Function at 0x14008a1d0
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
mov eax, 0x4a40
call fcn.1400baa60
sub rsp, rax
mov rax, qword [0x1400e0920]
xor rax, rsp
mov qword [rsp + 0x4a30], rax
xor r14d, r14d
mov r12, r9
mov r13b, r8b
cmp qword [0x1400fec08], r14
mov rbp, rdx
mov word [0x1401242b0], r14w
setne sil
cmp sil, r14b
jne 0x14008a23c
mov byte [0x140123d16], r14b
mov byte [0x140123d15], r14b
mov dword [0x140123d1c], ecx
mov word [0x1401241b0], r14w
jmp 0x14008a242
mov ecx, dword [0x140123d1c]
cmp ecx, 6
lea rbx, [0x1401242b0]
jg 0x14008a564
je 0x14008a552
cmp ecx, r14d
je 0x14008a39d
jle 0x14008a61e
cmp ecx, 2
jle 0x14008a2e8
cmp ecx, 3
je 0x14008a2d9
cmp ecx, 4
je 0x14008a2af
cmp ecx, 5
jne 0x14008a61e
mov ecx, 0x223
call fcn.140061d94
mov rcx, rbx
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r14w
jne 0x14008a28f
lea rax, str.CMDWNDOTHER
jmp 0x14008a617
mov rcx, rdx
call fcn.140052af8
mov ecx, 0x20d
mov rdi, rax
call fcn.140061d94
mov r9, rdi
mov edx, 0x480
mov rcx, rbx
mov r8, rax
call fcn.1400287d0
jmp 0x14008a2a3
mov rcx, rdx
call fcn.140052af8
mov ecx, 0x20c
jmp 0x14008a2bc
mov rcx, rdx
call fcn.140052af8
cmp dword [0x140123d1c], 1
mov ecx, r14d
setne cl
mov rdi, rax
add ecx, 0x20a
call fcn.140061d94
mov r9, rdi
mov edx, 0x480
mov r8, rax
mov rcx, rbx
call fcn.1400287d0
cmp sil, r14b
jne 0x14008a391
cmp dword [0x1400fec18], r14d
je 0x14008a336
cmp qword [0x1400ff4b8], 1
ja 0x14008a362
cmp dword [0x1401063f4], r14d
je 0x14008a362
lea rcx, [0x140105fe0]
call fcn.140012a1c
cmp eax, r14d
jne 0x14008a359
cmp dword [0x1401063f4], 1
je 0x14008a362
mov byte [0x140123d16], r14b
jmp 0x14008a369
mov byte [0x140123d16], 1
lea rcx, [0x140105fe0]
call fcn.140012a1c
cmp eax, r14d
je 0x14008a38a
mov byte [0x140123d15], 1
cmp dword [0x1401063f4], r14d
jne 0x14008a391
mov byte [0x140123d15], r14b
lea rax, str.CMDWNDADD
jmp 0x14008a617
lea rax, str.CMDWNDADD
mov qword [0x140123a28], rax
cmp sil, r14b
jne 0x14008a627
mov byte [0x140123d16], 1
mov byte [0x1401253b0], r14b
mov word [0x140124bb0], r14w
mov word [0x140123db0], r14w
mov word [0x140123cb0], r14w
mov qword [0x140123ca8], r14
mov qword [0x140123a88], r14
mov qword [0x140123c90], r14
mov qword [0x140123c98], r14
mov qword [0x140123ca0], r14
mov byte [0x140123a22], r14b
mov byte [0x140123a21], r14b
mov dword [0x140123a24], r14d
call fcn.1400a97ac
mov qword [0x140123d28], r14
mov word [0x140123a90], r14w
mov dword [0x140123d18], eax
mov qword [0x140123d20], r14
call fcn.1400500c0
mov byte [0x140123a20], r14b
call fcn.140086950
lea rdx, str.SystemProgressBar
lea rcx, [0x1400c4ad8]
movzx r8d, al
call fcn.14005c490
cmp eax, r14d
setne byte [0x140123d14]
call fcn.14003ed2c
mov r8d, r14d
cmp eax, 0x601
lea rdx, str.TaskbarProgressBar
lea rcx, [0x1400c4ad8]
setae r8b
call fcn.14005c490
cmp eax, r14d
mov eax, dword [0x140123d1c]
setne byte [0x140123a23]
cmp eax, r14d
je 0x14008a4a8
cmp eax, 1
je 0x14008a4a8
cmp eax, 2
jne 0x14008a4c8
mov eax, dword [0x1400fec18]
mov qword [0x1400ffcd8], r14
neg eax
sbb rcx, rcx
and rcx, qword [0x1400ff4b0]
mov qword [0x1400ff4b0], rcx
mov rdx, qword [0x140123a28]
mov rcx, qword [0x1400ec660]
mov r8d, 5
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rcx, qword [0x1400ec660]
mov rdx, rax
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, qword [0x1400ec660]
mov rdx, rdi
mov rsi, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
xor ecx, ecx
movsxd rdi, eax
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov r8, rdi
mov rdx, rsi
mov rcx, rax
mov rbx, rax
call fcn.1400a8fe0
cmp dword [0x1400fec18], 1
je 0x14008a633
mov rcx, qword [0x1400ffd80]
call qword [sym.imp.USER32.dll_IsWindowVisible]
cmp eax, r14d
je 0x14008a633
mov dil, r14b
jmp 0x14008a663
mov rcx, rdx
call fcn.140052af8
mov ecx, 0x211
jmp 0x14008a2bc
sub ecx, 7
je 0x14008a610
sub ecx, 1
je 0x14008a5e3
sub ecx, 1
je 0x14008a5ba
sub ecx, 1
je 0x14008a591
cmp ecx, 1
jne 0x14008a61e
lea rax, str.CMDWNDBENCH
jmp 0x14008a617
mov ecx, 0x556
call fcn.140061d94
mov rcx, rbx
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r14w
jne 0x14008a5a1
jmp 0x14008a2a3
mov ecx, 0x543
call fcn.140061d94
mov rcx, rbx
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r14w
jne 0x14008a5ca
jmp 0x14008a2a3
mov ecx, 0x50b
call fcn.140061d94
mov rcx, rbx
mov rdx, rax
movzx eax, word [rdx]
add rdx, 2
mov word [rcx], ax
add rcx, 2
cmp ax, r14w
jne 0x14008a5f3
lea rax, str.CMDWNDCONVERT
jmp 0x14008a617
lea rax, str.CMDWNDFIND
mov qword [0x140123a28], rax
cmp sil, r14b
je 0x14008a3bb
call fcn.140087f58
xor al, al
jmp 0x14008a903
mov ecx, dword [rbx]
mov edx, 0xffff0000
mov dil, 1
mov eax, ecx
and eax, edx
cmp eax, edx
jne 0x14008a655
and dword [rbx + 0xc], 0x3ff5f7ff
or dword [rbx + 0xc], 0x800a0800
jmp 0x14008a663
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [rbx], ecx
mov r8, qword [0x1400ffd80]
mov rcx, qword [0x1400ec660]
cmp r12, r14
lea r9, [fcn.140089400]
mov rdx, rbx
mov qword [rsp + 0x20], r14
cmovne r9, r12
cmp dword [0x1400fec18], 1
cmove r8, r14
call qword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
mov qword [0x1400fec08], rax
cmp dil, r14b
je 0x14008a6f0
lea rcx, [0x140107990]
mov dl, 1
call fcn.14006ce3c
mov rcx, qword [0x1400fec08]
mov edi, 0x80
xor r8d, r8d
mov edx, edi
mov r9, rax
call qword [sym.imp.USER32.dll_SendMessageW]
lea rcx, [0x140107990]
xor edx, edx
call fcn.14006ce3c
mov rcx, qword [0x1400fec08]
lea r8d, [rdi - 0x7f]
mov r9, rax
mov edx, edi
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x140123d1c], 6
jne 0x14008a84c
mov word [rsp + 0xa30], r14w
lea r12, [0x1400cae30]
mov edi, 0x2000
cmp word [0x140108b70], r14w
je 0x14008a773
lea rcx, [0x140108b70]
call fcn.140052af8
lea rdi, [0x1400c410c]
mov ecx, 2
mov rsi, rax
repe cmpsw word [rsi], word [rdi]
mov ecx, 0x210
je 0x14008a746
mov ecx, 0x20f
call fcn.140061d94
mov edi, 0x2000
lea rcx, [rsp + 0xa30]
mov r8, r12
mov rdx, rdi
mov r9, rax
call fcn.1400287d0
lea rcx, [rsp + 0xa30]
call fcn.140087994
cmp word [0x14010a370], r14w
je 0x14008a7aa
mov ecx, 0x20e
call fcn.140061d94
lea rcx, [rsp + 0xa30]
mov r8, r12
mov r9, rax
mov rdx, rdi
call fcn.1400287d0
lea rcx, [rsp + 0xa30]
call fcn.140087994
cmp dword [0x14010bc8c], r14d
je 0x14008a7e0
mov ecx, 0x214
call fcn.140061d94
lea rcx, [rsp + 0xa30]
mov r8, r12
mov r9, rax
mov rdx, rdi
call fcn.1400287d0
lea rcx, [rsp + 0xa30]
call fcn.140087994
cmp byte [0x14010bdd1], r14b
je 0x14008a816
mov ecx, 0x213
call fcn.140061d94
lea rcx, [rsp + 0xa30]
mov r8, r12
mov r9, rax
mov rdx, rdi
call fcn.1400287d0
lea rcx, [rsp + 0xa30]
call fcn.140087994
cmp byte [0x14010bca2], r14b
je 0x14008a84c
mov ecx, 0x349
call fcn.140061d94
lea rcx, [rsp + 0xa30]
mov r8, r12
mov r9, rax
mov rdx, rdi
call fcn.1400287d0
lea rcx, [rsp + 0xa30]
call fcn.140087994
mov rcx, qword [0x1400fec08]
cmp r13b, r14b
je 0x14008a86c
xor r9d, r9d
mov edx, 0x111
lea r8d, [r9 + 0x6e]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x14008a877
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov edx, dword [0x140123d1c]
cmp edx, r14d
je 0x14008a895
cmp edx, 1
je 0x14008a895
cmp edx, 2
jne 0x14008a8cb
mov ecx, 0x28a
call fcn.140061d94
lea rcx, [rsp + 0x30]
mov r9, rbp
mov r8, rax
mov edx, 0x500
call fcn.1400287d0
mov rcx, qword [0x1400fec08]
lea r8, [rsp + 0x30]
mov edx, 0xa5
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
cmp word [0x1401242b0], r14w
jne 0x14008a8ef
mov rcx, qword [0x1400fec08]
lea rdx, [0x1401242b0]
mov r8d, 0x480
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp qword [0x1400fec08], r14
je 0x14008a62c
call fcn.140087f58
mov al, 1
mov rcx, qword [rsp + 0x4a30]
xor rcx, rsp
call fcn.1400a86e0
add rsp, 0x4a40
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret