Function at 0x14000db1c
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rbx
push rsi
push r12
push r13
push r14
push r15
sub rsp, 0x4a0
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x38], 0xfffffffffffffffe
mov rax, qword [0x1400227c0]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov r13, r9
mov r12, r8
mov r15, rdx
xor ebx, ebx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x28], rcx
and qword [rbp + 0x20], rbx
xor eax, eax
mov qword [rbp + 0x40], rax
test rdx, rdx
je 0x14000ddc4
mov rcx, rdx
call qword [sym.imp.MSVCR110.dll_wcslen]
inc eax
movsxd rsi, eax
add rsi, rsi
mov eax, 0x80000000
add rax, rsi
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14000dc43
cmp esi, 0x400
jg 0x14000dbd7
movsxd r14, esi
mov rcx, r14
call fcn.140010568
test al, al
je 0x14000dbd7
lea rax, [r14 + 0xf]
cmp rax, r14
ja 0x14000dbc4
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.140011c50
sub rsp, rax
lea r14, [rsp + 0x40]
jmp 0x14000dc09
movsxd rcx, esi
or rax, 0xffffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x14000ddb9
add rcx, 0x10
call qword [sym.imp.MSVCR110.dll_malloc]
test rax, rax
je 0x14000dc43
and qword [rax], 0
mov rbx, rax
mov qword [rbp + 8], rax
lea r14, [rax + 0x10]
test r14, r14
je 0x14000dc43
mov byte [r14], 0
and qword [rsp + 0x38], 0
and qword [rsp + 0x30], 0
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r14
or r9d, 0xffffffff
mov r8, r15
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb rcx, rcx
and rcx, r14
jmp 0x14000dc45
xor ecx, ecx
test rcx, rcx
jne 0x14000dc53
mov rax, qword [rbp + 0x40]
jmp 0x14000ddc4
xor edx, edx
lea r8d, [rdx + 0x60]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r14, rax
mov qword [rbp + 0x18], rax
test rax, rax
jne 0x14000dc77
call fcn.14000a06c
mov esi, eax
jmp 0x14000dd8e
mov r8, r13
mov rdx, r12
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rsi, rax
test rax, rax
jne 0x14000dc98
call fcn.14000a06c
jmp 0x14000dd82
mov rdx, rax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r15, rax
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000dc8e
mov rdx, rsi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
mov dword [rbp], esi
lea eax, [rsi + 1]
cmp eax, esi
jae 0x14000dcd2
mov esi, 0x8007000e
jmp 0x14000dd84
mov ecx, eax
test eax, eax
je 0x14000dd0b
xor edx, edx
or rax, 0xffffffffffffffff
div rcx
cmp rax, 1
jb 0x14000dd01
cmp rcx, 0x400
jbe 0x14000dd0b
mov edx, ecx
lea rcx, [rbp + 0x40]
call fcn.140009ad4
mov rcx, qword [rbp + 0x40]
jmp 0x14000dd13
mov ecx, 0x80070216
call fcn.140001008
lea rcx, [rbp + 0x48]
mov qword [rbp + 0x40], rcx
jmp 0x14000dd28
test rcx, rcx
je 0x14000dcc8
mov r9, rsi
mov r8, r15
mov rdx, rsi
call qword [sym.imp.MSVCR110.dll_memcpy_s]
test eax, eax
je 0x14000dd66
cmp eax, 0xc
je 0x14000dd60
cmp eax, 0x16
je 0x14000dd5a
cmp eax, 0x22
je 0x14000dd5a
cmp eax, 0x50
je 0x14000dd66
call sub.mfc110.dll_Ordinal_2288
int3
call sub.mfc110.dll_Ordinal_2288
int3
call sub.mfc110.dll_Ordinal_2290
int3
mov rax, qword [rbp + 0x40]
mov byte [rsi + rax], 0
mov r8d, dword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.14000d840
mov esi, eax
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x14000dda2
lea rcx, [rbp + 0x40]
call fcn.14000b950
nop
jmp 0x14000ddb0
mov rcx, rbx
mov rbx, qword [rbx]
call qword [sym.imp.MSVCR110.dll_free]
test rbx, rbx
jne 0x14000dda4
mov eax, esi
jmp 0x14000ddef
mov ecx, 0x80070216
call fcn.140001008
nop
lea rcx, [rbp + 0x48]
cmp rax, rcx
je 0x14000ddd7
lea rcx, [rbp + 0x40]
call fcn.14000b950
nop
jmp 0x14000dde5
mov rcx, rbx
mov rbx, qword [rbx]
call qword [sym.imp.MSVCR110.dll_free]
test rbx, rbx
jne 0x14000ddd9
mov eax, 0x8007000e
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.140011780
lea rsp, [rbp + 0x460]
pop r15
pop r14
pop r13
pop r12
pop rsi
pop rbx
pop rbp
ret