Function at 0x140013c90
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x1f8]
sub rsp, 0x2f8
mov qword [rbp - 0x78], 0xfffffffffffffffe
mov rax, qword [0x140041480]
xor rax, rsp
mov qword [rbp + 0x1e0], rax
mov dword [rsp + 0x60], r9d
mov esi, r8d
mov eax, edx
mov dword [rsp + 0x68], eax
mov qword [rsp + 0x78], rcx
mov ecx, dword [rbp + 0x260]
mov dword [rsp + 0x64], ecx
mov r15, qword [0x1400430a0]
movzx eax, dx
mov qword [rsp + 0x70], rax
mov r8d, 0xf1
mov edx, eax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ebx, ebx
test rax, rax
jne 0x140013d10
xor eax, eax
jmp 0x14001405f
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140013d09
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r12, rax
xor r10d, r10d
test rax, rax
je 0x140013d09
test esi, esi
setne bl
movzx eax, word [rax + 6]
add eax, ebx
mov qword [rbp - 0x30], r10
movsxd r14, eax
lea r11d, [r10 + 0x20]
je 0x140013d8c
xor edx, edx
or rax, 0xffffffffffffffff
div r14
cmp rax, r11
jb 0x140013d81
mov rdx, r14
shl rdx, 5
cmp rdx, 0x200
jbe 0x140013d8c
lea rcx, [rbp - 0x30]
call fcn.140010780
mov rdi, qword [rbp - 0x30]
xor r10d, r10d
lea r11d, [r10 + 0x20]
jmp 0x140013d94
mov ecx, 0x80070216
call fcn.140003000
int3
lea rdi, [rbp - 0x28]
mov qword [rbp - 0x30], rdi
test rdi, rdi
jne 0x140013db4
lea rax, [rbp - 0x28]
test rax, rax
je 0x140013d09
lea rcx, [rbp - 0x30]
call fcn.140003cc4
jmp 0x140013d09
test esi, esi
je 0x140013dcd
mov qword [rdi], 4
mov word [rdi + 8], 0x100
mov qword [rdi + 0x10], r10
mov qword [rdi + 0x18], r10
mov r13d, r10d
mov r9d, r10d
movsxd rdx, ebx
cmp r10w, word [r12 + 6]
jae 0x140013e37
mov rax, rdx
shl rax, 5
lea rcx, [rax + rdi + 8]
sub rdx, rdx
lea r8, [r12 + rdx*2 + 8]
cmp word [r8], r10w
je 0x140013e0d
mov dword [rcx - 8], r13d
inc r13d
movzx eax, word [r8]
mov dword [rcx - 4], eax
mov word [rcx], 4
jmp 0x140013e1a
mov qword [rcx - 8], 8
mov word [rcx], 0x100
mov qword [rcx + 0x10], r10
mov qword [rcx + 8], r10
inc r9d
add r8, 2
add rcx, r11
movzx eax, word [r12 + 6]
cmp r9d, eax
jl 0x140013df2
movsxd rcx, dword [rsp + 0x64]
mov qword [rsp + 0x58], r10
mov rax, qword [0x140043098]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rcx
mov rax, qword [rsp + 0x78]
mov qword [rsp + 0x40], rax
mov eax, 0x64
mov dword [rsp + 0x38], eax
mov dword [rsp + 0x30], eax
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r10d
mov r9d, dword [rsp + 0x60]
xor r8d, r8d
lea rdx, str.ToolbarWindow32
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov rsi, rax
test rax, rax
jne 0x140013e9f
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x30], rax
jmp 0x140013da0
xor r9d, r9d
mov edx, 0x41e
lea r8d, [r9 + 0x20]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x31]
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
mov rbx, rax
test rax, rax
jne 0x140013edb
lea ecx, [rax + 0x11]
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rbx, rax
and dword [rbp - 0x70], 0
xor edx, edx
lea r8d, [rdx + 0x38]
lea rcx, [rbp - 0x6c]
call fcn.14001b7c0
lea r8, [rbp - 0x70]
mov edx, 0x3c
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetObjectA]
mov ecx, dword [rbp - 0x70]
call fcn.14001ea80
mov dword [rsp + 0x60], eax
mov rbx, qword [0x1400430a0]
mov r8d, 2
mov rdx, qword [rsp + 0x70]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
movzx ecx, word [rax + 0xe]
mov eax, 4
cmp cx, ax
jbe 0x140013f9b
mov eax, 0xff000000
or edx, 0xffffffff
mov r8d, 0x20
cmp cx, r8w
cmove eax, edx
movzx r8d, word [r12 + 2]
mov dword [rsp + 0x30], 0x2040
and dword [rsp + 0x28], 0
mov dword [rsp + 0x20], eax
mov r9d, 1
mov rdx, qword [rsp + 0x70]
mov rcx, qword [0x1400430a0]
call qword [0x140031060]
mov r9, rax
xor r8d, r8d
mov edx, 0x430
jmp 0x140013fbb
xor eax, eax
mov qword [rbp - 0x80], rax
mov qword [rsp + 0x78], r15
mov eax, dword [rsp + 0x68]
mov qword [rbp - 0x80], rax
movsxd r8, r13d
lea r9, [rsp + 0x78]
mov edx, 0x413
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rdi
mov r8, r14
mov edx, 0x414
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
mov ebx, dword [rsp + 0x60]
movzx eax, bx
cmp word [r12 + 4], bx
cmova ax, word [r12 + 4]
movzx ecx, ax
shl ecx, 0x10
movzx eax, word [r12 + 2]
or ecx, eax
movsxd r9, ecx
xor r8d, r8d
mov edx, 0x420
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
cmp word [r12 + 4], bx
cmova bx, word [r12 + 4]
add bx, 7
movzx edx, bx
shl edx, 0x10
movzx eax, word [r12 + 2]
add ax, 7
movzx ecx, ax
or edx, ecx
movsxd r9, edx
xor r8d, r8d
mov edx, 0x41f
mov rcx, rsi
call qword [sym.imp.USER32.dll_SendMessageA]
nop
lea rax, [rbp - 0x28]
cmp qword [rbp - 0x30], rax
je 0x14001405c
lea rcx, [rbp - 0x30]
call fcn.140003cc4
mov rax, rsi
mov rcx, qword [rbp + 0x1e0]
xor rcx, rsp
call fcn.14001b940
add rsp, 0x2f8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret