Function at 0x180010f40
Capabilities:
Enumerate gui resources

Disassembly:
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x230
mov rax, qword [0x180092078]
xor rax, rsp
mov qword [rsp + 0x228], rax
mov edi, r9d
mov r15d, r8d
mov r14d, edx
mov esi, ecx
call fcn.180010220
test eax, eax
jne 0x180011686
call qword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [rsp + 0xb0], eax
xor r13d, r13d
mov qword [rsp + 0xb8], r13
lea rdx, [rsp + 0xb0]
lea rcx, [0x18000ebc0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov r12, qword [rsp + 0xb8]
mov qword [rsp + 0x48], r12
lea rcx, [rsp + 0x100]
call fcn.18000ed60
nop
lea rdx, [rsp + 0x100]
lea rcx, [rsp + 0xe0]
call fcn.180003de8
nop
lea rcx, [rsp + 0xe0]
call fcn.1800116e0
lea rbx, [rsp + 0xe0]
cmp qword [rsp + 0xf8], 8
cmovae rbx, qword [rsp + 0xe0]
lea rax, [rsp + 0x90]
mov qword [rsp + 0x40], rax
lea r8d, [r13 + 0x6c]
mov rdx, qword [0x1800a6d60]
lea rcx, [rsp + 0x90]
call fcn.1800104a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x1c0]
call fcn.18000ec60
nop
mov r8d, esi
mov rdx, qword [0x1800a6d60]
lea rcx, [rsp + 0x1a0]
call fcn.1800104a0
nop
mov r8d, r14d
mov rdx, qword [0x1800a6d60]
lea rcx, [rsp + 0x180]
call fcn.1800104a0
nop
mov r8d, r15d
mov rdx, qword [0x1800a6d60]
lea rcx, [rsp + 0x160]
call fcn.1800104a0
nop
mov qword [rsp + 0xc0], r13
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], r13
xor r8d, r8d
lea rdx, [0x180062b98]
lea rcx, [rsp + 0xc0]
call fcn.18000bc80
nop
test edi, edi
je 0x1800111d4
xorps xmm0, xmm0
movups xmmword [rsp + 0x120], xmm0
movups xmmword [rsp + 0x130], xmm0
lea rsi, vtable._com_error.0
mov qword [rsp + 0x120], rsi
mov dword [rsp + 0x128], edi
movdqu xmmword [rsp + 0x130], xmm0
lea rcx, [rsp + 0x120]
call fcn.18000eaa0
mov rbx, rax
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
lea r8d, [r13 + 0x6d]
mov rdx, qword [0x1800a6d60]
lea rcx, [rsp + 0x70]
call fcn.1800104a0
nop
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.18000ec60
nop
mov rdx, rax
lea rcx, [rsp + 0xc0]
call fcn.18000185c
nop
mov rdx, qword [rsp + 0x68]
cmp rdx, 8
jb 0x180011192
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x1e0], rdx
mov rcx, qword [rsp + 0x50]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001118d
add rdx, 0x27
mov qword [rsp + 0x1e0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116a9
call fcn.180027be4
mov qword [rsp + 0x60], r13
mov qword [rsp + 0x68], 7
mov word [rsp + 0x50], r13w
mov qword [rsp + 0x120], rsi
mov rcx, qword [rsp + 0x130]
test rcx, rcx
je 0x1800111c1
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_SafeArrayGetDim]
mov rcx, qword [rsp + 0x138]
test rcx, rcx
je 0x1800111d4
call qword [sym.imp.KERNEL32.dll_LocalFree]
lea r15, [rsp + 0x100]
cmp qword [rsp + 0x118], 8
cmovae r15, qword [rsp + 0x100]
lea r14, [rsp + 0xc0]
cmp qword [rsp + 0xd8], 8
cmovae r14, qword [rsp + 0xc0]
lea rsi, [rsp + 0x160]
cmp qword [rsp + 0x178], 8
cmovae rsi, qword [rsp + 0x160]
lea rdi, [rsp + 0x180]
cmp qword [rsp + 0x198], 8
cmovae rdi, qword [rsp + 0x180]
lea rbx, [rsp + 0x1a0]
cmp qword [rsp + 0x1b8], 8
cmovae rbx, qword [rsp + 0x1a0]
lea rax, [rsp + 0x70]
mov qword [rsp + 0x40], rax
mov r8d, 0x6e
mov rdx, qword [0x1800a6d60]
lea rcx, [rsp + 0x70]
call fcn.1800104a0
nop
mov qword [rsp + 0x30], r15
mov qword [rsp + 0x28], r14
mov qword [rsp + 0x20], rsi
mov r9, rdi
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x140]
call fcn.18000ec60
nop
lea r8, [rsp + 0x1c0]
cmp qword [rsp + 0x1d8], 8
cmovae r8, qword [rsp + 0x1c0]
lea rdx, [rsp + 0x140]
cmp qword [rsp + 0x158], 8
