Function at 0x14001e61c
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rbx
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x4a0
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov rax, qword [0x1400389f0]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov r15, r9
mov r14, r8
mov r13, rdx
xor ebx, ebx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x28], rcx
and qword [rbp + 0x20], rbx
xor eax, eax
mov qword [rbp + 0x40], rax
test rdx, rdx
je 0x14001e917
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
movsxd rsi, eax
add rsi, rsi
mov eax, 0x80000000
add rax, rsi
mov ecx, 0xffffffff
cmp rax, rcx
jbe 0x14001e69d
xor ecx, ecx
jmp 0x14001e749
cmp esi, 0x400
jg 0x14001e6db
movsxd r12, esi
mov rcx, r12
call fcn.14001b11c
test al, al
je 0x14001e6db
lea rax, [r12 + 0xf]
cmp rax, r12
ja 0x14001e6c8
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.14002d580
sub rsp, rax
lea r12, [rsp + 0x40]
jmp 0x14001e70c
movsxd rcx, esi
or rax, 0xffffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x14001e90c
add rcx, 0x10
call fcn.140020f74
test rax, rax
je 0x14001e747
and qword [rax], 0
mov rbx, rax
mov qword [rbp + 8], rax
lea r12, [rax + 0x10]
test r12, r12
je 0x14001e747
mov byte [r12], 0
and qword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
mov r8, r13
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb rcx, rcx
and rcx, r12
jmp 0x14001e749
xor ecx, ecx
test rcx, rcx
jne 0x14001e757
mov rax, qword [rbp + 0x40]
jmp 0x14001e917
xor edx, edx
lea r8d, [rdx + 2]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r12, rax
mov qword [rbp + 0x18], rax
test rax, rax
jne 0x14001e77b
call fcn.14001a650
mov esi, eax
jmp 0x14001e8df
mov r8, r15
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rsi, rax
test rax, rax
jne 0x14001e79e
call fcn.14001a650
mov esi, eax
jmp 0x14001e8d5
mov rdx, rax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r13, rax
mov qword [rbp + 0x10], rax
test rax, rax
jne 0x14001e7c2
call fcn.14001a650
mov esi, eax
jmp 0x14001e8d5
mov rdx, rsi
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
mov dword [rbp], esi
lea eax, [rsi + 1]
cmp eax, esi
jae 0x14001e80d
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x14001e7ee
lea rcx, [rbp + 0x40]
call fcn.14001b0e8
nop
test rbx, rbx
je 0x14001e803
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.140020f34
test rbx, rbx
jne 0x14001e7f3
mov eax, 0x8007000e
jmp 0x14001e944
mov ecx, eax
test eax, eax
je 0x14001e847
xor edx, edx
or rax, 0xffffffffffffffff
div rcx
cmp rax, 1
jae 0x14001e82c
mov ecx, 0x80070057
call fcn.14001a60c
cmp rcx, 0x400
jbe 0x14001e847
mov rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.14001b0f0
mov rcx, qword [rbp + 0x40]
jmp 0x14001e84f
lea rcx, [rbp + 0x48]
mov qword [rbp + 0x40], rcx
jmp 0x14001e864
test rcx, rcx
jne 0x14001e870
mov esi, 0x8007000e
jmp 0x14001e8d5
mov r9, rsi
mov r8, r13
mov rdx, rsi
call fcn.140020848
test eax, eax
je 0x14001e8b7
cmp eax, 0xc
je 0x14001e8ac
cmp eax, 0x16
je 0x14001e8a1
cmp eax, 0x22
je 0x14001e8a1
cmp eax, 0x50
je 0x14001e8b7
mov ecx, 0x80004005
call fcn.14001a60c
int3
mov ecx, 0x80070057
call fcn.14001a60c
int3
mov ecx, 0x8007000e
call fcn.14001a60c
int3
mov rax, qword [rbp + 0x40]
mov byte [rsi + rax], 0
mov r8d, dword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.14001e22c
mov esi, eax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x14001e8f3
lea rcx, [rbp + 0x40]
call fcn.14001b0e8
nop
test rbx, rbx
je 0x14001e908
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.140020f34
test rbx, rbx
jne 0x14001e8f8
mov eax, esi
jmp 0x14001e944
mov ecx, 0x80070057
call fcn.14001a60c
nop
lea rcx, [rbp + 0x48]
cmp rax, rcx
je 0x14001e92a
lea rcx, [rbp + 0x40]
call fcn.14001b0e8
nop
test rbx, rbx
je 0x14001e93f
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.140020f34
test rbx, rbx
jne 0x14001e92f
mov eax, 0x8007000e
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.140020bd0
lea rsp, [rbp + 0x460]
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret