Function at 0x140005f20
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
sub rsp, 0x328
mov rax, qword [0x140437340]
xor rax, rsp
mov qword [rsp + 0x310], rax
mov dword [rsp + 0x160], 1
lea rax, [0x140442f10]
mov rax, qword [rax + 0x10]
mov qword [rsp + 0x158], rax
movzx eax, word [rsp + 0x338]
mov r8d, 0xf0
mov edx, eax
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rsp + 0x150], rax
cmp qword [rsp + 0x150], 0
je 0x14000624a
mov rdx, qword [rsp + 0x150]
mov rcx, qword [rsp + 0x158]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rsp + 0x168], rax
cmp qword [rsp + 0x168], 0
je 0x14000624a
mov rcx, qword [rsp + 0x168]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rsp + 0x170], rax
cmp qword [rsp + 0x170], 0
je 0x14000624a
cmp dword [rsp + 0x160], 0
je 0x14000624a
mov rax, qword [rsp + 0x170]
movzx eax, word [rax]
test eax, eax
je 0x14000624a
mov rax, qword [rsp + 0x170]
movzx eax, word [rax]
mov word [rsp + 0x17c], ax
mov rax, qword [rsp + 0x170]
add rax, 2
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
movzx eax, word [rax]
mov word [rsp + 0x180], ax
mov rax, qword [rsp + 0x170]
add rax, 2
mov qword [rsp + 0x170], rax
mov rax, qword [rsp + 0x170]
mov eax, dword [rax]
mov dword [rsp + 0x178], eax
mov rax, qword [rsp + 0x170]
add rax, 4
mov qword [rsp + 0x170], rax
movzx eax, word [rsp + 0x180]
cmp eax, 0x403
jne 0x140006140
lea rax, [rsp + 0x198]
mov qword [rsp + 0x190], rax
mov r8d, 3
mov rdx, qword [rsp + 0x170]
lea rcx, [rsp + 0x190]
call fcn.140010050
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x2d8], rax
movzx eax, word [rsp + 0x17c]
mov rcx, qword [rsp + 0x2d8]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 0x143
mov edx, eax
mov rax, qword [rsp + 0x330]
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp rax, 0xffffffffffffffff
jne 0x14000610c
mov dword [rsp + 0x160], 0
mov rax, qword [rsp + 0x190]
mov qword [rsp + 0x2e0], rax
lea rax, [rsp + 0x198]
cmp qword [rsp + 0x2e0], rax
je 0x14000613b
mov rcx, qword [rsp + 0x2e0]
call fcn.140251074
jmp 0x140006228
movzx eax, word [rsp + 0x180]
cmp eax, 0x1234
jne 0x140006228
mov dword [rsp + 0x2a0], 1
mov qword [rsp + 0x2a8], 0xffffffffffffffff
lea rax, [rsp + 0x48]
mov qword [rsp + 0x40], rax
mov r8d, 3
mov rdx, qword [rsp + 0x170]
lea rcx, [rsp + 0x40]
call fcn.140010050
lea rax, [rsp + 0x40]
mov qword [rsp + 0x2f8], rax
mov rax, qword [rsp + 0x2f8]
mov rax, qword [rax]
mov qword [rsp + 0x300], rax
mov rax, qword [rsp + 0x300]
mov qword [rsp + 0x2b0], rax
mov rax, qword [rsp + 0x40]
mov qword [rsp + 0x308], rax
lea rax, [rsp + 0x48]
cmp qword [rsp + 0x308], rax
je 0x1400061e5
mov rcx, qword [rsp + 0x308]
call fcn.140251074
movzx eax, word [rsp + 0x17c]
lea rcx, [rsp + 0x2a0]
mov qword [rsp + 0x20], rcx
xor r9d, r9d
mov r8d, 0x40b
mov edx, eax
mov rax, qword [rsp + 0x330]
mov rcx, qword [rax + 8]
call qword [sym.imp.USER32.dll_SendDlgItemMessageW]
cmp rax, 0xffffffffffffffff
jne 0x140006228
mov dword [rsp + 0x160], 0
mov eax, dword [rsp + 0x178]
mov rcx, qword [rsp + 0x170]
add rcx, rax
mov rax, rcx
mov qword [rsp + 0x170], rax
jmp 0x140005fe7
mov eax, dword [rsp + 0x160]
mov rcx, qword [rsp + 0x310]
xor rcx, rsp
call fcn.140250fd0
add rsp, 0x328
ret