Function at 0x14004d388
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f]
sub rsp, 0xb8
mov r14, rcx
xor r12d, r12d
xor ecx, ecx
mov ebx, r12d
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
nop dword [rax + rax]
lea rdi, str.MICROSOFTMATHRESULTPANELMSGWNDCLASS
mov rcx, rax
mov rdx, rdi
lea r8, [rbp - 0x39]
call qword [sym.imp.USER32.dll_GetClassInfoW]
nop dword [rax + rax]
test eax, eax
jne 0x14004d44a
lea rax, [0x14004d160]
mov dword [rbp - 0x39], r12d
xor ecx, ecx
mov qword [rbp - 0x31], rax
mov qword [rbp - 0x29], r12
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
nop dword [rax + rax]
mov edx, 0x7f00
mov qword [rbp - 0x19], r12
xor ecx, ecx
mov qword [rbp - 0x21], rax
call qword [sym.imp.USER32.dll_LoadCursorW]
nop dword [rax + rax]
lea ecx, [r12 + 5]
mov qword [rbp - 0x11], rax
call qword [sym.imp.GDI32.dll_GetStockObject]
nop dword [rax + rax]
lea rcx, [rbp - 0x39]
mov qword [rbp - 1], r12
mov qword [rbp - 9], rax
mov qword [rbp + 7], rdi
call qword [sym.imp.USER32.dll_RegisterClassW]
nop dword [rax + rax]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
nop dword [rax + rax]
mov qword [rsp + 0x58], r12
xor r9d, r9d
mov qword [rsp + 0x50], rax
xor r8d, r8d
mov qword [rsp + 0x48], r12
mov rdx, rdi
mov qword [rsp + 0x40], 0xfffffffffffffffd
xor ecx, ecx
mov dword [rsp + 0x38], r12d
mov dword [rsp + 0x30], r12d
mov dword [rsp + 0x28], r12d
mov dword [rsp + 0x20], r12d
call qword [sym.imp.USER32.dll_CreateWindowExW]
nop dword [rax + rax]
mov qword [r14 + 0x180], rax
test rax, rax
je 0x14004d5ea
mov r8, r14
lea rdx, str.MICROSOFTMATHRESULTPANELOBJECT
mov rcx, rax
call qword [sym.imp.USER32.dll_SetPropW]
nop dword [rax + rax]
lea rax, [r14 + 0x1c8]
mov esi, 0x64
mov rcx, rax
mov qword [rbp + 0x6f], rax
mov r8b, 1
mov edx, esi
call fcn.14001e064
mov rcx, qword [0x14010ce60]
lea r8d, [rsi - 0x5a]
mov edx, 0x5209
call qword [sym.imp.KERNEL32.dll_FindResourceW]
nop dword [rax + rax]
mov r15, rax
mov edi, 0x80004005
test rax, rax
jne 0x14004d511
mov ebx, edi
jmp 0x14004d5c9
mov rcx, qword [0x14010ce60]
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_SizeofResource]
nop dword [rax + rax]
mov rcx, qword [0x14010ce60]
mov rdx, r15
shr eax, 2
cmp eax, esi
cmovb esi, eax
call qword [sym.imp.KERNEL32.dll_LoadResource]
nop dword [rax + rax]
mov r13, rax
test rax, rax
je 0x14004d5c9
test esi, esi
je 0x14004d5c9
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
nop dword [rax + rax]
mov r15, rax
test rax, rax
je 0x14004d5ba
mov r12d, esi
test esi, esi
je 0x14004d5b7
mov r14, qword [rbp + 0x6f]
xor esi, esi
movzx edx, word [r15 + rsi*4]
lea rax, [rbp + 0x7f]
lea r9, [rbp + 0x6f]
mov qword [rsp + 0x20], rax
lea r8, [rbp + 0x77]
mov rcx, r14
call fcn.14004f89c
test rax, rax
jne 0x14004d5ab
movzx r8d, word [r15 + rsi*4 + 2]
mov rcx, r14
movzx edx, word [r15 + rsi*4]
call fcn.14004f780
inc rsi
cmp rsi, r12
jl 0x14004d575
mov r14, qword [rbp + 0x67]
xor r12d, r12d
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_FreeResource]
nop dword [rax + rax]
cmp qword [r14 + 0x1d0], r12
cmove ebx, edi
test ebx, ebx
js 0x14004d5ef
lea rcx, [r14 + 0x140]
mov edx, 0x4e22
call fcn.14001fd54
jmp 0x14004d5ef
mov ebx, 0x80004005
mov eax, ebx
add rsp, 0xb8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret