Function at 0x14009cfe0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
sub rsp, 0x160
mov rax, qword [0x14011f010]
xor rax, rsp
mov qword [rsp + 0x150], rax
mov r15, qword [rsp + 0x1b0]
mov rbx, rdx
mov rbp, qword [rsp + 0x1b8]
xor edx, edx
mov rsi, rcx
mov r14, r9
lea rcx, [rsp + 0xe0]
lea r8d, [rdx + 0x64]
call fcn.1400aa8f0
xor edx, edx
lea rcx, [rsp + 0x20]
lea r8d, [rdx + 0x64]
call fcn.1400aa8f0
lea r8, [0x1400e47d0]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_FindResourceW]
mov rdi, rax
test rbx, rbx
je 0x14009d21b
test rax, rax
je 0x14009d21b
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadResource]
mov rdx, rdi
xor ecx, ecx
mov rbx, rax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_SizeofResource]
mov rcx, rbx
mov edi, eax
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LockResource]
xor r8d, r8d
mov dword [rsp + 0x24], 0x204d454d
lea rdx, [rsp + 0x20]
mov qword [rsp + 0x40], rax
xor ecx, ecx
mov dword [rsp + 0x3c], edi
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioOpenW]
mov r9d, 0x20
mov dword [rsp + 0xb0], 0x45564157
mov rcx, rax
lea rdx, [rsp + 0xa8]
xor r8d, r8d
mov rbx, rax
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioDescend]
mov rcx, rbx
test eax, eax
je 0x14009d104
xor edx, edx
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioClose]
mov r8d, 0x79
lea rdx, str.CWasapiPlayback::open_file
lea rcx, str._s__d
call fcn.14004c3d0
xor eax, eax
jmp 0x14009d239
mov r9d, 0x10
mov dword [rsp + 0x90], 0x20746d66
lea r8, [rsp + 0xa8]
lea rdx, [rsp + 0x90]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioDescend]
mov rcx, rbx
test eax, eax
je 0x14009d142
xor edx, edx
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioClose]
mov r8d, 0x86
jmp 0x14009d0ea
xor r8d, r8d
lea rdx, [rsp + 0x90]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioAscend]
mov r9d, 0x10
mov dword [rsp + 0xc0], 0x61746164
lea r8, [rsp + 0xa8]
mov rcx, rbx
lea rdx, [rsp + 0xc0]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioDescend]
mov rcx, rbx
test eax, eax
je 0x14009d197
xor edx, edx
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioClose]
mov r8d, 0x93
jmp 0x14009d0ea
xor r8d, r8d
lea rdx, [rsp + 0xc0]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioAscend]
mov edx, dword [rsp + 0x9c]
xor r8d, r8d
mov rcx, rbx
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioSeek]
mov r8d, dword [rsp + 0x94]
lea rdi, [rsi + 0x104]
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioRead]
cmp dword [rsp + 0x94], eax
je 0x14009d1f5
xor edx, edx
mov rcx, rbx
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioClose]
mov r8d, 0x9f
jmp 0x14009d0ea
mov eax, dword [rsp + 0xc4]
xor edx, edx
mov qword [r14], rdi
mov r8d, 0xa7
mov dword [r15], eax
movzx ecx, word [rsi + 0x110]
div ecx
mov dword [rbp], eax
jmp 0x14009d0ea
mov r8d, 0x60
lea rdx, str.CWasapiPlayback::open_file
lea rcx, str._s__d
call fcn.14004c3d0
mov eax, 0x80004005
mov rcx, qword [rsp + 0x150]
xor rcx, rsp
call fcn.1400a4020
mov rbx, qword [rsp + 0x1a0]
add rsp, 0x160
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret