Function at 0x1401e5100
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x70
xor r12d, r12d
mov r13, rdx
mov rdi, rcx
test rdx, rdx
je 0x1401e5682
cmp qword [rdx + 8], r12
je 0x1401e5682
cmp qword [rcx + 0x18], r12
jne 0x1401e5682
mov rax, qword [rdi + 0x30]
mov ecx, r12d
mov qword [rbp - 0x30], rcx
mov ebx, r12d
mov qword [rbp - 0x20], r12
mov qword [rbp - 0x28], r12
mov qword [rbp - 0x18], r12
mov qword [rbp - 0x10], r12
mov qword [rbp + 0x58], r12
cmp dword [rax - 0x10], r12d
je 0x1401e51cf
lea rdx, [0x1401e5940]
lea rcx, [0x140412420]
call fcn.140207240
mov rbx, rax
test rax, rax
je 0x1401e56a5
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401e60bc
mov rcx, qword [rbx + 0x28]
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x28], rdx
mov r9d, 0x80000000
mov rdx, qword [rdi + 0x30]
xor r8d, r8d
mov dword [rsp + 0x20], 1
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
jns 0x1401e53c6
jmp 0x1401e5687
cmp dword [rdi + 0x20], r12d
je 0x1401e5346
movzx ebx, word [rdi + 0x20]
mov r14, r12
call fcn.1401bf5e4
cmp qword [rdi + 0x28], r14
lea r8, [0x14037f3c8]
mov edx, ebx
cmovne r8, qword [rdi + 0x28]
mov r12, qword [rax + 0x18]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r15, rax
mov esi, 0x80004005
neg rax
sbb ebx, ebx
not ebx
and ebx, esi
test r15, r15
je 0x1401e5235
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
mov r14, rax
neg rcx
sbb ebx, ebx
not ebx
and ebx, esi
test ebx, ebx
js 0x1401e53c3
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r14, rax
neg rax
sbb ebx, ebx
not ebx
and ebx, esi
test r14, r14
je 0x1401e53c3
mov rdx, r15
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r15d, eax
neg eax
sbb ebx, ebx
xor r12d, r12d
not ebx
and ebx, esi
test r15d, r15d
je 0x1401e53c6
lea rdx, [0x1401e5940]
lea rcx, [0x140412420]
call fcn.140207240
mov rbx, rax
test rax, rax
je 0x1401e56a5
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401e60bc
mov rcx, qword [rbx + 0x28]
lea rdx, [rbp - 0x18]
mov rax, qword [rcx]
mov rax, qword [rax + 0x70]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e53c6
mov rcx, qword [rbp - 0x18]
mov r8d, r15d
mov rdx, r14
mov rax, qword [rcx]
mov rax, qword [rax + 0x80]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e53c6
lea rdx, [0x1401e5940]
lea rcx, [0x140412420]
call fcn.140207240
mov rbx, rax
test rax, rax
je 0x1401e56a5
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401e60bc
mov rcx, qword [rbx + 0x28]
lea rdx, [rbp - 0x30]
mov qword [rsp + 0x20], rdx
lea r9d, [r12 + 1]
mov rdx, qword [rbp - 0x18]
xor r8d, r8d
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x14001d845.0]
mov ebx, eax
jmp 0x1401e53c6
cmp qword [rdi + 0x40], r12
je 0x1401e53ca
lea rdx, [0x1401e5940]
lea rcx, [0x140412420]
call fcn.140207240
mov rbx, rax
test rax, rax
je 0x1401e56a5
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401e60bc
mov rcx, qword [rbx + 0x28]
lea rdx, [rbp + 0x58]
mov qword [rsp + 0x20], rdx
xor r9d, r9d
mov rdx, qword [rdi + 0x40]
xor r8d, r8d
mov rax, qword [rcx]
mov rax, qword [rax + 0xa8]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e53c6
mov rcx, qword [r13 + 8]
lea r9, [rdi + 0x18]
mov rdx, qword [rbp + 0x58]
xor r8d, r8d
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [case.0x14001d845.0]
jmp 0x1401e53c6
xor r12d, r12d
mov rcx, qword [rbp - 0x30]
cmp qword [rdi + 0x18], r12
jne 0x1401e55bf
test ebx, ebx
js 0x1401e55bf
test rcx, rcx
je 0x1401e5406
mov rax, qword [rcx]
lea r8, [rbp - 0x20]
xor edx, edx
mov rax, qword [rax + 0x68]
call qword [case.0x14001d845.0]
mov ebx, eax
mov rax, qword [rbp - 0x20]
mov qword [rbp + 0x58], rax
test ebx, ebx
js 0x1401e55bb
lea rdx, [0x1401e5940]
lea rcx, [0x140412420]
call fcn.140207240
mov rbx, rax
test rax, rax
je 0x1401e56a5
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401e60bc
mov rcx, qword [rbx + 0x28]
lea rdx, [rbp - 0x28]
mov rax, qword [rcx]
mov rax, qword [rax + 0x50]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e55bb
mov r14d, dword [rdi + 0x38]
mov esi, dword [rdi + 0x3c]
test r14d, r14d
jne 0x1401e546a
test esi, esi
jne 0x1401e546a
mov rdx, qword [rbp + 0x58]
jmp 0x1401e5566
mov rcx, qword [rbp + 0x58]
lea r8, [rbp + 0x50]
lea rdx, [rbp + 0x48]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e55bb
test r14d, r14d
jne 0x1401e54bf
mov eax, dword [rbp + 0x50]
xorps xmm2, xmm2
cvtsi2ss xmm2, rsi
xorps xmm0, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm0, rax
mov eax, dword [rbp + 0x48]
cvtsi2ss xmm1, rax
divss xmm2, xmm0
mulss xmm2, xmm1
cvttss2si r14, xmm2
jmp 0x1401e54ee
test esi, esi
jne 0x1401e54ee
mov eax, dword [rbp + 0x48]
xorps xmm2, xmm2
cvtsi2ss xmm2, r14
xorps xmm0, xmm0
xorps xmm1, xmm1
cvtsi2ss xmm0, rax
mov eax, dword [rbp + 0x50]
cvtsi2ss xmm1, rax
divss xmm2, xmm0
mulss xmm2, xmm1
cvttss2si rsi, xmm2
lea rdx, [0x1401e5940]
lea rcx, [0x140412420]
call fcn.140207240
mov rbx, rax
test rax, rax
je 0x1401e569f
xor r8d, r8d
xor edx, edx
mov rcx, rax
call fcn.1401e60bc
mov rcx, qword [rbx + 0x28]
lea rdx, [rbp - 0x10]
mov rax, qword [rcx]
mov rax, qword [rax + 0x58]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e55bb
mov rcx, qword [rbp - 0x10]
mov r9d, esi
mov rdx, qword [rbp + 0x58]
mov r8d, r14d
mov dword [rsp + 0x20], 2
mov rax, qword [rcx]
mov rax, qword [rax + 0x40]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e55bb
mov rdx, qword [rbp - 0x10]
mov rcx, qword [rbp - 0x28]
lea r8, [0x140303d00]
xorps xmm0, xmm0
mov dword [rsp + 0x30], 1
movsd qword [rsp + 0x28], xmm0
xor r9d, r9d
mov qword [rsp + 0x20], r12
mov rax, qword [rcx]
mov rax, qword [rax + 0x40]
call qword [case.0x14001d845.0]
mov ebx, eax
test eax, eax
js 0x1401e55bb
mov rcx, qword [r13 + 8]
lea r9, [rdi + 0x18]
mov rdx, qword [rbp - 0x28]
xor r8d, r8d
mov rax, qword [rcx]
mov rax, qword [rax + 0x28]
call qword [case.0x14001d845.0]
mov ebx, eax
mov rcx, qword [rbp - 0x30]
mov rax, qword [rbp - 0x20]
cmp qword [rbp + 0x58], rax
jne 0x1401e55cd
mov qword [rbp + 0x58], r12
test rcx, rcx
je 0x1401e55e3
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14001d845.0]
mov qword [rbp - 0x30], r12
mov rcx, qword [rbp - 0x20]
test rcx, rcx
je 0x1401e55fd
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14001d845.0]
mov qword [rbp - 0x20], r12
mov rcx, qword [rbp - 0x18]
test rcx, rcx
je 0x1401e5617
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14001d845.0]
mov qword [rbp - 0x18], r12
mov rcx, qword [rbp - 0x28]
test rcx, rcx
je 0x1401e5631
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14001d845.0]
mov qword [rbp - 0x28], r12
mov rcx, qword [rbp - 0x10]
test rcx, rcx
je 0x1401e564b
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14001d845.0]
mov qword [rbp - 0x10], r12
mov rcx, qword [rbp + 0x58]
test rcx, rcx
je 0x1401e5665
mov rax, qword [rcx]
mov rax, qword [rax + 0x10]
call qword [case.0x14001d845.0]
mov qword [rbp + 0x58], r12
cmp dword [rdi + 0x48], r12d
je 0x1401e567e
mov rcx, qword [rdi + 0x40]
test rcx, rcx
je 0x1401e567e
call qword [sym.imp.GDI32.dll_DeleteObject]
mov qword [rdi + 0x40], r12
mov eax, ebx
jmp 0x1401e5687
mov eax, 0x80004005
mov rbx, qword [rsp + 0xb0]
add rsp, 0x70
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.1401beac8
int3
call fcn.1401beac8
int3