x80], 1
jmp 0x1400036d8
call fcn.14002d880
mov r15, rax
sub r15, qword [rsp + 0x50]
cmp r15, 0xfa0
jle 0x1400035e0
inc qword [rsp + 0x58]
jno 0x14000343c
cmp qword [rsp + 0x80], 0
je 0x1400038a9
push qword [rsp + 0x70]
mov rbp, qword [rsp + 0x118]
pop rax
mov dword [rbp + 0x34], eax
push 0x42010000
push 0xfffffffffffffff0
mov rbp, qword [rsp + 0x120]
movsxd rax, dword [rbp + 0x34]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call sub.USER32.dll_SetWindowLongPtrW
mov rbp, qword [rsp + 0x110]
movsxd rax, dword [rbp]
mov rax, rax
push rax
mov rbp, qword [rsp + 0x118]
movsxd rax, dword [rbp + 0x34]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_SetParent
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
je 0x14000389a
lea rax, [rsp + 0x90]
mov rax, rax
push rax
mov rbp, qword [rsp + 0x118]
movsxd rax, dword [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_GetWindowPlacement
lea rbp, [rsp + 0x90]
movsxd r15, dword [rbp + 0x24]
movsxd rcx, dword [rbp + 0x1c]
sub r15, rcx
mov qword [rsp + 0xc0], r15
movsxd r15, dword [rbp + 0x28]
movsxd rcx, dword [rbp + 0x20]
sub r15, rcx
mov qword [rsp + 0xc8], r15
call fcn.14003ae48
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400db140]
fistp qword [rsp + 0xd0]
call fcn.14003ae48
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400db148]
fistp qword [rsp + 0xd8]
mov r15, qword [rsp + 0xc0]
call fcn.14003ae48
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400db150]
mov qword [rsp - 8], r15
fild qword [rsp - 8]
faddp st(1)
fadd qword [0x1400db130]
fistp qword [rsp + 0xe0]
mov r15, qword [rsp + 0xc8]
call fcn.14003ae48
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400db158]
mov qword [rsp - 8], r15
fild qword [rsp - 8]
faddp st(1)
fadd qword [0x1400db130]
fistp qword [rsp + 0xe8]
sub rsp, 8
push 0x44
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push 0
mov rbp, qword [rsp + 0x148]
movsxd rax, dword [rbp + 0x34]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.USER32.dll_SetWindowPos
add rsp, 0x40
jmp 0x1400038a9
mov rbp, qword [rsp + 0x110]
mov dword [rbp + 0x34], 0
xor rax, rax
push rax
mov rcx, qword [rsp + 0x68]
sub rsp, 0x28
call fcn.14003d180
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.14003d180
add rsp, 0x28
mov rcx, qword [rsp + 0x80]
sub rsp, 0x28
call fcn.14003d180
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.14003d180
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14003d180
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14003d180
add rsp, 0x28
pop rax
add rsp, 0xf0
pop r14
pop r15
pop rbp
ret