Function at 0x140003ab0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
sub rsp, 0x48
xor eax, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
mov edx, 0x68
lea r8, [0x140009770]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x140003b13
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_find_resource.
call fcn.140003d00
mov rcx, rax
lea rdx, [0x140004070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003cf6
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x140003b5c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_load_resource.
call fcn.140003d00
mov rcx, rax
lea rdx, [0x140004070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003cf6
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x140003ba0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_lock_resource.
call fcn.140003d00
mov rcx, rax
lea rdx, [0x140004070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003cf6
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [0x14000b178], eax
cmp dword [0x14000b178], 0
jne 0x140003beb
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_get_resource_size.
call fcn.140003d00
mov rcx, rax
lea rdx, [0x140004070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003cf6
movsxd rcx, dword [0x14000b178]
call fcn.1400043d8
mov qword [0x14000b168], rax
movsxd rcx, dword [0x14000b178]
call fcn.1400043d8
mov qword [0x14000b160], rax
cmp qword [0x14000b168], 0
jne 0x140003c47
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_allocate_memory.
call fcn.140003d00
mov rcx, rax
lea rdx, [0x140004070]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x140003cf6
mov rcx, qword [0x14000b168]
mov rdx, qword [rsp + 0x28]
movsxd r8, dword [0x14000b178]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [0x14000b168]
movsxd rcx, dword [0x14000b178]
mov rdx, qword [rax + rcx - 0x10]
mov qword [0x14000b180], rdx
mov rax, qword [rax + rcx - 8]
mov qword [0x14000b188], rax
mov rax, qword [0x14000b168]
movsxd rcx, dword [0x14000b178]
mov rdx, qword [rax + rcx - 0x10]
mov qword [0x14000b190], rdx
mov rax, qword [rax + rcx - 8]
mov qword [0x14000b198], rax
mov r8d, dword [0x14000b178]
sub r8d, 0x10
mov rdx, qword [0x14000b160]
mov rcx, qword [0x14000b168]
call fcn.140003930
mov rcx, qword [0x14000b168]
movsxd r8, dword [0x14000b178]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x14000b168]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x14000b168], 0
add rsp, 0x48
ret