Function at 0x14000d760
Capabilities:
Enumerate gui resources

Disassembly:
mov rax, rsp
push rbp
push rdi
push r14
lea rbp, [rax - 0x2e8]
sub rsp, 0x3d0
mov qword [rbp - 0x80], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov rax, qword [0x140160188]
xor rax, rsp
mov qword [rbp + 0x2c0], rax
mov rbx, rdx
mov rsi, rcx
xor r14d, r14d
mov dword [rsp + 0x20], r14d
mov rax, qword [rcx + 0x78]
cmp qword [rax + 0x260], r14
jne 0x14000d7d2
mov rcx, rax
call fcn.140009150
mov edx, 0x17ed
lea rcx, [0x140009d00]
call qword [sym.imp.USER32.dll_EnumWindows]
xor al, al
jmp 0x14000e14e
mov byte [rax + 0x2b0], r14b
lea rcx, [rbp + 0x200]
call fcn.140054540
nop
mov eax, dword [rsp + 0x30]
and eax, 0xffffff00
mov dword [rsp + 0x30], eax
btr eax, 8
mov dword [rsp + 0x30], eax
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x38], xmm0
mov qword [rsp + 0x48], r14
lea r8, [rsp + 0x28]
mov rdx, rbx
lea rcx, [rbp + 0x200]
call fcn.140054630
test al, al
je 0x14000e117
cmp byte [rsp + 0x30], 7
jne 0x14000e117
lea r8, [0x140126162]
lea rdx, [0x14012615c]
lea rcx, [rsp + 0x28]
call fcn.14004cc10
test rax, rax
je 0x14000e117
lea r8, [0x140126162]
lea rdx, [0x14012615c]
lea rcx, [rsp + 0x28]
call fcn.14004c8d0
cmp byte [rax + 8], 4
jne 0x14000e117
lea r8, [0x140126162]
lea rdx, [0x14012615c]
lea rcx, [rsp + 0x28]
call fcn.14004c8d0
lea rdx, [rbp + 0x100]
mov rcx, rax
call fcn.14004be10
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000d8a9
mov rax, qword [rax]
mov r9d, 0xfde9
mov r8d, ecx
mov rdx, rax
lea rcx, [rbp + 0x80]
call fcn.14001bf80
mov ebx, 2
mov dword [rsp + 0x20], ebx
and ebx, 0xfffffffd
mov dword [rsp + 0x20], ebx
or ebx, 1
mov dword [rsp + 0x20], ebx
mov rcx, qword [rsi + 0x78]
add rcx, 0x40
lea rdx, [rbp + 0x80]
call fcn.1400052a0
and ebx, 0xfffffffe
mov dword [rsp + 0x20], ebx
mov rdx, qword [rbp + 0x98]
cmp rdx, 8
jb 0x14000d939
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x80]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d934
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e17b
call fcn.1400cea54
mov qword [rbp + 0x90], r14
mov qword [rbp + 0x98], 7
mov word [rbp + 0x80], r14w
mov rdx, qword [rbp + 0x118]
cmp rdx, 0x10
jb 0x14000d994
inc rdx
mov rcx, qword [rbp + 0x100]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000d98f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e181
call fcn.1400cea54
mov qword [rbp + 0x110], r14
mov qword [rbp + 0x118], InitCommonControls
mov byte [rbp + 0x100], 0
mov rax, qword [rsi + 0x78]
mov byte [rax + 0x2b0], 1
lea r8, [0x140126128]
lea rdx, [0x140126124]
lea rcx, [rsp + 0x28]
call fcn.14004cc10
test rax, rax
je 0x14000df59
lea r8, [0x140126128]
lea rdx, [0x140126124]
lea rcx, [rsp + 0x28]
call fcn.14004c8d0
cmp byte [rax + 8], 7
jne 0x14000df59
lea r8, [0x140126128]
lea rdx, [0x140126124]
lea rcx, [rsp + 0x28]
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rsp + 0x50]
call fcn.14004bae0
nop
lea r8, [0x140126118]
lea rdx, [0x140126110]
lea rcx, [rsp + 0x50]
call fcn.14004cc10
test rax, rax
je 0x14000dbb3
lea r8, [0x140126118]
lea rdx, [0x140126110]
lea rcx, [rsp + 0x50]
call fcn.14004c8d0
cmp byte [rax + 8], 4
jne 0x14000dbb3
lea r8, [0x140126118]
lea rdx, [0x140126110]
lea rcx, [rsp + 0x50]
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x40]
call fcn.14004bae0
nop
lea rdx, [rbp + 0x120]
lea rcx, [rbp - 0x40]
call fcn.14004be10
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000daa8
mov rax, qword [rax]
mov r9d, 0xfde9
mov r8d, ecx
mov rdx, rax
lea rcx, [rbp + 0xa0]