cmovae rdx, qword [rsp + 0x140]
mov r9d, 0x30
mov rcx, r12
call qword [sym.imp.USER32.dll_MessageBoxW]
nop
mov rdx, qword [rsp + 0x158]
cmp rdx, 8
jb 0x18001133a
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x1e8], rdx
mov rcx, qword [rsp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011335
add rdx, 0x27
mov qword [rsp + 0x1e8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116af
call fcn.180027be4
mov qword [rsp + 0x150], r13
mov qword [rsp + 0x158], 7
mov word [rsp + 0x140], r13w
mov rdx, qword [rsp + 0xd8]
cmp rdx, 8
jb 0x1800113af
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x1f0], rdx
mov rcx, qword [rsp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800113aa
add rdx, 0x27
mov qword [rsp + 0x1f0], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116b5
call fcn.180027be4
mov qword [rsp + 0xd0], r13
mov qword [rsp + 0xd8], 7
mov word [rsp + 0xc0], r13w
mov rdx, qword [rsp + 0x178]
cmp rdx, 8
jb 0x180011424
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x1f8], rdx
mov rcx, qword [rsp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001141f
add rdx, 0x27
mov qword [rsp + 0x1f8], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116bb
call fcn.180027be4
mov qword [rsp + 0x170], r13
mov qword [rsp + 0x178], 7
mov word [rsp + 0x160], r13w
mov rdx, qword [rsp + 0x198]
cmp rdx, 8
jb 0x180011499
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x200], rdx
mov rcx, qword [rsp + 0x180]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011494
add rdx, 0x27
mov qword [rsp + 0x200], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116c1
call fcn.180027be4
mov qword [rsp + 0x190], r13
mov qword [rsp + 0x198], 7
mov word [rsp + 0x180], r13w
mov rdx, qword [rsp + 0x1b8]
cmp rdx, 8
jb 0x18001150e
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x208], rdx
mov rcx, qword [rsp + 0x1a0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011509
add rdx, 0x27
mov qword [rsp + 0x208], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116c7
call fcn.180027be4
mov qword [rsp + 0x1b0], r13
mov qword [rsp + 0x1b8], 7
mov word [rsp + 0x1a0], r13w
mov rdx, qword [rsp + 0x1d8]
cmp rdx, 8
jb 0x180011583
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x210], rdx
mov rcx, qword [rsp + 0x1c0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18001157e
add rdx, 0x27
mov qword [rsp + 0x210], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116cd
call fcn.180027be4
mov qword [rsp + 0x1d0], r13
mov qword [rsp + 0x1d8], 7
mov word [rsp + 0x1c0], r13w
mov rdx, qword [rsp + 0xf8]
cmp rdx, 8
jb 0x1800115f8
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x218], rdx
mov rcx, qword [rsp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1800115f3
add rdx, 0x27
mov qword [rsp + 0x218], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116d3
call fcn.180027be4
mov qword [rsp + 0xf0], r13
mov qword [rsp + 0xf8], 7
mov word [rsp + 0xe0], r13w
mov rdx, qword [rsp + 0x118]
cmp rdx, 8
jb 0x180011669
lea rdx, [rdx*2 + 2]
mov qword [rsp + 0x220], rdx
mov rcx, qword [rsp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x180011664
add rdx, 0x27
mov qword [rsp + 0x220], rdx
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1800116d9
call fcn.180027be4
mov qword [rsp + 0x110], r13
mov qword [rsp + 0x118], 7
mov word [rsp + 0x100], r13w
mov rcx, qword [rsp + 0x228]
xor rcx, rsp
call fcn.180028080
add rsp, 0x230
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
ret
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
nop
call fcn.18002e3bc
int3