Function at 0x1400b99d4
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1240
call fcn.1400fe810
sub rsp, rax
mov rax, qword [0x140132350]
xor rax, rsp
mov qword [rsp + 0x1230], rax
xor r14d, r14d
mov r12, r9
mov r13b, r8b
cmp qword [0x1401561a8], r14
mov rbp, rdx
mov word [0x140187f60], r14w
setne sil
cmp sil, r14b
jne 0x1400b9a4c
mov byte [0x14018773c], r14b
mov byte [0x1401876d7], r14b
mov byte [0x1401876d2], r14b
mov dword [0x14018796c], ecx
mov word [0x140187e60], r14w
jmp 0x1400b9a52
mov ecx, dword [0x14018796c]
cmp ecx, 7
mov r15d, 0x880
lea rbx, [0x140187f60]
jg 0x1400b9d81
je 0x1400b9d6f
cmp ecx, r14d
je 0x1400b9bba
jle 0x1400b9de9
cmp ecx, 2
jle 0x1400b9b07
cmp ecx, 3
je 0x1400b9ace
cmp ecx, 4
je 0x1400b9abf
cmp ecx, 5
je 0x1400b9aa5
cmp ecx, 6
jne 0x1400b9de9
mov ecx, 0x672
jmp 0x1400b9aaa
mov ecx, 0x223
call fcn.14005fad0
mov r8, r15
mov rcx, rbx
mov rdx, rax
call fcn.140065d2c
jmp 0x1400b9af4
mov rcx, rdx
call fcn.140050ce0
mov ecx, 0x212
jmp 0x1400b9adb
mov rcx, rdx
call fcn.140050ce0
mov ecx, 0x211
mov rdi, rax
call fcn.14005fad0
mov r9, rdi
mov rdx, r15
mov rcx, rbx
mov r8, rax
call fcn.140057264
lea rdx, str.CMDWNDOTHER
mov qword [0x1401876d8], rdx
jmp 0x1400b9de9
mov rcx, rdx
call fcn.140050ce0
cmp dword [0x14018796c], 1
mov ecx, r14d
setne cl
mov rdi, rax
add ecx, 0x20f
call fcn.14005fad0
mov r9, rdi
mov rdx, r15
mov r8, rax
mov rcx, rbx
call fcn.140057264
cmp sil, r14b
jne 0x1400b9bae
cmp dword [0x1401571d0], r14d
je 0x1400b9b53
cmp qword [0x140157260], 1
ja 0x1400b9b7f
cmp dword [0x140164e54], r14d
je 0x1400b9b7f
lea rcx, [0x140164e50]
call fcn.140078548
cmp eax, r14d
jne 0x1400b9b76
cmp dword [0x140164e54], 1
je 0x1400b9b7f
mov byte [0x14018773c], r14b
jmp 0x1400b9b86
mov byte [0x14018773c], 1
lea rcx, [0x140164e50]
call fcn.140078548
cmp eax, r14d
je 0x1400b9ba7
mov byte [0x1401876d7], 1
cmp dword [0x140164e54], r14d
jne 0x1400b9bae
mov byte [0x1401876d7], r14b
lea rax, str.CMDWNDADD
jmp 0x1400b9de2
lea rax, str.CMDWNDADD
mov qword [0x1401876d8], rax
cmp sil, r14b
jne 0x1400b9df2
mov byte [0x14018773c], 1
mov word [0x140189060], r14w
mov word [0x140187a60], r14w
mov word [0x140187970], r14w
mov qword [0x140187960], r14
mov qword [0x140187940], r14
mov qword [0x140187948], r14
mov qword [0x140187950], r14
mov qword [0x140187958], r14
mov byte [0x1401876d4], r14b
mov byte [0x1401876d3], r14b
mov dword [0x140187738], r14d
call fcn.1400ee424
mov qword [0x14018a060], r14
mov word [0x140187740], r14w
mov qword [0x1401879d8], r14
mov dword [0x140187968], eax
call fcn.140097010
mov byte [0x1401876d1], r14b
mov byte [0x1401876d0], r14b
call fcn.1400b5984
lea rdx, str.SystemProgressBar
lea rcx, [0x14010f608]
movzx r8d, al
call fcn.14009b870
cmp eax, r14d
setne byte [0x1401876d6]
call fcn.140044e3c
mov r8d, r14d
cmp eax, 0x601
lea rdx, str.TaskbarProgressBar
lea rcx, [0x14010f608]
setae r8b
call fcn.14009b870
cmp eax, r14d
mov eax, dword [0x14018796c]
setne byte [0x1401876d5]
cmp eax, r14d
je 0x1400b9cc5
cmp eax, 1
je 0x1400b9cc5
cmp eax, 2
jne 0x1400b9ce5
mov eax, dword [0x1401571d0]
mov qword [0x140158298], r14
neg eax
sbb rcx, rcx
and rcx, qword [0x140157258]
mov qword [0x140157258], rcx
mov rdx, qword [0x1401876d8]
mov rcx, qword [0x140149ef8]
mov r8d, 5
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rcx, qword [0x140149ef8]
mov rdx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, qword [0x140149ef8]
mov rdx, rdi
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
xor ecx, ecx
movsxd rdi, eax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov r8, rdi
mov rdx, rsi
mov rcx, rax
mov rbx, rax
call fcn.1400ea530
cmp dword [0x1401571d0], 1
je 0x1400b9dfe
mov rcx, qword [0x140158330]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, r14d
je 0x1400b9dfe
mov dil, r14b
jmp 0x1400b9e2e
mov rcx, rdx
call fcn.140050ce0
mov ecx, 0x216
jmp 0x1400b9adb
sub ecx, 8
je 0x1400b9ddb
sub ecx, 1
je 0x1400b9db7
sub ecx, 1
je 0x1400b9dad
sub ecx, 1
je 0x1400b9da3
cmp ecx, 1
jne 0x1400b9de9
lea rax, str.CMDWNDBENCH
jmp 0x1400b9de2
mov ecx, 0x556
jmp 0x1400b9aaa
mov ecx, 0x543
jmp 0x1400b9aaa
mov ecx, 0x50b
call fcn.14005fad0
mov r8, r15
mov rcx, rbx
mov rdx, rax
call fcn.140065d2c
lea rdx, str.CMDWNDCONVERT
jmp 0x1400b9afb
lea rax, str.CMDWNDFIND
mov qword [0x1401876d8], rax
cmp sil, r14b
je 0x1400b9bd8
call fcn.1400b77a8
xor al, al
jmp 0x1400ba03d
mov ecx, dword [rbx]
mov edx, 0xffff0000
mov dil, 1
mov eax, ecx
and eax, edx
cmp eax, edx
jne 0x1400b9e20
and dword [rbx + 0xc], 0x3ff5f7ff
or dword [rbx + 0xc], 0x800a0800
jmp 0x1400b9e2e
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [rbx], ecx
mov r8, qword [0x140158330]
mov rcx, qword [0x140149ef8]
cmp r12, r14
lea r9, [fcn.1400b8ca0]
mov rdx, rbx
mov qword [rsp + 0x20], r14
cmovne r9, r12
cmp dword [0x1401571d0], 1
cmove r8, r14
call qword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
mov qword [0x1401561a8], rax
cmp dil, r14b
je 0x1400b9ebb
lea rcx, [0x1401679a0]
mov dl, 1
call fcn.1400a4a8c
mov rcx, qword [0x1401561a8]
mov edi, 0x80
xor r8d, r8d
mov edx, edi
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x1401679a0]
xor edx, edx
call fcn.1400a4a8c
mov rcx, qword [0x1401561a8]
lea r8d, [rdi - 0x7f]
mov r9, rax
mov edx, edi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x14018796c], 7
jne 0x1400b9f7b
cmp dword [0x14016ec3c], r14d
jne 0x1400b9f7b
lea r12, [0x1401152a8]
cmp word [0x140169b08], r14w
je 0x1400b9f20
lea rcx, [0x140169b08]
call fcn.140050ce0
lea rdi, [0x14010bbbc]
mov ecx, 2
mov rsi, rax
repe cmpsw word [rsi], word [rdi]
mov ecx, 0x215
je 0x1400b9f10
mov ecx, 0x214
call fcn.14005fad0
mov rcx, r12
mov rdx, rax
call fcn.1400b7118
cmp word [0x14016bb0e], r14w
je 0x1400b9f3f
mov ecx, 0x213
call fcn.14005fad0
mov rcx, r12
mov rdx, rax
call fcn.1400b7118
cmp dword [0x14016ec38], r14d
je 0x1400b9f5d
mov ecx, 0x218
call fcn.14005fad0
mov rcx, r12
mov rdx, rax
call fcn.1400b7118
cmp byte [0x14016ede8], r14b
je 0x1400b9f7b
mov ecx, 0x217
call fcn.14005fad0
mov rcx, r12
mov rdx, rax
call fcn.1400b7118
mov rcx, qword [0x1401561a8]
cmp r13b, r14b
je 0x1400b9f9b
xor r9d, r9d
mov edx, 0x111
lea r8d, [r9 + 0x6e]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400b9fa6
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [0x14018796c]
cmp edx, r14d
je 0x1400b9fc4
cmp edx, 1
je 0x1400b9fc4
cmp edx, 2
jne 0x1400b9ffa
mov ecx, 0x28a
call fcn.14005fad0
lea rcx, [rsp + 0x30]
mov r9, rbp
mov r8, rax
mov edx, 0x900
call fcn.140057264
mov rcx, qword [0x1401561a8]
lea r8, [rsp + 0x30]
mov edx, 0xa5
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp word [0x140187f60], r14w
jne 0x1400ba01b
mov rcx, qword [0x1401561a8]
lea rdx, [0x140187f60]
mov r8d, r15d
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp qword [0x1401561a8], r14
je 0x1400b9df7
call fcn.1400b77a8
cmp dword [0x14018796c], r14d
jne 0x1400ba03b
call fcn.1400b7738
mov al, 1
mov rcx, qword [rsp + 0x1230]
xor rcx, rsp
call fcn.1400e9d00
mov rbx, qword [rsp + 0x1290]
add rsp, 0x1240
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret