Function at 0x1400fb250
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x480
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov rax, qword [0x1402ba4e0]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov r14, r9
mov r13, r8
mov r12, rdx
xor ebx, ebx
mov qword [rbp], rbx
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x20], rbx
mov qword [rbp + 0x40], rbx
test rdx, rdx
je 0x1400fb4c3
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
movsxd rdi, eax
add rdi, rdi
mov eax, 0x80000000
add rax, rdi
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x1400fb4c3
cmp edi, 0x400
jg 0x1400fb308
movsxd rsi, edi
mov rcx, rsi
call fcn.1400045f0
test al, al
je 0x1400fb308
lea rax, [rsi + 0xf]
cmp rax, rsi
ja 0x1400fb2f5
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.14010d1a0
sub rsp, rax
lea rcx, [rsp + 0x20]
jmp 0x1400fb33d
movsxd rcx, edi
or rax, 0xffffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x1400fb4b8
add rcx, 0x10
call fcn.14010cd34
test rax, rax
jne 0x1400fb32f
mov rcx, rbx
jmp 0x1400fb33d
mov qword [rax], rbx
mov rbx, rax
mov qword [rbp], rax
lea rcx, [rax + 0x10]
mov r9d, 3
mov r8d, edi
mov rdx, r12
call fcn.1400ed7d0
test rax, rax
je 0x1400fb4c3
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rsi, rax
mov qword [rbp + 0x18], rax
test rax, rax
jne 0x1400fb37e
call fcn.1400ed9b0
mov edi, eax
jmp 0x1400fb479
mov r8, r14
mov rdx, r13
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
test rax, rax
jne 0x1400fb39f
call fcn.1400ed9b0
jmp 0x1400fb46d
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r12, rax
mov qword [rbp + 0x10], rax
test rax, rax
jne 0x1400fb3c1
call fcn.1400ed9b0
jmp 0x1400fb46d
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov dword [rbp + 8], edi
lea eax, [rdi + 1]
cmp eax, edi
jae 0x1400fb3e3
mov edi, 0x8007000e
jmp 0x1400fb46f
mov ecx, eax
test eax, eax
je 0x1400fb419
xor edx, edx
or rax, 0xffffffffffffffff
div rcx
cmp rax, 1
jae 0x1400fb402
mov ecx, 0x80070216
call fcn.140003e90
cmp rcx, 0x400
jbe 0x1400fb419
mov rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.1400eea10
jmp 0x1400fb421
lea rax, [rbp + 0x48]
mov qword [rbp + 0x40], rax
jmp 0x1400fb432
mov rcx, qword [rbp + 0x40]
test rcx, rcx
jne 0x1400fb442
mov edi, 0x8007000e
jmp 0x1400fb46f
mov r9, rdi
mov r8, r12
mov rdx, rdi
call fcn.1400e79d0
mov r11, qword [rbp + 0x40]
mov byte [rdi + r11], 0
mov r8d, dword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.1400f1d40
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x1400fb48d
lea rcx, [rbp + 0x40]
call fcn.1400ee9e0
nop
test rbx, rbx
je 0x1400fb4b4
nop word [rax + rax]
mov rcx, rbx
mov rbx, qword [rbx]
mov qword [rbp], rbx
call fcn.14010cdec
test rbx, rbx
jne 0x1400fb4a0
mov eax, edi
jmp 0x1400fb4f9
mov ecx, 0x80070216
call fcn.140003e90
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x1400fb4d7
lea rcx, [rbp + 0x40]
call fcn.1400ee9e0
nop
test rbx, rbx
je 0x1400fb4f4
nop dword [rax]
mov rcx, rbx
mov rbx, qword [rbx]
mov qword [rbp], rbx
call fcn.14010cdec
test rbx, rbx
jne 0x1400fb4e0
mov eax, 0x8007000e
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.14010d170
lea rsp, [rbp + 0x460]
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret