Function at 0x1400073e0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
push rbp
mov eax, 0x15d0
call fcn.140064fb0
sub rsp, rax
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x1560], 0xfffffffffffffffe
mov rax, qword [0x140116948]
xor rax, rbp
mov qword [rbp + 0x1580], rax
mov dword [rbp + 0x40], 3
mov qword [rbp + 0x48], 0
mov rax, qword [rbp + 0x15a0]
mov qword [rbp + 0x28], rax
mov qword [rbp + 0x20], 0
mov qword [rbp + 0x60], 0
mov rax, qword [rbp + 0x15a8]
mov qword [rbp], rax
cmp qword [rbp], 0
jne 0x14000746f
mov qword [rbp + 0x1568], 0
jmp 0x140007606
mov rcx, qword [rbp]
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
mov dword [rbp + 0x44], eax
mov eax, dword [rbp + 0x44]
mov dword [rbp + 0x4a0], eax
mov ecx, 2
movsxd rax, dword [rbp + 0x4a0]
imul rax, rcx
mov qword [rbp + 0x498], rax
cmp qword [rbp + 0x498], 0x7fffffff
jg 0x1400074b9
cmp qword [rbp + 0x498], 0xffffffff80000000
jge 0x1400074c5
mov dword [rbp + 0x4a4], 0x80070057
jmp 0x1400074d8
mov eax, dword [rbp + 0x498]
mov dword [rbp + 0x44], eax
mov dword [rbp + 0x4a4], 0
cmp dword [rbp + 0x4a4], 0
jge 0x1400074f1
mov qword [rbp + 0x1570], 0
jmp 0x1400075f8
cmp dword [rbp + 0x44], 0x400
jg 0x14000753e
movsxd rcx, dword [rbp + 0x44]
call fcn.140006470
movzx eax, al
test eax, eax
je 0x14000753e
movsxd rcx, dword [rbp + 0x44]
mov rax, rcx
add rax, 0xf
cmp rax, rcx
ja 0x140007524
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.140064fb0
sub rsp, rax
lea rax, [rsp + 0x40]
mov qword [rbp + 0x4d0], rax
jmp 0x140007552
movsxd rdx, dword [rbp + 0x44]
lea rcx, [rbp + 0x48]
call fcn.14000bf20
mov qword [rbp + 0x4d0], rax
mov eax, dword [rbp + 0x44]
mov dword [rbp + 0x4d8], eax
mov rax, qword [rbp + 0x4e0]
mov qword [rbp + 0x1570], rax
cmp qword [rbp + 0x4d0], 0
je 0x14000757a
cmp qword [rbp], 0
jne 0x140007587
mov qword [rbp + 0x1570], 0
jmp 0x1400075f8
mov rax, qword [rbp + 0x4d0]
mov byte [rax], 0
mov qword [rsp + 0x38], 0
mov qword [rsp + 0x30], 0
mov eax, dword [rbp + 0x4d8]
mov dword [rsp + 0x28], eax
mov rax, qword [rbp + 0x4d0]
mov qword [rsp + 0x20], rax
mov r9d, 0xffffffff
mov r8, qword [rbp]
xor edx, edx
mov ecx, dword [rbp + 0x40]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [rbp + 0x4c8], eax
cmp dword [rbp + 0x4c8], 0
jne 0x1400075ea
mov qword [rbp + 0x1570], 0
jmp 0x1400075f8
mov rax, qword [rbp + 0x4d0]
mov qword [rbp + 0x1570], rax
mov rax, qword [rbp + 0x1570]
mov qword [rbp + 0x1568], rax
mov rax, qword [rbp + 0x1568]
mov qword [rbp + 8], rax
cmp qword [rbp + 8], 0
jne 0x14000766c
mov dword [rbp + 0x488], 0x8007000e
lea rax, [rbp + 0x68]
cmp qword [rbp + 0x60], rax
je 0x140007636
lea rcx, [rbp + 0x60]
call fcn.14000c500
nop
cmp qword [rbp + 0x48], 0
je 0x140007661
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x4e8], rax
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov qword [rbp + 0x48], rax
mov rcx, qword [rbp + 0x4e8]
call fcn.14004c3c4
jmp 0x140007636
mov eax, dword [rbp + 0x488]
jmp 0x1400078b2
mov r8d, 2
xor edx, edx
mov rcx, qword [rbp + 8]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov qword [rbp + 0x18], rax
cmp qword [rbp + 0x18], 0
jne 0x140007699
call fcn.1400065e0
mov dword [rbp + 0x478], eax
jmp 0x140007850
mov r8, qword [rbp + 0x15b8]
mov rdx, qword [rbp + 0x15b0]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov qword [rbp + 0x470], rax
cmp qword [rbp + 0x470], 0
jne 0x1400076d2
call fcn.1400065e0
mov dword [rbp + 0x478], eax
jmp 0x140007850
mov rdx, qword [rbp + 0x470]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rbp + 0x480], rax
cmp qword [rbp + 0x480], 0
jne 0x140007704
call fcn.1400065e0
mov dword [rbp + 0x478], eax
jmp 0x140007850
mov rdx, qword [rbp + 0x470]
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rbp + 0x30], eax
mov rax, qword [rbp + 0x480]
mov qword [rbp + 0x10], rax
mov eax, dword [rbp + 0x30]
add eax, 1
cmp eax, dword [rbp + 0x30]
jae 0x140007782
mov dword [rbp + 0x48c], 0x8007000e
lea rax, [rbp + 0x68]
cmp qword [rbp + 0x60], rax
je 0x14000774c
lea rcx, [rbp + 0x60]
call fcn.14000c500
nop
cmp qword [rbp + 0x48], 0
je 0x140007777
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x4f0], rax
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov qword [rbp + 0x48], rax
mov rcx, qword [rbp + 0x4f0]
call fcn.14004c3c4
jmp 0x14000774c
mov eax, dword [rbp + 0x48c]
jmp 0x1400078b2
mov eax, dword [rbp + 0x30]
add eax, 1
mov edx, eax
mov r8d, 1
lea rcx, [rbp + 0x4f8]
call fcn.14000c800
mov dword [rbp + 0x1578], eax
mov eax, dword [rbp + 0x1578]
mov dword [rbp + 0x500], eax
cmp dword [rbp + 0x500], 0
jge 0x1400077c2
mov ecx, dword [rbp + 0x500]
call fcn.1400045a0
mov rax, qword [rbp + 0x4f8]
mov qword [rbp + 0x508], rax
mov rdx, qword [rbp + 0x508]
lea rcx, [rbp + 0x60]
call fcn.14000c4b0
nop
cmp qword [rbp + 0x60], 0
jne 0x1400077f4
mov dword [rbp + 0x478], 0x8007000e
jmp 0x140007850
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x510], rax
mov r9d, dword [rbp + 0x30]
mov edx, dword [rbp + 0x30]
mov r8, qword [rbp + 0x10]
mov rcx, qword [rbp + 0x510]
call fcn.14004c900
mov ecx, eax
call fcn.140004f60
mov ecx, dword [rbp + 0x30]
mov rax, qword [rbp + 0x60]
mov byte [rax + rcx], 0
mov rax, qword [rbp + 0x60]
mov qword [rbp + 0x518], rax
mov r8d, dword [rbp + 0x15c0]
mov rdx, qword [rbp + 0x518]
lea rcx, [rbp + 0x20]
call fcn.140007de0
mov dword [rbp + 0x478], eax
cmp qword [rbp + 0x18], 0
je 0x140007861
mov rcx, qword [rbp + 0x18]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [rbp + 0x478]
mov dword [rbp + 0x490], eax
lea rax, [rbp + 0x68]
cmp qword [rbp + 0x60], rax
je 0x140007881
lea rcx, [rbp + 0x60]
call fcn.14000c500
nop
cmp qword [rbp + 0x48], 0
je 0x1400078ac
mov rax, qword [rbp + 0x48]
mov qword [rbp + 0x1558], rax
mov rax, qword [rbp + 0x48]
mov rax, qword [rax]
mov qword [rbp + 0x48], rax
mov rcx, qword [rbp + 0x1558]
call fcn.14004c3c4
jmp 0x140007881
mov eax, dword [rbp + 0x490]
mov rcx, qword [rbp + 0x1580]
xor rcx, rbp
call fcn.14004b2c0
lea rsp, [rbp + 0x1590]
pop rbp
ret