Function at 0x1400bb580
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
mov qword [rax + 0x18], rbx
mov dword [rax + 0x20], r9d
mov dword [rax + 0x10], edx
mov qword [rax + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x50
mov r14d, edx
mov r12d, r9d
mov r13, r8
mov rdi, rcx
test edx, edx
je 0x1400bb85b
call fcn.140045490
movzx edx, r14w
mov r8d, 0xf1
mov rbx, qword [rax + 0x18]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
test rax, rax
je 0x1400bb857
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400bb857
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
je 0x1400bb857
movzx ecx, word [rax + 6]
mov eax, 4
mul rcx
mov rcx, 0xffffffffffffffff
cmovo rax, rcx
mov rcx, rax
call fcn.140053394
mov qword [rsp + 0x40], rax
test rax, rax
je 0x1400bb85b
movzx ecx, word [rsi + 2]
movzx edx, word [rsi + 4]
mov dword [rsp + 0x38], ecx
mov dword [rsp + 0x3c], edx
lea ebx, [rcx + 6]
mov dword [rsp + 0x30], ebx
lea r15d, [rdx + 6]
mov dword [rsp + 0x34], r15d
test r12d, r12d
je 0x1400bb65e
mov eax, dword [rdi + 0x1178]
jmp 0x1400bb664
mov eax, dword [0x1402b0fb8]
mov ebp, 1
test eax, eax
jne 0x1400bb723
mov eax, dword [0x1402b0be0]
test eax, eax
jne 0x1400bb68f
lea rcx, [0x1402b0be0]
call fcn.14009abe8
mov eax, ebp
mov dword [0x1402b0be0], eax
mov ecx, dword [0x1402b0ea0]
movsd xmm2, qword [0x1402b0e98]
test ecx, ecx
je 0x1400bb6a6
movaps xmm0, xmm2
jmp 0x1400bb6ae
movsd xmm0, qword [0x1402211f8]
ucomisd xmm0, qword [0x1402211f8]
jp 0x1400bb6ba
je 0x1400bb723
test eax, eax
jne 0x1400bb6de
lea rcx, [0x1402b0be0]
call fcn.14009abe8
mov ecx, dword [0x1402b0ea0]
movsd xmm2, qword [0x1402b0e98]
mov dword [0x1402b0be0], ebp
test ecx, ecx
jne 0x1400bb6ea
movsd xmm2, qword [0x1402211f8]
movd xmm0, ebx
cvtdq2pd xmm0, xmm0
mulsd xmm0, xmm2
addsd xmm0, qword [0x140216910]
cvttsd2si ecx, xmm0
movd xmm0, r15d
cvtdq2pd xmm0, xmm0
mov dword [rsp + 0x30], ecx
mulsd xmm0, xmm2
addsd xmm0, qword [0x140216910]
cvttsd2si eax, xmm0
mov dword [rsp + 0x34], eax
xor ebx, ebx
test r12d, r12d
je 0x1400bb741
mov r8, qword [rsp + 0x38]
xor r9d, r9d
mov rdx, qword [rsp + 0x30]
mov rcx, rdi
call fcn.1400c22bc
jmp 0x1400bb764
movsd xmm0, qword [0x1402b11d8]
ucomisd xmm0, qword [0x1402211f8]
jp 0x1400bb764
jne 0x1400bb764
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x30]
call fcn.1400c25f8
cmp dword [r13 + 4], ebx
jne 0x1400bb76e
mov dword [r13 + 4], r14d
cmp dword [rdi + 0x1308], ebx
jne 0x1400bb797
mov rax, qword [rdi]
mov r8d, r12d
mov rdx, r13
mov rcx, rdi
mov rax, qword [rax + 0x668]
call qword [case.0x1400887c2.0]
test eax, eax
je 0x1400bb833
mov r12d, ebx
mov r13d, dword [rdi + 0x114c]
cmp bx, word [rsi + 6]
jae 0x1400bb800
mov r14, qword [rsp + 0x40]
lea r15, [rsi + 8]
mov edi, dword [rsp + 0xa8]
movzx edx, word [r15]
mov dword [r14], edx
test edi, edi
jne 0x1400bb7dc
test edx, edx
je 0x1400bb7dc
mov ebx, r13d
lea rcx, vtable.CMap_unsigned_int__unsigned_int__int__int_.0
add r13d, ebp
call fcn.140097524
mov dword [rax], ebx
xor ebx, ebx
movzx eax, word [rsi + 6]
add r12d, ebp
add r15, 2
add r14, 4
cmp r12d, eax
jl 0x1400bb7b7
mov rdi, qword [rsp + 0x90]
mov r14d, dword [rsp + 0x98]
mov rax, qword [rdi]
mov r9d, ebp
mov rdx, qword [rsp + 0x40]
mov rcx, rdi
mov dword [rdi + 0x1308], r14d
movzx r8d, word [rsi + 6]
mov rax, qword [rax + 0x678]
call qword [case.0x1400887c2.0]
mov ebp, eax
test eax, eax
jne 0x1400bb833
mov dword [rdi + 0x1308], ebx
mov rcx, qword [rsp + 0x40]
call fcn.140034950
mov eax, ebp
mov rbx, qword [rsp + 0xa0]
add rsp, 0x50
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
xor eax, eax
jmp 0x1400bb83f
call fcn.140032d88
int3