Function at 0x140002aa3
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rcx
mov qword [rsp + 0x10], rdx
push rbp
push r15
push r14
mov rax, 0x19
sub rsp, 8
mov qword [rsp], 0
dec rax
jne 0x140002ab9
sub rsp, 0x28
call fcn.14003bb40
mov rdx, qword [rsp + 0x118]
lea rcx, [rsp + 0x28]
sub rsp, 0x10
call fcn.14003bc10
add rsp, 0x10
jmp 0x140002b05
movabs rdx, str.msedge.exe
lea rcx, [rsp + 0x30]
call fcn.14003b8c0
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push 2
xor rax, rax
push rax
mov rcx, qword [rsp + 0x48]
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.14003b770
add rsp, 0x28
push rcx
sub rsp, 0x20
call fcn.14003b720
add rsp, 0x20
pop rcx
push rax
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
mov rbp, qword [rsp + 0x148]
push qword [rbp + 0xc]
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400297e0
add rsp, 0x20
pop rax
call fcn.14003ba10
push qword [rsp + 0x58]
push rax
call fcn.14003b9e0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140026f58
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140008fbc
add rsp, 0x28
pop rax
and rax, rax
je 0x14000319f
push 0x64
pop rcx
call fcn.14002ca44
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
push rcx
sub rsp, 0x20
call fcn.14003b720
add rsp, 0x20
pop rcx
push rax
sub rsp, 0x20
call fcn.140003220
add rsp, 0x28
lea rcx, [rsp + 0x40]
pop rdx
call fcn.14003b7e0
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
movabs rcx, 0x1400d8916
sub rsp, 0x28
call fcn.14003b770
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14003b770
add rsp, 0x28
call fcn.14003ba10
push qword [rsp + 0x50]
push rax
call fcn.14003b9e0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140035950
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140008fbc
add rsp, 0x28
pop rax
and rax, rax
je 0x140002cae
mov qword [rsp + 0x48], 1
jmp 0x140002cc8
call fcn.14002ca78
mov r15, rax
sub r15, qword [rsp + 0x50]
cmp r15, 0x3e8
jle 0x140002bd7
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
sub rsp, 0x20
call sub.KERNEL32.dll_GetCurrentProcessId
add rsp, 0x28
mov rax, rax
push rax
pop rcx
pop rdx
sub rsp, 0x20
call fcn.1400358f0
add rsp, 0x28
lea rcx, [rsp + 0x48]
pop rdx
call fcn.14003b7e0
cmp qword [rsp + 0x48], 0
je 0x140002fce
mov qword [rsp + 0x58], 1
jmp 0x140002d32
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x40]
pop rcx
pop rdx
call fcn.140035c60
cmp rax, qword [rsp + 0x58]
jl 0x140002fce
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push qword [rsp + 0x78]
push qword [rsp + 0x60]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140035d00
add rsp, 0x28
lea rcx, [rsp + 0x68]
pop rdx
call fcn.14003b7e0
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
movabs rcx, 0x1400d8916
sub rsp, 0x28
call fcn.14003b770
add rsp, 0x28
mov rcx, qword [rsp + 0x58]
sub rsp, 0x28
call fcn.14003b770
add rsp, 0x28
call fcn.14003ba10
push qword [rsp + 0x78]
push rax
call fcn.14003b9e0
mov rdx, rax
pop rax
add qword [rsp + 8], rdx
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140035950
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140008fbc
add rsp, 0x28
pop rax
and rax, rax
je 0x140002fc3
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
movabs rax, reloc.WS2_32.dll_ioctlsocket
push rax
push 1
push qword [rsp + 0x98]
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call fcn.140035d00
add rsp, 0x28
push rax
call fcn.14003b9e0
mov rdx, rax
pop rax
add qword [rsp], rdx
pop rcx
sub rsp, 0x20
call fcn.140035e80
add rsp, 0x28
pop rcx
push rax
sub rsp, 0x28
call fcn.140008fbc
add rsp, 0x28
pop rax
mov rax, rax
push rax
pop rax
mov dword [rsp + 0x68], eax
call fcn.14002ca78
mov qword [rsp + 0x50], rax
push 0x64
pop rcx
call fcn.14002ca44
movsxd rax, dword [rsp + 0x68]
push rax
pop rax
mov qword [rsp + 0x70], rax
lea rax, [rsp + 0x70]
mov rax, rax
push rax
lea rax, [0x140003c11]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_EnumWindows
mov r15, qword [rsp + 0x70]
movsxd rax, dword [rsp + 0x68]
cmp r15, rax
je 0x140002fa9
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
sub rsp, 8
push rcx
sub rsp, 0x28
call fcn.14003b720
add rsp, 0x28
pop rcx
push rax
push 0x104
pop rcx
pop rdx
sub rsp, 0x20
call fcn.140035c00
add rsp, 0x28
lea rcx, [rsp + 0x80]
pop rdx
call fcn.14003b7e0
push 0x104
mov rax, qword [rsp + 0x80]
mov rax, rax
push rax
push qword [rsp + 0x80]
pop rcx
pop rdx
pop r8
call sub.USER32.dll_GetClassNameW
push qword [rsp + 0x78]
movabs rcx, str.Chrome_WidgetWin_1
pop rdx
call fcn.14003ba90
or rax, rax
je 0x140002fa9
mov qword [rsp + 0x80], 1
jmp 0x140002fce
call fcn.14002ca78
mov r15, rax
sub r15, qword [rsp + 0x50]
cmp r15, 0xfa0
jle 0x140002ed6
inc qword [rsp + 0x58]
jno 0x140002d32
cmp qword [rsp + 0x80], 0
je 0x14000319f
push qword [rsp + 0x70]
mov rbp, qword [rsp + 0x118]
pop rax
mov dword [rbp + 0x30], eax
push 0x42010000
push 0xfffffffffffffff0
mov rbp, qword [rsp + 0x120]
movsxd rax, dword [rbp + 0x30]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
call sub.USER32.dll_SetWindowLongPtrW
mov rbp, qword [rsp + 0x110]
movsxd rax, dword [rbp]
mov rax, rax
push rax
mov rbp, qword [rsp + 0x118]
movsxd rax, dword [rbp + 0x30]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_SetParent
mov qword [rsp + 0x88], rax
cmp qword [rsp + 0x88], 0
je 0x140003190
lea rax, [rsp + 0x90]
mov rax, rax
push rax
mov rbp, qword [rsp + 0x118]
movsxd rax, dword [rbp]
mov rax, rax
push rax
pop rcx
pop rdx
call sub.USER32.dll_GetWindowPlacement
lea rbp, [rsp + 0x90]
movsxd r15, dword [rbp + 0x24]
movsxd rcx, dword [rbp + 0x1c]
sub r15, rcx
mov qword [rsp + 0xc0], r15
movsxd r15, dword [rbp + 0x28]
movsxd rcx, dword [rbp + 0x20]
sub r15, rcx
mov qword [rsp + 0xc8], r15
call fcn.140039a38
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400d9fa8]
fistp qword [rsp + 0xd0]
call fcn.140039a38
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400d9fb0]
fistp qword [rsp + 0xd8]
mov r15, qword [rsp + 0xc0]
call fcn.140039a38
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400d9fb8]
mov qword [rsp - 8], r15
fild qword [rsp - 8]
faddp st(1)
fadd qword [0x1400d9f98]
fistp qword [rsp + 0xe0]
mov r15, qword [rsp + 0xc8]
call fcn.140039a38
movsd qword [rsp - 8], xmm0
fld qword [rsp - 8]
fmul qword [0x1400d9fc0]
mov qword [rsp - 8], r15
fild qword [rsp - 8]
faddp st(1)
fadd qword [0x1400d9f98]
fistp qword [rsp + 0xe8]
sub rsp, 8
push 0x44
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push qword [rsp + 0xf8]
push 0
mov rbp, qword [rsp + 0x148]
movsxd rax, dword [rbp + 0x30]
mov rax, rax
push rax
pop rcx
pop rdx
pop r8
pop r9
sub rsp, 0x20
call sub.USER32.dll_SetWindowPos
add rsp, 0x40
jmp 0x14000319f
mov rbp, qword [rsp + 0x110]
mov dword [rbp + 0x30], 0
xor rax, rax
push rax
mov rcx, qword [rsp + 0x68]
sub rsp, 0x28
call fcn.14003bbe0
add rsp, 0x28
mov rcx, qword [rsp + 0x40]
sub rsp, 0x28
call fcn.14003bbe0
add rsp, 0x28
mov rcx, qword [rsp + 0x80]
sub rsp, 0x28
call fcn.14003bbe0
add rsp, 0x28
mov rcx, qword [rsp + 0x38]
sub rsp, 0x28
call fcn.14003bbe0
add rsp, 0x28
mov rcx, qword [rsp + 0x48]
sub rsp, 0x28
call fcn.14003bbe0
add rsp, 0x28
mov rcx, qword [rsp + 0x30]
sub rsp, 0x28
call fcn.14003bbe0
add rsp, 0x28
pop rax
add rsp, 0xf0
pop r14
pop r15
pop rbp
ret