Function at 0x1400034d8
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
push rbp
push r15
push r14
mov rax, 0x19
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x1400034ee
sub rsp, 0x28
call fcn.14003d020
mov rdx, qword [rsp + 0x118]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14003d0f0
add rsp, 0x10
jmp 0x14000353a
movabs rdx, str.msedge.exe
lea rcx, [rsp + 0x30]
call fcn.14003cda0
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push 2
xor rax, rax
push rax
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
push rcx
sub rsp, 0x20
call fcn.14003cc00
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
mov rbp, qword [rsp + 0x148]
push qword [rbp + 0xc]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14002b390
add rsp, 0x20
pop rax
call fcn.14003cef0
push qword [rsp + 0x58]
push rax
call fcn.14003cec0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140028b08
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e50
add rsp, 0x28
pop rax
and rax, rax
je 0x140003bd4
push 0x64
pop rcx
call fcn.14002dc7c
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14003cc00
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.140003c55
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14003ccc0
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rcx, 0x1400dbed2
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
call fcn.14003cef0
push qword [rsp + 0x50]
push rax
call fcn.14003cec0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036cb0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e50
add rsp, 0x28
pop rax
and rax, rax
je 0x1400036e3
mov qword [rsp + 0x48], 1
jmp 0x1400036fd
call fcn.14002dcb0
mov r15, rax
sub r15, qword [rsp + 0x50]
cmp r15, 0x3e8
jle 0x14000360c
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCurrentProcessId
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036c50
add rsp, 0x28
lea rcx, [rsp + 0x48]
pop rdx
call fcn.14003ccc0
cmp qword [rsp + 0x48], 0
je 0x140003a03
mov qword [rsp + 0x58], 1
jmp 0x140003767
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x40]
pop rcx
pop rdx
call fcn.140037060
cmp rax, qword [rsp + 0x58]
jl 0x140003a03
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x78]
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037100
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.14003ccc0
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rcx, 0x1400dbed2
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14003cc50
add rsp, 0x28
call fcn.14003cef0
push qword [rsp + 0x78]
push rax
call fcn.14003cec0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036cb0
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e50
add rsp, 0x28
pop rax
and rax, rax
je 0x1400039f8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push 1
push qword [rsp + 0x98]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140037100
add rsp, 0x28
push rax
call fcn.14003cec0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140037280
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140009e50
add rsp, 0x28
pop rax
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x68], eax
call fcn.14002dcb0
mov qword [rsp + 0x50], rax
push 0x64
pop rcx
call fcn.14002dc7c
movsxd rax, dword [rsp + 0x68]
push rax
pop rax
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov rax, rax
push rax
lea rax, [0x1400047ff]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_EnumWindows
mov r15, qword [rsp + 0x70]
movsxd rax, dword [rsp + 0x68]
cmp r15, rax
je 0x1400039de
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003cc00
add rsp, 0x28
pop rcx
push rax
push 0x104
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140036ee0
add rsp, 0x28
lea rcx, [rsp + 0x80]
pop rdx
call fcn.14003ccc0
push 0x104
mov rax, qword [rsp + 0x80]
mov rax, rax
push rax
push qword [rsp + 0x80]
pop rcx
pop rdx
pop r8
call sub.USER32.dll_GetClassNameW
push qword [rsp + 0x78]
movabs rcx, str.Chrome_WidgetWin_1
pop rdx
call fcn.14003cf70
or rax, rax
je 0x1400039de
mov qword [rsp + 0x80], 1
jmp 0x140003a03
call fcn.14002dcb0
mov r15, rax
sub r15, qword [rsp + 0x50]
cmp r15, 0xfa0
jle 0x14000390b
inc qword [rsp + 0x58]
jno 0x140003767
cmp qword [rsp + 0x80], 0
je 0x140003bd4
push qword [rsp + 0x70]
mov rbp, qword [rsp + 0x118]
pop rax
mov dword [rbp + 0x30], eax
push 0x42010000
push 0xfffffffffffffff0
mov rbp, qword [rsp + 0x120]
movsxd rax, dword [rbp + 0x30]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call sub.USER32.dll_SetWindowLongPtrW
mov rbp, qword [rsp + 0x110]
movsxd rax, dword [rbp]
mov rax, rax
push rax
mov rbp, qword [rsp + 0x118]
movsxd rax, dword [rbp + 0x30]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_SetParent
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
je 0x140003bc5
lea rax, [rsp + 0x90]
mov rax, rax
push rax
mov rbp, qword [rsp + 0x118]
movsxd rax, dword [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_GetWindowPlacement
lea rbp, [rsp + 0x90]
movsxd r15, dword [rbp + 0x24]
movsxd rcx, dword [rbp + 0x1c]
sub r15, rcx
mov qword [rsp + 0xc0], r15
movsxd r15, dword [rbp + 0x28]
movsxd rcx, dword [rbp + 0x20]
sub r15, rcx
mov qword [rsp + 0xc8], r15
call fcn.14003aedc
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400e3280]
fistp qword [rsp + 0xd0]
call fcn.14003aedc
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400e3288]
fistp qword [rsp + 0xd8]
mov r15, qword [rsp + 0xc0]
call fcn.14003aedc
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400e3290]
mov qword [rsp - 8], r15
fild qword [rsp - 8]
faddp st(1)
fadd qword [0x1400e3270]
fistp qword [rsp + 0xe0]
mov r15, qword [rsp + 0xc8]
call fcn.14003aedc
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400e3298]
mov qword [rsp - 8], r15
fild qword [rsp - 8]
faddp st(1)
fadd qword [0x1400e3270]
fistp qword [rsp + 0xe8]
sub rsp, 8
push 0x44
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push 0
mov rbp, qword [rsp + 0x148]
movsxd rax, dword [rbp + 0x30]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.USER32.dll_SetWindowPos
add rsp, 0x40
jmp 0x140003bd4
mov rbp, qword [rsp + 0x110]
mov dword [rbp + 0x30], 0
xor rax, rax
push rax
mov rcx, qword [rsp + 0x68]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
mov rcx, qword [rsp + 0x80]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14003d0c0
add rsp, 0x28
pop rax
add rsp, 0xf0
pop r14
pop r15
pop rbp
ret