Function at 0x140085cf0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbx
push rdi
push r14
sub rsp, 0xd0
mov rax, qword [0x1400f5010]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov rbx, rcx
mov qword [rcx + 0xa0], 1
mov rcx, qword [rcx]
xor r14d, r14d
test rcx, rcx
je 0x140085d2f
call fcn.14008ae0c
mov qword [rbx], r14
lea r8, [0x1400c2a68]
mov qword [rsp + 0x100], rsi
mov edx, 0x6d
mov qword [rbx + 8], r14
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_FindResourceW]
mov rdi, rax
test rax, rax
jne 0x140085d75
lea r8, [0x1400cd848]
xor ecx, ecx
lea edx, [rax + 0x6d]
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_1.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x140086016
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadResource]
mov rsi, rax
test rax, rax
je 0x140086016
xor ecx, ecx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_GetModuleHandleW]
mov rcx, rax
mov rdx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_SizeofResource]
mov edi, eax
test eax, eax
je 0x140086016
mov rcx, rsi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LockResource]
mov rsi, rax
test rax, rax
je 0x140086016
mov ecx, edi
mov qword [rsp + 0xf8], rbp
call fcn.14008b448
mov qword [rbx + 0xc0], rax
test rax, rax
jne 0x140085e14
mov eax, 0x8007000e
mov rbp, qword [rsp + 0xf8]
mov rsi, qword [rsp + 0x100]
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.14008ade0
add rsp, 0xd0
pop r14
pop rdi
pop rbx
ret
mov r8, rdi
mov rdx, rsi
mov rcx, rax
call fcn.140091960
xor edx, edx
lea rcx, [rsp + 0x30]
lea r8d, [rdx + 0x64]
call fcn.1400916b0
mov rax, qword [rbx + 0xc0]
lea rdx, [rsp + 0x30]
mov r8d, 0x10000
mov qword [rsp + 0x50], rax
xor ecx, ecx
mov dword [rsp + 0x34], 0x204d454d
mov dword [rsp + 0x4c], edi
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioOpenW]
xor r9d, r9d
mov qword [rbx], r14
mov rcx, rax
mov qword [rbx + 8], rax
xor r8d, r8d
lea rdx, [rbx + 0x24]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioDescend]
test eax, eax
jne 0x140086000
cmp dword [rbx + 0x24], 0x46464952
jne 0x140086000
cmp dword [rbx + 0x2c], 0x45564157
jne 0x140086000
mov rcx, qword [rbx + 8]
lea r9d, [rax + 0x10]
lea r8, [rbx + 0x24]
mov dword [rsp + 0xb0], 0x20746d66
lea rdx, [rsp + 0xb0]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioDescend]
test eax, eax
jne 0x140086000
cmp dword [rsp + 0xb4], 0x10
jb 0x140086000
mov rcx, qword [rbx + 8]
lea r8d, [rax + 0x10]
lea rdx, [rsp + 0xa0]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioRead]
cmp eax, 0x10
jne 0x140086000
cmp word [rsp + 0xa0], 1
jne 0x140085f7a
lea ecx, [rax + 2]
call fcn.14008b448
mov qword [rbx], rax
test rax, rax
je 0x140086000
movups xmm0, xmmword [rsp + 0xa0]
movups xmmword [rax], xmm0
mov rax, qword [rbx]
mov word [rax + 0x10], r14w
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0xb0]
xor r8d, r8d
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioAscend]
test eax, eax
jne 0x140085feb
mov rcx, rbx
call fcn.140086020
mov edi, eax
test eax, eax
js 0x140085de8
mov eax, dword [rbx + 0x14]
lea rdx, str.CWaveFile::Open
mov r8d, 0x66
mov dword [rbx + 0x38], eax
lea rcx, str._s__d_End
call fcn.14003f0e0
mov eax, edi
jmp 0x140085de8
mov rcx, qword [rbx + 8]
lea rdx, [rsp + 0x20]
mov r8d, 2
mov word [rsp + 0x20], r14w
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioRead]
cmp eax, 2
jne 0x140086000
movzx ecx, word [rsp + 0x20]
add rcx, 0x12
call fcn.14008b448
mov qword [rbx], rax
test rax, rax
je 0x140086000
movups xmm0, xmmword [rsp + 0xa0]
movups xmmword [rax], xmm0
mov rcx, qword [rbx]
movzx eax, word [rsp + 0x20]
mov word [rcx + 0x10], ax
mov rdx, qword [rbx]
movzx r8d, word [rsp + 0x20]
add rdx, 0x12
mov rcx, qword [rbx + 8]
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioRead]
movzx ecx, word [rsp + 0x20]
cmp eax, ecx
je 0x140085f25
mov rcx, qword [rbx]
test rcx, rcx
je 0x140086000
mov edx, 0x12
call fcn.14008ae0c
mov qword [rbx], r14
mov rcx, qword [rbx + 8]
xor edx, edx
call qword [sym.imp.api_ms_win_mm_misc_l1_1_0.dll_mmioClose]
mov eax, 0x80004005
jmp 0x140085de8
mov eax, 0x80004005
jmp 0x140085df0