Function at 0x14001375c
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rbx
push rdi
sub rsp, 0x9c0
mov ecx, 0xff
mov rbx, r8
call fcn.1400049dc
xor edi, edi
cmp eax, edi
jne 0x140013786
mov eax, 1
jmp 0x140013abb
mov ecx, 0x1ff
call fcn.1400049dc
cmp eax, edi
je 0x14001377c
cmp qword [0x14001d660], rdi
jne 0x1400137cd
lea rcx, str.shell32.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryW]
cmp rax, rdi
mov qword [0x14001d660], rax
je 0x1400137cd
lea rdx, str.SHGetSpecialFolderPathW
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_GetProcAddress]
mov qword [0x14001d658], rax
mov ecx, 0x8001
call qword [sym.imp.KERNEL32.dll_SetErrorMode]
xor ecx, ecx
mov dword [0x14001cda8], 0x11223344
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [0x140015014]
xor r8d, r8d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
lea rcx, [rsp + 0xa0]
mov dword [rsp + 0x40], 0x400
mov dword [rsp + 0x44], 0x100
mov dword [rsp + 0x20], edi
mov dword [rsp + 0x24], edi
mov qword [rsp + 0x30], rdi
mov qword [rsp + 0x38], rdi
mov dword [rsp + 0x48], edi
mov dword [rsp + 0x28], edi
mov dword [rsp + 0x5c], 0x20
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x68], edi
call fcn.1400130ac
lea r11, [rsp + 0x20]
lea rcx, [rsp + 0x20]
mov rdx, rbx
mov qword [rsp + 0x7a0], r11
call fcn.14000a564
mov rcx, qword [rsp + 0x7a0]
or ebx, 0xffffffff
lea rdx, str._savelangfile
mov r8d, ebx
call fcn.14000a79c
cmp eax, edi
jl 0x140013914
lea rax, [0x14001c378]
lea rcx, [rsp + 0x7b2]
xor edx, edx
mov r8d, 0x208
mov word [rsp + 0x7b0], di
mov qword [0x14001d570], rax
call sub.msvcrt.dll_memset
lea rdx, [rsp + 0x7b0]
mov r8d, 0x104
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea rcx, [rsp + 0x7b0]
mov dx, 0x2e
call sub.msvcrt.dll_wcsrchr
cmp rax, rdi
je 0x1400138e3
mov word [rax], di
lea rdx, str._lng.ini
lea rcx, [rsp + 0x7b0]
call sub.msvcrt.dll_wcscat
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea rdx, [rsp + 0x7b0]
mov rcx, rax
call fcn.14000b944
jmp 0x140013a43
call fcn.14000b830
mov rcx, qword [rsp + 0x7a0]
lea rdx, str._deleteregkey
mov r8d, ebx
call fcn.14000a79c
cmp eax, edi
jge 0x140013a43
mov rax, qword [rsp + 0x7a0]
cmp dword [rax + 0x48], 1
jle 0x14001395b
lea rcx, [rsp + 0xa0]
call fcn.140013238
cmp eax, edi
jne 0x140013a43
xor ecx, ecx
call qword [sym.imp.ole32.dll_CoInitialize]
lea rcx, [rsp + 0xa0]
call fcn.140012fd0
mov rcx, qword [rsp + 0x2b0]
mov edx, 3
cmp dword [rsp + 0x324], edx
je 0x14001398b
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, qword [rsp + 0x2b0]
call qword [sym.imp.USER32.dll_UpdateWindow]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edx, 0x67
mov rcx, rax
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [rsp + 0x2e0], rax
jmp 0x140013a26
mov rcx, qword [0x14001cea8]
cmp rcx, rdi
je 0x1400139da
lea rdx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
cmp eax, edi
jne 0x140013a26
mov rdx, qword [rsp + 0x2e0]
mov rcx, qword [rsp + 0x2b0]
lea r8, [rsp + 0x70]
call qword [sym.imp.USER32.dll_TranslateAcceleratorW]
cmp eax, edi
jne 0x140013a26
mov rcx, qword [rsp + 0x2b0]
lea rdx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_IsDialogMessageW]
cmp eax, edi
jne 0x140013a26
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_TranslateMessage]
lea rcx, [rsp + 0x70]
call qword [sym.imp.USER32.dll_DispatchMessageW]
lea rcx, [rsp + 0x70]
xor r9d, r9d
xor r8d, r8d
xor edx, edx
call qword [sym.imp.USER32.dll_GetMessageW]
cmp eax, edi
jne 0x1400139bf
call qword [sym.imp.ole32.dll_CoUninitialize]
mov rcx, qword [rsp + 0x770]
lea r11, [0x140018e38]
mov qword [rsp + 0xa0], r11
call sub.msvcrt.dll_void___cdecl_operator_delete_void____ptr64_
mov rcx, qword [rsp + 0x768]
cmp rcx, rdi
je 0x140013a7a
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [rsp + 0x768], rdi
lea rax, [0x140017878]
lea rcx, [rsp + 0x20]
mov qword [rsp + 0xa0], rax
call fcn.14000a06c
mov rcx, qword [rsp + 0x50]
cmp rcx, rdi
je 0x140013aa2
call sub.msvcrt.dll_free
lea rcx, [rsp + 0x20]
mov qword [rsp + 0x50], rdi
mov dword [rsp + 0x60], edi
mov dword [rsp + 0x58], edi
call fcn.14000a06c
xor eax, eax
mov rbx, qword [rsp + 0x9d0]
add rsp, 0x9c0
pop rdi
ret