Function at 0x14000e8ec
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov dword [rsp + 0x20], r9d
mov qword [rsp + 0x18], r8
mov qword [rsp + 8], rcx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x88
xor ebp, ebp
xor r15d, r15d
xor ebx, ebx
mov dword [rsp + 0xd8], ebp
xor r12d, r12d
mov qword [rsp + 0x58], r15
xor edi, edi
mov rsi, rdx
mov rcx, rdx
cmp rdx, 0x10000
jae 0x14000e9bb
lea r8, [rsp + 0x34]
lea rdx, str.IMAGE
call fcn.14000830c
mov qword [rsp + 0x58], rax
mov r15, rax
test rax, rax
jne 0x14000e974
mov edx, esi
lea rcx, str.IMAGE__d_Not_Found_in_Resource
call fcn.140008848
mov r14, qword [rsp + 0x50]
mov ebp, 0x714
jmp 0x14000ebeb
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r14, rax
mov qword [rsp + 0x50], rax
call fcn.14000e84c
mov rbx, rax
test rax, rax
je 0x14000ebeb
mov r8d, dword [rsp + 0x34]
mov rdx, r14
mov rcx, rax
call fcn.14000d568
test eax, eax
jns 0x14000e9da
lea rcx, str.PNG_DecodeFrame___Error
call fcn.140008848
jmp 0x14000ebeb
lea rdx, [rsp + 0x34]
call fcn.140007a44
mov qword [rsp + 0x50], rax
mov r14, rax
test rax, rax
jne 0x14000e985
lea ebp, [rax + 2]
jmp 0x14000ebeb
mov esi, dword [rbx + 0x4c]
mov eax, 8
mov ecx, dword [rbx + 0x2c]
cmp esi, eax
cmovl esi, eax
mov edx, esi
mov dword [rsp + 0x30], esi
call fcn.1400053f0
movsxd r13, eax
mov edx, 0x161
mov ecx, 0x428
mov dword [rsp + 0x40], r13d
call fcn.1400013f4
mov qword [rsp + 0x70], rax
mov rdi, rax
test rax, rax
je 0x14000ebeb
mov r12d, 0x28
xor edx, edx
mov r8d, r12d
mov rcx, rax
call sub.ntdll.dll_memset
mov dword [rdi], r12d
lea eax, [r12 - 0x27]
mov ecx, dword [rbx + 0x2c]
mov dword [rdi + 4], ecx
mov ecx, dword [rbx + 0x30]
mov word [rdi + 0xc], ax
mov eax, r13d
mov dword [rdi + 8], ecx
imul eax, dword [rbx + 0x30]
mov word [rdi + 0xe], si
mov dword [rdi + 0x14], eax
cmp dword [rbx + 0x4c], 8
jg 0x14000ea72
lea rdx, [rbx + 0xf0]
mov r8d, 0x400
lea rcx, [rdi + 0x28]
call sub.ntdll.dll_memcpy
and dword [rsp + 0x28], ebp
lea r9, [rsp + 0x60]
mov rcx, qword [rsp + 0xd0]
xor r8d, r8d
and qword [rsp + 0x20], rbp
mov rdx, rdi
call qword [sym.imp.GDI32.dll_CreateDIBSection]
mov qword [rsp + 0x38], rax
mov r12, rax
test rax, rax
je 0x14000ebeb
mov esi, dword [rbx + 0x30]
mov rax, qword [rsp + 0xe0]
mov r12, qword [rbx + 0xd0]
lea ecx, [rsi - 1]
imul ecx, r13d
movsxd rbp, ecx
add rbp, qword [rsp + 0x60]
test rax, rax
jne 0x14000eaf8
test esi, esi
je 0x14000ebdf
mov r8, r13
mov rdx, r12
mov rcx, rbp
call sub.ntdll.dll_memcpy
movsxd rax, dword [rbx + 0xd8]
sub rbp, r13
add r12, rax
sub esi, 1
jne 0x14000ead3
jmp 0x14000ebdf
lea rdx, [rsp + 0x48]
mov rcx, rax
call fcn.1400056bc
mov qword [rsp + 0x78], rax
mov r13, rax
test rax, rax
je 0x14000ebdf
cmp dword [rsp + 0x30], 0x20
jne 0x14000ebcb
cmp word [rax + 0xe], 0x18
jb 0x14000ebcb
movzx edx, word [rax + 0xe]
mov ecx, dword [r13 + 4]
mov eax, edx
shr eax, 3
mov dword [rsp + 0x30], eax
call fcn.1400053f0
mov edx, dword [r13 + 8]
sub edx, dword [rsp + 0xf0]
mov ecx, dword [rsp + 0x30]
dec edx
imul ecx, dword [rsp + 0xe8]
imul edx, eax
add edx, ecx
movsxd r8, edx
add r8, qword [rsp + 0x48]
mov qword [rsp + 0x48], r8
test esi, esi
je 0x14000ebd7
movsxd r15, dword [rsp + 0x40]
mov r13, r8
mov edi, dword [rsp + 0x30]
movsxd r14, eax
mov eax, dword [rbx + 0x2c]
mov r9d, edi
mov rdx, r12
mov dword [rsp + 0x20], eax
mov rcx, rbp
call fcn.14000d170
movsxd rax, dword [rbx + 0xd8]
mov r8, r13
sub r8, r14
add r12, rax
sub rbp, r15
mov qword [rsp + 0x48], r8
mov r13, r8
sub esi, 1
jne 0x14000eb80
mov rdi, qword [rsp + 0x70]
mov r14, qword [rsp + 0x50]
mov r15, qword [rsp + 0x58]
mov r13, qword [rsp + 0x78]
jmp 0x14000ebd7
lea rcx, str.No_Support_Backgroud_Bitmap...
call fcn.140008848
mov rcx, r13
call fcn.14000522c
mov r12, qword [rsp + 0x38]
mov ebp, dword [rsp + 0xd8]
mov rcx, rbx
call fcn.14000e898
test r15, r15
je 0x14000ec03
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x14000ec0b
mov rcx, r14
call fcn.14000522c
mov rcx, rdi
call fcn.14000522c
mov ecx, ebp
call qword [sym.imp.KERNEL32.dll_SetLastError]
mov rax, r12
add rsp, 0x88
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret