Function at 0x140014b90
Capabilities:
Extract resource via kernel32 functions

Disassembly:
jmp 0x140014b90
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4a0
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov qword [rbp + 0x4a0], rbx
mov rax, qword [0x1402cf318]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov r15, r9
mov r14, r8
mov r13, rdx
xor edi, edi
mov rbx, rdi
mov qword [rbp], rbx
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x20], rdi
mov qword [rbp + 0x40], rdi
test rdx, rdx
je 0x140014e63
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, 1
movsxd rsi, eax
add rsi, rsi
mov eax, 0x80000000
add rax, rsi
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x140014cbd
cmp esi, 0x400
jg 0x140014c55
movsxd r12, esi
mov rcx, r12
call fcn.140001e5b
test al, al
je 0x140014c55
lea rax, [r12 + 0xf]
cmp rax, r12
ja 0x140014c42
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.140232ee0
sub rsp, rax
lea r12, [rsp + 0x40]
jmp 0x140014c85
movsxd rcx, esi
or rax, 0xffffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x140014e58
add rcx, 0x10
call fcn.1401a5278
test rax, rax
je 0x140014cbd
mov qword [rax], rdi
mov rbx, rax
mov qword [rbp], rax
lea r12, [rax + 0x10]
test r12, r12
je 0x140014cbd
mov byte [r12], 0
mov qword [rsp + 0x38], rdi
mov qword [rsp + 0x30], rdi
mov dword [rsp + 0x28], esi
mov qword [rsp + 0x20], r12
or r9d, 0xffffffff
mov r8, r13
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
test eax, eax
cmove r12, rdi
mov rdi, r12
test rdi, rdi
je 0x140014e63
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rsi, rax
mov qword [rbp + 0x18], rax
test rax, rax
jne 0x140014ced
call fcn.1400011db
mov edi, eax
jmp 0x140014e24
mov r8, r15
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
test rax, rax
jne 0x140014d10
call fcn.1400011db
mov edi, eax
jmp 0x140014e1a
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r12, rax
mov qword [rbp + 0x10], rax
test rax, rax
jne 0x140014d34
call fcn.1400011db
mov edi, eax
jmp 0x140014e1a
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov dword [rbp + 8], edi
lea eax, [rdi + 1]
cmp eax, edi
jae 0x140014d8e
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x140014d60
lea rcx, [rbp + 0x40]
call fcn.1400025a9
nop
test rbx, rbx
je 0x140014d84
nop
nop
nop
mov rcx, rbx
mov rbx, qword [rbx]
mov qword [rbp], rbx
call fcn.1401a5330
test rbx, rbx
jne 0x140014d70
mov eax, 0x8007000e
jmp 0x140014e99
mov ecx, eax
test eax, eax
je 0x140014dc4
xor edx, edx
or rax, 0xffffffffffffffff
div rcx
cmp rax, 1
jae 0x140014dad
mov ecx, 0x80070057
call fcn.140001e6a
cmp rcx, 0x400
jbe 0x140014dc4
mov rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.1400018a2
jmp 0x140014dcc
lea rax, [rbp + 0x48]
mov qword [rbp + 0x40], rax
jmp 0x140014ddd
mov rcx, qword [rbp + 0x40]
test rcx, rcx
jne 0x140014ded
mov edi, 0x8007000e
jmp 0x140014e1a
mov r9, rdi
mov r8, r12
mov rdx, rdi
call fcn.14000222a
mov r11, qword [rbp + 0x40]
mov byte [rdi + r11], 0
mov r8d, dword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.140001e2e
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x140014e38
lea rcx, [rbp + 0x40]
call fcn.1400025a9
nop
test rbx, rbx
je 0x140014e54
nop
mov rcx, rbx
mov rbx, qword [rbx]
mov qword [rbp], rbx
call fcn.1401a5330
test rbx, rbx
jne 0x140014e40
mov eax, edi
jmp 0x140014e99
mov ecx, 0x80070057
call fcn.140001e6a
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x140014e77
lea rcx, [rbp + 0x40]
call fcn.1400025a9
nop
test rbx, rbx
je 0x140014e94
nop
mov rcx, rbx
mov rbx, qword [rbx]
mov qword [rbp], rbx
call fcn.1401a5330
test rbx, rbx
jne 0x140014e80
mov eax, 0x8007000e
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.1401a5800
mov rbx, qword [rbp + 0x4a0]
lea rsp, [rbp + 0x460]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret