Function at 0x14004b5f0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push r14
push rsi
push rdi
push rbx
sub rsp, 0x10
lea rbp, [rsp + 0x10]
mov qword [rbp - 8], 0xfffffffffffffffe
mov eax, dword [0x1400c723c]
mov ecx, dword [0x1400c7240]
shrd ecx, eax, 0x10
xor ecx, 0x13f807d8
mov eax, ecx
shl rax, 5
call fcn.140095c50
sub rsp, rax
mov r14, rsp
sub rsp, 0x20
mov edx, 0x65
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
add rsp, 0x20
test rax, rax
je 0x14004b8e0
mov rsi, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
add rsp, 0x20
test rax, rax
je 0x14004b8e0
mov rbx, rax
sub rsp, 0x20
xor ecx, ecx
mov rdx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
add rsp, 0x20
mov edi, eax
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LockResource]
add rsp, 0x20
test rax, rax
je 0x14004b8e0
mov rsi, rax
mov edi, edi
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
mov ecx, dword [0x1400c7244]
mov edx, dword [str.Y_5K_f]
shrd edx, ecx, 0xb
xor edx, 0xebc966a4
sub rsp, 0x20
mov rcx, rax
mov r8, rdi
call qword [sym.imp.KERNEL32.dll_HeapAlloc]
add rsp, 0x20
test rax, rax
je 0x14004b8e0
mov rdx, rsi
mov rsi, rax
sub rsp, 0x20
mov rcx, rax
mov r8, rdi
call sub.VCRUNTIME140.dll_memcpy
mov rcx, rsi
call fcn.1400013e0
add rsp, 0x20
test rax, rax
je 0x14004b88d
mov rsi, rax
xorps xmm0, xmm0
movups xmmword [r14], xmm0
sub rsp, 0x20
call fcn.14007c3b0
add rsp, 0x20
cdqe
lea rcx, [0x14009b110]
mov rax, qword [rcx + rax*8]
mov qword [r14 + 0x10], rax
sub rsp, 0x20
call fcn.14007c440
add rsp, 0x20
cdqe
lea rcx, [0x14009b130]
mov rax, qword [rcx + rax*8]
mov qword [r14 + 0x18], rax
sub rsp, 0x20
lea rcx, [0x1400e3064]
lea rdx, [0x140099758]
call fcn.14005f620
add rsp, 0x20
movzx eax, word [0x1400e3064]
mov word [r14], ax
movzx eax, byte [0x1400e3066]
mov byte [r14 + 2], al
nop
sub rsp, 0x20
mov rcx, rsi
mov qword [rbp - 0x10], r14
mov rdx, r14
call fcn.140001de0
add rsp, 0x20
nop
test rax, rax
je 0x14004b7b4
nop
sub rsp, 0x20
call rax
add rsp, 0x20
nop
nop
sub rsp, 0x20
mov rcx, rsi
call fcn.140001f50
add rsp, 0x20
nop
mov rdi, qword [rbp - 0x10]
mov rsi, qword [rdi + 0x18]
sub rsp, 0x20
call fcn.14007c4b0
add rsp, 0x20
cdqe
lea rcx, [0x14009b150]
cmp rsi, qword [rcx + rax*8]
jbe 0x14004b8e0
mov rbx, qword [rdi]
sub rsp, 0x20
call fcn.14007c520
add rsp, 0x20
cdqe
lea rcx, [0x14009b170]
mov rdi, qword [rcx + rax*8]
add rdi, rsi
sub rsp, 0x20
call fcn.14007c5b0
add rsp, 0x20
cdqe
lea rcx, [0x14009b190]
cmp rdi, qword [rcx + rax*8]
jbe 0x14004b8cd
mov rdi, qword [rbx - 8]
sub rsp, 0x20
call fcn.14007c620
add rsp, 0x20
cdqe
lea rcx, [0x14009b1b0]
add rbx, qword [rcx + rax*8]
sub rbx, rdi
sub rsp, 0x20
call fcn.14007c6b0
add rsp, 0x20
cdqe
lea rcx, [0x14009b1d0]
cmp rbx, qword [rcx + rax*8]
jae 0x14004b8ea
sub rsp, 0x20
call fcn.14007c740
add rsp, 0x20
cdqe
lea rcx, [0x14009b1f0]
add rsi, qword [rcx + rax*8]
mov rdx, rsi
mov rcx, rdi
jmp 0x14004b8d3
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_GetProcessHeap]
add rsp, 0x20
imul ecx, dword [0x1400c724c], 0x3bfc2bc
imul edx, dword [0x1400c7250], 0xaf6c6369
add edx, ecx
add edx, 0xab419877
mov rcx, rax
mov r8, rsi
mov rsp, rbp
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
jmp qword [sym.imp.KERNEL32.dll_HeapFree]
mov rdx, rdi
mov rcx, rbx
sub rsp, 0x20
call fcn.140095c0c
add rsp, 0x20
mov rsp, rbp
pop rbx
pop rdi
pop rsi
pop r14
pop rbp
ret
sub rsp, 0x20
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3