Function at 0x140008c80
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x20], r9
mov qword [rsp + 0x18], r8
mov qword [rsp + 0x10], rdx
mov qword [rsp + 8], rcx
mov eax, 0x2548
call fcn.1402512d0
sub rsp, rax
mov qword [rsp + 0x2530], 0xfffffffffffffffe
mov rax, qword [0x140437340]
xor rax, rsp
mov qword [rsp + 0x2538], rax
mov dword [rsp + 0x70], 3
mov qword [rsp + 0x78], 0
mov rax, qword [rsp + 0x2550]
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], 0
mov qword [rsp + 0x90], 0
mov rax, qword [rsp + 0x2558]
mov qword [rsp + 0x38], rax
mov r8d, 2
xor edx, edx
mov rcx, qword [rsp + 0x38]
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov qword [rsp + 0x48], rax
cmp qword [rsp + 0x48], 0
jne 0x140008d30
call fcn.1400072d0
mov dword [rsp + 0x4b0], eax
jmp 0x140008eba
mov r8, qword [rsp + 0x2568]
mov rdx, qword [rsp + 0x2560]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rsp + 0x4a8], rax
cmp qword [rsp + 0x4a8], 0
jne 0x140008d6f
call fcn.1400072d0
mov dword [rsp + 0x4b0], eax
jmp 0x140008eba
mov rdx, qword [rsp + 0x4a8]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rsp + 0x4b8], rax
cmp qword [rsp + 0x4b8], 0
jne 0x140008da6
call fcn.1400072d0
mov dword [rsp + 0x4b0], eax
jmp 0x140008eba
mov rdx, qword [rsp + 0x4a8]
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rsp + 0x60], eax
mov rax, qword [rsp + 0x4b8]
mov qword [rsp + 0x40], rax
mov eax, dword [rsp + 0x60]
inc eax
cmp eax, dword [rsp + 0x60]
jae 0x140008de6
mov dword [rsp + 0x4b0], 0x8007000e
jmp 0x140008eba
mov eax, dword [rsp + 0x60]
inc eax
mov eax, eax
mov edx, eax
lea rcx, [rsp + 0x90]
call fcn.14000f8b0
nop
cmp qword [rsp + 0x90], 0
jne 0x140008e19
mov dword [rsp + 0x4b0], 0x8007000e
jmp 0x140008eba
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x4e0], rax
mov eax, dword [rsp + 0x60]
mov dword [rsp + 0x28], eax
mov rax, qword [rsp + 0x4e0]
mov qword [rsp + 0x20], rax
mov r9d, dword [rsp + 0x60]
mov r8, qword [rsp + 0x40]
xor edx, edx
mov ecx, 3
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x4a0], eax
cmp dword [rsp + 0x4a0], 0
jne 0x140008e74
call fcn.1400072d0
mov dword [rsp + 0x4b0], eax
jmp 0x140008eba
mov eax, dword [rsp + 0x4a0]
xor ecx, ecx
mov rdx, qword [rsp + 0x90]
mov word [rdx + rax*2], cx
mov rax, qword [rsp + 0x90]
mov qword [rsp + 0x4e8], rax
mov r8d, dword [rsp + 0x2570]
mov rdx, qword [rsp + 0x4e8]
lea rcx, [rsp + 0x50]
call fcn.1400090c0
mov dword [rsp + 0x4b0], eax
cmp qword [rsp + 0x48], 0
je 0x140008ecd
mov rcx, qword [rsp + 0x48]
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [rsp + 0x4b0]
mov dword [rsp + 0x4c0], eax
lea rax, [rsp + 0x98]
cmp qword [rsp + 0x90], rax
je 0x140008efb
lea rcx, [rsp + 0x90]
call fcn.14000fe80
nop
cmp qword [rsp + 0x78], 0
je 0x140008f2c
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x2528], rax
mov rax, qword [rsp + 0x78]
mov rax, qword [rax]
mov qword [rsp + 0x78], rax
mov rcx, qword [rsp + 0x2528]
call fcn.140251074
jmp 0x140008efb
mov eax, dword [rsp + 0x4c0]
mov rcx, qword [rsp + 0x2538]
xor rcx, rsp
call fcn.140250fd0
add rsp, 0x2548
ret