Function at 0x14000fd90
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x60
mov qword [rsp + 0x50], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov r13, rdx
mov rbp, rcx
xor r14d, r14d
mov qword [rax - 0x40], r14
mov qword [rax - 0x48], r14
mov qword [rax + 0x20], r14
mov qword [rax + 0x18], r14
cmp qword [r9 + 0x20], 8
jb 0x14000fdd6
mov r9, qword [r9 + 8]
jmp 0x14000fdda
add r9, 8
cmp qword [r8 + 0x20], 8
jb 0x14000fde7
mov rdx, qword [r8 + 8]
jmp 0x14000fdeb
lea rdx, [r8 + 8]
mov r8, r9
lea rcx, [0x14000d000]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r12, rax
mov ebx, 0x80004005
mov edi, ebx
test rax, rax
cmovne edi, r14d
test edi, edi
jns 0x14000fe60
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14000fe24
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000fe38
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000fe49
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14000fe59
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, edi
jmp 0x140010307
mov rdx, rax
lea rcx, [0x14000d000]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov edi, ebx
test rax, rax
cmovne edi, r14d
test edi, edi
jns 0x14000fecd
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14000fe91
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000fea5
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000feb6
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14000fec6
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, edi
jmp 0x140010307
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
mov edi, ebx
test rax, rax
cmovne edi, r14d
test edi, edi
jns 0x14000ff36
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14000fefa
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000ff0e
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000ff1f
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14000ff2f
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, edi
jmp 0x140010307
mov rdx, r12
lea rcx, [0x14000d000]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
test eax, eax
cmovne ebx, r14d
test ebx, ebx
jns 0x14000ffa2
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14000ff66
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000ff7a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000ff8b
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x14000ff9b
mov rdx, qword [rcx]
call qword [rdx + 0x10]
mov eax, ebx
jmp 0x140010307
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0xa8]
call qword [rax + 0x70]
mov ebx, eax
test eax, eax
jns 0x14001000a
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14000ffce
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14000ffe2
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x14000fff3
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140010003
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x140010307
mov rcx, qword [rsp + 0xa8]
mov rax, qword [rcx]
mov r8d, edi
mov rdx, rsi
call qword [rax + 0x80]
mov ebx, eax
test eax, eax
jns 0x140010077
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001003b
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14001004f
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140010060
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140010070
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x140010307
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0x48]
mov qword [rsp + 0x20], rdx
mov r9d, 1
xor r8d, r8d
mov rdx, qword [rsp + 0xa8]
call qword [rax + 0x20]
mov ebx, eax
test eax, eax
jns 0x1400100f2
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400100b6
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x1400100ca
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400100db
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400100eb
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x140010307
mov rcx, qword [rsp + 0x48]
mov rax, qword [rcx]
lea r8, [rsp + 0x40]
xor edx, edx
call qword [rax + 0x68]
mov ebx, eax
test eax, eax
jns 0x14001015a
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x14001011e
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140010132
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140010143
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140010153
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x140010307
mov rcx, qword [rbp + 0x48]
mov rax, qword [rcx]
lea rdx, [rsp + 0xa0]
call qword [rax + 0x50]
mov ebx, eax
test eax, eax
jns 0x1400101c2
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x140010186
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x14001019a
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400101ab
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400101bb
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x140010307
mov rcx, qword [rsp + 0xa0]
mov rax, qword [rcx]
mov dword [rsp + 0x30], 1
xorpd xmm0, xmm0
movsd qword [rsp + 0x28], xmm0
mov qword [rsp + 0x20], r14
xor r9d, r9d
lea r8, [0x1400134d0]
mov rdx, qword [rsp + 0x40]
call qword [rax + 0x40]
mov ebx, eax
test eax, eax
jns 0x14001024c
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x140010210
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140010224
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x140010235
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140010245
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x140010307
mov rax, qword [r13]
mov r9, qword [rsp + 0xb0]
xor r8d, r8d
mov rdx, qword [rsp + 0xa0]
mov rcx, r13
call qword [rax + 0x28]
mov ebx, eax
test eax, eax
jns 0x1400102bc
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x140010283
mov rdx, qword [rcx]
call qword [rdx + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x140010297
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400102a8
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x1400102b8
mov rax, qword [rcx]
call qword [rax + 0x10]
mov eax, ebx
jmp 0x140010307
mov rcx, qword [rsp + 0xa0]
test rcx, rcx
je 0x1400102d0
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0xa8]
test rcx, rcx
je 0x1400102e4
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1400102f5
mov rax, qword [rcx]
call qword [rax + 0x10]
nop
mov rcx, qword [rsp + 0x48]
test rcx, rcx
je 0x140010305
mov rax, qword [rcx]
call qword [rax + 0x10]
xor eax, eax
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret