Function at 0x180025240
Capabilities:
Enumerate gui resources

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x200
mov qword [rsp + 0x88], 0xfffffffffffffffe
mov rax, qword [0x18005e030]
xor rax, rsp
mov qword [rsp + 0x1f0], rax
mov edi, r9d
mov r15d, r8d
mov r14d, edx
mov esi, ecx
call fcn.180024e40
test eax, eax
jne 0x180025a35
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0x58], eax
xor r13d, r13d
mov qword [rsp + 0x60], r13
lea rdx, [rsp + 0x58]
lea rcx, [0x180025ad0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov r12, qword [rsp + 0x60]
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x1d0]
call fcn.180027600
nop
mov qword [rsp + 0xe8], 7
mov qword [rsp + 0xe0], r13
mov word [rsp + 0xd0], r13w
or r9, 0xffffffffffffffff
xor r8d, r8d
lea rdx, [rsp + 0x1d0]
lea rcx, [rsp + 0xd0]
call fcn.180001b10
nop
mov eax, 0x5c
mov word [rsp + 0x40], ax
mov rbx, qword [rsp + 0xe0]
mov r10, qword [rsp + 0xd0]
mov r11, qword [rsp + 0xe8]
cmp rbx, 1
jb 0x1800253c0
lea rax, [rsp + 0xd0]
cmp r11, 8
cmovae rax, r10
lea r9, [rbx - 1]
lea r9, [rax + r9*2]
cmp word [r9], 0x5c
sete al
test al, al
je 0x180025390
mov ecx, 1
lea rdx, [rsp + 0x40]
mov r8, r9
nop dword [rax]
movzx eax, word [rdx]
cmp word [r8], ax
jne 0x180025379
add r8, 2
add rdx, 2
sub rcx, 1
je 0x1800253a8
jmp 0x180025360
mov ecx, 1
cmp word [r8], ax
mov rax, 0xffffffffffffffff
cmovb ecx, eax
test ecx, ecx
je 0x1800253a8
lea rcx, [rsp + 0xd0]
call fcn.1800011f0
cmp r9, rax
je 0x1800253c0
sub r9, 2
jmp 0x180025343
lea rax, [rsp + 0xd0]
cmp r11, 8
cmovae rax, r10
sub r9, rax
sar r9, 1
jmp 0x1800253c4
or r9, 0xffffffffffffffff
inc r9
cmp rbx, r9
ja 0x1800253ea
mov qword [rsp + 0xe0], r13
lea rax, [rsp + 0xd0]
cmp r11, 8
cmovae rax, r10
mov word [rax], r13w
jmp 0x18002543e
test r9, r9
je 0x18002543e
lea rcx, [rsp + 0xd0]
cmp r11, 8
cmovae rcx, r10
sub rbx, r9
je 0x180025421
lea r8, [rbx + rbx]
lea rdx, [rcx + r9*2]
call fcn.1800148d0
mov r11, qword [rsp + 0xe8]
mov r10, qword [rsp + 0xd0]
mov qword [rsp + 0xe0], rbx
lea rax, [rsp + 0xd0]
cmp r11, 8
cmovae rax, r10
mov word [rax + rbx*2], r13w
mov r8d, 0x6f
lea rcx, [rsp + 0x1b0]
call fcn.180027fe0
lea r8, [rsp + 0xd0]
cmp qword [rsp + 0xe8], 8
cmovae r8, qword [rsp + 0xd0]
mov rdx, rax
lea rcx, [rsp + 0x190]
call fcn.180027ef0
nop
mov r8d, esi
lea rcx, [rsp + 0x170]
call fcn.180027fe0
nop
mov r8d, r14d
lea rcx, [rsp + 0x150]
call fcn.180027fe0
nop
mov r8d, r15d
lea rcx, [rsp + 0x130]
call fcn.180027fe0
nop
mov qword [rsp + 0x108], 7
mov qword [rsp + 0x100], r13
mov word [rsp + 0xf0], r13w
xor r8d, r8d
lea rdx, [0x1800321d4]
lea rcx, [rsp + 0xf0]
call fcn.1800019c0
nop
test edi, edi
je 0x180025617
lea rsi, [0x180032a48]
mov qword [rsp + 0x68], rsi
mov dword [rsp + 0x70], edi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x78], xmm0
mov r8d, 0x7e
lea rcx, [rsp + 0x90]
call fcn.180027fe0
mov rbx, rax
mov rax, qword [rsp + 0x80]
test rax, rax
jne 0x180025532
lea rcx, [rsp + 0x68]
call fcn.180002de0
mov r8, rax
mov rdx, rbx
lea rcx, [rsp + 0x1b0]
call fcn.180027ef0
mov rdx, rax
lea rcx, [rsp + 0xf0]
call fcn.1800017d0
mov rax, qword [rsp + 0x1c8]
movabs rbx, 0x7fffffffffffffff
cmp rax, 8
jb 0x1800255d0
inc rax
mov rcx, qword [rsp + 0x1b0]
cmp rax, rbx
jbe 0x180025583
call fcn.180016dc0
int3
add rax, rax
cmp rax, 0x1000
jb 0x1800255cb
test byte [rsp + 0x1b0], 0x1f
je 0x18002559e
call fcn.180016dc0
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800255ad
call fcn.180016dc0
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800255bc
call fcn.180016dc0
int3
cmp rcx, 0x27
jbe 0x1800255c8
call fcn.180016dc0
int3
mov rcx, rax
call fcn.180012060
mov qword [rsp + 0x1c8], 7
mov qword [rsp + 0x1c0], r13
mov word [rsp + 0x1b0], r13w
mov qword [rsp + 0x68], rsi
mov rcx, qword [rsp + 0x78]
test rcx, rcx
je 0x180025602
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x80]
test rcx, rcx
je 0x180025621
call qword [sym.imp.KERNEL32.dll_LocalFree]
jmp 0x180025621
movabs rbx, 0x7fffffffffffffff
mov r8d, 0x70
lea rcx, [rsp + 0xb0]
call fcn.180027fe0
lea r10, [rsp + 0x1d0]
cmp qword [rsp + 0x1e8], 8
cmovae r10, qword [rsp + 0x1d0]
lea rdx, [rsp + 0xf0]
cmp qword [rsp + 0x108], 8
cmovae rdx, qword [rsp + 0xf0]
lea rcx, [rsp + 0x130]
cmp qword [rsp + 0x148], 8
cmovae rcx, qword [rsp + 0x130]
lea r9, [rsp + 0x150]
cmp qword [rsp + 0x168], 8
cmovae r9, qword [rsp + 0x150]
lea r8, [rsp + 0x170]
cmp qword [rsp + 0x188], 8
cmovae r8, qword [rsp + 0x170]
mov qword [rsp + 0x30], r10
mov qword [rsp + 0x28], rdx
mov qword [rsp + 0x20], rcx
mov rdx, rax
lea rcx, [rsp + 0x110]
call fcn.180027ef0
lea r8, [rsp + 0x190]
cmp qword [rsp + 0x1a8], 8
cmovae r8, qword [rsp + 0x190]
lea rdx, [rsp + 0x110]
cmp qword [rsp + 0x128], 8
cmovae rdx, qword [rsp + 0x110]
mov r9d, 0x30
mov rcx, r12
call qword [sym.imp.USER32.dll_MessageBoxW]
mov rax, qword [rsp + 0x128]
cmp rax, 8
jb 0x180025789
inc rax
mov rcx, qword [rsp + 0x110]
cmp rax, rbx
jbe 0x18002573c
call fcn.180016dc0
int3
add rax, rax
cmp rax, 0x1000
jb 0x180025784
test byte [rsp + 0x110], 0x1f
je 0x180025757
call fcn.180016dc0
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180025766
call fcn.180016dc0
int3
sub rcx, rax
cmp rcx, 8
jae 0x180025775
call fcn.180016dc0
int3
cmp rcx, 0x27
jbe 0x180025781
call fcn.180016dc0
int3
mov rcx, rax
call fcn.180012060
mov qword [rsp + 0x128], 7
mov qword [rsp + 0x120], r13
mov word [rsp + 0x110], r13w
mov rax, qword [rsp + 0x108]
cmp rax, 8
jb 0x180025817
inc rax
mov rcx, qword [rsp + 0xf0]
cmp rax, rbx
jbe 0x1800257ca
call fcn.180016dc0
int3
add rax, rax
cmp rax, 0x1000
jb 0x180025812
test byte [rsp + 0xf0], 0x1f
je 0x1800257e5
call fcn.180016dc0
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x1800257f4
call fcn.180016dc0
int3
sub rcx, rax
cmp rcx, 8
jae 0x180025803
call fcn.180016dc0
int3
cmp rcx, 0x27
jbe 0x18002580f
call fcn.180016dc0
int3
mov rcx, rax
call fcn.180012060
mov qword [rsp + 0x108], 7
mov qword [rsp + 0x100], r13
mov word [rsp + 0xf0], r13w
mov rax, qword [rsp + 0x148]
cmp rax, 8
jb 0x1800258a5
inc rax
mov rcx, qword [rsp + 0x130]
cmp rax, rbx
jbe 0x180025858
call fcn.180016dc0
int3
add rax, rax
cmp rax, 0x1000
jb 0x1800258a0
test byte [rsp + 0x130], 0x1f
je 0x180025873
call fcn.180016dc0
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180025882
call fcn.180016dc0
int3
sub rcx, rax
cmp rcx, 8
jae 0x180025891
call fcn.180016dc0
int3
cmp rcx, 0x27
jbe 0x18002589d
call fcn.180016dc0
int3
mov rcx, rax
call fcn.180012060
mov qword [rsp + 0x148], 7
mov qword [rsp + 0x140], r13
mov word [rsp + 0x130], r13w
mov rax, qword [rsp + 0x168]
cmp rax, 8
jb 0x180025933
inc rax
mov rcx, qword [rsp + 0x150]
cmp rax, rbx
jbe 0x1800258e6
call fcn.180016dc0
int3
add rax, rax
cmp rax, 0x1000
jb 0x18002592e
test byte [rsp + 0x150], 0x1f
je 0x180025901
call fcn.180016dc0
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x180025910
call fcn.180016dc0
int3
sub rcx, rax
cmp rcx, 8
jae 0x18002591f
call fcn.180016dc0
int3
cmp rcx, 0x27
jbe 0x18002592b
call fcn.180016dc0
int3
mov rcx, rax
call fcn.180012060
mov qword [rsp + 0x168], 7
mov qword [rsp + 0x160], r13
mov word [rsp + 0x150], r13w
mov rax, qword [rsp + 0x188]
cmp rax, 8
jb 0x1800259c1
inc rax
mov rcx, qword [rsp + 0x170]
cmp rax, rbx
jbe 0x180025974
call fcn.180016dc0
int3
add rax, rax
cmp rax, 0x1000
jb 0x1800259bc
test byte [rsp + 0x170], 0x1f
je 0x18002598f
call fcn.180016dc0
int3
mov rax, qword [rcx - 8]
cmp rax, rcx
jb 0x18002599e
call fcn.180016dc0
int3
sub rcx, rax
cmp rcx, 8
jae 0x1800259ad
call fcn.180016dc0
int3
cmp rcx, 0x27
jbe 0x1800259b9
call fcn.180016dc0
int3
mov rcx, rax
call fcn.180012060
mov qword [rsp + 0x188], 7
mov qword [rsp + 0x180], r13
mov word [rsp + 0x170], r13w
mov r8, qword [rsp + 0x1a8]
cmp r8, 8
jb 0x1800259fc
inc r8
mov rdx, qword [rsp + 0x190]
call fcn.1800012d0
mov qword [rsp + 0x1a8], 7
mov qword [rsp + 0x1a0], r13
mov word [rsp + 0x190], r13w
lea rcx, [rsp + 0xd0]
call fcn.1800010b0
nop
lea rcx, [rsp + 0x1d0]
call fcn.1800010b0
nop
mov rcx, qword [rsp + 0x1f0]
xor rcx, rsp
call fcn.180012000
add rsp, 0x200
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret