Function at 0x14038ae20
Capabilities:
Enumerate gui resources

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0x68
lea rbp, [rsp + 0x60]
mov dword [rbp - 0x24], ecx
mov rax, qword [0x140ad7868]
xor rax, rbp
mov qword [rbp], rax
mov eax, dword [0x140ae0ef8]
mov ecx, dword [0x140ae0efc]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete byte [rbp - 1]
cmp ecx, 0xa
setl byte [rbp - 2]
mov eax, 0xd84f40fe
mov r12d, 0xa9c6c012
mov r14d, 0x56f058ca
mov r13d, 0x3d0acb8
jmp 0x14038aeb0
mov eax, dword [0x140ae0ef8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbb18b7f
mov ecx, 0x1b6d50bf
cmove eax, ecx
cmp dword [0x140ae0efc], 0xa
cmovl eax, ecx
nop word cs:[rax + rax]
nop
cmp eax, 0xbb18b7e
jg 0x14038af20
cmp eax, 0xce6ecd42
jg 0x14038af90
cmp eax, 0xb3629b20
jle 0x14038b030
cmp eax, 0xb3629b21
je 0x14038ae7f
cmp eax, 0xb4d0503a
je 0x14038b0d5
cmp eax, 0xc4404806
jne 0x14038aeb0
mov eax, reloc.WS2_32.dll_recv
call fcn.140616310
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x20], rax
mov eax, reloc.WS2_32.dll_recv
call fcn.140616310
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x30]
mov ecx, dword [rbp - 0x24]
mov dword [rax], ecx
mov eax, 0xb4d0503a
jmp 0x14038aeb0
cmp eax, 0x56ad0630
jg 0x14038aff0
cmp eax, 0x26272c95
jle 0x14038b050
cmp eax, 0x26272c96
je 0x14038b10a
cmp eax, 0x3381f95a
je 0x14038b114
cmp eax, 0x4b9977e5
jne 0x14038aeb0
mov qword [rbp - 0x58], r15
mov rax, qword [rbp - 0x40]
mov eax, dword [0x140ae0ef8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6677b5d9
cmove eax, r13d
cmp dword [0x140ae0efc], 0xa
cmovl eax, r13d
jmp 0x14038aeb0
cmp eax, 0xd84f40fd
jle 0x14038b08e
cmp eax, 0xd84f40fe
je 0x14038b12a
cmp eax, 0xfeb0e071
je 0x14038b148
cmp eax, 0x3d0acb8
jne 0x14038aeb0
mov eax, dword [0x140ae0ef8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x6677b5d9
cmove eax, r12d
cmp dword [0x140ae0efc], 0xa
cmovl eax, r12d
jmp 0x14038aeb0
cmp eax, 0x6677b5d8
jle 0x14038b0b1
cmp eax, 0x6677b5d9
je 0x14038b18e
cmp eax, 0x69140172
je 0x14038b198
cmp eax, 0x7ab28181
jne 0x14038aeb0
mov eax, dword [rbp - 0x28]
cmp eax, 0xffffffff
sete byte [rbp - 3]
mov eax, 0xce6ecd43
jmp 0x14038aeb0
cmp eax, 0x83ec1a97
je 0x14038b1b3
cmp eax, 0x8e89efc6
jne 0x14038b393
mov eax, 0xfeb0e071
jmp 0x14038aeb0
cmp eax, 0xbb18b7f
je 0x14038b1c5
cmp eax, 0x1b6d50bf
jne 0x14038aeb0
mov eax, dword [0x140ae0ef8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xbb18b7f
cmove eax, r14d
cmp dword [0x140ae0efc], 0xa
cmovl eax, r14d
jmp 0x14038aeb0
cmp eax, 0xce6ecd43
je 0x14038b1cf
cmp eax, 0xd5df74dd
jne 0x14038aeb0
mov eax, 0x4b9977e5
xor r15d, r15d
jmp 0x14038aeb0
cmp eax, 0x56ad0631
je 0x14038b1e5
cmp eax, 0x56f058ca
jne 0x14038aeb0
mov eax, 0x4b9977e5
mov r15, qword [rbp - 0x48]
jmp 0x14038aeb0
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x40], rax
mov rax, qword [rbp - 0x40]
mov rax, qword [rbp - 0x20]
mov rax, qword [rbp - 0x20]
mov qword [rax], 0
mov rax, qword [rbp - 0x30]
mov rcx, qword [rbp - 0x10]
mov rdx, qword [rbp - 0x20]
lea rbx, [rcx + 8]
mov edi, 0x520b10bc
jmp 0x14038b230
mov eax, 0xc4404806
jmp 0x14038aeb0
cmp byte [rbp - 4], 0
mov eax, 0xd5df74dd
mov ecx, 0xb3629b21
cmovne eax, ecx
jmp 0x14038aeb0
mov cl, byte [rbp - 1]
cmp byte [rbp - 2], 0
mov eax, 0x8e89efc6
mov edx, 0xfeb0e071
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x14038aeb0
mov eax, reloc.WS2_32.dll_recv
call fcn.140616310
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x30], rax
mov eax, reloc.WS2_32.dll_recv
call fcn.140616310
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x10], rax
mov eax, dword [0x140ae0ef8]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8e89efc6
mov ecx, 0x26272c96
jmp 0x14038ae98
mov eax, 0x3d0acb8
jmp 0x14038aeb0
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetLastError]
add rsp, 0x20
mov dword [rbp - 0x28], eax
mov eax, 0x7ab28181
jmp 0x14038aeb0
mov rax, qword [rbp - 0x10]
mov qword [rbp - 0x50], rax
mov eax, 0x56ad0631
jmp 0x14038aeb0
mov eax, 0x1b6d50bf
jmp 0x14038aeb0
cmp byte [rbp - 3], 0
mov eax, 0xd5df74dd
mov ecx, 0x83ec1a97
cmovne eax, ecx
jmp 0x14038aeb0
mov rax, qword [rbp - 0x50]
mov rax, qword [rax]
mov qword [rbp - 0x48], rax
cmp qword [rbp - 0x48], 0
setne byte [rbp - 4]
mov eax, 0x3381f95a
jmp 0x14038aeb0
mov edi, dword [0x140ae0f00]
lea esi, [rdi - 1]
imul esi, edi
test sil, 1
mov edi, 0x49073cf5
mov esi, 0x72c4bbd
cmove edi, esi
cmp dword [0x140ae0f04], 0xa
cmovl edi, esi
nop word [rax + rax]
cmp edi, 0x72c4bbc
jle 0x14038b270
cmp edi, 0x72c4bbd
je 0x14038b282
cmp edi, 0x49073cf5
je 0x14038b2aa
cmp edi, 0x520b10bc
jne 0x14038b230
mov rdi, qword [rdx]
mov qword [rcx], rdi
mov qword [rbp - 0x18], rbx
mov edi, dword [rax]
mov dword [rbp - 8], edi
mov edi, 0xd2bfb8e7
jmp 0x14038b230
cmp edi, 0xacefc9bb
je 0x14038b2bd
cmp edi, 0xd2bfb8e7
jne 0x14038b230
jmp 0x14038b203
mov rdi, qword [rbp - 0x18]
mov esi, dword [rbp - 8]
mov dword [rdi], esi
mov edi, dword [0x140ae0f00]
lea esi, [rdi - 1]
imul esi, edi
test sil, 1
mov edi, 0x49073cf5
mov esi, 0xacefc9bb
jmp 0x14038b21d
mov rdi, qword [rbp - 0x18]
mov esi, dword [rbp - 8]
mov dword [rdi], esi
mov edi, 0x72c4bbd
jmp 0x14038b230
mov rdx, qword [rbp - 0x10]
mov rax, qword [rbp - 0x38]
mov rax, qword [rbp - 0x38]
mov eax, dword [0x140ae0920]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
sete byte [rbp - 8]
mov ecx, dword [0x140ae0924]
mov eax, 0x5147fd2f
mov ebx, 0x6c6e2e1b
cmove eax, ebx
cmp ecx, 0xa
setl byte [rbp - 0x18]
cmovl eax, ebx
mov ecx, 0xb5a60b94
nop
cmp ecx, 0x5147fd2e
jle 0x14038b330
cmp ecx, 0x5147fd2f
je 0x14038b35c
cmp ecx, 0x6c6e2e1b
je 0x14038b363
cmp ecx, 0x6f3c2a35
jne 0x14038b300
mov ecx, eax
jmp 0x14038b300
cmp ecx, 0xa462c4a5
je 0x14038b36a
cmp ecx, 0xb5a60b94
jne 0x14038b300
movzx ebx, byte [rbp - 8]
cmp byte [rbp - 0x18], 0
mov ecx, 0x5147fd2f
mov edi, 0x6f3c2a35
cmovne ecx, edi
test bl, bl
cmovne ecx, edi
jmp 0x14038b300
mov ecx, 0x6f3c2a35
jmp 0x14038b300
mov ecx, 0xa462c4a5
jmp 0x14038b300
sub rsp, 0x20
lea rcx, [0x1405a3a40]
call qword [sym.imp.USER32.dll_EnumWindows]
add rsp, 0x20
test eax, eax
mov eax, 0xd5df74dd
mov ecx, 0x69140172
cmove eax, ecx
jmp 0x14038aeb0
cmp eax, 0xa9c6c012
jne 0x14038aeb0
mov rsi, qword [rbp - 0x58]
mov rcx, qword [rbp]
xor rcx, rbp
sub rsp, 0x20
call fcn.140616370
add rsp, 0x20
mov rax, rsi
lea rsp, [rbp + 8]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret