Function at 0x140143760
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
mov qword [rax + 8], rcx
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov qword [rax - 0x48], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rsi
mov r12, rdx
mov r13, rcx
test rdx, rdx
jne 0x140143799
mov eax, 0xfffffed4
jmp 0x140143b5c
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x28], xmm0
xor r14d, r14d
mov qword [rsp + 0x38], r14
mov word [rsp + 0x78], r14w
lea r8, [rsp + 0x78]
xor edx, edx
lea rcx, [rsp + 0x28]
call fcn.140061980
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov word [rsp + 0x78], ax
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
cmp rbx, rsi
je 0x1401437e9
mov word [rsi], ax
add rsi, 2
mov qword [rsp + 0x30], rsi
jmp 0x140143805
lea r8, [rsp + 0x78]
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.140061980
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
mov eax, 0x804
mov word [rsp + 0x78], ax
cmp rbx, rsi
je 0x140143822
mov word [rsi], ax
add rsi, 2
mov qword [rsp + 0x30], rsi
jmp 0x14014383e
lea r8, [rsp + 0x78]
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.140061980
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
mov eax, 0x409
mov word [rsp + 0x78], ax
cmp rbx, rsi
je 0x14014385b
mov word [rsi], ax
add rsi, 2
mov qword [rsp + 0x30], rsi
jmp 0x140143877
lea r8, [rsp + 0x78]
mov rdx, rsi
lea rcx, [rsp + 0x28]
call fcn.140061980
mov rbx, qword [rsp + 0x38]
mov rsi, qword [rsp + 0x30]
mov rdi, qword [rsp + 0x28]
sub rsi, rdi
sar rsi, 1
je 0x1401438be
mov rax, r14
nop word [rax + rax]
movzx r9d, word [rdi + rax*2]
mov edx, reloc.ODBC32.dll_SQLFreeStmt
lea r8d, [rdx - 0xf]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
mov r15, rax
test rax, rax
jne 0x14014393c
inc r14d
mov eax, r14d
cmp rax, rsi
jb 0x140143890
mov edx, 1
lea r8d, [rdx + 0xf]
mov rcx, r12
call fcn.140143ba0
movzx r9d, ax
mov edx, reloc.ODBC32.dll_SQLFreeStmt
lea r8d, [rdx - 0xf]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
mov r15, rax
test rax, rax
jne 0x14014393c
call qword [sym.imp.KERNEL32.dll_GetLastError]
nop
test rdi, rdi
je 0x140143932
sub rbx, rdi
sar rbx, 1
add rbx, rbx
mov rax, rdi
cmp rbx, 0x1000
jb 0x140143927
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140143b76
mov rdx, rbx
mov rcx, rdi
call fcn.140283144
mov eax, 0xfffffffe
jmp 0x140143b5c
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x140143995
test rdi, rdi
je 0x14014398b
sub rbx, rdi
sar rbx, 1
add rbx, rbx
mov rax, rdi
cmp rbx, 0x1000
jb 0x140143980
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140143b7c
mov rdx, rbx
mov rcx, rdi
call fcn.140283144
mov eax, 0xfffffffd
jmp 0x140143b5c
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
jne 0x1401439ee
test rdi, rdi
je 0x1401439e4
sub rbx, rdi
sar rbx, 1
add rbx, rbx
mov rax, rdi
cmp rbx, 0x1000
jb 0x1401439d9
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140143b82
mov rdx, rbx
mov rcx, rdi
call fcn.140283144
mov eax, 0xfffffffc
jmp 0x140143b5c
mov edx, 4
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
je 0x140143a48
test rdi, rdi
je 0x140143a3e
sub rbx, rdi
sar rbx, 1
add rbx, rbx
mov rax, rdi
cmp rbx, 0x1000
jb 0x140143a33
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140143b88
mov rdx, rbx
mov rcx, rdi
call fcn.140283144
mov eax, 0xfffffffb
jmp 0x140143b5c
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
jg 0x140143aa0
test rdi, rdi
je 0x140143a96
sub rbx, rdi
sar rbx, 1
add rbx, rbx
mov rax, rdi
cmp rbx, 0x1000
jb 0x140143a8b
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140143b8e
mov rdx, rbx
mov rcx, rdi
call fcn.140283144
mov eax, 0xfffffffa
jmp 0x140143b5c
mov dword [rsp + 0x78], 0xffffff9c
mov r8d, eax
mov rdx, rsi
mov rcx, r13
call fcn.140143d30
mov dword [rsp + 0x78], eax
jmp 0x140143acf
test eax, eax
jne 0x140143b1d
mov byte [r13 + 0x168], 1
test rdi, rdi
je 0x140143b19
sub rbx, rdi
sar rbx, 1
add rbx, rbx
mov rax, rdi
cmp rbx, 0x1000
jb 0x140143b0e
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140143b94
mov rdx, rbx
mov rcx, rdi
call fcn.140283144
xor eax, eax
jmp 0x140143b5c
lea esi, [rax - 0x64]
test rdi, rdi
je 0x140143b5a
sub rbx, rdi
sar rbx, 1
add rbx, rbx
mov rax, rdi
cmp rbx, 0x1000
jb 0x140143b4f
add rbx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140143b9a
mov rdx, rbx
mov rcx, rdi
call fcn.140283144
mov eax, esi
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret
call fcn.140287d84
int3
call fcn.140287d84
int3
call fcn.140287d84
int3
call fcn.140287d84
int3
call fcn.140287d84
int3
call fcn.140287d84
int3
call fcn.140287d84
int3