Function at 0x14002bdac
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov qword [rax - 0x38], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x20], rsi
mov r14, r8
mov rbp, rdx
mov rbx, rcx
xor r13d, r13d
mov esi, r13d
mov qword [r8 + 0x10], r13
mov rax, r8
cmp qword [r8 + 0x18], 8
jb 0x14002bdf0
mov rax, qword [r8]
mov word [rax], r13w
lea r8, [0x1400419a8]
call qword [sym.imp.api_ms_win_core_kernel32_legacy_l1_1_0.dll_FindResourceW]
mov r15, rax
mov r12d, 0x80070000
test rax, rax
jne 0x14002be34
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, r12d
test eax, eax
cmovle esi, eax
mov r9d, esi
mov r8, rbp
lea rdx, str.ResourceUtil:_Error_when_attempting_to_load_XML_from_module._Resource_name:___s_._hr0x_08X
mov ecx, esi
call fcn.140009624
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_LoadResource]
mov rdi, rax
test rax, rax
jne 0x14002be6d
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, r12d
test eax, eax
cmovle esi, eax
mov r9d, esi
mov r8, rbp
lea rdx, str.ResourceUtil:_Error_when_attempting_to_load_XML_from_module._Resource_name:___s_._hr0x_08X
mov ecx, esi
call fcn.140009624
mov rcx, rdi
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_LockResource]
mov r12, rax
test rax, rax
jne 0x14002bea6
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov r9d, esi
mov r8, rbp
lea rdx, str.ResourceUtil:_Error_when_attempting_to_load_XML_from_module._Resource_name:___s_._hr0x_08X
mov ecx, esi
call fcn.140009624
mov rdx, r15
mov rcx, rbx
call qword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_SizeofResource]
mov r13d, eax
xor ebx, ebx
mov dword [rsp + 0x28], ebx
mov qword [rsp + 0x20], rbx
mov r9d, eax
mov r8, r12
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_MultiByteToWideChar]
movsxd r15, eax
test eax, eax
jne 0x14002bf02
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov r9d, esi
mov r8, rbp
lea rdx, str.ResourceUtil:_Error_when_attempting_to_load_XML_from_module._Resource_name:___s_._hr0x_08X
mov ecx, esi
call fcn.140009624
lea edi, [r15 + 1]
movsxd rcx, edi
mov eax, 2
mul rcx
mov rdx, 0xffffffffffffffff
cmovo rax, rdx
mov rcx, rax
call fcn.14002d558
mov rbx, rax
mov qword [rsp + 0x80], rax
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], rax
mov r9d, r13d
mov r8, r12
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.api_ms_win_core_string_l1_1_0.dll_MultiByteToWideChar]
xor edi, edi
test eax, eax
jne 0x14002bf79
call qword [sym.imp.api_ms_win_core_errorhandling_l1_1_0.dll_GetLastError]
movzx esi, ax
or esi, 0x80070000
test eax, eax
cmovle esi, eax
mov r9d, esi
mov r8, rbp
lea rdx, str.ResourceUtil:_Error_when_attempting_to_load_XML_from_module._Resource_name:___s_._hr0x_08X
mov ecx, esi
call fcn.140009624
mov word [rbx + r15*2], di
mov rdx, rbx
mov rcx, r14
call fcn.14000bfac
nop
test rbx, rbx
je 0x14002bf97
mov rcx, rbx
call fcn.14002c338
mov eax, esi
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret