Function at 0x1400c83d4
Capabilities:
Extract resource via kernel32 functions
Get graphical window text

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x30
xor r12d, r12d
mov r14, r9
cmp qword [0x140148cf0], r12
mov r15b, r8b
mov rbp, rdx
mov word [0x1401a24c0], r12w
setne dil
test dil, dil
jne 0x1400c8439
mov byte [0x1401a3b48], r12b
mov byte [0x1401a3b49], r12b
mov byte [0x1401a3bb6], r12b
mov dword [0x1401a04b8], ecx
mov word [0x1401a35c0], r12w
jmp 0x1400c843f
mov ecx, dword [0x1401a04b8]
lea rsi, [0x1401a24c0]
mov r13d, 0x880
cmp ecx, 7
jg 0x1400c870b
je 0x1400c8701
test ecx, ecx
je 0x1400c8562
jle 0x1400c87a4
cmp ecx, 2
jle 0x1400c84ce
cmp ecx, 3
je 0x1400c84bc
cmp ecx, 4
je 0x1400c84aa
cmp ecx, 5
je 0x1400c84a3
cmp ecx, 6
jne 0x1400c87a4
mov ecx, 0x223
call fcn.1400881f8
mov rdx, rax
mov r8, r13
mov rcx, rsi
call fcn.14008e2e4
jmp 0x1400c8796
mov ecx, 0x24e
jmp 0x1400c848b
mov rcx, rbp
call fcn.1400796e4
mov ecx, 0x212
jmp 0x1400c877d
mov rcx, rbp
call fcn.1400796e4
mov ecx, 0x211
jmp 0x1400c877d
mov rcx, rbp
call fcn.1400796e4
cmp dword [0x1401a04b8], 1
mov ecx, r12d
mov rbx, rax
setne cl
add ecx, 0x20f
call fcn.1400881f8
mov r8, rax
mov r9, rbx
mov rdx, r13
mov rcx, rsi
call fcn.1400026d0
test dil, dil
jne 0x1400c8556
cmp dword [0x140148d08], r12d
mov ebx, dword [0x14016b344]
je 0x1400c8520
cmp qword [0x140149e40], 1
ja 0x1400c852c
mov byte [0x1401a3b48], r12b
cmp ebx, 1
ja 0x1400c8533
mov byte [0x1401a3b48], 1
lea rcx, [0x14016b340]
call fcn.140005c40
test eax, eax
je 0x1400c854f
mov byte [0x1401a3b49], 1
cmp ebx, 1
ja 0x1400c8556
mov byte [0x1401a3b49], r12b
lea rax, str.CMDWNDADD
jmp 0x1400c879d
lea rax, str.CMDWNDADD
mov qword [0x1401a3e38], rax
test dil, dil
jne 0x1400c87ad
mov byte [0x1401a3b48], 1
mov word [0x1401a04c0], r12w
mov word [0x1401a36c0], r12w
mov word [0x1401a3b50], r12w
mov qword [0x1401a3bb8], r12
mov qword [0x1401a3bd8], r12
mov qword [0x1401a3bd0], r12
mov qword [0x1401a3bc8], r12
mov qword [0x1401a3bc0], r12
mov byte [0x1401a3bb4], r12b
mov byte [0x1401a3bb5], r12b
mov dword [0x1401a3b4c], r12d
call fcn.1400f80bc
mov dword [0x1401a04bc], eax
mov qword [0x1401a04b0], r12
mov word [0x1401a3be0], r12w
mov qword [0x1401a3b40], r12
call fcn.1400495fc
mov byte [0x1401a3bb7], r12b
mov byte [0x1401a3e40], r12b
call fcn.1400c569c
movzx r8d, al
lea rdx, str.SystemProgressBar
lea rcx, [0x14010fd68]
call fcn.14009f858
test eax, eax
setne byte [0x1401a3b4a]
call fcn.14006c514
cmp eax, 0x601
lea rdx, str.TaskbarProgressBar
mov r8d, r12d
lea rcx, [0x14010fd68]
setae r8b
call fcn.14009f858
test eax, eax
setne byte [0x1401a3b4b]
cmp dword [0x1401a04b8], 2
ja 0x1400c8678
mov eax, dword [0x140148d08]
neg eax
mov qword [0x140149e48], r12
sbb rcx, rcx
and qword [0x140149e60], rcx
mov rdx, qword [0x1401a3e38]
mov r8d, 5
mov rcx, qword [0x14017f140]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rcx, qword [0x14017f140]
mov rdx, rax
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, qword [0x14017f140]
mov rdx, rbx
mov rdi, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
movsxd rbx, eax
xor ecx, ecx
mov rdx, rbx
call qword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov r8, rbx
mov rdx, rdi
mov rcx, rax
mov rsi, rax
call fcn.1400f2690
cmp dword [0x140148d08], 1
je 0x1400c87b9
mov rcx, qword [0x140147cd8]
call qword [sym.imp.USER32.dll_IsWindowVisible]
test eax, eax
