Function at 0x140393490
Capabilities:
Enumerate gui resources

Disassembly:
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbp
push rbx
sub rsp, 0x78
mov esi, ecx
mov rax, qword [0x140b74de8]
xor rax, rsp
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x60]
mov qword [rsp + 0x40], rax
mov rax, qword [rsp + 0x40]
lea rax, [rsp + 0x58]
mov qword [rsp + 0x30], rax
mov eax, 0x97759a5f
lea r13, [rsp + 0x68]
mov r12, qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebp, 0x540bd177
mov r15d, 0xc79ff150
mov ebx, 0x4c794f8d
jmp 0x14039351d
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x545dc5b2
mov ecx, 0xb445e620
nop word cs:[rax + rax]
cmove eax, ecx
cmp dword [0x140b7ea24], 0xa
cmovl eax, ecx
cmp eax, 0xfebeaf9d
jg 0x140393620
cmp eax, 0x9e1beac5
jle 0x140393720
cmp eax, 0xb5ddef92
jle 0x1403938ca
cmp eax, 0xd383b424
jg 0x14039399f
cmp eax, 0xb5ddef93
je 0x1403939de
cmp eax, 0xd2cfccd4
jne 0x14039351d
mov qword [rsp + 0x58], 0
mov eax, 0xc188e63e
nop dword [rax]
cmp eax, 0xf44e3f7f
jle 0x1403935c0
cmp eax, 0xf44e3f80
je 0x1403935d3
cmp eax, 0x4e7f5a24
je 0x1403935e1
cmp eax, 0x540bd177
jne 0x140393570
mov rax, qword [rsp + 0x28]
mov dword [rax], esi
mov eax, dword [0x140b7ea28]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf44e3f80
cmove eax, r15d
cmp dword [0x140b7ea2c], 0xa
cmovl eax, r15d
jmp 0x140393570
cmp eax, 0xc188e63e
je 0x140393607
cmp eax, 0xc79ff150
jne 0x140393570
jmp 0x1403939e8
mov rax, qword [rsp + 0x28]
mov dword [rax], esi
mov eax, 0x540bd177
jmp 0x140393570
mov eax, dword [0x140b7ea28]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf44e3f80
cmove eax, ebp
cmp dword [0x140b7ea2c], 0xa
cmovl eax, ebp
jmp 0x140393570
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x28], r13
mov eax, 0x4e7f5a24
jmp 0x140393570
cmp eax, 0x4cd38888
jle 0x140393880
cmp eax, 0x5cfc056b
jle 0x1403938f8
cmp eax, 0x73115b49
jg 0x1403939c9
cmp eax, 0x5cfc056c
je 0x1403939f7
cmp eax, 0x5db668bc
jne 0x14039351d
mov qword [rsp + 0x58], 0
mov eax, 0xc188e63e
nop word cs:[rax + rax]
nop
cmp eax, 0xf44e3f7f
jle 0x1403936c0
cmp eax, 0xf44e3f80
je 0x1403936d3
cmp eax, 0x4e7f5a24
je 0x1403936e1
cmp eax, 0x540bd177
jne 0x140393670
mov rax, qword [rsp + 0x28]
mov dword [rax], esi
mov eax, dword [0x140b7ea28]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf44e3f80
cmove eax, r15d
cmp dword [0x140b7ea2c], 0xa
cmovl eax, r15d
jmp 0x140393670
cmp eax, 0xc188e63e
je 0x140393707
cmp eax, 0xc79ff150
jne 0x140393670
jmp 0x140393a0d
mov rax, qword [rsp + 0x28]
mov dword [rax], esi
mov eax, 0x540bd177
jmp 0x140393670
mov eax, dword [0x140b7ea28]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xf44e3f80
cmove eax, ebp
cmp dword [0x140b7ea2c], 0xa
cmovl eax, ebp
jmp 0x140393670
mov rax, qword [rsp + 0x58]
mov qword [rsp + 0x60], rax
mov qword [rsp + 0x28], r13
mov eax, 0x4e7f5a24
jmp 0x140393670
cmp eax, 0x946032e1
jg 0x140393930
cmp eax, 0x8268cb8b
je 0x140393a3a
cmp eax, 0x8954ac8e
je 0x140393a44
cmp eax, 0x8bc5d20c
jne 0x14039351d
mov eax, dword [0x140b7e4b8]
mov ecx, dword [0x140b7e4bc]
lea edx, [rax - 1]
imul edx, eax
test dl, 1
sete al
sete byte [rsp + 0x27]
cmp ecx, 0xa
setl cl
setl byte [rsp + 0x28]
or cl, al
mov eax, 0x9e0871a9
mov ecx, 0xa63004f6
cmovne eax, ecx
mov ecx, 0x9e0871a9
mov edx, 0x95e6a0d9
cmovne ecx, edx
mov edi, 0xb8a4b5a5
mov edx, 0x1948b1a7
cmovne edi, edx
mov ebp, 0x89d01a12
jmp 0x1403937b0
mov ebp, 0x4c794f8d
nop dword [rax]
mov edx, ebp
cmp ebp, 0xb8a4b5a4
jle 0x1403937e0
cmp edx, 0x4c794f8c
jg 0x140393800
cmp edx, 0xb8a4b5a5
je 0x1403937a4
mov ebp, edx
cmp edx, 0x1948b1a7
jne 0x1403937b0
mov ebp, 0x56971d3f
jmp 0x1403937b0
cmp edx, 0x9e0871a8
jg 0x140393818
cmp edx, 0x89d01a12
je 0x140393827
mov ebp, edx
cmp edx, 0x95e6a0d9
jne 0x1403937b0
mov ebp, eax
jmp 0x1403937b0
mov ebp, edi
cmp edx, 0x4c794f8d
je 0x1403937b0
mov ebp, edx
cmp edx, 0x56971d3f
jne 0x1403937b0
mov ebp, ecx
jmp 0x1403937b0
cmp edx, 0x9e0871a9
jne 0x140393847
mov ebp, 0x95e6a0d9
jmp 0x1403937b0
movzx edx, byte [rsp + 0x27]
cmp byte [rsp + 0x28], 0
mov ebp, 0x4c794f8d
jne 0x14039383d
mov ebp, 0xb8a4b5a5
test dl, dl
cmovne ebp, ebx
jmp 0x1403937b0
mov ebp, edx
cmp edx, 0xa63004f6
jne 0x1403937b0
mov rdx, qword [rsp + 0x50]
lea rcx, [0x1406260c0]
call qword [sym.imp.USER32.dll_EnumWindows]
test eax, eax
mov eax, 0x34fb0f95
mov ecx, 0x4c2cd627
cmove eax, ecx
mov ebp, 0x540bd177
jmp 0x14039351d
cmp eax, 0x3ba5e147
jg 0x140393960
cmp eax, 0xfebeaf9e
je 0x140393a51
cmp eax, 0x24f3a2c7
je 0x140393a76
cmp eax, 0x34fb0f95
jne 0x14039351d
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x545dc5b2
mov ecx, 0xac595a04
jmp 0x140393510
cmp eax, 0x9e1beac6
je 0x140393a8d
cmp eax, 0xac595a04
je 0x1403934ed
cmp eax, 0xb445e620
jne 0x14039351d
mov eax, 0x74136066
xor r14d, r14d
jmp 0x14039351d
cmp eax, 0x4cd38889
je 0x140393aab
cmp eax, 0x545dc5b2
je 0x140393ac9
cmp eax, 0x55e1b265
jne 0x14039351d
cmp byte [rsp + 0x26], 0
mov eax, 0x34fb0f95
mov ecx, 0x9d555493
cmovne eax, ecx
jmp 0x14039351d
cmp eax, 0x946032e2
je 0x140393ad3
cmp eax, 0x97759a5f
je 0x140393af1
cmp eax, 0x9d555493
jne 0x14039351d
mov eax, 0x74136066
mov r14, qword [rsp + 0x48]
jmp 0x14039351d
cmp eax, 0x3ba5e148
je 0x140393b14
cmp eax, 0x4b371561
je 0x140393b1e
cmp eax, 0x4c2cd627
jne 0x14039351d
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8954ac8e
mov ecx, 0xfebeaf9e
jmp 0x140393510
cmp eax, 0xd383b425
je 0x140393b33
cmp eax, 0xf237bb05
jne 0x14039351d
mov rax, qword [rsp + 0x60]
mov qword [rsp + 0x48], rax
mov eax, 0x4b371561
jmp 0x14039351d
cmp eax, 0x73115b4a
jne 0x140393b51
mov eax, 0x5cfc056c
jmp 0x14039351d
mov eax, 0x4cd38889
jmp 0x14039351d
mov rax, qword [rsp + 0x30]
mov eax, 0x5db668bc
jmp 0x14039351d
mov eax, dword [rsp + 0x3c]
cmp eax, 0xffffffff
sete byte [rsp + 0x25]
mov eax, 0x946032e2
jmp 0x14039351d
mov rax, qword [rsp + 0x30]
lea rax, [rsp + 0x60]
mov qword [rsp + 0x50], rax
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2cfccd4
mov ecx, 0x3ba5e148
jmp 0x140393510
mov eax, 0x9e1beac6
jmp 0x14039351d
call r12
mov eax, 0xfebeaf9e
jmp 0x14039351d
call r12
mov dword [rsp + 0x3c], eax
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8954ac8e
mov ecx, 0x73115b4a
jmp 0x140393510
cmp byte [rsp + 0x25], 0
mov eax, 0x34fb0f95
mov ecx, 0xf237bb05
cmovne eax, ecx
jmp 0x14039351d
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8268cb8b
mov ecx, 0x55e1b265
jmp 0x140393510
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb5ddef93
mov ecx, 0x24f3a2c7
jmp 0x140393510
mov eax, 0xac595a04
jmp 0x14039351d
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xb5ddef93
mov ecx, 0x4cd38889
jmp 0x140393510
mov rax, qword [rsp + 0x30]
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0xd2cfccd4
mov ecx, 0x5db668bc
jmp 0x140393510
mov eax, 0x8bc5d20c
jmp 0x14039351d
cmp qword [rsp + 0x48], 0
setne byte [rsp + 0x26]
mov eax, 0xd383b425
jmp 0x14039351d
mov eax, dword [0x140b7ea20]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x8268cb8b
mov ecx, 0x9e1beac6
jmp 0x140393510
cmp eax, 0x74136066
jne 0x14039351d
mov rax, qword [rsp + 0x40]
mov rcx, qword [rsp + 0x70]
xor rcx, rsp
call fcn.1406ad9c0
mov rax, r14
add rsp, 0x78
pop rbx
pop rbp
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
ret