Function at 0x180079b40
Capabilities:
Enumerate gui resources

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x68
mov rdi, rcx
mov rbx, qword [rcx + 0x30]
test rbx, rbx
je 0x180079b8b
mov rbx, qword [rbx + 0x10]
test rbx, rbx
je 0x180079b8b
mov rax, rbx
nop dword [rax]
mov rcx, qword [rax + 0x68]
test rcx, rcx
je 0x180079b82
mov rdx, qword [rcx + 0x10]
test rdx, rdx
jne 0x180079b93
mov rax, qword [rax + 0x30]
test rax, rax
jne 0x180079b70
call fcn.1802778d0
mov rdx, rax
lea r14, [rdx + 0x38]
mov rax, qword [r14]
mov rbp, qword [rax + 8]
mov r15d, dword [rdi + 0x2c]
mov r12d, dword [rdi + 8]
mov edx, 2
lea rcx, [rdi + 0x20]
call fcn.180193250
mov rcx, qword [rax]
mov qword [rsp + 0x50], rcx
add rcx, 0xfffffffffffffff0
lea r13, [0x180660020]
cmp rcx, r13
je 0x180079bcf
lock inc dword [rcx]
mov edx, 1
lea rcx, [rdi + 0x20]
call fcn.180193250
mov rdx, qword [rax]
mov qword [rsp + 0xc8], rdx
add rdx, 0xfffffffffffffff0
cmp rdx, r13
je 0x180079bf4
lock inc dword [rdx]
xor edx, edx
lea rcx, [rdi + 0x20]
call fcn.180193250
mov rcx, qword [rax]
mov qword [rsp + 0xc0], rcx
add rcx, 0xfffffffffffffff0
cmp rcx, r13
je 0x180079c16
lock inc dword [rcx]
mov rax, qword [rdi + 0x18]
mov qword [rsp + 0xb8], rax
add rax, 0xfffffffffffffff0
cmp rax, r13
je 0x180079c2e
lock inc dword [rax]
mov rax, qword [rdi + 0x10]
mov qword [rsp + 0xb0], rax
add rax, 0xfffffffffffffff0
cmp rax, r13
je 0x180079c46
lock inc dword [rax]
mov qword [rsp + 0x40], rbx
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r12d
lea rax, [rsp + 0x50]
mov qword [rsp + 0x28], rax
lea rax, [rsp + 0xc8]
mov qword [rsp + 0x20], rax
lea r9, [rsp + 0xc0]
lea r8, [rsp + 0xb8]
lea rdx, [rsp + 0xb0]
mov rcx, r14
call rbp
mov rdx, rax
lea rcx, [rdi + 0x40]
call fcn.180067c10
nop
mov rcx, qword [rsp + 0xb0]
add rcx, 0xfffffffffffffff0
cmp rcx, r13
je 0x180079cbd
mov eax, 0xffffffff
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x180079cbd
call fcn.18011d9c0
nop
mov rcx, qword [rsp + 0xb8]
add rcx, 0xfffffffffffffff0
cmp rcx, r13
je 0x180079ce4
mov eax, 0xffffffff
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x180079ce4
call fcn.18011d9c0
nop
mov rcx, qword [rsp + 0xc0]
add rcx, 0xfffffffffffffff0
cmp rcx, r13
je 0x180079d0b
mov eax, 0xffffffff
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x180079d0b
call fcn.18011d9c0
nop
mov rcx, qword [rsp + 0xc8]
add rcx, 0xfffffffffffffff0
cmp rcx, r13
je 0x180079d32
mov eax, 0xffffffff
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x180079d32
call fcn.18011d9c0
nop
mov rcx, qword [rsp + 0x50]
add rcx, 0xfffffffffffffff0
cmp rcx, r13
je 0x180079d55
mov eax, 0xffffffff
lock xadd dword [rcx], eax
dec eax
cmp eax, 0xffffffff
jne 0x180079d55
call fcn.18011d9c0
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x180079e9a
mov rcx, qword [rax + 0x10]
test rcx, rcx
je 0x180079e9a
mov rsi, qword [rdi + 0x38]
test rsi, rsi
je 0x180079e0e
mov rsi, qword [rsi + 0x10]
test rsi, rsi
je 0x180079e0e
mov dword [rsp + 0x20], 0
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
call fcn.180120224
mov rbx, rax
test rax, rax
je 0x180079dce
mov rcx, qword [rax]
mov r9, qword [rcx + 0x58]
mov dl, 1
mov rcx, rax
call r9
mov r8d, 0xffffffff
mov rdx, rbx
mov rcx, rsi
call fcn.1802a2890
mov rax, qword [rdi + 0x30]
test rax, rax
je 0x180079dde
cmp qword [rax + 0x10], 0
jne 0x180079e0e
lea rcx, [rdi + 0x40]
call fcn.1800c0040
mov r8, rax
mov eax, dword [rsi + 0x44]
cdq
sub eax, edx
sar eax, 1
mov ecx, eax
mov eax, dword [rsi + 0x40]
cdq
sub eax, edx
sar eax, 1
mov edx, eax
shl rcx, 0x20
or rdx, rcx
mov rcx, r8
call fcn.1802a3410
nop
mov rax, qword [rdi + 0x40]
test rax, rax
je 0x180079e1d
mov rcx, qword [rax + 0x10]
jmp 0x180079e1f
xor ecx, ecx
mov dword [rsp + 0x20], 0
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
call fcn.180120224
mov rbx, rax
mov byte [rsp + 0xb0], 0
lea rdx, [rsp + 0xb0]
lea rcx, [0x1802b2960]
call qword [sym.imp.USER32.dll_EnumWindows]
movzx edx, byte [rsp + 0xb0]
mov rcx, rbx
call fcn.1802bda70
nop
mov rcx, qword [rdi + 0x40]
test rcx, rcx
je 0x180079e7a
mov rcx, qword [rcx + 0x10]
mov dword [rsp + 0x20], 0
lea r9, vtable.type_info.0
lea r8, vtable.type_info.0
xor edx, edx
call fcn.180120224
nop
jmp 0x180079e9c
xor eax, eax
add rsp, 0x68
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret