Function at 0x14003c2c4
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push r12
push r14
push r15
sub rsp, 0x40
mov r12, r9
mov rdi, r8
mov rbp, rdx
mov esi, ecx
test ecx, ecx
je 0x14003c574
test esi, 0xffff0000
jne 0x14003c574
test r8, r8
je 0x14003c574
test rdx, rdx
je 0x14003c574
test r9, r9
je 0x14003c574
mov r14, qword [rsp + 0x80]
test r14, r14
je 0x14003c574
and qword [rax - 0x28], 0
mov rdx, r8
lea rcx, [rax - 0x28]
call fcn.14003a758
mov ebx, eax
test eax, eax
js 0x14003c52c
xor r8d, r8d
xor edx, edx
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_LoadLibraryExW]
mov rbx, rax
test rax, rax
jne 0x14003c3a6
call fcn.140035408
mov ebx, eax
lea rdx, [0x140063230]
mov rcx, qword [0x140063230]
cmp rcx, rdx
je 0x14003c52c
test byte [rcx + 0x1c], 1
je 0x14003c52c
mov edx, VariantTimeToDosDateTime
mov dword [rsp + 0x20], eax
mov r9, rdi
lea r8, [0x140056e30]
mov rcx, qword [rcx + 0x10]
call fcn.140027694
jmp 0x14003c52c
movzx edx, si
mov r8, rbp
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbp, rax
test rax, rax
jne 0x14003c3fe
call fcn.140035408
mov ebp, eax
lea rdx, [0x140063230]
mov rcx, qword [0x140063230]
cmp rcx, rdx
je 0x14003c3ee
test byte [rcx + 0x1c], 1
je 0x14003c3ee
mov qword [rsp + 0x20], rdi
mov r9d, esi
mov rcx, qword [rcx + 0x10]
call fcn.14003cdc4
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
mov ebx, ebp
jmp 0x14003c52c
mov rdx, rbp
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x14003c44d
call fcn.140035408
mov ebp, eax
lea rdx, [0x140063230]
mov rcx, qword [0x140063230]
cmp rcx, rdx
je 0x14003c3ee
test byte [rcx + 0x1c], 1
je 0x14003c3ee
mov edx, 0xd
mov dword [rsp + 0x20], esi
mov r9, rdi
lea r8, [0x140056e30]
mov rcx, qword [rcx + 0x10]
call fcn.140027694
jmp 0x14003c3ee
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r15, rax
test rax, rax
jne 0x14003c48c
call fcn.140035408
mov ebp, eax
lea rdx, [0x140063230]
mov rcx, qword [0x140063230]
cmp rcx, rdx
je 0x14003c3ee
test byte [rcx + 0x1c], 1
je 0x14003c3ee
lea edx, [r15 + 0xe]
jmp 0x14003c434
mov rdx, rbp
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
jne 0x14003c4ce
call fcn.140035408
mov ebp, eax
lea rdx, [0x140063230]
mov rcx, qword [0x140063230]
cmp rcx, rdx
je 0x14003c3ee
test byte [rcx + 0x1c], 1
je 0x14003c3ee
mov edx, 0xf
jmp 0x14003c434
mov esi, eax
mov rbp, qword [r14]
add rbp, rsi
lea rdx, [0x1400569e0]
mov rcx, rbp
call fcn.140024d00
mov rdi, rax
test rax, rax
jne 0x14003c53a
mov edi, 0x8007000e
lea rdx, [0x140063230]
mov rcx, qword [0x140063230]
cmp rcx, rdx
je 0x14003c521
test byte [rcx + 0x1c], 1
je 0x14003c521
lea edx, [rax + 0x10]
mov r9d, edi
lea r8, [0x140056e30]
mov rcx, qword [rcx + 0x10]
call fcn.140025858
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
mov ebx, edi
lea rcx, [rsp + 0x30]
call fcn.14003a494
mov eax, ebx
jmp 0x14003c579
mov r8, rsi
mov rdx, r15
mov rcx, rdi
call fcn.140016d80
lea rcx, [rsi + rdi]
mov r8, qword [r14]
xor edx, edx
call fcn.140017430
mov qword [r14], rbp
mov qword [r12], rdi
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_2_0.dll_FreeLibrary]
lea rcx, [rsp + 0x30]
call fcn.14003a494
xor eax, eax
jmp 0x14003c579
mov eax, 0x80070057
mov rbx, qword [rsp + 0x60]
mov rbp, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x70]
mov rdi, qword [rsp + 0x78]
add rsp, 0x40
pop r15
pop r14
pop r12
ret