Function at 0x1400cc5f8
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push r12
push r13
push r15
sub rsp, 0x60
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov r13d, r8d
mov rsi, rcx
cmp dword [rcx + 0x174], 0
je 0x1400cc634
xor eax, eax
jmp 0x1400cc96e
lea r15, [0x140111766]
mov rdi, r15
test rdx, rdx
cmovne rdi, rdx
mov rbx, r15
test r9, r9
cmovne rbx, r9
mov rbp, r15
mov rax, qword [rsp + 0xa0]
test rax, rax
cmovne rbp, rax
test rdi, rdi
jne 0x1400cc66a
xor eax, eax
jmp 0x1400cc672
mov rcx, rdi
call fcn.1400e1d50
mov r8d, eax
mov rdx, rdi
lea rcx, [rsi + 0x138]
call fcn.1400a779c
mov rdx, r15
mov rcx, qword [rsi + 0x138]
call fcn.1400e3378
test eax, eax
sete al
test al, al
je 0x1400cc6ad
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsi + 0x168], rax
jmp 0x1400cc6c1
mov rcx, qword [rsi + 0x138]
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov qword [rsi + 0x168], rax
mov rax, qword [rsp + 0xa8]
test rax, rax
je 0x1400cc6d5
mov qword [rsi + 0x168], rax
and dword [rsi + 0x170], 0
cmp qword [rsi + 0x168], 0
jne 0x1400cc709
mov rcx, qword [rsi + 0x138]
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov qword [rsi + 0x168], rax
test rax, rax
je 0x1400cc709
mov dword [rsi + 0x170], 1
cmp qword [rsi + 0x168], 0
jne 0x1400cc71a
xor eax, eax
jmp 0x1400cc96e
lea r15, str.RESFILE
mov r12d, 0xffff0000
test r12d, ebx
je 0x1400cc795
test rbx, rbx
jne 0x1400cc735
xor eax, eax
jmp 0x1400cc73d
mov rcx, rbx
call fcn.1400e1d50
mov r8d, eax
mov rdx, rbx
lea rcx, [rsi + 0x148]
call fcn.1400a779c
lea rdx, [0x140111766]
mov rcx, qword [rsi + 0x148]
call fcn.1400e3378
test eax, eax
sete al
test al, al
je 0x1400cc785
mov rcx, r15
call fcn.1400e1d50
mov r8d, eax
mov rdx, r15
lea rcx, [rsi + 0x148]
call fcn.1400a779c
mov rax, qword [rsi + 0x148]
mov qword [rsi + 0x140], rax
jmp 0x1400cc79c
mov qword [rsi + 0x140], rbx
mov dword [rsi + 0x160], r13d
test r12d, ebp
je 0x1400cc811
test rbp, rbp
jne 0x1400cc7b1
xor eax, eax
jmp 0x1400cc7b9
mov rcx, rbp
call fcn.1400e1d50
mov r8d, eax
mov rdx, rbp
lea rcx, [rsi + 0x158]
call fcn.1400a779c
lea rdx, [0x140111766]
mov rcx, qword [rsi + 0x158]
call fcn.1400e3378
test eax, eax
sete al
test al, al
je 0x1400cc801
mov rcx, r15
call fcn.1400e1d50
mov r8d, eax
mov rdx, r15
lea rcx, [rsi + 0x158]
call fcn.1400a779c
mov rax, qword [rsi + 0x158]
mov qword [rsi + 0x150], rax
jmp 0x1400cc818
mov qword [rsi + 0x150], rbp
lea rcx, [rsp + 0x28]
call fcn.1400cc36c
nop
mov r9, qword [rsi + 0x150]
mov r8, qword [rsi + 0x140]
mov rdx, qword [rsi + 0x168]
lea rcx, [rsp + 0x28]
call fcn.1400cc430
mov rcx, qword [rax + 0x10]
test rcx, rcx
jle 0x1400cc864
test rcx, rcx
jg 0x1400cc856
call fcn.1400d0350
int3
mov rax, qword [rax + 8]
movzx ecx, word [rax]
mov word [rsi + 0x178], cx
movzx r9d, word [rsi + 0x178]
mov r8, qword [rsi + 0x150]
mov rdx, qword [rsi + 0x140]
mov rcx, qword [rsi + 0x168]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
mov rbx, rax
test rax, rax
je 0x1400cc900
mov rdx, rax
mov rcx, qword [rsi + 0x168]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400cc95c
mov rdx, rbx
mov rcx, qword [rsi + 0x168]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rsi + 0x128], eax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LockResource]
test rax, rax
je 0x1400cc95c
mov r8d, dword [rsi + 0x128]
mov dword [rsi + 0x12c], r8d
mov dword [rsi + 0x174], 1
and dword [rsi + 0x130], 0
lea rcx, [rsi + 8]
mov rdx, rax
call fcn.1400a70dc
jmp 0x1400cc95c
test r13d, r13d
jne 0x1400cc954
and dword [rsi + 0x128], r13d
mov r8d, 0x1000
mov dword [rsi + 0x12c], r8d
xor edx, edx
lea rcx, [rsi + 8]
call fcn.1400a70dc
movsxd rbx, dword [rsi + 0x12c]
lea rcx, [rsi + 8]
call fcn.1400a71b0
mov rcx, rax
mov r8, rbx
xor edx, edx
call fcn.1400e1fc0
mov dword [rsi + 0x174], 1
and dword [rsi + 0x130], r13d
jmp 0x1400cc95c
mov rcx, rsi
call fcn.1400cc570
mov ebx, dword [rsi + 0x174]
lea rcx, [rsp + 0x28]
call fcn.1400cc394
mov eax, ebx
lea r11, [rsp + 0x60]
mov rbx, qword [r11 + 0x20]
mov rbp, qword [r11 + 0x28]
mov rsi, qword [r11 + 0x30]
mov rdi, qword [r11 + 0x38]
mov rsp, r11
pop r15
pop r13
pop r12
ret