call fcn.14001bf80
or ebx, 8
mov dword [rsp + 0x20], ebx
and ebx, 0xfffffff7
mov dword [rsp + 0x20], ebx
or ebx, 4
mov dword [rsp + 0x20], ebx
mov rcx, qword [rsi + 0x78]
add rcx, 0x60
lea rdx, [rbp + 0xa0]
call fcn.1400052a0
and ebx, 0xfffffffb
mov dword [rsp + 0x20], ebx
mov rdx, qword [rbp + 0xb8]
cmp rdx, 8
jb 0x14000db36
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xa0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db31
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e187
call fcn.1400cea54
mov qword [rbp + 0xb0], r14
mov qword [rbp + 0xb8], 7
mov word [rbp + 0xa0], r14w
mov rdx, qword [rbp + 0x138]
cmp rdx, 0x10
jb 0x14000db91
inc rdx
mov rcx, qword [rbp + 0x120]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000db8c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e18d
call fcn.1400cea54
mov qword [rbp + 0x130], r14
mov qword [rbp + 0x138], InitCommonControls
mov byte [rbp + 0x120], 0
lea rcx, [rbp - 0x40]
call fcn.14004bca0
lea r8, [0x140126122]
lea rdx, [0x14012611c]
lea rcx, [rsp + 0x50]
call fcn.14004cc10
test rax, rax
je 0x14000decc
lea r8, [0x140126122]
lea rdx, [0x14012611c]
lea rcx, [rsp + 0x50]
call fcn.14004c8d0
cmp byte [rax + 8], 4
jne 0x14000decc
lea r8, [0x140126122]
lea rdx, [0x14012611c]
lea rcx, [rsp + 0x50]
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp - 0x18]
call fcn.14004bae0
nop
lea rdx, [rbp + 0x140]
lea rcx, [rbp - 0x18]
call fcn.14004be10
nop
mov rcx, qword [rax + 0x10]
cmp qword [rax + 0x18], 0x10
jb 0x14000dc3a
mov rax, qword [rax]
mov r9d, 0xfde9
mov r8d, ecx
mov rdx, rax
lea rcx, [rbp + 0xc0]
call fcn.14001bf80
or ebx, 0x20
mov dword [rsp + 0x20], ebx
and ebx, 0xffffffdf
mov dword [rsp + 0x20], ebx
or ebx, 0x10
mov dword [rsp + 0x20], ebx
mov rcx, qword [rsi + 0x78]
add rcx, 0x88
lea rdx, [rbp + 0xc0]
call fcn.1400052a0
and ebx, 0xffffffef
mov dword [rsp + 0x20], ebx
mov rdx, qword [rbp + 0xd8]
cmp rdx, 8
jb 0x14000dccb
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xc0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dcc6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e193
call fcn.1400cea54
mov qword [rbp + 0xd0], r14
mov qword [rbp + 0xd8], 7
mov word [rbp + 0xc0], r14w
mov rdx, qword [rbp + 0x158]
cmp rdx, 0x10
jb 0x14000dd26
inc rdx
mov rcx, qword [rbp + 0x140]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000dd21
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e199
call fcn.1400cea54
mov qword [rbp + 0x150], r14
mov qword [rbp + 0x158], InitCommonControls
mov byte [rbp + 0x140], 0
mov rcx, qword [rsi + 0x78]
cmp byte [rcx + 0x478], 0
jne 0x14000dec3
add rcx, 0x2d8
call fcn.140026a50
mov rax, qword [rsi + 0x78]
lea rbx, [rax + 0x2d8]
lea rdx, [rax + 0x88]
lea rax, vtable.RC::ISimpleDownloadEvent.0
mov qword [rbp + 0x1b0], rax
lea rax, vtable.RC::RCDownloadUserAvatar.0
mov qword [rbp + 0x1b0], rax
lea rcx, [rbp + 0x1b8]
call fcn.1400032d0
nop
mov rdx, rbx
lea rcx, [rbp + 0x1d8]
call fcn.1400032d0
nop
mov ecx, InitCommonControls
call fcn.1400ce694
mov rbx, rax
mov qword [rsp + 0x78], rax
mov qword [rax], r14
mov ecx, 0x28
call fcn.1400ce694
mov qword [rbx + 8], rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
nop
mov qword [rbp + 0x1f8], rbx
lea rcx, [rbp + 0x1b0]
call fcn.14000a570
test al, al
je 0x14000deb6
lea rcx, [rbp - 0x70]
call fcn.14001c700
nop
mov rdx, qword [rsi + 0x78]
add rdx, 0x2d8
lea rcx, [rbp - 0x70]
call fcn.14001cda0
lea rdx, [rbp + 0x160]
lea rcx, [rbp - 0x70]
call fcn.14001c8e0
nop
mov rcx, qword [rsi + 0x78]
add rcx, 0x2f8
mov rdx, rax
call fcn.1400052a0
nop
mov rdx, qword [rbp + 0x178]
cmp rdx, 8
jb 0x14000de78
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000de73
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e19f
call fcn.1400cea54
mov qword [rbp + 0x170], r14
mov qword [rbp + 0x178], 7
mov word [rbp + 0x160], r14w
mov rax, qword [rsi + 0x78]
mov byte [rax + 0x478], 1
lea rcx, [rbp - 0x58]
call fcn.14000e8d0
nop
lea rax, vtable.RC::RCFileHash.0
mov qword [rbp - 0x70], rax
mov byte [rbp - 0x60], 1
lea rcx, [rbp + 0x1b0]
call fcn.14000a480
nop
lea rcx, [rbp - 0x18]
call fcn.14004bca0
lea r8, [0x140126172]
lea rdx, str.gender
lea rcx, [rsp + 0x50]
call fcn.14004cc10
test rax, rax
je 0x14000df4f
lea r8, [0x140126172]
lea rdx, str.gender
lea rcx, [rsp + 0x50]
call fcn.14004c8d0
mov rcx, rax
call fcn.14004d130
test al, al
je 0x14000df4f
lea r8, [0x140126172]
lea rdx, str.gender
lea rcx, [rsp + 0x50]
call fcn.14004c8d0
mov rdx, rax
lea rcx, [rbp + 0x10]
call fcn.14004bae0
nop
lea rcx, [rbp + 0x10]
call fcn.14004bfc0
mov rcx, qword [rsi + 0x78]
mov dword [rcx + 0xa8], eax
lea rcx, [rbp + 0x10]
call fcn.14004bca0
nop
lea rcx, [rsp + 0x50]
call fcn.14004bca0
mov rax, qword [0x1401641c0]
mov rbx, qword [rax]
cmp rbx, rax
je 0x14000e0f8
lea rdx, [rbx + 0x28]
lea rcx, [rbp + 0xe0]
call fcn.1400032d0
nop
lea rax, [rbp + 0x38]
mov qword [rsp + 0x78], rax
lea rax, [rbp + 0x58]
mov qword [rbp - 0x78], rax
lea rdx, [rbp + 0xe0]
lea rcx, [rbp + 0x38]
call fcn.1400032d0
mov rdi, rax
lea rdx, [rsp + 0x28]
lea rcx, [rbp + 0x58]
call fcn.14004bae0
nop
mov r8, rdi
mov rdx, rax
lea rcx, [rbp + 0x180]
call fcn.14000d1c0
nop
mov rcx, qword [rsi + 0x78]
add rcx, 0xb0
lea r8, [rbp + 0x180]
mov edx, dword [rbx + 0x20]
call fcn.1400ca660
nop
mov rdx, qword [rbp + 0x1a0]
cmp rdx, 8
jb 0x14000e024
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x188]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e01f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e1a5
call fcn.1400cea54
mov qword [rbp + 0x198], r14
mov qword [rbp + 0x1a0], 7
mov word [rbp + 0x188], r14w
mov rdx, qword [rbp + 0xf8]
cmp rdx, 8
jb 0x14000e084
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0xe0]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000e07f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000e175
call fcn.1400cea54
mov qword [rbp + 0xf0], r14
mov qword [rbp + 0xf8], 7
mov word [rbp + 0xe0], r14w
mov rax, qword [rbx + 0x10]
cmp byte [rax + 0x19], 0
je 0x14000e0d4
mov rax, qword [rbx + 8]
cmp byte [rax + 0x19], 0
jne 0x14000e0c5
cmp rbx, qword [rax + 0x10]
jne 0x14000e0c5
mov rbx, rax
mov rax, qword [rax + 8]
cmp byte [rax + 0x19], 0
je 0x14000e0b2
mov rbx, rax
cmp rax, qword [0x1401641c0]
jmp 0x14000df66
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
jne 0x14000e0ec
mov rbx, rax
mov rax, qword [rax]
cmp byte [rax + 0x19], 0
je 0x14000e0e0
cmp rbx, qword [0x1401641c0]
jmp 0x14000df66
mov rcx, qword [rsi + 0x78]
call fcn.140008ed0
mov edx, 0x17ec
lea rcx, [0x140009d00]
call qword [sym.imp.USER32.dll_EnumWindows]
mov bl, 1
jmp 0x14000e134
mov rcx, qword [rsi + 0x78]
call fcn.140009150
mov edx, 0x17ed
lea rcx, [0x140009d00]
call qword [sym.imp.USER32.dll_EnumWindows]
xor bl, bl
lea rcx, [rsp + 0x28]
call fcn.14004bca0
nop
lea rcx, [rbp + 0x200]
call fcn.14000c270
movzx eax, bl
mov rcx, qword [rbp + 0x2c0]
xor rcx, rsp
call fcn.1400ce670
lea r11, [rsp + 0x3d0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop rdi
pop rbp
ret
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
nop
call fcn.1400d3cc4
int3