Function at 0x1400a5f90
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov eax, 0x1240
call fcn.1400d8110
sub rsp, rax
mov rax, qword [0x1401006f0]
xor rax, rsp
mov qword [rsp + 0x1230], rax
xor r15d, r15d
mov r13, r9
mov r14b, r8b
cmp qword [0x140148968], r15
mov r12, rdx
mov word [0x140184070], r15w
setne sil
cmp sil, r15b
jne 0x1400a6004
mov byte [0x140183ad7], r15b
mov byte [0x140183ad6], r15b
mov byte [0x1401837e1], r15b
mov dword [0x140183adc], ecx
mov word [0x140183f70], r15w
jmp 0x1400a600a
mov ecx, dword [0x140183adc]
cmp ecx, 6
lea rbp, [0x140184070]
jg 0x1400a632c
je 0x1400a631a
cmp ecx, r15d
je 0x1400a6165
jle 0x1400a63e6
cmp ecx, 2
jle 0x1400a60b0
cmp ecx, 3
je 0x1400a60a1
cmp ecx, 4
je 0x1400a6077
cmp ecx, 5
jne 0x1400a63e6
mov ecx, 0x223
call fcn.140076080
mov rcx, rbp
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r15w
jne 0x1400a6057
lea rax, str.CMDWNDOTHER
jmp 0x1400a63df
mov rcx, rdx
call fcn.1400615e8
mov ecx, 0x212
mov rdi, rax
call fcn.140076080
mov r9, rdi
mov edx, 0x880
mov rcx, rbp
mov r8, rax
call fcn.140022b7c
jmp 0x1400a606b
mov rcx, rdx
call fcn.1400615e8
mov ecx, 0x211
jmp 0x1400a6084
mov rcx, rdx
call fcn.1400615e8
cmp dword [0x140183adc], 1
mov ecx, r15d
setne cl
mov rdi, rax
add ecx, 0x20f
call fcn.140076080
mov r9, rdi
mov edx, 0x880
mov r8, rax
mov rcx, rbp
call fcn.140022b7c
cmp sil, r15b
jne 0x1400a6159
cmp dword [0x140148978], r15d
je 0x1400a60fe
cmp qword [0x140149a18], 1
ja 0x1400a612a
cmp dword [0x1401579d4], r15d
je 0x1400a612a
lea rcx, [0x1401575c0]
call fcn.140014ea8
cmp eax, r15d
jne 0x1400a6121
cmp dword [0x1401579d4], 1
je 0x1400a612a
mov byte [0x140183ad7], r15b
jmp 0x1400a6131
mov byte [0x140183ad7], 1
lea rcx, [0x1401575c0]
call fcn.140014ea8
cmp eax, r15d
je 0x1400a6152
mov byte [0x140183ad6], 1
cmp dword [0x1401579d4], r15d
jne 0x1400a6159
mov byte [0x140183ad6], r15b
lea rax, str.CMDWNDADD
jmp 0x1400a63df
lea rax, str.CMDWNDADD
mov qword [0x1401837e8], rax
cmp sil, r15b
jne 0x1400a63ef
mov byte [0x140183ad7], 1
mov byte [0x140186170], r15b
mov word [0x140185170], r15w
mov word [0x140183b70], r15w
mov word [0x140183a70], r15w
mov qword [0x140183a68], r15
mov qword [0x140183848], r15
mov qword [0x140183a50], r15
mov qword [0x140183a58], r15
mov qword [0x140183a60], r15
mov byte [0x1401837e3], r15b
mov byte [0x1401837e2], r15b
mov dword [0x1401837e4], r15d
call fcn.1400c7b74
mov qword [0x140183ae8], r15
mov word [0x140183850], r15w
mov dword [0x140183ad8], eax
mov qword [0x140183ae0], r15
call fcn.14005e930
mov byte [0x1401837e0], r15b
call fcn.1400a2468
lea rdx, str.SystemProgressBar
lea rcx, [0x1400e2308]
movzx r8d, al
call fcn.14006d3c4
cmp eax, r15d
setne byte [0x140183ad5]
call fcn.14004b0ac
mov r8d, r15d
cmp eax, 0x601
lea rdx, str.TaskbarProgressBar
lea rcx, [0x1400e2308]
setae r8b
call fcn.14006d3c4
cmp eax, r15d
mov eax, dword [0x140183adc]
setne byte [0x140183ad4]
cmp eax, r15d
je 0x1400a6270
cmp eax, 1
je 0x1400a6270
cmp eax, 2
jne 0x1400a6290
mov eax, dword [0x140148978]
mov qword [0x14014aa40], r15
neg eax
sbb rcx, rcx
and rcx, qword [0x140149a10]
mov qword [0x140149a10], rcx
mov rdx, qword [0x1401837e8]
mov rcx, qword [0x140134b88]
mov r8d, 5
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rcx, qword [0x140134b88]
mov rdx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, qword [0x140134b88]
mov rdx, rdi
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
xor ecx, ecx
movsxd rdi, eax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov r8, rdi
mov rdx, rsi
mov rcx, rax
mov rbp, rax
call fcn.1400c6bb0
cmp dword [0x140148978], 1
je 0x1400a63fb
mov rcx, qword [0x14014aae0]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, r15d
je 0x1400a63fb
mov dil, r15b
jmp 0x1400a642d
mov rcx, rdx
call fcn.1400615e8
mov ecx, 0x216
jmp 0x1400a6084
sub ecx, 7
je 0x1400a63d8
sub ecx, 1
je 0x1400a63ab
sub ecx, 1
je 0x1400a6382
sub ecx, 1
je 0x1400a6359
cmp ecx, 1
jne 0x1400a63e6
lea rax, str.CMDWNDBENCH
jmp 0x1400a63df
mov ecx, 0x556
call fcn.140076080
mov rcx, rbp
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r15w
jne 0x1400a6369
jmp 0x1400a606b
mov ecx, 0x543
call fcn.140076080
mov rcx, rbp
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r15w
jne 0x1400a6392
jmp 0x1400a606b
mov ecx, 0x50b
call fcn.140076080
mov rcx, rbp
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r15w
jne 0x1400a63bb
lea rax, str.CMDWNDCONVERT
jmp 0x1400a63df
lea rax, str.CMDWNDFIND
mov qword [0x1401837e8], rax
cmp sil, r15b
je 0x1400a6183
call fcn.1400a3d64
xor al, al
jmp 0x1400a6679
mov ecx, dword [rbp]
mov edx, 0xffff0000
mov dil, 1
mov eax, ecx
and eax, edx
cmp eax, edx
jne 0x1400a641e
and dword [rbp + 0xc], 0x3ff5f7ff
or dword [rbp + 0xc], 0x800a0800
jmp 0x1400a642d
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [rbp], ecx
mov r8, qword [0x14014aae0]
mov rcx, qword [0x140134b88]
cmp r13, r15
lea r9, [fcn.1400a525c]
mov rdx, rbp
mov qword [rsp + 0x20], r15
cmovne r9, r13
cmp dword [0x140148978], 1
cmove r8, r15
call qword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
mov qword [0x140148968], rax
cmp dil, r15b
je 0x1400a64ba
lea rcx, [0x14015a270]
mov dl, 1
call fcn.1400821b8
mov rcx, qword [0x140148968]
mov edi, 0x80
xor r8d, r8d
mov edx, edi
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x14015a270]
xor edx, edx
call fcn.1400821b8
mov rcx, qword [0x140148968]
lea r8d, [rdi - 0x7f]
mov r9, rax
mov edx, edi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x140183adc], 6
jne 0x1400a656d
lea r13, [0x1400e9c48]
cmp word [0x14015c3d8], r15w
je 0x1400a6512
lea rcx, [0x14015c3d8]
call fcn.1400615e8
lea rdi, [0x1400e13e4]
mov ecx, 2
mov rsi, rax
repe cmpsw word [rsi], word [rdi]
mov ecx, 0x215
je 0x1400a6502
mov ecx, 0x214
call fcn.140076080
mov rcx, r13
mov rdx, rax
call fcn.1400a3744
cmp word [0x14015e3de], r15w
je 0x1400a6531
mov ecx, 0x213
call fcn.140076080
mov rcx, r13
mov rdx, rax
call fcn.1400a3744
cmp dword [0x140161504], r15d
je 0x1400a654f
mov ecx, 0x218
call fcn.140076080
mov rcx, r13
mov rdx, rax
call fcn.1400a3744
cmp byte [0x1401616b0], r15b
je 0x1400a656d
mov ecx, 0x217
call fcn.140076080
mov rcx, r13
mov rdx, rax
call fcn.1400a3744
mov rcx, qword [0x140148968]
cmp r14b, r15b
je 0x1400a658d
xor r9d, r9d
mov edx, 0x111
lea r8d, [r9 + 0x6e]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400a6598
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [0x140183adc]
cmp edx, r15d
je 0x1400a65b6
cmp edx, 1
je 0x1400a65b6
cmp edx, 2
jne 0x1400a65ec
mov ecx, 0x28a
call fcn.140076080
lea rcx, [rsp + 0x30]
mov r9, r12
mov r8, rax
mov edx, 0x900
call fcn.140022b7c
mov rcx, qword [0x140148968]
lea r8, [rsp + 0x30]
mov edx, 0xa5
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp word [0x140184070], r15w
jne 0x1400a6610
mov rcx, qword [0x140148968]
lea rdx, [0x140184070]
mov r8d, 0x880
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp qword [0x140148968], r15
je 0x1400a63f4
call fcn.1400a3d64
cmp byte [0x1401657a4], r15b
je 0x1400a6677
mov rcx, qword [0x14014aad8]
cmp rcx, r15
je 0x1400a6677
mov edi, r15d
mov edx, 0xa
call qword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
jne 0x1400a666a
cmp byte [0x14014aa58], r15b
jne 0x1400a6677
call fcn.140053a58
inc edi
cmp edi, 0x14
jae 0x1400a6677
mov rcx, qword [0x14014aad8]
jmp 0x1400a663a
mov rcx, qword [0x14014aad8]
call qword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov al, 1
mov rcx, qword [rsp + 0x1230]
xor rcx, rsp
call fcn.1400c6350
add rsp, 0x1240
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret