Function at 0x140081000
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 0x18], rbp
mov qword [rsp + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xa0
mov rsi, rcx
mov rcx, r9
mov rbp, r9
mov rdi, r8
mov rbx, rdx
call fcn.140013fc0
lea rcx, [rsi + 0x188]
call fcn.140013fc0
mov r11b, byte [rsp + 0x108]
mov al, byte [rsp + 0x100]
lea rcx, [rsi + 0x18]
mov rdx, rbx
mov byte [rsi + 8], r11b
mov byte [rsi + 9], al
call fcn.140012600
lea rcx, [rsi + 0x38]
mov rdx, rdi
call fcn.140012600
lea rbx, [rsi + 0x148]
lea rdx, [0x14009b6c0]
mov rcx, rbx
call fcn.1400107e0
mov eax, dword [rsp + 0xf0]
xor r13d, r13d
mov edi, 1
lea rcx, [rsp + 0x40]
mov dword [rsi + 0xc], r13d
mov dword [rsi + 0x14], eax
mov dword [rsi + 0x16c], r13d
mov dword [rsi + 0x180], r13d
mov dword [rsi + 0x168], edi
mov byte [rsi + 0x10], dil
call fcn.14000fd50
lea rcx, [rsp + 0x60]
call fcn.14000fd50
lea rcx, [rsp + 0x80]
call fcn.14000fd50
mov ecx, dword [rsi + 0x14]
cmp ecx, r13d
jge 0x1400810e6
call fcn.140017b74
mov byte [rsi + 0x10], r13b
mov dword [rsi + 0x14], eax
cmp dword [rsi + 0x14], 4
jne 0x1400810fb
lea rdx, [rsi + 0x18]
mov rcx, rsi
call fcn.14007b5f0
mov dword [rsi + 0x14], edi
lea rcx, [rsi + 0x18]
call fcn.140042380
cmp al, r13b
je 0x14008113b
lea rcx, [rsi + 0x38]
call fcn.140042380
cmp al, r13b
je 0x14008113b
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rcx, rsi
mov rdx, rax
call fcn.14005aeb0
mov r11, qword [rsi]
mov rcx, qword [r11]
mov qword [rsp + 0xd0], rcx
jmp 0x140081497
lea rcx, [rsi + 0x18]
xor edx, edx
call fcn.140002170
cmp word [rax], 0x5b
jne 0x1400814dc
mov rdx, qword [rsi + 0x20]
lea rcx, [rsi + 0x18]
dec rdx
call fcn.140002170
cmp word [rax], 0x5d
jne 0x1400814dc
mov r13, qword [rsi + 0x20]
mov qword [rsp + 0xd0], rdi
sub r13, 2
lea rax, [rsp + 0xd0]
lea r9, [rsp + 0x60]
lea r8, [rsp + 0x40]
lea rdx, [rsi + 0x18]
mov rcx, rsi
mov qword [rsp + 0x28], r13
mov qword [rsp + 0x20], rax
call fcn.14007b460
test al, al
je 0x1400814d9
lea rdx, str.LAST
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
jne 0x1400814ac
lea rdx, str.ACTIVE
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
jne 0x140081463
lea rdx, [0x14009b9d8]
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
jne 0x140081435
lea rdx, str.REGEXPTITLE
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x140081230
mov eax, dword [rsi + 0xc]
test dil, al
jne 0x140081421
or eax, 2
lea rcx, [rsi + 0x58]
mov dword [rsi + 0xc], eax
call fcn.140001150
lea rdx, [rsp + 0x30]
lea rcx, [rsi + 0x58]
jmp 0x140081282
lea rdx, str.CLASS
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x140081251
or dword [rsi + 0xc], 8
mov rcx, rbx
jmp 0x1400813e7
lea rdx, str.REGEXPCLASS
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x1400812a1
or dword [rsi + 0xc], 0x10
lea rcx, [rsi + 0xd0]
call fcn.140001150
lea rdx, [rsp + 0x38]
lea rcx, [rsi + 0xd0]
lea r8, [rsp + 0x60]
call fcn.14007b210
cmp dword [rax], 0
jne 0x140081417
lea rbx, [rsi + 0x148]
jmp 0x14008117a
lea rdx, str.XYWH
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x1400812d0
mov rcx, qword [rsp + 0x60]
bts dword [rsi + 0xc], 7
call fcn.1400177c4
mov dword [rsi + 0x170], eax
jmp 0x14008117a
lea rdx, [0x14009b8a8]
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x1400812ff
mov rcx, qword [rsp + 0x60]
bts dword [rsi + 0xc], 8
call fcn.1400177c4
mov dword [rsi + 0x174], eax
jmp 0x14008117a
lea rdx, [0x14009b8ac]
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x14008132e
mov rcx, qword [rsp + 0x60]
bts dword [rsi + 0xc], 9
call fcn.1400177c4
mov dword [rsi + 0x178], eax
jmp 0x14008117a
lea rdx, [0x14009b8b0]
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x14008135d
mov rcx, qword [rsp + 0x60]
bts dword [rsi + 0xc], 0xa
call fcn.1400177c4
mov dword [rsi + 0x17c], eax
jmp 0x14008117a
lea rdx, str.INSTANCE
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x14008138b
mov rcx, qword [rsp + 0x60]
or dword [rsi + 0xc], 0x20
call fcn.1400177c4
mov dword [rsi + 0x168], eax
jmp 0x14008117a
lea rdx, [0x14009b9c0]
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x1400813be
lea rdx, [0x14009b6c0]
lea rcx, [rsp + 0x60]
call fcn.1400526a0
test al, al
je 0x14008140f
or dword [rsi + 0xc], 0x40
jmp 0x14008117a
lea rdx, str.TITLE
lea rcx, [rsp + 0x40]
call fcn.1400526a0
test al, al
je 0x1400813f6
mov eax, dword [rsi + 0xc]
test al, 2
jne 0x14008142b
or eax, edi
lea rcx, [rsp + 0x80]
mov dword [rsi + 0xc], eax
lea rdx, [rsp + 0x60]
call fcn.140012600
jmp 0x14008117a
lea rdx, [0x14009b6c0]
lea rcx, [rsp + 0x40]
call fcn.14005af90
test al, al
je 0x14008117a
or edi, 0xffffffff
jmp 0x1400815a0
mov edi, 0xfffffffe
jmp 0x1400815a0
mov edi, 0xfffffffd
jmp 0x1400815a0
mov edi, 0xfffffffc
jmp 0x1400815a0
mov rcx, qword [rsp + 0x60]
lea rdx, [rsp + 0xd0]
call fcn.14003fe00
mov rcx, qword [rsp + 0xd0]
call qword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x1400814d2
mov rdx, qword [rsp + 0xd0]
jmp 0x140081481
lea rdx, [0x14009b6c0]
lea rcx, [rsp + 0x60]
call fcn.1400526a0
test al, al
je 0x14008140f
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov rdx, rax
mov rcx, rsi
call fcn.14005aeb0
mov r11, qword [rsi]
mov rax, qword [r11]
mov qword [rsp + 0xd0], rax
lea rdx, [rsp + 0xd0]
mov rcx, rbp
call fcn.14003e0c0
jmp 0x1400815a0
lea rdx, [0x14009b6c0]
lea rcx, [rsp + 0x60]
call fcn.1400526a0
test al, al
je 0x14008140f
mov rax, qword [rsi]
test rax, rax
je 0x1400814d2
mov rax, qword [rax]
jmp 0x14008148f
xor edi, edi
jmp 0x1400815a0
xor r13d, r13d
lea rcx, [rsp + 0x80]
call fcn.140042380
cmp al, r13b
jne 0x1400814ff
lea rdx, [rsp + 0x80]
lea rcx, [rsi + 0x18]
call fcn.140012600
cmp dword [rsi + 0xc], r13d
jne 0x140081508
mov dword [rsi + 0xc], edi
or dword [rsi + 0xc], 4
cmp byte [rsi + 0x10], r13b
jne 0x14008151b
lea rcx, [rsi + 0x38]
call fcn.1400160a0
test byte [rsi + 0xc], dil
je 0x140081530
cmp byte [rsi + 0x10], r13b
jne 0x140081530
lea rcx, [rsi + 0x18]
call fcn.1400160a0
cmp byte [rsp + 0xf8], r13b
je 0x140081555
call qword [sym.imp.USER32.dll_GetDesktopWindow]
lea rdx, [0x140072560]
mov r8, rsi
mov rcx, rax
call qword [sym.imp.USER32.dll_EnumChildWindows]
jmp 0x140081565
lea rcx, [0x140072560]
mov rdx, rsi
call qword [sym.imp.USER32.dll_EnumWindows]
lea rdx, [rsi + 0x188]
mov rcx, rbp
call fcn.140052260
lea rcx, [rsi + 0x188]
call fcn.140013fc0
cmp dword [rsi + 0x180], edi
jl 0x14008159a
mov rax, qword [rbp + 8]
mov rcx, rsi
mov rdx, qword [rax]
mov rdx, qword [rdx]
call fcn.14005aeb0
mov edi, dword [rsi + 0x180]
lea rcx, [rsp + 0x80]
call fcn.140002610
lea rcx, [rsp + 0x60]
call fcn.140002610
lea rcx, [rsp + 0x40]
call fcn.140002610
lea r11, [rsp + 0xa0]
mov eax, edi
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret