Function at 0x14006be30
Capabilities:
Enumerate gui resources

Disassembly:
mov rax, rsp
push rbp
push r14
push r15
lea rbp, [rax - 0x9b8]
sub rsp, 0xaa0
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
mov qword [rax + 0x20], r12
mov rbx, r9
mov r12, rdx
mov r15, rcx
sub r8d, 0x10
je 0x14006c44f
sub r8d, 0x3e
je 0x14006c4c5
sub r8d, 0xc2
je 0x14006c431
dec r8d
je 0x14006bea5
cmp r8d, 0x107
jne 0x14006beb0
cmp rbx, 4
je 0x14006c44f
jmp 0x14006c4c5
movzx ecx, bx
dec ecx
je 0x14006bec8
dec ecx
je 0x14006beb7
xor eax, eax
jmp 0x14006c4ca
mov rax, qword [r15 + 0x28c0]
xor esi, esi
mov word [rax], si
jmp 0x14006c4b7
xor esi, esi
mov word [rbp + 0x1a0], si
xor edx, edx
mov r8d, 0x7fe
lea rcx, [rbp + 0x1a2]
call fcn.14011fa60
mov r9d, 0x400
lea r8, [rbp + 0x1a0]
mov edx, 0x4e9
mov rcx, qword [r15 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItemTextW]
call fcn.140004fc0
mov rcx, rax
mov eax, esi
test rcx, rcx
setne al
test eax, eax
jne 0x14006bf20
mov ecx, 0x80004005
call fcn.140004f70
int3
mov rax, qword [rcx]
call qword [rax + 0x18]
add rax, 0x18
mov qword [rsp + 0x30], rax
lea rcx, [rbp + 0x1a0]
lea rax, [rbp + 0x1a0]
or r14, 0xffffffffffffffff
test rax, 0xffffffffffff0000
jne 0x14006bf6c
movzx ebx, cx
xor edx, edx
mov ecx, ebx
call fcn.140011240
test rax, rax
je 0x14006bf95
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140011590
jmp 0x14006bf95
lea rcx, [rbp + 0x1a0]
mov rax, r14
inc rax
cmp word [rcx + rax*2], 0
jne 0x14006bf76
mov r8d, eax
lea rdx, [rbp + 0x1a0]
lea rcx, [rsp + 0x30]
call fcn.140011790
nop
mov rdi, qword [rsp + 0x30]
mov rbx, rsi
cmp word [rdi], bx
je 0x14006c03d
nop word [rax + rax]
movzx edx, word [rdi]
lea rcx, [0x14017bd98]
call fcn.140122818
test rax, rax
je 0x14006bfce
test rbx, rbx
jne 0x14006bfd1
mov rbx, rdi
jmp 0x14006bfd1
mov rbx, rsi
add rdi, 2
cmp word [rdi], 0
jne 0x14006bfb0
test rbx, rbx
je 0x14006c03d
mov rax, qword [rsp + 0x30]
sub rbx, rax
sar rbx, 1
test ebx, ebx
jns 0x14006bffa
mov ecx, 0x80070057
call fcn.140004f70
int3
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, ebx
or ecx, edx
jge 0x14006c01c
mov edx, ebx
lea rcx, [rsp + 0x30]
call fcn.14000f050
mov rax, qword [rsp + 0x30]
cmp ebx, dword [rax - 0xc]
jg 0x14006c032
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rsp + 0x30]
mov word [rax + rcx*2], si
jmp 0x14006c03d
mov ecx, 0x80070057
call fcn.140004f70
int3
lea rdx, [0x14017bd98]
lea rcx, [rsp + 0x30]
call fcn.14006c790
cmp word [0x140178108], 0
je 0x14006c0fd
mov rdi, qword [rsp + 0x30]
mov rbx, rsi
cmp word [rdi], bx
je 0x14006c0fd
nop dword [rax]
movzx edx, word [rdi]
lea rcx, [0x140178108]
call fcn.140122818
test rax, rax
je 0x14006c08e
test rbx, rbx
jne 0x14006c091
mov rbx, rdi
jmp 0x14006c091
mov rbx, rsi
add rdi, 2
cmp word [rdi], 0
jne 0x14006c070
test rbx, rbx
je 0x14006c0fd
mov rax, qword [rsp + 0x30]
sub rbx, rax
sar rbx, 1
test ebx, ebx
jns 0x14006c0ba
mov ecx, 0x80070057
call fcn.140004f70
int3
mov edx, 1
sub edx, dword [rax - 8]
mov ecx, dword [rax - 0xc]
sub ecx, ebx
or ecx, edx
jge 0x14006c0dc
mov edx, ebx
lea rcx, [rsp + 0x30]
call fcn.14000f050
mov rax, qword [rsp + 0x30]
cmp ebx, dword [rax - 0xc]
jg 0x14006c0f2
mov dword [rax - 0x10], ebx
movsxd rcx, ebx
mov rax, qword [rsp + 0x30]
mov word [rax + rcx*2], si
jmp 0x14006c0fd
mov ecx, 0x80070057
call fcn.140004f70
int3
lea rdx, [0x140178108]
lea rcx, [rsp + 0x30]
call fcn.14006c790
mov rcx, qword [rax]
cmp dword [rcx - 0x10], 0
jle 0x14006c390
call fcn.14006c740
mov rdi, rax
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], rsi
mov word [rsp + 0x38], si
xor r8d, r8d
lea rdx, [0x140165848]
lea rcx, [rsp + 0x38]
call fcn.14000d340
nop
mov rax, qword [rdi + 0x50]
mov rbx, qword [rax]
cmp rbx, rax
je 0x14006c21c
nop dword [rax + rax]
mov rcx, qword [rbx + 0x40]
add rcx, 8
mov r9, qword [rsp + 0x30]
cmp word [r9], 0
jne 0x14006c179
mov rax, rsi
jmp 0x14006c18b
mov rax, r14
nop dword [rax]
inc rax
cmp word [r9 + rax*2], 0
jne 0x14006c180
mov qword [rsp + 0x20], rax
mov r8, qword [rcx + 0x10]
xor edx, edx
call fcn.1400418e0
test eax, eax
je 0x14006c1fa
cmp byte [rbx + 0x19], 0
jne 0x14006c1ee
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
jne 0x14006c1ce
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x14006c1ee
nop dword [rax + rax]
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14006c1c0
jmp 0x14006c1ee
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14006c1eb
cmp rbx, qword [rax + 0x10]
jne 0x14006c1eb
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14006c1d8
mov rbx, rax
cmp rbx, qword [rdi + 0x50]
jne 0x14006c160
jmp 0x14006c21c
mov rdx, qword [rbx + 0x40]
add rdx, 0x28
lea rax, [rsp + 0x38]
cmp rax, rdx
je 0x14006c21c
mov r9, r14
xor r8d, r8d
lea rcx, [rsp + 0x38]
call fcn.14000d1f0
mov r9, qword [rsp + 0x48]
test r9, r9
je 0x14006c353
cmp qword [r15 + 0x28d8], 0
je 0x14006c2bb
lea rcx, [r15 + 0x28c8]
lea rdx, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rdx, qword [rsp + 0x38]
mov r10, qword [rcx + 0x10]
cmp qword [rcx + 0x18], 8
jb 0x14006c25e
mov rcx, qword [rcx]
mov r8, r9
cmp r10, r9
cmovb r8, r10
test r8, r8
jmp 0x14006c294
movzx eax, word [rdx]
cmp word [rcx], ax
jne 0x14006c285
add rcx, 2
add rdx, 2
dec r8
jmp 0x14006c294
mov r8d, 1
cmp word [rcx], ax
cmovb r8d, r14d
jmp 0x14006c299
jne 0x14006c270
mov r8d, esi
movsxd rax, r8d
test r8d, r8d
jne 0x14006c2b3
cmp r10, r9
jae 0x14006c2ab
mov eax, r14d
jmp 0x14006c2b3
mov eax, esi
cmp r10, r9
setne al
test eax, eax
je 0x14006c353
xor r8d, r8d
mov dword [rsp + 0x20], esi
mov r9, qword [r15 + 8]
mov edx, reloc.OLEAUT32.dll_VarDecFix
lea rcx, [rsp + 0x70]
call fcn.1400dc6c0
mov rbx, rax
xor r8d, r8d
mov dword [rsp + 0x20], esi
mov r9, qword [r15 + 8]
mov edx, 0x4f6
lea rcx, [rsp + 0x60]
call fcn.1400dc6c0
nop
xor r9d, r9d
mov r8, qword [rbx]
mov rdx, qword [rax]
mov rcx, qword [r15 + 0x10]
call fcn.1400dd3a0
nop
mov rdx, qword [rsp + 0x60]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006c320
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x70]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006c339
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov edx, 0x4e9
mov rcx, qword [r15 + 0x10]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call qword [sym.imp.USER32.dll_SetFocus]
jmp 0x14006c378
mov r8, qword [rsp + 0x30]
mov edx, 0x400
mov rcx, qword [r15 + 0x28c0]
call fcn.140121234
mov edx, 1
mov rcx, r12
call qword [sym.imp.USER32.dll_EndDialog]
nop
cmp qword [rsp + 0x50], 8
jb 0x14006c40f
mov rcx, qword [rsp + 0x38]
call fcn.14011f898
jmp 0x14006c40f
xor r8d, r8d
mov dword [rsp + 0x20], esi
mov r9, qword [r15 + 8]
mov edx, reloc.OLEAUT32.dll_VarDecFix
lea rcx, [rsp + 0x58]
call fcn.1400dc6c0
mov rbx, rax
xor r8d, r8d
mov dword [rsp + 0x20], esi
mov r9, qword [r15 + 8]
mov edx, 0x4f5
lea rcx, [rsp + 0x78]
call fcn.1400dc6c0
nop
xor r9d, r9d
mov r8, qword [rbx]
mov rdx, qword [rax]
mov rcx, qword [r15 + 0x10]
call fcn.1400dd3a0
nop
mov rdx, qword [rsp + 0x78]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006c3f5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x58]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006c40f
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
nop
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006c4c5
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
jmp 0x14006c4c5
call fcn.1400465d0
mov r9, qword [rbp + 0x9e0]
mov r8, rbx
mov rdx, r12
mov rcx, r15
call fcn.14006c500
cdqe
jmp 0x14006c4ca
mov rax, qword [rcx + 0x10]
mov qword [rbp - 0x70], rax
xor r8d, r8d
xor esi, esi
mov dword [rsp + 0x20], esi
xor r9d, r9d
mov edx, reloc.OLEAUT32.dll_VarDecFix
lea rcx, [rsp + 0x68]
call fcn.1400dc6c0
mov r8, qword [rax]
mov edx, 0x104
lea rcx, [rbp - 0x68]
call fcn.140121234
mov rdx, qword [rsp + 0x68]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x14006c49c
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp - 0x70]
lea rcx, [0x1400f68f0]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rcx, qword [r15 + 0x28c0]
mov word [rcx], si
mov edx, 2
mov rcx, r12
call qword [sym.imp.USER32.dll_EndDialog]
mov eax, 1
lea r11, [rsp + 0xaa0]
mov rbx, qword [r11 + 0x20]
mov rsi, qword [r11 + 0x28]
mov rdi, qword [r11 + 0x30]
mov r12, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r14
pop rbp
ret