Function at 0x1800103c0
Capabilities:
Enumerate gui resources

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x90
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov r12, rdx
mov r13, rcx
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov edi, eax
lea r14, [0x180000000]
mov r8d, dword [0x180092d88]
cmp eax, r8d
jb 0x180010425
add r8d, 0x3e8
cmp eax, r8d
jae 0x180010425
mov r8d, dword [0x180092d84]
mov r9d, dword [0x180092d80]
jmp 0x18001048a
mov r9d, dword [0x180092d80]
mov r8d, dword [0x180092d84]
lea edx, [r9 + r8 - 1]
cmp edx, r8d
jl 0x180010484
nop dword [rax]
mov eax, edx
and eax, 0x1f
movsxd rcx, eax
mov eax, dword [r14 + rcx*4 + 0x92d00]
cmp edi, eax
jb 0x180010466
add eax, 0x3e8
cmp edi, eax
jae 0x180010466
dec edx
cmp edx, r8d
jge 0x180010440
jmp 0x180010484
sub r8d, edx
lea r9d, [r9 + r8 - 1]
mov dword [0x180092d80], r9d
lea r8d, [rdx + 1]
and r8d, 0x1f
mov dword [0x180092d84], r8d
mov dword [0x180092d88], edi
xor ebx, ebx
mov esi, ebx
lea r15d, [rbx + 1]
mov eax, dword [0x180092cf4]
cmp edi, eax
jb 0x1800104a9
add eax, 0x2710
cmp edi, eax
jb 0x1800105d1
lea r9, str.SendRectMessage_0
lea r8, str.Thook
or edx, 0xffffffff
lea rcx, [0x180092038]
call fcn.180011f30
call fcn.18000e480
test eax, eax
je 0x18001059c
lea rcx, [0x180092a88]
call fcn.18000fba0
test eax, eax
sete sil
test esi, esi
jne 0x18001056f
lea rcx, [rsp + 0x58]
call fcn.18000fb90
nop
mov r8d, r15d
lea rdx, [0x180092aa0]
lea rcx, [rsp + 0x70]
call fcn.18001e400
nop
lea rdx, [0x180092a88]
lea rcx, [rsp + 0x58]
call fcn.180010100
nop
lea rcx, [rsp + 0x70]
call fcn.18001e480
lea rcx, [rsp + 0x58]
call fcn.18000fba0
mov ebp, eax
test eax, eax
jle 0x18001055f
nop dword [rax]
mov edx, ebx
lea rcx, [rsp + 0x58]
call fcn.18000fe60
mov rcx, qword [rax]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x18001055f
inc ebx
cmp ebx, ebp
jl 0x180010540
cmp ebx, ebp
cmovl esi, r15d
lea rcx, [rsp + 0x58]
call fcn.18000fe70
lea rcx, [0x180092a88]
call fcn.18000fba0
mov dword [rsp + 0x20], eax
lea r9, str.SendRectMessage_0_1___d_
lea r8, str.Thook
or edx, 0xffffffff
lea rcx, [0x180092038]
call fcn.180011f30
mov dword [rsp + 0x20], esi
lea r9, str.SendRectMessage_0_2__bFast_d_
lea r8, str.Thook
or edx, 0xffffffff
lea rcx, [0x180092038]
call fcn.180011f30
mov dword [0x180092cf4], edi
mov r8d, dword [0x180092d84]
mov r9d, dword [0x180092d80]
mov eax, dword [0x180092cf0]
cmp edi, eax
jb 0x1800105ec
add eax, 0xea60
cmp edi, eax
jae 0x1800105ec
test esi, esi
je 0x18001069b
call fcn.18000e480
test eax, eax
je 0x18001065a
lea rcx, [rsp + 0x58]
call fcn.18000fb90
nop
lea rdx, [rsp + 0x58]
lea rcx, [0x180010150]
call qword [sym.imp.USER32.dll_EnumWindows]
mov r8d, r15d
lea rdx, [0x180092aa0]
lea rcx, [rsp + 0x70]
call fcn.18001e400
nop
lea rcx, [0x180092a88]
call fcn.1800100d0
lea rdx, [rsp + 0x58]
lea rcx, [0x180092a88]
call fcn.180010100
nop
lea rcx, [rsp + 0x70]
call fcn.18001e480
nop
lea rcx, [rsp + 0x58]
call fcn.18000fe70
lea rcx, [0x180092a88]
call fcn.18000fba0
mov dword [rsp + 0x20], eax
lea r9, str.SendRectMessage_0_3___d_
lea r8, str.Thook
or edx, 0xffffffff
lea rcx, [0x180092038]
call fcn.180011f30
mov dword [0x180092cf0], edi
mov r8d, dword [0x180092d84]
mov r9d, dword [0x180092d80]
mov ecx, r8d
lea r10d, [r9 + r8]
cmp r8d, r10d
jge 0x1800106d7
nop word [rax + rax]
mov eax, ecx
and eax, 0x1f
movsxd rdx, eax
cmp qword [r14 + rdx*8 + 0x92bf0], r13
jne 0x1800106d0
cmp qword [r14 + rdx*8 + 0x92af0], r12
je 0x180010786
inc ecx
cmp ecx, r10d
jl 0x1800106b0
cmp ecx, r9d
jl 0x18001071f
cmp r9d, 0x20
jge 0x1800106ee
inc r9d
mov dword [0x180092d80], r9d
jmp 0x1800106fc
inc r8d
and r8d, 0x1f
mov dword [0x180092d84], r8d
lea eax, [r9 + r8 - 1]
and eax, 0x1f
movsxd rcx, eax
mov qword [r14 + rcx*8 + 0x92bf0], r13
mov qword [r14 + rcx*8 + 0x92af0], r12
mov dword [r14 + rcx*4 + 0x92d00], edi
mov r9, r12
mov r8, r13
mov edx, dword [0x18009f05c]
mov ecx, dword [section.ThooksV3]
call qword [sym.imp.USER32.dll_PostThreadMessageA]
mov ebx, eax
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [rsp + 0x48], eax
mov qword [rsp + 0x40], r12
mov qword [rsp + 0x38], r13
mov r9d, dword [0x18009f05c]
mov dword [rsp + 0x30], r9d
mov r9d, dword [section.ThooksV3]
mov dword [rsp + 0x28], r9d
mov dword [rsp + 0x20], ebx
lea r9, str.SendRectMessage_1__0x_lx__lu__lu__lu__lu__lu_
lea r8, str.Thook
or edx, 0xffffffff
lea rcx, [0x180092038]
call fcn.180011f30
lea r11, [rsp + 0x90]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret