Function at 0x140006560
Capabilities:
Enumerate gui resources

Disassembly:
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1360
call fcn.1400425e0
sub rsp, rax
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov qword [rsp + 0x1390], rbx
mov qword [rsp + 0x13a0], rsi
mov rax, qword [0x14005d010]
xor rax, rsp
mov qword [rsp + 0x1350], rax
mov r13, rdx
test rdx, rdx
jne 0x1400065b4
mov eax, 0x80070057
jmp 0x14000721b
xor esi, esi
mov qword [rsp + 0x60], rsi
mov qword [rsp + 0x68], rsi
mov byte [rsp + 0x70], 1
lea rdx, [rsp + 0x68]
lea rcx, [0x140007910]
call qword [sym.imp.USER32.dll_EnumWindows]
mov rdx, qword [rsp + 0x68]
test rdx, rdx
jne 0x1400065e8
mov ebx, 0x80004005
jmp 0x140006602
lea rax, [rsp + 0x60]
mov qword [rsp + 0x20], rax
call fcn.1400076a0
mov ebx, eax
test eax, eax
jns 0x14000661a
mov rsi, qword [rsp + 0x60]
test rsi, rsi
je 0x140007219
mov rcx, qword [rsi]
mov rax, qword [rcx + 0x10]
mov rcx, rsi
jmp 0x140007213
mov rdi, qword [rsp + 0x60]
mov rcx, rdi
call fcn.1400074b0
test al, al
je 0x14000664a
test rdi, rdi
je 0x140006640
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
mov eax, 0x80004005
jmp 0x14000721b
mov qword [rsp + 0x38], rsi
mov rax, qword [rdi]
lea rdx, [rsp + 0x38]
mov rcx, rdi
mov rax, qword [rax + 0xf0]
call qword [case.0x14004127e.0]
mov ebx, eax
test eax, eax
js 0x1400071f3
mov qword [rsp + 0x30], rsi
mov qword [rsp + 0x28], rsi
mov qword [rsp + 0x20], rsi
xor r8d, r8d
mov rdx, qword [rsp + 0x38]
lea rcx, [rsp + 0x30]
call fcn.140031a90
test eax, eax
js 0x1400071db
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x14004127e.0]
test eax, eax
je 0x140007253
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov rax, qword [rax + 0x1c0]
call qword [case.0x14004127e.0]
cmp eax, 1
jne 0x140007253
mov dword [rsp + 0x98], 0x102
lea rax, [0x14005d0c0]
mov qword [rsp + 0x80], rax
lea rax, [rsp + 0xa0]
mov qword [rsp + 0x88], rax
mov dword [rsp + 0x90], 0x102
xor eax, eax
mov word [rsp + 0xa0], ax
lea rdx, [rsp + 0x80]
mov rcx, qword [rsp + 0x38]
call fcn.140007a20
mov qword [rsp + 0x40], rsi
lea rax, [rsp + 0x40]
mov qword [rsp + 0x20], rax
lea r9, [0x140048610]
mov r8d, 0x17
lea rcx, str.QyPs
call fcn.14001b8d0
mov ebx, eax
test eax, eax
js 0x1400071a7
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
mov rdx, qword [rsp + 0x88]
mov rax, qword [rax + 0x40]
call qword [case.0x14004127e.0]
mov ebx, eax
test eax, eax
jns 0x1400067e9
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000678d
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x1400067a9
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400067c1
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1400067d2
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
mov rcx, rdi
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov qword [rsp + 0x48], rsi
mov rcx, qword [rsp + 0x40]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
mov rax, qword [rax + 0x48]
call qword [case.0x14004127e.0]
mov ebx, eax
test eax, eax
jns 0x14000689c
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140006827
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140006840
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x14000685c
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140006874
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140006885
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
mov rcx, rdi
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov qword [rsp + 0x58], rsi
mov rax, qword [rdi]
lea rdx, [rsp + 0x58]
mov rcx, rdi
mov rax, qword [rax + 0xe8]
call qword [case.0x14004127e.0]
mov ebx, eax
test eax, eax
jns 0x140006960
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400068d4
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400068ec
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140006904
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140006920
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140006938
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140006949
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
mov rcx, rdi
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov r12, qword [rax + 0x40]
mov r15, qword [rsp + 0x58]
lea rcx, str.Excerpt
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r14, rax
mov qword [rsp + 0x50], rax
mov r8, r15
mov rdx, rax
mov rcx, rbx
mov rax, r12
call qword [case.0x14004127e.0]
mov ebx, eax
test r14, r14
je 0x1400069a8
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test ebx, ebx
jns 0x140006a4d
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400069c1
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400069d9
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400069f1
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140006a0d
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140006a25
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140006a36
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
mov rcx, rdi
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov dword [rsp + 0x2f8], 0x104a
lea rbx, [0x14005d0c0]
mov qword [rsp + 0x2e0], rbx
lea rax, [rsp + 0x300]
mov qword [rsp + 0x2e8], rax
mov dword [rsp + 0x2f0], 0x104a
xor eax, eax
mov word [rsp + 0x300], ax
lea edx, [rax + 3]
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.SHLWAPI.dll_UrlIsW]
test eax, eax
je 0x140006cf7
mov dword [rsp + 0x1c8], 0x102
mov qword [rsp + 0x1b0], rbx
lea rax, [rsp + 0x1d0]
mov qword [rsp + 0x1b8], rax
mov dword [rsp + 0x1c0], 0x102
xor eax, eax
mov word [rsp + 0x1d0], ax
mov rdx, qword [rsp + 0x38]
test rdx, rdx
je 0x140006afc
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
inc rax
cmp word [rdx + rax*2], 0
jne 0x140006af0
jmp 0x140006aff
mov rax, rsi
mov r8d, eax
lea rcx, [rsp + 0x1b0]
call fcn.14000c050
mov rcx, qword [rsp + 0x1b8]
call qword [sym.imp.SHLWAPI.dll_PathStripPathW]
mov rbx, qword [rsp + 0x1b8]
mov eax, dword [rsp + 0x2f0]
shr eax, 1
mov dword [rsp + 0x50], eax
mov r9d, 0x3a000000
lea r8, [rsp + 0x50]
mov rdx, qword [rsp + 0x2e8]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCanonicalizeUrlW]
test eax, eax
jne 0x140006cd3
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x7a
jne 0x140006bdd
mov eax, dword [rsp + 0x50]
test eax, eax
js 0x140007281
mov rdx, rax
add rdx, rdx
mov eax, 0xffffffff
cmp rdx, rax
ja 0x140007287
cmp edx, 0x7fffffff
ja 0x14000728d
cmp edx, dword [rsp + 0x2f0]
jle 0x140006bb8
mov rcx, qword [rsp + 0x2e0]
mov rax, qword [rcx]
xor r9d, r9d
mov r8d, edx
lea rdx, [rsp + 0x2e0]
mov rax, qword [rax]
call qword [case.0x14004127e.0]
mov r9d, 0x3a000000
lea r8, [rsp + 0x50]
mov rdx, qword [rsp + 0x2e8]
mov rcx, rbx
call qword [sym.imp.WININET.dll_InternetCanonicalizeUrlW]
test eax, eax
je 0x140006bfb
jmp 0x140006cd3
mov rax, qword [0x14005d178]
mov edx, 0x2c710f
lea rcx, [0x14005d178]
mov rax, qword [rax + 8]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0x1d0]
mov rcx, qword [rsp + 0x1b8]
cmp rcx, rax
je 0x140006c17
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
lea rax, [rsp + 0x300]
mov rcx, qword [rsp + 0x2e8]
cmp rcx, rax
je 0x140006c33
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140006c44
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140006c5c
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140006c74
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140006c90
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140006ca8
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140006cb9
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
mov eax, 0x80004005
jmp 0x14000721b
lea rax, [rsp + 0x1d0]
mov rcx, qword [rsp + 0x1b8]
cmp rcx, rax
je 0x140006f22
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
jmp 0x140006f22
mov dword [rsp + 0x50], esi
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0x50]
xor r8d, r8d
lea edx, [r8 + 0x1f]
mov rax, qword [rax + 0x58]
call qword [case.0x14004127e.0]
mov ebx, eax
test eax, eax
jns 0x140006de0
lea rax, [rsp + 0x300]
mov rcx, qword [rsp + 0x2e8]
cmp rcx, rax
je 0x140006d43
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140006d54
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140006d6c
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140006d84
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140006da0
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140006db8
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140006dc9
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
mov rcx, rdi
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov eax, dword [rsp + 0x50]
add eax, 1
js 0x140007297
mov edx, eax
add rdx, rdx
mov eax, 0xffffffff
cmp rdx, rax
ja 0x14000729d
cmp edx, 0x7fffffff
ja 0x1400072a3
cmp edx, dword [rsp + 0x2f0]
jle 0x140006e37
mov rcx, qword [rsp + 0x2e0]
mov rax, qword [rcx]
xor r9d, r9d
mov r8d, edx
lea rdx, [rsp + 0x2e0]
mov rax, qword [rax]
call qword [case.0x14004127e.0]
mov rcx, qword [rsp + 0x30]
mov rax, qword [rcx]
mov dword [rsp + 0x20], esi
lea r9, [rsp + 0x50]
mov r8, qword [rsp + 0x2e8]
mov edx, 0x1f
mov rax, qword [rax + 0x58]
call qword [case.0x14004127e.0]
mov ebx, eax
test eax, eax
jns 0x140006f22
lea rax, [rsp + 0x300]
mov rcx, qword [rsp + 0x2e8]
cmp rcx, rax
je 0x140006e85
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140006e96
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140006eae
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140006ec6
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140006ee2
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140006efa
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140006f0b
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
mov rcx, rdi
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov r12, qword [rax + 0x40]
mov rcx, qword [rsp + 0x2e8]
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r14, rax
mov qword [rsp + 0x50], rax
lea rcx, str.ShortName
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r15, rax
mov qword [rsp + 0x68], rax
mov r8, r14
mov rdx, rax
mov rcx, rbx
mov rax, r12
call qword [case.0x14004127e.0]
mov ebx, eax
test r15, r15
je 0x140006f7c
mov rcx, r15
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
test r14, r14
je 0x140006f8a
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test ebx, ebx
jns 0x14000704b
lea rax, [rsp + 0x300]
mov rcx, qword [rsp + 0x2e8]
cmp rcx, rax
je 0x140006fae
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x140006fbf
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140006fd7
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140006fef
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x14000700b
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x140007023
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140007034
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rdi]
mov rax, qword [rcx + 0x10]
mov rcx, rdi
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov rbx, qword [rsp + 0x48]
mov rax, qword [rbx]
mov r12, qword [rax + 0x40]
mov r15, qword [rsp + 0x58]
lea rcx, str.FriendlyName
call qword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov r14, rax
mov qword [rsp + 0x68], rax
mov r8, r15
mov rdx, rax
mov rcx, rbx
mov rax, r12
call qword [case.0x14004127e.0]
mov ebx, eax
test r14, r14
je 0x140007093
mov rcx, r14
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
test ebx, ebx
jns 0x140007154
lea rax, [rsp + 0x300]
mov rcx, qword [rsp + 0x2e8]
cmp rcx, rax
je 0x1400070b7
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x1400070c8
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400070e0
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400070f8
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x140007114
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000712c
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000713d
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
mov eax, ebx
jmp 0x14000721b
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x40], rsi
mov qword [r13], rax
lea rax, [rsp + 0x300]
mov rcx, qword [rsp + 0x2e8]
cmp rcx, rax
je 0x14000717e
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x58]
test rcx, rcx
je 0x14000718f
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400071a7
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400071bf
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
lea rax, [rsp + 0xa0]
mov rcx, qword [rsp + 0x88]
cmp rcx, rax
je 0x1400071db
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
nop
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x1400071f3
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x140007204
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
test rdi, rdi
je 0x140007219
mov rax, qword [rdi]
mov rcx, rdi
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
mov eax, ebx
mov rcx, qword [rsp + 0x1350]
xor rcx, rsp
call fcn.1400407e0
lea r11, [rsp + 0x1360]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
mov rcx, qword [rsp + 0x30]
test rcx, rcx
je 0x14000726b
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14004127e.0]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x14000727c
call qword [sym.imp.OLEAUT32.dll_SysStringLen]
nop
jmp 0x140006630
call fcn.140009320
int3
call fcn.140009320
int3
call fcn.140009320
nop
jmp 0x140007296
nop
call fcn.140009320
int3
call fcn.140009320
int3
call fcn.140009320
int3