je 0x1400c87b9
mov bl, r12b
jmp 0x1400c87e8
mov ecx, 0x672
jmp 0x1400c848b
sub ecx, 8
je 0x1400c8770
sub ecx, 1
je 0x1400c8767
sub ecx, 1
je 0x1400c8746
sub ecx, 1
je 0x1400c873c
sub ecx, 1
je 0x1400c8732
cmp ecx, 1
jne 0x1400c87a4
lea rax, str.CMDWNDBENCH
jmp 0x1400c879d
mov ecx, 0x556
jmp 0x1400c848b
mov ecx, 0x543
jmp 0x1400c848b
mov ecx, 0x50b
call fcn.1400881f8
mov rdx, rax
mov r8, r13
mov rcx, rsi
call fcn.14008e2e4
lea rax, str.CMDWNDCONVERT
jmp 0x1400c879d
lea rax, str.CMDWNDFIND
jmp 0x1400c879d
mov rcx, rbp
call fcn.1400796e4
mov ecx, 0x216
mov rbx, rax
call fcn.1400881f8
mov r9, rbx
mov r8, rax
mov rdx, r13
mov rcx, rsi
call fcn.1400026d0
lea rax, str.CMDWNDOTHER
mov qword [0x1401a3e38], rax
test dil, dil
je 0x1400c8580
call fcn.1400ca094
xor al, al
jmp 0x1400c89e6
mov ecx, dword [rsi]
mov edx, 0xffff0000
mov eax, ecx
mov bl, 1
and eax, edx
cmp eax, edx
jne 0x1400c87da
and dword [rsi + 0xc], 0x3ff5f7ff
or dword [rsi + 0xc], 0x800a0800
jmp 0x1400c87e8
and ecx, 0x3ff5f7ff
or ecx, 0x800a0800
mov dword [rsi], ecx
mov r8, qword [0x140147cd8]
lea r9, [fcn.1400c75dc]
mov rcx, qword [0x14017f140]
test r14, r14
mov rdx, rsi
mov qword [rsp + 0x20], r12
cmovne r9, r14
cmp dword [0x140148d08], 1
cmove r8, r12
call qword [sym.imp.USER32.dll_CreateDialogIndirectParamW]
mov qword [0x140148cf0], rax
test bl, bl
je 0x1400c8874
mov dl, 1
lea rcx, [0x1401703d0]
call fcn.1400a9bb4
mov rcx, qword [0x140148cf0]
mov ebx, 0x80
mov edx, ebx
mov r9, rax
xor r8d, r8d
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
lea rcx, [0x1401703d0]
call fcn.1400a9bb4
mov rcx, qword [0x140148cf0]
lea r8d, [rbx - 0x7f]
mov r9, rax
mov edx, ebx
call qword [sym.imp.USER32.dll_SendMessageW]
cmp dword [0x1401a04b8], 8
jne 0x1400c893c
cmp dword [0x14015a85c], r12d
jne 0x1400c893c
cmp word [0x140155728], r12w
lea rbx, str.___s
je 0x1400c88e1
lea rcx, [0x140155728]
call fcn.1400796e4
mov rcx, rax
movzx eax, word [rax]
cmp ax, word [0x140113888]
jne 0x1400c88cc
movzx eax, word [rcx + 2]
mov ecx, 0x215
cmp ax, word [0x14011388a]
je 0x1400c88d1
mov ecx, 0x214
call fcn.1400881f8
mov rdx, rax
mov rcx, rbx
call fcn.1400c6f1c
cmp word [0x14015772e], r12w
je 0x1400c8900
mov ecx, 0x213
call fcn.1400881f8
mov rdx, rax
mov rcx, rbx
call fcn.1400c6f1c
cmp dword [0x14015a858], r12d
je 0x1400c891e
mov ecx, 0x218
call fcn.1400881f8
mov rdx, rax
mov rcx, rbx
call fcn.1400c6f1c
cmp byte [0x14015aa10], r12b
je 0x1400c893c
mov ecx, 0x217
call fcn.1400881f8
mov rdx, rax
mov rcx, rbx
call fcn.1400c6f1c
mov rcx, qword [0x140148cf0]
test r15b, r15b
je 0x1400c895c
xor r9d, r9d
mov edx, 0x111
lea r8d, [r9 + 0x6e]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x1400c8967
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_GlobalFree]
cmp dword [0x1401a04b8], 2
ja 0x1400c89a3
mov rcx, qword [0x140148cf0]
mov r8, rbp
mov edx, 0xa5
call qword [sym.imp.USER32.dll_SetDlgItemTextW]
mov r8d, 0x800
lea rcx, [0x1401a14c0]
mov rdx, rbp
call fcn.14008e2e4
cmp word [0x1401a24c0], r12w
jne 0x1400c89c4
mov rcx, qword [0x140148cf0]
lea rdx, [0x1401a24c0]
mov r8d, r13d
call qword [sym.imp.USER32.dll_GetWindowTextW]
cmp qword [0x140148cf0], r12
je 0x1400c87b2
call fcn.1400ca094
cmp dword [0x1401a04b8], r12d
jne 0x1400c89e4
call fcn.1400ca308
mov al, 1
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
add rsp, 0x30
pop r15
pop r14
pop r13
pop r12
pop rdi
ret