Function at 0x1401662d0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1d8]
sub rsp, 0x2d8
mov rax, qword [0x140231eb8]
xor rax, rsp
mov qword [rbp + 0x1c0], rax
mov r12, r9
mov r13b, r8b
mov r15, rdx
mov r14d, ecx
xor esi, esi
cmp qword [0x140233a48], rsi
setne dil
lea rax, [0x140231a10]
cmp qword [0x140231a28], 8
cmovae rax, qword [0x140231a10]
mov qword [0x140231a20], rsi
mov word [rax], si
test dil, dil
jne 0x14016638d
mov byte [0x14025a56d], sil
mov byte [0x14025a56e], sil
mov byte [0x14025a9ff], sil
mov byte [0x14025aa90], sil
mov dword [0x14025a568], ecx
lea rax, [0x140231a30]
cmp qword [0x140231a48], 8
cmovae rax, qword [0x140231a30]
mov qword [0x140231a40], rsi
mov word [rax], si
mov byte [0x14025a56c], sil
mov byte [0x14025aa93], sil
lea rcx, [rbp - 0x40]
call fcn.1400e333c
nop
mov ebx, 1
mov edx, dword [0x14025a568]
cmp edx, 7
jg 0x140166874
je 0x14016680c
mov ecx, edx
test edx, edx
je 0x1401667ed
sub ecx, ebx
je 0x140166599
sub ecx, ebx
je 0x140166599
sub ecx, ebx
je 0x1401664d9
sub ecx, ebx
je 0x14016640f
sub ecx, ebx
je 0x140166408
cmp ecx, ebx
jne 0x1401668e3
mov ecx, 0x224
call fcn.1400f6aa0
mov rdx, rax
lea rcx, [0x140231a10]
call fcn.140012fc0
lea rax, str.CMDWNDOTHER
jmp 0x1401668dc
mov ecx, 0x24e
jmp 0x1401663e8
lea rbx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rbx, qword [rbp - 0x40]
mov ecx, 0x212
call fcn.1400f6aa0
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400fea4c
mov rbx, rax
lea rcx, [0x140231a10]
cmp rcx, rax
je 0x1401664ca
mov rdx, qword [0x140231a28]
cmp rdx, 8
jb 0x140166490
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x140231a10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016648b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140167066
call fcn.1401af36c
mov qword [0x140231a20], rsi
mov eax, 7
mov qword [0x140231a28], rax
mov word [0x140231a10], si
movups xmm0, xmmword [rbx]
movups xmmword [0x140231a10], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140231a20], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rax
mov word [rbx], si
lea rcx, [rsp + 0x30]
call fcn.140006b94
jmp 0x1401663fc
lea rbx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rbx, qword [rbp - 0x40]
mov ecx, 0x211
call fcn.1400f6aa0
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400fea4c
mov rbx, rax
lea rcx, [0x140231a10]
cmp rcx, rax
je 0x140166594
mov rdx, qword [0x140231a28]
cmp rdx, 8
jb 0x14016655a
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x140231a10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140166555
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016706c
call fcn.1401af36c
mov qword [0x140231a20], rsi
mov eax, 7
mov qword [0x140231a28], rax
mov word [0x140231a10], si
movups xmm0, xmmword [rbx]
movups xmmword [0x140231a10], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140231a20], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rax
mov word [rbx], si
jmp 0x1401664ca
lea rbx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rbx, qword [rbp - 0x40]
mov ecx, esi
cmp edx, 1
setne cl
add ecx, 0x20f
call fcn.1400f6aa0
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400fea4c
mov rbx, rax
lea rcx, [0x140231a10]
cmp rcx, rax
je 0x14016665d
mov rdx, qword [0x140231a28]
cmp rdx, 8
jb 0x140166623
lea rdx, [rdx*2 + 2]
mov rcx, qword [0x140231a10]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016661e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140167072
call fcn.1401af36c
mov qword [0x140231a20], rsi
mov eax, 7
mov qword [0x140231a28], rax
mov word [0x140231a10], si
movups xmm0, xmmword [rbx]
movups xmmword [0x140231a10], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140231a20], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], rax
mov word [rbx], si
lea rcx, [rsp + 0x30]
call fcn.140006b94
test dil, dil
jne 0x140166800
mov ebx, 1
cmp dword [0x140233a60], esi
je 0x140166686
cmp qword [0x140233aa8], rbx
ja 0x140166691
cmp dword [0x140236024], ebx
mov al, sil
ja 0x140166693
mov al, bl
mov byte [0x14025a56d], al
mov qword [rbp + 0x108], rsi
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], rsi
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], 7
mov word [rbp + 0x108], si
mov qword [rbp + 0x128], rsi
mov qword [rbp + 0x160], rsi
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x170], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqa xmmword [rbp + 0x170], xmm1
mov word [rbp + 0x160], si
lea rdx, [rbp - 0x20]
lea rcx, [0x140236020]
call fcn.14000ef60
cmp byte [rbp + 0x130], sil
je 0x140166726
lea rdx, [0x1401dc470]
lea rcx, [rbp - 0x20]
call fcn.14010591c
test eax, eax
mov al, bl
je 0x140166729
mov al, sil
mov byte [0x14025a56e], al
mov rdx, qword [rbp + 0x178]
cmp rdx, 8
jb 0x140166775
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x160]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140166770
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140167078
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqa xmmword [rbp + 0x170], xmm0
mov word [rbp + 0x160], si
mov rdx, qword [rbp + 0x120]
cmp rdx, 8
jb 0x1401667d2
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp + 0x108]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1401667cd
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016707e
call fcn.1401af36c
mov qword [rbp + 0x118], rsi
mov qword [rbp + 0x120], 7
mov word [rbp + 0x108], si
jmp 0x140166800
movzx eax, byte [0x14025a56d]
test dil, dil
cmove eax, ebx
mov byte [0x14025a56d], al
lea rax, str.CMDWNDADD
jmp 0x1401668dc
lea rbx, [rbp - 0x40]
cmp qword [rbp - 0x28], 8
cmovae rbx, qword [rbp - 0x40]
mov ecx, 0x216
call fcn.1400f6aa0
mov r8, rbx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400fea4c
mov rbx, rax
lea rax, [0x140231a10]
cmp rax, rbx
je 0x14016686f
mov rcx, rax
call fcn.140006b94
movups xmm0, xmmword [rbx]
movups xmmword [0x140231a10], xmm0
movups xmm1, xmmword [rbx + 0x10]
movups xmmword [0x140231a20], xmm1
mov qword [rbx + 0x10], rsi
mov qword [rbx + 0x18], 7
mov word [rbx], si
jmp 0x1401664ca
sub edx, 8
je 0x1401668d5
sub edx, ebx
je 0x1401668b3
sub edx, ebx
je 0x1401668a9
sub edx, ebx
je 0x14016689f
sub edx, ebx
je 0x140166896
cmp edx, ebx
jne 0x1401668e3
lea rax, str.CMDWNDREAD
jmp 0x1401668dc
lea rax, str.CMDWNDBENCH
jmp 0x1401668dc
mov ecx, 0x556
jmp 0x1401663e8
mov ecx, 0x543
jmp 0x1401663e8
mov ecx, 0x50b
call fcn.1400f6aa0
mov rdx, rax
lea rcx, [0x140231a10]
call fcn.140012fc0
lea rax, str.CMDWNDCONVERT
jmp 0x1401668dc
lea rax, str.CMDWNDFIND
mov qword [0x14025acf8], rax
test dil, dil
je 0x1401668f7
mov ecx, 1
call fcn.140168a80
jmp 0x140166da8
call fcn.140161294
test al, al
je 0x1401669be
mov qword [rsp + 0x38], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x48], xmm0
movdqa xmm1, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x48], xmm1
mov word [rsp + 0x38], si
mov dword [rsp + 0x30], r14d
mov rdx, r15
lea rcx, [rsp + 0x38]
call fcn.140004958
mov byte [rsp + 0x58], r13b
mov qword [rsp + 0x60], r12
lea r9, [rsp + 0x30]
xor r8d, r8d
mov edx, 0x800f
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_SendMessageW]
test rax, rax
setne bl
mov rdx, qword [rsp + 0x50]
cmp rdx, 8
jb 0x1401669a3
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14016699e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140167084
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x48], xmm0
mov word [rsp + 0x38], si
mov sil, bl
jmp 0x140166da8
lea rax, [0x1402319d0]
cmp qword [0x1402319e8], 8
cmovae rax, qword [0x1402319d0]
mov qword [0x1402319e0], rsi
mov word [rax], si
mov word [0x14025a570], si
mov word [0x14025aa00], si
mov qword [0x14025aa68], rsi
mov qword [0x14025aa88], rsi
mov qword [0x14025aa80], rsi
mov qword [0x14025aa78], rsi
mov qword [0x14025aa70], rsi
mov byte [0x14025a9fd], sil
mov byte [0x14025a9fe], sil
mov dword [0x14025aa64], esi
call fcn.1401b6614
mov dword [0x14025a9f8], eax
mov qword [0x14025a560], rsi
mov word [0x14025aaa0], si
mov qword [0x14025a9f0], rsi
call fcn.14009b3f8
mov byte [0x14025aa91], sil
mov byte [0x14025aa92], sil
call fcn.1401612e8
movzx ebx, al
mov qword [rsp + 0x30], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov r8d, 0x11
lea rdx, str.SystemProgressBar
lea rcx, [rsp + 0x30]
call fcn.1400041b8
nop
mov qword [rbp - 0x60], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov r14d, 9
mov r8d, r14d
lea rdx, [0x1401dcae0]
lea rcx, [rbp - 0x60]
call fcn.1400041b8
nop
mov r8d, ebx
lea rdx, [rsp + 0x30]
lea rcx, [rbp - 0x60]
call fcn.140115f8c
test eax, eax
setne byte [0x14025a56f]
mov rdx, qword [rbp - 0x48]
mov edi, 0x1000
cmp rdx, 8
jb 0x140166b06
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, rdi
jb 0x140166b01
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14016708a
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], si
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x140166b55
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, rdi
jb 0x140166b50
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140167090
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], si
call fcn.1400d0620
mov ebx, esi
cmp eax, 0x601
setae bl
mov qword [rbp - 0x60], rsi
xorps xmm0, xmm0
movdqu xmmword [rbp - 0x50], xmm0
mov r8d, 0x12
lea rdx, str.TaskbarProgressBar
lea rcx, [rbp - 0x60]
call fcn.1400041b8
nop
mov qword [rsp + 0x30], rsi
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov r8, r14
lea rdx, [0x1401dcae0]
lea rcx, [rsp + 0x30]
call fcn.1400041b8
nop
mov r8d, ebx
lea rdx, [rbp - 0x60]
lea rcx, [rsp + 0x30]
call fcn.140115f8c
test eax, eax
setne byte [0x14025a9fc]
mov rdx, qword [rsp + 0x48]
cmp rdx, 8
jb 0x140166c15
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x30]
mov rax, rcx
cmp rdx, rdi
jb 0x140166c10
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140167096
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rsp + 0x40], xmm0
mov word [rsp + 0x30], si
mov rdx, qword [rbp - 0x48]
cmp rdx, 8
jb 0x140166c64
lea rdx, [rdx*2 + 2]
mov rcx, qword [rbp - 0x60]
mov rax, rcx
cmp rdx, rdi
jb 0x140166c5f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140167060
call fcn.1401af36c
movdqa xmm0, xmmword [0x1401dc090]
movdqu xmmword [rbp - 0x50], xmm0
mov word [rbp - 0x60], si
cmp dword [0x14025a568], 2
ja 0x140166c97
mov qword [0x140233ab0], rsi
mov eax, dword [0x140233a60]
neg eax
sbb rcx, rcx
and qword [0x140233ac8], rcx
mov r8d, 5
mov rdx, qword [0x14025acf8]
mov rcx, qword [0x14023fc40]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
mov rdx, rax
mov rcx, qword [0x14023fc40]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
mov rdx, rbx
mov rcx, qword [0x14023fc40]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
movsxd rbx, eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov r14, rax
mov r8, rbx
mov rdx, rdi
mov rcx, rax
call fcn.1401b1520
mov ebx, 1
cmp dword [0x140233a60], ebx
je 0x140166d25
mov rcx, qword [0x140233a38]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x140166d25
mov dil, sil
jmp 0x140166d64
mov dil, bl
cmp dword [0x14025a568], 0xd
je 0x140166d64
mov ecx, dword [r14]
mov eax, ecx
mov edx, 0xffff0000
and eax, edx
cmp eax, edx
jne 0x140166d55
mov eax, dword [r14 + 0xc]
and eax, 0x3ff5f7ff
or eax, 0x800a0800
mov dword [r14 + 0xc], eax
jmp 0x140166d64
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [r14], ecx
lea r9, [fcn.1401647b0]
test r12, r12
cmovne r9, r12
mov r8, qword [0x140233a38]
mov r12, rbx
cmp dword [0x140233a60], r12d
cmove r8, rsi
mov qword [rsp + 0x20], rsi
mov rdx, r14
mov rcx, qword [0x14023fc40]
call qword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
mov qword [0x140233a48], rax
test rax, rax
jne 0x140166db9
lea rcx, [rbp - 0x40]
call fcn.140006b94
mov al, sil
jmp 0x14016703d
test dil, dil
je 0x140166e0a
mov dl, r12b
lea rcx, [0x140237190]
call fcn.14012d05c
mov r9, rax
xor r8d, r8d
mov ebx, 0x80
mov edx, ebx
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
lea rcx, [0x140237190]
call fcn.14012d05c
mov r9, rax
mov r8, r12
mov edx, ebx
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x14025a568], 0xd
jne 0x140166e42
xor r8d, r8d
mov edx, 0x9a
mov rcx, qword [0x140233a48]
call fcn.1400281a4
xor r8d, r8d
mov edx, 0xa3
mov rcx, qword [0x140233a48]
call fcn.1400281a4
mov byte [0x14025aa90], r12b
cmp dword [0x14025a568], 7
jne 0x140166f09
cmp dword [0x140234a74], esi
jne 0x140166f09
lea rbx, str.___s
cmp qword [0x140234f10], rsi
je 0x140166eb0
lea rdx, [0x140234f00]
lea rcx, [rsp + 0x30]
call fcn.1400e333c
nop
lea rdx, [0x1401ddbfc]
mov rcx, rax
call fcn.140081f7c
movzx ecx, al
add ecx, 0x214
call fcn.1400f6aa0
mov rdx, rax
mov rcx, rbx
call fcn.140163e90
nop
lea rcx, [rsp + 0x30]
call fcn.140006b94
cmp qword [0x140234f30], rsi
je 0x140166ece
mov ecx, 0x213
call fcn.1400f6aa0
mov rdx, rax
mov rcx, rbx
call fcn.140163e90
cmp dword [0x140234a70], esi
je 0x140166eeb
mov ecx, 0x218
call fcn.1400f6aa0
mov rdx, rax
mov rcx, rbx
call fcn.140163e90
cmp byte [0x140234d38], sil
je 0x140166f09
mov ecx, 0x217
call fcn.1400f6aa0
mov rdx, rax
mov rcx, rbx
call fcn.140163e90
test r13b, r13b
je 0x140166f29
xor r9d, r9d
mov edx, 0x111
lea r8d, [rdx - 0x69]
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_PostMessageW]
jmp 0x140166f6b
mov eax, dword [0x14025a568]
sub eax, 0xd
neg eax
sbb ebx, ebx
and ebx, 5
test dil, dil
je 0x140166f5c
lea rcx, [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_GetStartupInfoW]
test byte [rsp + 0x6c], r12b
je 0x140166f5c
movzx eax, word [rsp + 0x70]
neg ax
sbb ecx, ecx
and ebx, ecx
mov edx, ebx
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x14025a568]
cmp eax, 2
jbe 0x140166f84
cmp eax, 0xd
jne 0x140166fcb
mov r8, r15
cmp qword [r15 + 0x18], 8
jb 0x140166f91
mov r8, qword [r15]
mov ebx, 0xa6
mov edx, ebx
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov edx, ebx
mov rcx, qword [0x140233a48]
call qword [sym.imp.USER32.dll_GetDlgItem]
mov rcx, rax
call fcn.140129ab8
mov rdx, r15
lea rcx, [0x1402319f0]
call fcn.140004958
cmp qword [0x140231a20], rsi
jne 0x140167000
mov rdx, qword [0x140233a48]
lea rcx, [rsp + 0x30]
call fcn.140027c4c
nop
mov rdx, rax
lea rcx, [0x140231a10]
call fcn.140017bbc
nop
lea rcx, [rsp + 0x30]
call fcn.140006b94
mov cl, r12b
call fcn.140168a80
mov eax, dword [0x14025a568]
cmp eax, 0xd
je 0x140167027
xor edx, edx
mov rcx, qword [0x140233a48]
call fcn.140163da4
mov eax, dword [0x14025a568]
test eax, eax
jne 0x140167031
call fcn.140168e34
nop
lea rcx, [rbp - 0x40]
call fcn.140006b94
mov al, r12b
mov rcx, qword [rbp + 0x1c0]
xor rcx, rsp
call fcn.1401af480
add rsp, 0x2d8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
int3
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
nop
call fcn.1401b6544
int3