Function at 0x1401e89dc
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rsi
mov qword [rax + 0x18], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x8d9e8]
mov eax, 0x8dac0
call fcn.140013430
sub rsp, rax
mov r15, rdx
mov edx, 0x64
xor ecx, ecx
lea r8d, [rdx - 0x5a]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
xor r13d, r13d
test rax, rax
je 0x1401e8ec0
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
test eax, eax
je 0x1401e8ec0
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1401e8ec0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x1401e8ec0
lea rcx, [rbp + 0x20]
movups xmm0, xmmword [rax]
movups xmmword [rcx], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rcx + 0x10], xmm1
movups xmm0, xmmword [rax + 0x20]
movups xmmword [rcx + 0x20], xmm0
movups xmm1, xmmword [rax + 0x30]
movups xmmword [rcx + 0x30], xmm1
movups xmm0, xmmword [rax + 0x40]
movups xmmword [rcx + 0x40], xmm0
movups xmm1, xmmword [rax + 0x50]
movups xmmword [rcx + 0x50], xmm1
movups xmm0, xmmword [rax + 0x60]
movups xmmword [rcx + 0x60], xmm0
mov edx, 0x80
movups xmm0, xmmword [rax + 0x70]
movups xmmword [rcx + rdx - 0x10], xmm0
mov rax, qword [rax + rdx]
mov qword [rcx + rdx], rax
mov rbx, qword [rbp + 0x20]
mov rax, rbx
shr rax, 0x20
test eax, eax
je 0x1401e8acd
call fcn.1401e8724
test ebx, ebx
je 0x1401e8aeb
call fcn.1401e8354
test al, al
je 0x1401e8ee9
call fcn.1401e8520
test eax, eax
je 0x1401e8ee9
lea eax, [rsi - 0xa7]
mov dword [r15], eax
mov ecx, eax
call fcn.14000aae8
mov rbx, rax
mov r8d, dword [r15]
lea rdx, [rdi + 0xa8]
mov rcx, rax
call fcn.1401aff00
lea r8, [rbp + 0x28]
mov edx, dword [r15]
mov rcx, rbx
call fcn.1401e8218
mov r8d, dword [r15]
dec r8d
xorps xmm0, xmm0
movups xmmword [rbp - 0x68], xmm0
mov qword [rbp - 0x58], r13
mov qword [rbp - 0x50], r13
mov rdx, rbx
lea rcx, [rbp - 0x68]
call fcn.140005d14
nop
lea rdx, [rbp - 0x68]
lea rcx, [rsp + 0x40]
call fcn.1401e80a4
nop
mov r8, qword [rsp + 0x48]
mov rdx, qword [rsp + 0x40]
lea rcx, [rsp + 0x58]
call fcn.14000ba18
nop
lea rbx, [rsp + 0x58]
mov r14d, reloc.OLEAUT32.dll_SafeArrayGetDim
cmp qword [rsp + 0x70], r14
cmovae rbx, qword [rsp + 0x58]
xor edx, edx
mov r8d, 0x8d9a0
lea rcx, [rbp + 0x20]
call fcn.1401b05c0
lea rdx, [rbp + 0x20]
mov rcx, rbx
call fcn.1401e8878
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
mov qword [rsp + 0x30], r13
mov qword [rsp + 0x38], r13
lea rax, [rbp + 0x20]
or r8, 0xffffffffffffffff
inc r8
cmp byte [rax + r8], r13b
jne 0x1401e8bb2
lea rdx, [rbp + 0x20]
lea rcx, [rsp + 0x20]
call fcn.140005d14
nop
lea rcx, [rsp + 0x20]
mov rdx, qword [rsp + 0x30]
cmp qword [rsp + 0x38], r14
jb 0x1401e8be5
mov rcx, qword [rsp + 0x20]
add rdx, rcx
jmp 0x1401e8bed
add rdx, rcx
lea rcx, [rsp + 0x20]
call fcn.140010280
mov ecx, 0x21
call fcn.14000aae8
mov rbx, rax
movups xmm0, xmmword [rdi + 0x88]
movups xmmword [rax], xmm0
movups xmm1, xmmword [rdi + 0x98]
movups xmmword [rax + 0x10], xmm1
xorps xmm0, xmm0
movups xmmword [rsp + 0x78], xmm0
mov qword [rbp - 0x78], r13
mov qword [rbp - 0x70], r13
mov r8, r14
lea rdx, str._zOfBqvDec8mQ7K
lea rcx, [rsp + 0x78]
call fcn.140005d14
nop
mov r8, rbx
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x28]
call fcn.1401e7158
nop
mov rdx, rax
lea rcx, [rbp - 0x48]
call section..data
nop
lea r8, [rsp + 0x78]
mov rdx, rax
lea rcx, [rbp - 8]
call fcn.1401e7eec
nop
mov ebx, 0x1000
mov rdx, qword [rbp - 0x30]
cmp rdx, r14
jb 0x1401e8ca5
inc rdx
mov rcx, qword [rbp - 0x48]
mov rax, rcx
cmp rdx, rbx
jb 0x1401e8ca0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8f01
call fcn.14000aae0
mov qword [rbp - 0x38], r13
mov edi, SafeArrayGetDim
mov qword [rbp - 0x30], rdi
mov byte [rbp - 0x48], r13b
mov rdx, qword [rbp - 0x10]
cmp rdx, r14
jb 0x1401e8cec
inc rdx
mov rcx, qword [rbp - 0x28]
mov rax, rcx
cmp rdx, rbx
jb 0x1401e8ce7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8f07
call fcn.14000aae0
mov qword [rbp - 0x18], r13
mov qword [rbp - 0x10], rdi
mov byte [rbp - 0x28], r13b
mov rdx, qword [rbp - 0x70]
cmp rdx, r14
jb 0x1401e8d2f
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, rbx
jb 0x1401e8d2a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8f0d
call fcn.14000aae0
lea rdi, [rbp - 8]
mov rsi, qword [rbp + 0x10]
cmp rsi, r14
setae r12b
mov rbx, qword [rbp - 8]
cmovae rdi, rbx
mov rax, qword [rbp + 8]
mov dword [r15], eax
mov ecx, eax
call fcn.14000aae8
mov r14, rax
mov r8d, r13d
cmp dword [r15], r13d
jbe 0x1401e8d75
mov rdx, rax
sub rdi, rax
mov cl, byte [rdi + rdx]
mov byte [rdx], cl
inc r8d
inc rdx
cmp r8d, dword [r15]
jb 0x1401e8d65
mov edi, 0x1000
test r12b, r12b
je 0x1401e8dad
lea rdx, [rsi + 1]
mov rax, rbx
cmp rdx, rdi
jb 0x1401e8da4
add rdx, 0x27
mov rbx, qword [rbx - 8]
sub rax, rbx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8f13
mov rcx, rbx
call fcn.14000aae0
nop
mov rdx, qword [rsp + 0x38]
cmp rdx, 0x10
jb 0x1401e8de6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, rdi
jb 0x1401e8de1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8f19
call fcn.14000aae0
mov qword [rsp + 0x30], r13
mov ebx, SafeArrayGetDim
mov qword [rsp + 0x38], rbx
mov byte [rsp + 0x20], r13b
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x1401e8e33
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, rdi
jb 0x1401e8e2e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8f1f
call fcn.14000aae0
mov qword [rsp + 0x68], r13
mov qword [rsp + 0x70], rbx
mov byte [rsp + 0x58], r13b
mov rcx, qword [rsp + 0x40]
test rcx, rcx
je 0x1401e8e88
mov rdx, qword [rsp + 0x50]
sub rdx, rcx
mov rax, rcx
cmp rdx, rdi
jb 0x1401e8e75
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8f25
call fcn.14000aae0
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov qword [rsp + 0x50], r13
mov rdx, qword [rbp - 0x50]
cmp rdx, 0x10
jb 0x1401e8ebb
inc rdx
mov rcx, qword [rbp - 0x68]
mov rax, rcx
cmp rdx, rdi
jb 0x1401e8eb6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1401e8ee3
call fcn.14000aae0
mov rax, r14
jmp 0x1401e8ec2
xor eax, eax
lea r11, [rsp + 0x8dac0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x38]
mov rdi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
call fcn.1401b88f4
int3
call fcn.14000b764
mov rcx, rax
call fcn.14000b080
mov ecx, 1
call fcn.1401b4a50
nop
call fcn.1401b88f4
nop
call fcn.1401b88f4
nop
call fcn.1401b88f4
nop
call fcn.1401b88f4
nop
call fcn.1401b88f4
nop
call fcn.1401b88f4
nop
call fcn.1401b88f4
int3