Function at 0x140063b50
Capabilities:
Enumerate gui resources

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
mov qword [rsp + 0x18], rdi
mov qword [rsp + 0x20], r14
push rbp
lea rbp, [rsp - 0x700]
sub rsp, 0x800
mov rdi, r9
mov r14, rdx
mov rbx, rcx
cmp r8d, 0x110
ja 0x140063d2f
je 0x140063d0e
cmp r8d, 0x10
je 0x140063d53
cmp r8d, 0x4e
je 0x140063bbf
cmp r8d, 0x53
jne 0x140063f80
mov edx, pe_nt_image_headers64
mov r8d, 0x4fc
call fcn.140041f30
jmp 0x140064085
mov rdi, qword [rbp + 0x730]
mov eax, dword [rdi + 0x10]
cmp eax, 0xffffff9b
je 0x140063c57
cmp eax, 0xfffffffd
jne 0x140064085
cmp dword [rcx + 0x28e0], 0
jl 0x140064085
mov rcx, qword [rcx + 0x28c0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
dec eax
cmp dword [rbx + 0x28e0], eax
jne 0x140063c2f
xor edi, edi
mov word [rbx + 0x28e4], di
call fcn.140064d60
lea r8d, [rdi + 1]
xor edx, edx
mov rcx, r14
call qword [sym.imp.USER32.dll_InvalidateRect]
jmp 0x140064085
mov edx, 1
call fcn.140064790
movsxd r8, dword [rbx + 0x28e0]
mov dword [rbp - 0x40], 2
mov dword [rbp - 0x44], 2
lea r9, [rbp - 0x50]
jmp 0x140064073
movsxd r8, dword [rdi + 0x18]
mov rcx, qword [rcx + 0x28c0]
mov edx, 0x102c
mov r9d, 2
call qword [sym.imp.USER32.dll_SendMessageW]
cmp eax, 2
jne 0x140063c90
mov edx, dword [rdi + 0x18]
mov rcx, rbx
call fcn.140065030
mov rcx, rbx
call fcn.140064ad0
jmp 0x140064085
test eax, eax
jne 0x140064085
lea rax, [rbx + 0x32f0]
or esi, 0xffffffff
xor edi, edi
mov dword [rbx + 0x28e0], esi
cmp qword [rax + 0x18], 8
mov qword [rax + 0x10], rdi
jb 0x140063cb8
mov rax, qword [rax]
mov word [rax], di
mov rcx, qword [rbx + 0x10]
mov edx, 0x4db
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, qword [rbx + 0x10]
mov edx, 0x4dc
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
mov rcx, qword [rbx + 0x10]
mov edx, 0x4dd
call qword [sym.imp.USER32.dll_GetDlgItem]
xor edx, edx
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableWindow]
jmp 0x140064085
call fcn.1400421a0
mov r9, qword [rbp + 0x730]
mov r8, rdi
mov rdx, r14
mov rcx, rbx
call fcn.1400640b0
cdqe
jmp 0x14006408a
cmp r8d, 0x111
je 0x140063e1d
cmp r8d, 0x218
jne 0x140063f80
cmp r9, 4
jne 0x140064085
mov rax, qword [rcx + 0x10]
lea rcx, [rsp + 0x38]
xor edi, edi
xor r8d, r8d
xor r9d, r9d
mov edx, 0xa6
mov qword [rbp + 0xd0], rax
mov dword [rsp + 0x20], edi
call fcn.1400c4700
mov r8, qword [rax]
lea rcx, [rbp + 0xd8]
mov edx, 0x104
call fcn.1400fbc74
mov rdx, qword [rsp + 0x38]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140063da6
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbx + 0x10]
lea r8, [rbp + 0xd0]
lea rdx, [0x1400dcd40]
call qword [sym.imp.USER32.dll_EnumChildWindows]
lea rcx, [rsp + 0x48]
xor r8d, r8d
xor r9d, r9d
mov edx, reloc.OLEAUT32.dll_VarDecFix
mov dword [rsp + 0x20], edi
call fcn.1400c4700
lea rcx, [rbp + 0xd8]
mov edx, 0x104
mov r8, qword [rax]
call fcn.1400fbc74
mov rdx, qword [rsp + 0x48]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140063e04
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
lea rdx, [rbp + 0xd0]
lea rcx, [0x1400dcd40]
call qword [sym.imp.USER32.dll_EnumWindows]
jmp 0x140063ea9
movzx ecx, r9w
cmp ecx, 0x4dc
jg 0x140063f6f
je 0x140063ee1
cmp ecx, 2
je 0x140063ea7
cmp ecx, 0x108
je 0x140063ec9
cmp ecx, 0x4db
jne 0x140063f80
mov rcx, qword [0x140295fd0]
test rcx, rcx
je 0x140063e6c
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x10]
call qword [sym.imp.USER32.dll_PostMessageW]
mov edx, 1
mov rcx, rbx
call fcn.140064790
movsxd r8, dword [rbx + 0x28e0]
mov rcx, qword [rbx + 0x28c0]
lea r9, [rbp + 0x70]
mov edx, 0x102b
mov dword [rbp + 0x80], 2
mov dword [rbp + 0x7c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
mov edx, 1
mov rcx, r14
mov qword [0x140296000], rdi
mov dword [0x140295520], edi
call qword [sym.imp.USER32.dll_EndDialog]
jmp 0x140064085
mov edx, pe_nt_image_headers64
mov r8d, 0x4fc
mov rcx, rbx
call fcn.140041f30
jmp 0x140064085
mov rcx, qword [rbx + 0x28c0]
movsxd rsi, dword [rbx + 0x28e0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
call qword [sym.imp.USER32.dll_SendMessageW]
xor edi, edi
dec eax
cmp esi, eax
jne 0x140063f11
mov word [rbx + 0x28e4], di
jmp 0x140063f43
mov rcx, qword [rbx + 0x28c0]
lea rax, [rbx + 0x28e4]
lea r9, [rsp + 0x50]
mov r8, rsi
mov edx, 0x1073
mov qword [rsp + 0x68], rax
mov dword [rsp + 0x58], edi
mov dword [rsp + 0x70], 0x400
call qword [sym.imp.USER32.dll_SendMessageW]
mov rcx, rbx
call fcn.140064d60
mov rcx, qword [rbx + 0x10]
mov edx, 0x4fd
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, qword [rbx + 0x10]
mov edx, 0x28
lea r9d, [rdx - 0x27]
mov r8, rax
jmp 0x14006407f
sub ecx, 0x4dd
je 0x140063f87
cmp ecx, 0x20
je 0x140063ea7
xor eax, eax
jmp 0x14006408a
mov r9, qword [rbx + 8]
lea rcx, [rsp + 0x30]
xor edi, edi
xor r8d, r8d
mov edx, reloc.OLEAUT32.dll_VarDecFix
mov dword [rsp + 0x20], edi
call fcn.1400c4700
lea rcx, [rbp + 0x2e0]
mov edx, 0x104
mov r8, qword [rax]
call fcn.1400fbc74
mov rdx, qword [rsp + 0x30]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140063fd0
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r9, qword [rbx + 8]
lea rcx, [rsp + 0x40]
xor r8d, r8d
mov edx, 0x4ea
mov dword [rsp + 0x20], edi
call fcn.1400c4700
lea rcx, [rbp + 0x4f0]
mov edx, 0x104
mov r8, qword [rax]
call fcn.1400fbc74
mov rdx, qword [rsp + 0x40]
add rdx, 0xffffffffffffffe8
lock add dword [rdx + 0x10], 0xffffffff
jg 0x140064017
mov rcx, qword [rdx]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov rcx, qword [rbx + 0x10]
lea r8, [rbp + 0x2e0]
lea rdx, [rbp + 0x4f0]
mov r9d, 1
call fcn.1400c5330
cmp eax, 1
jne 0x140064085
lea edx, [rax + 2]
mov rcx, rbx
call fcn.140064790
mov rcx, qword [rbx + 0x28c0]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x1004
mov dword [rbp + 0x20], 2
mov dword [rbp + 0x1c], 2
call qword [sym.imp.USER32.dll_SendMessageW]
lea r9, [rbp + 0x10]
dec eax
movsxd r8, eax
mov rcx, qword [rbx + 0x28c0]
mov edx, 0x102b
call qword [sym.imp.USER32.dll_SendMessageW]
mov eax, 1
lea r11, [rsp + 0x800]
mov rbx, qword [r11 + 0x10]
mov rsi, qword [r11 + 0x18]
mov rdi, qword [r11 + 0x20]
mov r14, qword [r11 + 0x28]
mov rsp, r11
pop rbp
ret