Function at 0x140046210
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov r11, rsp
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov qword [r11 + 0x20], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x150
mov r14, rcx
mov rax, qword [rcx + 0x790]
test rax, rax
je 0x1400467e4
cmp word [rax], 0
je 0x1400467e4
xor r15d, r15d
mov qword [r11 - 0xf8], 0x50
mov qword [r11 - 0xe8], r15
lea r13, [0x1400fbd80]
mov qword [r11 - 0xb8], r13
mov rbx, qword [0x140125b48]
mov qword [r11 - 0xe0], rbx
lea rax, [0x140061600]
mov qword [r11 - 0xf0], rax
test rbx, rbx
je 0x1400463d8
lea rax, [0x140128144]
cmp rax, 0x9f
je 0x1400463d8
mov edx, 0x9f
lea r8d, [r15 + 0xe]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
test rax, rax
je 0x1400463d8
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400463d8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
je 0x1400463d8
lea ecx, [r15 + 0xb]
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov edi, eax
lea r9, [rsi + 6]
mov r8d, r15d
mov edx, r15d
movzx eax, word [rsi + 4]
test eax, eax
je 0x1400463d8
mov r11, r9
mov r10d, eax
mov r12d, 0x100
nop word [rax + rax]
mov ebp, edx
mov rsi, r8
movzx eax, byte [r9]
test eax, eax
cmove eax, r12d
mov ecx, r15d
cmp eax, edx
jle 0x14004633d
cmp edx, edi
setl cl
jmp 0x140046342
cmp eax, edi
setge cl
mov r8, r11
test ecx, ecx
cmove r8, rsi
add r11, 0xe
add r9, 0xe
mov edx, eax
test ecx, ecx
cmove edx, ebp
sub r10, 1
jne 0x140046320
test r8, r8
je 0x1400463d8
movzx edx, word [r8 + 0xc]
lea r8d, [r10 + 3]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x1400463d8
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400463d8
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
je 0x1400463d8
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edx, eax
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, 0x30000
mov r8d, 1
mov rcx, rsi
call qword [sym.imp.USER32.dll_CreateIconFromResourceEx]
test rax, rax
jne 0x1400463e8
xor edx, edx
xor ecx, ecx
mov r8d, 0xffffff61
call qword [sym.imp.SHELL32.dll_ExtractIconW]
mov qword [0x140125c38], rax
mov ecx, gethostbyaddr
call qword [sym.imp.USER32.dll_GetSystemMetrics]
mov r8d, eax
mov qword [rsp + 0x20], r15
xor r9d, r9d
mov edx, 0xffffff61
xor ecx, ecx
call fcn.14009ef90
mov rcx, rax
mov qword [0x140125c40], rax
mov rax, qword [0x140125c38]
mov qword [rsp + 0xa0], rax
mov qword [rsp + 0xc8], rcx
mov edx, 0x7f00
xor ecx, ecx
call qword [sym.imp.USER32.dll_LoadCursorW]
mov qword [rsp + 0xa8], rax
movdqa xmm0, xmmword [reloc.WSOCK32.dll_recv]
movdqa xmmword [rsp + 0xb0], xmm0
lea rcx, [rsp + 0x80]
call qword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x140046477
lea rcx, [0x140104680]
jmp 0x1400467cf
call qword [sym.imp.USER32.dll_GetForegroundWindow]
test rax, rax
je 0x1400464ba
mov r8d, 0x40
lea rdx, [rsp + 0xd0]
mov rcx, rax
call qword [sym.imp.USER32.dll_GetClassNameW]
test eax, eax
je 0x1400464b5
lea rdx, [0x1401030e0]
lea rcx, [rsp + 0xd0]
call fcn.1400c0814
test eax, eax
je 0x1400464ba
xor dil, dil
jmp 0x1400464bd
mov dil, 1
xor r9d, r9d
lea r8, [rsp + 0x70]
xor edx, edx
lea ecx, [rdx + 0x30]
call qword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [rsp + 0x78]
sub eax, dword [rsp + 0x70]
lea eax, [rax + rax*2]
cdq
and edx, 3
lea ecx, [rdx + rax]
sar ecx, 2
mov r9d, dword [rsp + 0x7c]
sub r9d, dword [rsp + 0x74]
lea eax, [r9 + r9*2]
cdq
and edx, 3
lea r8d, [rdx + rax]
sar r8d, 2
cmp ecx, r9d
cmovle r9d, ecx
movzx ecx, dil
shl ecx, 7
mov qword [rsp + 0x58], r15
mov rax, qword [0x140125b48]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], r15
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r8d
mov dword [rsp + 0x30], r9d
mov dword [rsp + 0x28], 0x80000000
mov dword [rsp + 0x20], 0x80000000
mov r9d, 0xcf0000
mov r8, qword [r14 + 0x790]
mov rdx, r13
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140125b28], rax
test rax, rax
je 0x1400467c8
mov ecx, 0x68
call fcn.1400ba174
mov qword [rsp + 0x180], rax
mov edx, 1
mov rcx, rax
call fcn.14008a9f0
nop
mov qword [r14 + 0x838], rax
mov rcx, rax
call fcn.14008be30
cmp dword [r14 + 0x798], 1
jne 0x14004661e
mov rcx, qword [0x140125b28]
call qword [sym.imp.USER32.dll_GetMenu]
mov rbx, rax
mov edx, 0xff79
mov r8d, 3
mov rcx, rax
call qword [sym.imp.USER32.dll_EnableMenuItem]
cmp byte [0x14011f1a4], 0
jne 0x14004661e
mov edx, 0xff81
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0xff7e
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0xff7f
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov edx, 0xff80
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.USER32.dll_EnableMenuItem]
mov qword [rsp + 0x58], r15
mov rax, qword [0x140125b48]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], 1
mov rax, qword [0x140125b28]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
mov r9d, 0x50a00804
xor r8d, r8d
lea rdx, [0x1400fc820]
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [0x140125af8], rax
test rax, rax
je 0x1400467c8
mov rcx, rax
call qword [sym.imp.USER32.dll_GetDC]
mov rbx, rax
mov edx, 0x5a
mov rcx, rax
call qword [sym.imp.GDI32.dll_GetDeviceCaps]
mov edx, eax
mov ecx, 0xa
lea r8d, [rcx + 0x3e]
call qword [sym.imp.KERNEL32.dll_MulDiv]
neg eax
lea rcx, [0x1401046b8]
mov qword [rsp + 0x68], rcx
mov dword [rsp + 0x60], r15d
mov dword [rsp + 0x58], r15d
mov dword [rsp + 0x50], r15d
mov dword [rsp + 0x48], r15d
mov dword [rsp + 0x40], r15d
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov dword [rsp + 0x28], r15d
mov dword [rsp + 0x20], r15d
xor r9d, r9d
xor r8d, r8d
xor edx, edx
mov ecx, eax
call qword [sym.imp.GDI32.dll_CreateFontW]
mov qword [0x140125f30], rax
mov rdx, rbx
mov rcx, qword [0x140125af8]
call qword [sym.imp.USER32.dll_ReleaseDC]
xor r9d, r9d
mov r8, qword [0x140125f30]
lea edx, [r9 + 0x30]
mov rcx, qword [0x140125af8]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0xc5
mov rcx, qword [0x140125af8]
call qword [sym.imp.USER32.dll_SendMessageW]
xor edx, edx
mov rcx, qword [0x140125b28]
call qword [sym.imp.USER32.dll_ShowWindow]
xor edx, edx
mov rcx, qword [0x140125b28]
call qword [sym.imp.USER32.dll_ShowWindow]
test dil, dil
je 0x140046789
mov edx, 6
mov rcx, qword [0x140125b28]
call qword [sym.imp.USER32.dll_ShowWindow]
xor r8d, r8d
lea edx, [r8 - 0x14]
mov rcx, qword [0x140125b28]
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov edx, 0xd4
mov rcx, qword [0x140125b48]
call qword [sym.imp.USER32.dll_LoadAcceleratorsW]
mov qword [0x140125af0], rax
cmp byte [0x140125c5c], 0
je 0x1400467b9
mov qword [r14 + 0x2f0], r15
mov eax, 1
jmp 0x1400467e6
mov rcx, r14
call fcn.140046810
mov eax, 1
jmp 0x1400467e6
lea rcx, [0x140104698]
mov qword [rsp + 0x20], r15
xorps xmm3, xmm3
xor r8d, r8d
mov edx, 0x10000
call fcn.1400a3a00
xor eax, eax
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret