Function at 0x140003039
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push r15
mov rax, 0xa
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x140003048
sub rsp, 0x28
mov rdx, qword [rsp + 0x90]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14000cfb0
add rsp, 0x10
push qword [rsp + 0x28]
pop rcx
call fcn.1400059f0
mov r15, rax
and r15, r15
jne 0x1400030d5
push qword [0x140013c20]
sub rsp, 8
push qword [0x140013c20]
sub rsp, 8
sub rsp, 0x20
call fcn.14000c320
add rsp, 0x28
mov rax, rax
push rax
movabs rax, str._yyyy_mm_dd__hh_ii_ss
push rax
pop rcx
pop rdx
pop r8
sub rsp, 0x20
call fcn.14000c8b4
add rsp, 0x28
lea rcx, [rsp + 0x30]
pop rdx
call fcn.14000ccf0
push 0
lea rax, [0x140002f0a]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.DLL_EnumWindows
push 5
push 0
push 0
push qword [0x140013a70]
pop rcx
pop rdx
pop r8
pop r9
call fcn.1400066c0
push 8
push 8
push 2
push qword [0x140013a70]
pop rcx
pop rdx
pop r8
pop r9
call fcn.1400066c0
push 5
push 0
push 0
push qword [0x140013a80]
pop rcx
pop rdx
pop r8
pop r9
call fcn.1400066c0
push 8
push 8
push 2
push qword [0x140013a80]
pop rcx
pop rdx
pop r8
pop r9
call fcn.1400066c0
movabs rdx, 0x140011028
lea rcx, [rsp + 0x30]
call fcn.14000cdc0
mov rcx, qword [0x140013a70]
call fcn.140009dec
mov rcx, qword [0x140013a70]
call fcn.140009e00
or rax, rax
je 0x140003230
mov rcx, qword [rsp + 0x30]
push qword [0x140013c20]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
push qword [0x140013c20]
push qword [0x140013c20]
mov rbp, qword [0x140013a78]
movsxd rax, dword [rbp + 0x10]
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140005a10
add rsp, 0x20
pop rax
movabs rcx, 0x140011034
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rbp + 0x18]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
lea rcx, [rsp + 0x38]
pop rdx
call fcn.14000ccf0
jmp 0x14000318c
movabs rdx, 0x140011028
lea rcx, [rsp + 0x38]
call fcn.14000cdc0
mov rcx, qword [0x140013a80]
call fcn.140009dec
mov rcx, qword [0x140013a80]
call fcn.140009e00
or rax, rax
je 0x1400032f4
mov rcx, qword [rsp + 0x38]
push qword [0x140013c20]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
push qword [0x140013c20]
push qword [0x140013c20]
mov rbp, qword [0x140013a88]
movsxd rax, dword [rbp + 0x10]
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140005a10
add rsp, 0x20
pop rax
movabs rcx, 0x140011034
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rbp + 0x18]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14000ccf0
jmp 0x140003250
push qword [0x140013c20]
movabs rcx, 0x140011104
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
push qword [0x140013c20]
push qword [0x140013c20]
pop rcx
sub rsp, 0x20
call fcn.140005118
add rsp, 0x20
pop rax
lea rcx, [rsp + 0x48]
pop rdx
call fcn.14000ccf0
movabs rdx, 0x14001139a
lea rcx, [rsp + 0x48]
call fcn.14000cdc0
movabs rdx, 0x1400122ce
lea rcx, [rsp + 0x50]
call fcn.14000cdc0
push qword [0x140013c20]
sub rsp, 8
push qword [0x140013c20]
sub rsp, 8
push qword [rsp + 0x68]
pop rcx
sub rsp, 0x20
call fcn.1400059f0
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140005990
add rsp, 0x28
lea rcx, [rsp + 0x60]
pop rdx
call fcn.14000ccf0
push qword [0x140013c20]
sub rsp, 8
push qword [0x140013c20]
movabs rax, 0x140011392
push rax
movabs rax, 0x1400110fc
push rax
push qword [rsp + 0x80]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140005b10
add rsp, 0x28
lea rcx, [rsp + 0x60]
pop rdx
call fcn.14000ccf0
mov rcx, qword [rsp + 0x40]
push qword [0x140013c20]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x1400117fa
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x50]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.14000ccf0
mov rcx, qword [rsp + 0x60]
push qword [0x140013c20]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.14000ccf0
mov rcx, qword [rsp + 0x60]
push qword [0x140013c20]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, 0x14001277e
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.14000ccf0
mov rcx, qword [rsp + 0x60]
push qword [0x140013c20]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.14000ccf0
push qword [0x140013c20]
sub rsp, 8
push qword [0x140013c20]
push qword [0x140013c20]
push qword [0x140013c20]
pop rcx
sub rsp, 0x20
call fcn.140008e30
add rsp, 0x20
mov rdx, qword [0x140013c30]
add qword [rsp], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.14000a1ec
add rsp, 0x28
movabs rcx, str.WindowsList_
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
movabs rcx, str..txt
sub rsp, 0x28
call fcn.14000cf10
add rsp, 0x28
lea rcx, [rsp + 0x70]
pop rdx
call fcn.14000ccf0
sub rsp, 8
push 0
push 2
push 0
push qword [rsp + 0x88]
push qword [rsp + 0x88]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140002d99
add rsp, 0x30
push qword [rsp + 0x68]
pop rcx
call fcn.140008f20
xor rax, rax
push rax
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x68]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x50]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x60]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
mov rcx, qword [rsp + 0x70]
sub rsp, 0x28
call fcn.14000cf80
add rsp, 0x28
pop rax
add rsp, 0x78
pop r15
pop rbp
ret