Function at 0x14005dc10
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x700]
sub rsp, 0x800
mov rdi, r9
mov r14, rdx
mov rbx, rcx
cmp r8d, 0x110
ja 0x14005ddef
je 0x14005ddce
cmp r8d, 0x10
je 0x14005de13
cmp r8d, 0x4e
je 0x14005dc7f
cmp r8d, 0x53
jne 0x14005e040
mov edx, pe_nt_image_headers64
mov r8d, 0x4fc
call fcn.140038ac0
jmp 0x14005e145
mov rdi, qword [rbp + 0x730]
mov eax, dword [rdi + 0x10]
cmp eax, 0xffffff9b
je 0x14005dd17
cmp eax, 0xfffffffd
jne 0x14005e145
cmp dword [rcx + 0x28e0], 0
jl 0x14005e145
mov rcx, qword [rcx + 0x28c0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
dec eax
cmp dword [rbx + 0x28e0], eax
jne 0x14005dcef
xor edi, edi
mov word [rbx + 0x28e4], di
call fcn.14005eeb0
lea r8d, [rdi + 1]
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x14005e145
mov edx, 1
call fcn.14005e850
movsxd r8, dword [rbx + 0x28e0]
mov dword [rbp - 0x40], 2
mov dword [rbp - 0x44], 2
lea r9, [rbp - 0x50]
jmp 0x14005e133
movsxd r8, dword [rdi + 0x18]
mov rcx, qword [rcx + 0x28c0]
mov edx, 0x102c
mov r9d, 2
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 2
jne 0x14005dd50
mov edx, dword [rdi + 0x18]
mov rcx, rbx
call fcn.14005f1f0
mov rcx, rbx
call fcn.14005ec20
jmp 0x14005e145
test eax, eax
jne 0x14005e145
lea rax, [rbx + 0x32f0]
or esi, 0xffffffff
xor edi, edi
mov dword [rbx + 0x28e0], esi
cmp qword [rax + 0x18], 8
mov qword [rax + 0x10], rdi
jb 0x14005dd78
mov rax, qword [rax]
mov word [rax], di
mov rcx, qword [rbx + 0x10]
mov edx, 0x4db
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, qword [rbx + 0x10]
mov edx, 0x4dc
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, qword [rbx + 0x10]
mov edx, 0x4dd
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x14005e145
call fcn.140038d30
mov r9, qword [rbp + 0x730]
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call fcn.14005e170
cdqe
jmp 0x14005e14a
cmp r8d, 0x111
je 0x14005dedd
cmp r8d, 0x218
jne 0x14005e040
cmp r9, 4
jne 0x14005e145
mov rax, qword [rcx + 0x10]
lea rcx, [rsp + 0x38]
xor edi, edi
xor r8d, r8d
xor r9d, r9d
mov edx, 0xa6
mov qword [rbp + 0xd0], rax
mov dword [rsp + 0x20], edi
call fcn.1400b0550
mov r8, qword [rax]
lea rcx, [rbp + 0xd8]
mov edx, 0x104
call fcn.1400e59b4
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14005de66
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbx + 0x10]
lea r8, [rbp + 0xd0]
lea rdx, [0x1400c86f0]
call qword [sym.imp.USER32.dll_EnumChildWindows]
lea rcx, [rsp + 0x48]
xor r8d, r8d
xor r9d, r9d
mov edx, reloc.OLEAUT32.dll_VarDecFix
mov dword [rsp + 0x20], edi
call fcn.1400b0550
lea rcx, [rbp + 0xd8]
mov edx, 0x104
mov r8, qword [rax]
call fcn.1400e59b4
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14005dec4
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp + 0xd0]
lea rcx, [0x1400c86f0]
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x14005df69
movzx ecx, r9w
cmp ecx, 0x4dc
jg 0x14005e02f
je 0x14005dfa1
cmp ecx, 2
je 0x14005df67
cmp ecx, 0x108
je 0x14005df89
cmp ecx, 0x4db
jne 0x14005e040
mov rcx, qword [0x14026e098]
test rcx, rcx
je 0x14005df2c
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_PostMessageW]
mov edx, 1
mov rcx, rbx
call fcn.14005e850
movsxd r8, dword [rbx + 0x28e0]
mov rcx, qword [rbx + 0x28c0]
lea r9, [rbp + 0x70]
mov edx, 0x102b
mov dword [rbp + 0x80], 2
mov dword [rbp + 0x7c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
mov edx, 1
mov rcx, r14
mov qword [0x14026e0c8], rdi
mov dword [0x14026d628], edi
call qword [sym.imp.USER32.dll_EndDialog]
jmp 0x14005e145
mov edx, pe_nt_image_headers64
mov r8d, 0x4fc
mov rcx, rbx
call fcn.140038ac0
jmp 0x14005e145
mov rcx, qword [rbx + 0x28c0]
movsxd rsi, dword [rbx + 0x28e0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
dec eax
cmp esi, eax
jne 0x14005dfd1
mov word [rbx + 0x28e4], di
jmp 0x14005e003
mov rcx, qword [rbx + 0x28c0]
lea rax, [rbx + 0x28e4]
lea r9, [rsp + 0x50]
mov r8, rsi
mov edx, 0x1073
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x70], 0x400
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.14005eeb0
mov rcx, qword [rbx + 0x10]
mov edx, 0x4fd
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, qword [rbx + 0x10]
mov edx, 0x28
lea r9d, [rdx - 0x27]
mov r8, rax
jmp 0x14005e13f
sub ecx, 0x4dd
je 0x14005e047
cmp ecx, 0x20
je 0x14005df67
xor eax, eax
jmp 0x14005e14a
mov r9, qword [rbx + 8]
lea rcx, [rsp + 0x30]
xor edi, edi
xor r8d, r8d
mov edx, reloc.OLEAUT32.dll_VarDecFix
mov dword [rsp + 0x20], edi
call fcn.1400b0550
lea rcx, [rbp + 0x2e0]
mov edx, 0x104
mov r8, qword [rax]
call fcn.1400e59b4
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14005e090
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9, qword [rbx + 8]
lea rcx, [rsp + 0x40]
xor r8d, r8d
mov edx, 0x4ea
mov dword [rsp + 0x20], edi
call fcn.1400b0550
lea rcx, [rbp + 0x4f0]
mov edx, 0x104
mov r8, qword [rax]
call fcn.1400e59b4
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14005e0d7
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbx + 0x10]
lea r8, [rbp + 0x2e0]
lea rdx, [rbp + 0x4f0]
mov r9d, 1
call fcn.1400b1160
cmp eax, 1
jne 0x14005e145
lea edx, [rax + 2]
mov rcx, rbx
call fcn.14005e850
mov rcx, qword [rbx + 0x28c0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov dword [rbp + 0x20], 2
mov dword [rbp + 0x1c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [rbp + 0x10]
dec eax
movsxd r8, eax
mov rcx, qword [rbx + 0x28c0]
mov edx, 0x102b
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
lea r11, [rsp + 0x800]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret