Function at 0x140079db8
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor edi, edi
mov rbp, r8
mov rbx, rdx
mov rsi, rcx
cmp qword [0x140130e50], rdi
jne 0x140079dfe
xor edx, edx
xor ecx, ecx
call fcn.14001e8e0
cmp rax, rdi
jne 0x140079dfe
or eax, 0xffffffff
jmp 0x14007a020
lea r12, [rsi + 0x18]
mov dword [rsi + 0x1c], edi
mov dword [r12], edi
cmp rbp, rdi
je 0x140079e13
mov eax, dword [rbp]
jmp 0x140079e15
mov eax, edi
cmp rbx, rdi
mov ecx, 0x64
mov dword [rsi + 0x28], edi
cmove rbx, rcx
mov dword [rsi + 0x2c], edi
mov dword [rsi + 0x30], edi
cmp rbx, 0x10000
mov dword [rsi + 0x34], edi
jge 0x140079e7d
mov rbp, qword [0x140130f48]
lea r8, str.IMAGE
movzx edx, bx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r13, rax
cmp rax, rdi
je 0x140079df6
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
cmp rbx, 8
jb 0x140079df6
mov rdx, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
jmp 0x140079e87
cmp eax, edi
je 0x140079ea6
mov rcx, qword [rbx]
movsxd rbx, eax
cmp rcx, rdi
je 0x140079df6
lea r8, [rsi + 0x40]
mov rdx, rbx
lea rbp, [rsi + 0x38]
call fcn.14005f8f4
mov qword [rbp], rax
jmp 0x140079eb6
lea rbp, [rsi + 0x38]
mov rcx, rbx
mov rdx, rbp
call qword [0x140130da8]
cmp qword [rbp], rdi
jne 0x140079ec6
mov eax, 0xfffffffe
jmp 0x14007a020
mov rcx, qword [rbp]
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], edi
call qword [0x140130dd0]
mov edx, dword [rsp + 0x20]
lea rcx, [rsp + 0x28]
shl rdx, 4
call fcn.140061298
mov r8d, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rbp]
call qword [0x140130db0]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rbp]
mov r8, r12
call qword [0x140130dd8]
cmp dword [r12], 1
ja 0x140079f20
or ebx, 0xffffffff
jmp 0x14007a014
mov rcx, qword [rbp]
mov r13d, 0x5100
lea r8, [rsp + 0x88]
mov edx, r13d
mov dword [rsp + 0x88], edi
call qword [0x140130de0]
movsxd rdx, dword [rsp + 0x88]
lea rcx, [rsp + 0x30]
call fcn.140061298
mov rbx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x88]
mov rcx, qword [rbp]
mov r9, rbx
mov edx, r13d
call qword [0x140130de8]
mov r15d, dword [rsp + 0x88]
movsxd rcx, dword [r12]
lea r13, [rsi + 8]
sub r15, 0x18
mov r9d, 4
mov r8, r13
mov rdx, rsi
shr r15, 2
call fcn.140061970
mov ebp, edi
cmp r15d, edi
jbe 0x14007a000
mov ebp, r15d
mov r13, rdi
mov r14, rdi
mov r15d, r15d
mov rax, qword [rbx + 0x10]
lea r8, [rsi + 8]
mov r9d, 4
mov ecx, dword [r14 + rax]
mov rdx, rsi
lea eax, [rcx + rcx*4]
mov rcx, r13
lea edi, [rax + rax]
call fcn.140061970
inc r13
add r14, 4
sub r15, 1
mov dword [rax], edi
jne 0x140079fad
lea r12, [rsi + 0x18]
lea r13, [rsi + 8]
jmp 0x14007a000
mov ecx, ebp
mov r9d, 4
mov r8, r13
mov rdx, rsi
call fcn.140061970
inc ebp
mov dword [rax], edi
cmp ebp, dword [r12]
jb 0x140079fe9
mov ebx, dword [r12]
lea rcx, [rsp + 0x30]
call fcn.140058d88
lea rcx, [rsp + 0x28]
call fcn.140058d88
mov eax, ebx
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret