Function at 0x14007db70
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
xor edi, edi
mov rbp, r8
mov rbx, rdx
mov rsi, rcx
cmp qword [0x14013ce50], rdi
jne 0x14007dbb6
xor edx, edx
xor ecx, ecx
call fcn.14001f1d4
cmp rax, rdi
jne 0x14007dbb6
or eax, 0xffffffff
jmp 0x14007ddd8
lea r12, [rsi + 0x18]
mov dword [rsi + 0x1c], edi
mov dword [r12], edi
cmp rbp, rdi
je 0x14007dbcb
mov eax, dword [rbp]
jmp 0x14007dbcd
mov eax, edi
cmp rbx, rdi
mov ecx, 0x64
mov dword [rsi + 0x28], edi
cmove rbx, rcx
mov dword [rsi + 0x2c], edi
mov dword [rsi + 0x30], edi
cmp rbx, 0x10000
mov dword [rsi + 0x34], edi
jge 0x14007dc35
mov rbp, qword [0x14013cf70]
lea r8, str.IMAGE
movzx edx, bx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r13, rax
cmp rax, rdi
je 0x14007dbae
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
cmp rbx, 8
jb 0x14007dbae
mov rdx, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
jmp 0x14007dc3f
cmp eax, edi
je 0x14007dc5e
mov rcx, qword [rbx]
movsxd rbx, eax
cmp rcx, rdi
je 0x14007dbae
lea r8, [rsi + 0x40]
mov rdx, rbx
lea rbp, [rsi + 0x38]
call fcn.140061e98
mov qword [rbp], rax
jmp 0x14007dc6e
lea rbp, [rsi + 0x38]
mov rcx, rbx
mov rdx, rbp
call qword [0x14013cda0]
cmp qword [rbp], rdi
jne 0x14007dc7e
mov eax, 0xfffffffe
jmp 0x14007ddd8
mov rcx, qword [rbp]
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], edi
call qword [0x14013cdc8]
mov edx, dword [rsp + 0x20]
lea rcx, [rsp + 0x28]
shl rdx, 4
call fcn.1400633a8
mov r8d, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rbp]
call qword [0x14013cda8]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rbp]
mov r8, r12
call qword [0x14013cdd0]
cmp dword [r12], 1
ja 0x14007dcd8
or ebx, 0xffffffff
jmp 0x14007ddcc
mov rcx, qword [rbp]
mov r13d, 0x5100
lea r8, [rsp + 0x88]
mov edx, r13d
mov dword [rsp + 0x88], edi
call qword [0x14013cdd8]
movsxd rdx, dword [rsp + 0x88]
lea rcx, [rsp + 0x30]
call fcn.1400633a8
mov rbx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x88]
mov rcx, qword [rbp]
mov r9, rbx
mov edx, r13d
call qword [0x14013cde0]
mov r15d, dword [rsp + 0x88]
movsxd rcx, dword [r12]
lea r13, [rsi + 8]
sub r15, 0x18
mov r9d, 4
mov r8, r13
mov rdx, rsi
shr r15, 2
call fcn.140063b00
mov ebp, edi
cmp r15d, edi
jbe 0x14007ddb8
mov ebp, r15d
mov r13, rdi
mov r14, rdi
mov r15d, r15d
mov rax, qword [rbx + 0x10]
lea r8, [rsi + 8]
mov r9d, 4
mov ecx, dword [r14 + rax]
mov rdx, rsi
lea eax, [rcx + rcx*4]
mov rcx, r13
lea edi, [rax + rax]
call fcn.140063b00
inc r13
add r14, 4
sub r15, 1
mov dword [rax], edi
jne 0x14007dd65
lea r12, [rsi + 0x18]
lea r13, [rsi + 8]
jmp 0x14007ddb8
mov ecx, ebp
mov r9d, 4
mov r8, r13
mov rdx, rsi
call fcn.140063b00
inc ebp
mov dword [rax], edi
cmp ebp, dword [r12]
jb 0x14007dda1
mov ebx, dword [r12]
lea rcx, [rsp + 0x30]
call fcn.14005b104
lea rcx, [rsp + 0x28]
call fcn.14005b104
mov eax, ebx
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret