Function at 0x140001700
Capabilities:
Enumerate gui resources

Disassembly:
mov r11, rsp
sub rsp, 0x3c8
mov rax, qword [0x140005008]
xor rax, rsp
mov qword [rsp + 0x3b0], rax
cmp ecx, 1
je 0x1400018bb
mov qword [r11 + 0x10], rbp
lea rdx, [rsp + 0x20]
mov qword [r11 + 0x18], rsi
lea rax, str.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
mov ecx, 7
nop
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rax]
movups xmm1, xmmword [rax + 0x10]
lea rax, [rax + 0x80]
movups xmmword [rdx - 0x80], xmm0
movups xmm0, xmmword [rax - 0x60]
movups xmmword [rdx - 0x70], xmm1
movups xmm1, xmmword [rax - 0x50]
movups xmmword [rdx - 0x60], xmm0
movups xmm0, xmmword [rax - 0x40]
movups xmmword [rdx - 0x50], xmm1
movups xmm1, xmmword [rax - 0x30]
movups xmmword [rdx - 0x40], xmm0
movups xmm0, xmmword [rax - 0x20]
movups xmmword [rdx - 0x30], xmm1
movups xmm1, xmmword [rax - 0x10]
movups xmmword [rdx - 0x20], xmm0
movups xmmword [rdx - 0x10], xmm1
sub rcx, 1
jne 0x140001740
movzx ecx, word [rax]
mov word [rdx], cx
movzx ecx, byte [rax + 2]
mov rax, 0xffffffffffffffff
mov byte [rdx + 2], cl
lea rcx, [rsp + 0x20]
nop dword [rax]
inc rax
cmp byte [rcx + rax], 0
jne 0x1400017b0
shr rax, 1
mov ecx, eax
mov ebp, eax
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov rsi, rax
test rax, rax
jne 0x1400017df
lea rcx, str.malloc_error
call fcn.140001040
jmp 0x140001891
mov qword [rsp + 0x3d0], rbx
mov r8, rbp
xor edx, edx
mov qword [rsp + 0x3c0], rdi
mov rcx, rsi
call sub.VCRUNTIME140.dll_memset
lea rcx, [rsp + 0x20]
mov rdi, rsi
lea rbx, [rsp + 0x20]
call qword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__strrev]
movzx eax, byte [rsp + 0x20]
test al, al
je 0x140001847
cmp al, 0x20
jne 0x140001823
mov eax, 1
jmp 0x14000183d
mov r8, rdi
lea rdx, str._02X
mov rcx, rbx
call fcn.1400010a0
inc rdi
mov eax, 2
add rbx, rax
movzx eax, byte [rbx]
test al, al
jne 0x140001818
xor r8d, r8d
xor edx, edx
mov ecx, 0x40000
call qword [sym.imp.KERNEL32.dll_HeapCreate]
mov r8, rbp
xor edx, edx
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
mov r8, rbp
mov rdx, rsi
mov rcx, rax
mov rbx, rax
call sub.VCRUNTIME140.dll_memmove
xor edx, edx
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnumWindows]
mov rdi, qword [rsp + 0x3c0]
mov rbx, qword [rsp + 0x3d0]
mov rsi, qword [rsp + 0x3e0]
xor eax, eax
mov rbp, qword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x3b0]
xor rcx, rsp
call fcn.1400018e0
add rsp, 0x3c8
ret
call fcn.140001300
int3