Function at 0x1400078e3
Capabilities:
Extract resource via kernel32 functions
Terminate process

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
cmp al, dil
mov qword [rsp + 0x18], rdi
jmp 0x14000790e
push rbp
movsxd rbp, esp
push r12
shld ebp, r14d, 0x37
or bpl, cl
sal bpl, 0x6f
push r13
push r14
or bpl, dil
push r15
lea rbp, [rsp - 0x190]
sub rsp, 0x290
cmp r8d, edx
sub r9d, r9d
xor r8d, r8d
cmp bpl, 0xfd
xor edx, edx
test r9b, 0xa6
stc
sub ecx, ecx
jmp 0x140007953
call qword [sym.imp.USER32.dll_DefWindowProcW]
lea rcx, [rsp + 0x50]
jmp 0x140007963
mov dword [rsp + 0x50], 8
jmp 0x140007970
mov dword [rsp + 0x54], 0xc0ff
jmp 0x14000797d
call qword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
xor ecx, ecx
jmp 0x14000798a
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
movabs r13, 0x397bf255dd8bb705
not r8b
cdq
lea r8, [rsp + 0x20]
mov rdi, rax
cdq
mov qword [rsp + 0x50], r13
bswap ecx
cqo
cdq
movabs rax, 0x3929f205ddc2b75f
mov edx, 0x68
movsx rcx, r8w
jmp 0x1400079cc
mov qword [rsp + 0x20], rax
mov cl, r9b
jmp 0x1400079dd
mov rcx, rdi
setno al
movabs rax, 0xf85868f89b51a44f
jmp 0x1400079f2
mov qword [rsp + 0x28], rax
movabs rax, 0xf85868f89b02a40a
movdqa xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x58], rax
jmp 0x140007a11
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x20], xmm0
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r14, rax
jmp 0x140007a2b
test rax, rax
jmp 0x140007a33
je 0x140007a76
mov rdx, rax
movsx cx, r11b
jmp 0x140007a49
mov rcx, rdi
jmp 0x140007a51
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rsi, rax
test rax, rax
jmp 0x140007a62
jne 0x140007bc8
mov rcx, r14
jmp 0x140007a70
call qword [sym.imp.KERNEL32.dll_FreeResource]
movabs rax, 0x604aa1438440e518
cqo
mov qword [rsp + 0x50], r13
movsx dx, r10b
cmovno cx, si
movsx rcx, di
mov qword [rsp + 0x20], rax
lea rdx, [rsp + 0x20]
movabs rax, 0x6995e30f9b22292f
movzx ecx, dx
movsxd rcx, esp
movsx rcx, r11w
movabs rcx, 0xf85868f89b02a40a
mov qword [rsp + 0x28], rax
sete al
movzx eax, r9w
movabs rax, 0x9749c2d22a27a3e7
jmp 0x140007ad7
movdqa xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], rax
movsxd rax, r11d
cwde
movabs rax, 0xf4d1b27a1879d784
mov qword [rsp + 0x58], rcx
pxor xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x68], rax
jmp 0x140007b0a
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm1, xmmword [rsp + 0x30]
lea r8, [0x1400030f0]
movsx rcx, r8w
test r12w, 0x594
bsr rcx, r15
movabs rcx, 0x97494daf642cc657
xor r9d, r9d
cmc
mov qword [rsp + 0x60], rcx
xor ecx, ecx
jmp 0x140007b45
pxor xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x30], xmm1
call qword [sym.imp.USER32.dll_MessageBoxW]
lea r11, [rsp + 0x290]
btr r14, r15
shl r13w, 0
sub bl, r10b
xor eax, eax
movsx r12d, r12w
movzx di, al
movsxd r13, ebp
mov rbx, qword [r11 + 0x30]
mov r12b, 0x8e
movzx rdi, bx
mov rsi, qword [r11 + 0x38]
xchg r13w, r13w
movsxd r12, ebp
mov rdi, qword [r11 + 0x40]
jmp 0x140007b9f
mov rsp, r11
movzx r12d, r14w
movsx r15d, r8w
setge r13b
pop r15
pop r14
pop r13
mov r12w, 0x6a70
bswap r12d
pop r12
not rbp
pop rbp
jmp 0x140007bc7
ret
mov rdx, r14
mov rcx, rdi
jmp 0x140007bd3
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r12d, eax
clc
jmp 0x140007be3
test eax, eax
je 0x140007a76
mov r9d, 4
btr dx, 0xbd
inc dh
clc
mov r8d, 0x1000
btc dx, 0x77
adc r15b, r14b
xor r15, rcx
mov edx, r12d
adc r15b, dl
sbb r15b, 0x29
rcl r15w, 0xc7
xor ecx, ecx
movsx r15, r11w
mov r15d, 0xe793ccb
mov r15d, r12d
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rbx, rax
test r15b, cl
test r9b, 1
jmp 0x140007c3d
test rax, rax
je 0x140007a76
mov rcx, rsi
jmp 0x140007c4e
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rbx
movzx ecx, dx
movzx cx, r12b
mov ecx, r12d
mov rsi, 0x754d4c81
cmovl si, bx
movsx rsi, bx
mov rsi, rax
jmp 0x140007c79
rep movsb byte [rdi], byte [rsi]
mov rcx, r14
jmp 0x140007c83
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov r13d, 0x5a4d
clc
cmp word [rbx], r13w
jmp 0x140007c99
je 0x140007fba
mov r9d, 4
btc edx, edx
ror r8b, cl
mov r8d, 0x1000
mov edx, r12d
cmp r8w, di
xor ecx, ecx
jmp 0x140007cbf
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov r14, rax
test r12w, 0x6ec7
stc
test rax, rax
jmp 0x140007cd7
je 0x140007f9e
mov dword [rsp + 0x20], 0xe7f10134
bts si, r12w
movsx cx, r10b
lea rcx, [rbp - 0x70]
adc si, ax
mov dword [rsp + 0x24], 0x983e7a39
movsxd rsi, edx
xor eax, eax
movzx si, sil
not sil
mov dword [rsp + 0x28], 0xa1c3f0f5
movzx si, dl
mov esi, 0x100
jmp 0x140007d21
mov byte [rsp + 0x2c], 0x3c
jmp 0x140007d2b
nop
mov byte [rcx], al
jmp 0x140007d34
lea rcx, [rcx + 1]
jmp 0x140007d3d
inc eax
cmp eax, esi
jmp 0x140007d46
jb 0x140007d2d
sub edi, edi
ror dx, cl
sub ah, 0xc6
bt rcx, rbx
lea r8, [rbp + 0x90]
nop word [rax + rax]
shld ax, r10w, 0x88
mov ecx, edi
lea r8, [r8 + 1]
mov eax, 0x4ec4ec4f
rcl dh, cl
neg dx
sub dx, 0x74f2
mul edi
jmp 0x140007d8c
inc edi
btr ax, r14w
shr edx, 2
rcr rax, 0x29
btr ax, bx
imul eax, edx, 0xd
cmc
jmp 0x140007da7
sub ecx, eax
movzx ecx, byte [rsp + rcx + 0x20]
cmp r13b, r10b
cmp r9w, 0x198d
mov byte [r8 - 1], cl
cmp dl, spl
cmp edi, esi
jmp 0x140007dc5
jb 0x140007d70
xor r8d, r8d
cmove dx, r14w
sub edi, edi
nop dword [rax]
add dx, 0x5fac
and cl, dil
movzx rax, si
movzx edx, byte [rbp + rdi - 0x70]
lahf
movzx ecx, byte [rbp + rdi + 0x90]
jmp 0x140007dfb
lea rdi, [rdi + 1]
add ecx, r8d
add ax, 0x1de8
add ecx, edx
bt ax, 0x8f
adc r8w, 0x1018
movzx r8d, cl
inc ecx
lea rcx, [rbp - 0x70]
movzx rax, r15w
rcl ax, 0x62
movzx eax, byte [rcx + r8]
mov byte [rbp + rdi - 0x71], al
cmp r13b, 0x36
test dil, spl
mov byte [rcx + r8], dl
clc
stc
test r9b, dl
sub rsi, 1
jmp 0x140007e47
jne 0x140007de8
sub r9d, r9d
clc
cmp si, 0x711b
test r14w, r9w
sub r10d, r10d
clc
test r12d, r12d
jmp 0x140007e66
je 0x140007f54
mov rsi, r14
cwde
bt edi, r15d
xor rax, rsi
mov r8, rbx
cdq
sar rcx, 4
shr dl, 0x7c
nop dword [rax]
cmc
nop word [rax + rax]
shld cx, r10w, 0x9a
cqo
lea eax, [r9 + 1]
movzx r9d, al
adc dh, 0x29
lea rdi, [rbp - 0x70]
xadd eax, ecx
bt ax, 0x2f
lea rcx, [rbp - 0x70]
clc
rcl dh, cl
setne al
lea rsi, [rsi + 1]
and al, r10b
test r10d, 0x2a8b0a93
add dl, r12b
lea r8, [r8 + 1]
xadd rax, rdx
movzx edx, byte [rdi + r9]
movsx rax, si
ror al, 0x55
lea eax, [r10 + rdx]
rcl r10w, 0x7f
movzx r10d, al
inc al
btc ax, r12w
movzx eax, byte [rcx + r10]
clc
jmp 0x140007efe
mov byte [rdi + r9], al
movsxd rax, edx
sbb eax, 0x622d3f86
mov byte [rcx + r10], dl
test bpl, 0x32
adc cl, r11b
movzx ecx, byte [rdi + r9]
cmp r13d, 0x236f1f16
adc ax, bp
add rcx, rdx
cmc
movzx eax, cl
sal cx, 0x97
shl ch, 0x57
btc cx, r8w
movzx ecx, byte [rbp + rax - 0x70]
xor cl, byte [r8 - 1]
cmc
clc
mov byte [rsi - 1], cl
sub r15, 1
jmp 0x140007f4e
jne 0x140007e99
sub edx, edx
shl r8w, 0x43
cmc
inc r8w
mov r8d, 0x8000
cmp word [r14], r13w
jmp 0x140007f6f
jne 0x140007f90
mov rcx, rbx
jmp 0x140007f7d
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov rbx, r14
jmp 0x140007f8b
jmp 0x140007fba
mov rcx, r14
jmp 0x140007f98
call qword [sym.imp.KERNEL32.dll_VirtualFree]
mov r8d, 0x8000
sar rcx, cl
xor edx, edx
setp cl
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_VirtualFree]
sub ebx, ebx
test r9b, r13b
mov qword [rbp - 0x78], rbx
cmc
clc
test rbx, rbx
jmp 0x140007fc8
jne 0x1400080dc
movabs rdx, 0x5f5cf9741afa929e
movabs rax, 0x604aa1438440e518
not cx
mov cl, 0xdd
movsx rcx, bx
mov qword [rsp + 0x20], rax
movabs rcx, 0xf85868f89b02a40a
mov qword [rsp + 0x48], rdx
cmovae ax, r14w
movabs rax, 0xa92be30f9b22292f
mov qword [rsp + 0x28], rax
cdqe
movsxd rax, eax
movabs rax, 0x684267d036c53ba
movdqa xmm0, xmmword [rsp + 0x20]
mov qword [rsp + 0x30], rax
movabs rax, 0x7f04e3f74c7783ab
jmp 0x14000803c
mov qword [rsp + 0x38], rax
movabs rax, 0xc242dac1dc90938d
jmp 0x140008050
mov qword [rsp + 0x40], rax
movabs rax, 0x397bf255dd8bb705
jmp 0x140008064
mov qword [rsp + 0x50], rax
movabs rax, 0xf4d1b27a1879d784
jmp 0x140008078
mov qword [rsp + 0x78], rdx
movsx edx, r8w
xchg dl, dl
lea rdx, [rsp + 0x20]
jmp 0x14000808d
mov qword [rsp + 0x58], rcx
jmp 0x140008097
pxor xmm0, xmmword [rsp + 0x50]
movdqa xmmword [rsp + 0x20], xmm0
movdqa xmm0, xmmword [rsp + 0x40]
mov qword [rsp + 0x68], rax
cmovbe ax, si
movabs rax, 0xc242dac1dc9093b9
jmp 0x1400080c1
mov qword [rsp + 0x70], rax
jmp 0x1400080cb
pxor xmm0, xmmword [rsp + 0x70]
movdqa xmmword [rsp + 0x40], xmm0
jmp 0x140007b10
lea rdx, [rbp - 0x78]
lea rcx, [rsp + 0x50]
jmp 0x1400080ea
call fcn.140002240
mov rcx, qword [rbp - 0x78]
movsxd rdx, ecx
cqo
movzx dx, r12b
lea rdx, [rbp - 0x80]
jmp 0x140008106
mov dword [rbp - 0x80], 0
jmp 0x140008112
call fcn.1400071d8
test rax, rax
jmp 0x14000811f
jne 0x140008220
movabs rax, 0x778d97d2819ac83f
test sil, spl
lea r8, [0x1400030f0]
mov qword [rsp + 0x20], rax
rol rcx, cl
lea rdx, [rsp + 0x20]
stc
movabs rax, 0x772526f310f5a42a
movabs rcx, 0xf85868f89b02a40a
mov qword [rsp + 0x28], rax
test r9b, 4
xor r9d, r9d
jmp 0x14000816c
movdqa xmm0, xmmword [rsp + 0x20]
movabs rax, 0x1eaa3fe7019ca157
jmp 0x140008181
mov qword [rsp + 0x30], rax
movzx eax, r14w
movabs rax, 0xf4d1e31243f5840f
jmp 0x140008199
mov qword [rsp + 0x38], rax
not ah
movzx rax, r14w
cwde
movabs rax, 0x397bf255dd8bb705
jmp 0x1400081b4
movdqa xmm1, xmmword [rsp + 0x30]
mov qword [rsp + 0x58], rcx
movabs rcx, 0x97494daf642cc657
jmp 0x1400081ce
mov qword [rsp + 0x50], rax
cmovl ax, si
movabs rax, 0xf4d1b27a1879d784
jmp 0x1400081e6
pxor xmm0, xmmword [rsp + 0x50]
mov qword [rsp + 0x60], rcx
test ebp, 0xc3c1d93
jmp 0x1400081fc
xor ecx, ecx
mov qword [rsp + 0x68], rax
jmp 0x140008208
pxor xmm1, xmmword [rsp + 0x60]
movdqa xmmword [rsp + 0x30], xmm1
movdqa xmmword [rsp + 0x20], xmm0
call qword [sym.imp.USER32.dll_MessageBoxW]
xor ecx, ecx
jmp 0x140008227
call qword [sym.imp.KERNEL32.dll_ExitProcess]