Function at 0x1400173e0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xa8
lea rbp, [rsp + 0x80]
mov rsi, r8
mov rbx, rcx
mov eax, edx
not eax
and eax, 0xffff0000
xor edx, 0xffff
or edx, eax
mov eax, edx
not eax
and eax, 0xd89802b5
and edx, 0x2767fd4a
or edx, eax
xor edx, 0x2767fd4a
mov qword [rbp - 0x60], rdx
mov eax, 0xdf781f54
jmp 0x140017440
mov eax, 0x1f88fed1
mov r13, r15
nop dword [rax]
cmp eax, 0x20026ac
jg 0x140017490
cmp eax, 0xb7496fae
jle 0x1400174f0
cmp eax, 0xd8d2d64d
jle 0x140017582
cmp eax, 0xefb01728
jle 0x14001765b
cmp eax, 0xefb01729
je 0x140017831
cmp eax, 0xf3a5748c
je 0x140017434
cmp eax, 0xf94c3527
jne 0x140017440
cmp dword [rbp + 0x14], 0
sete byte [rbp + 0x27]
mov eax, 0x49d9889e
jmp 0x140017440
cmp eax, 0x51f29103
jg 0x140017540
cmp eax, 0x25070d14
jle 0x1400175c4
cmp eax, 0x4445088c
jg 0x1400176e1
cmp eax, 0x2ed113db
je 0x140017874
cmp eax, 0x3ac392a6
jne 0x140017a69
mov rdx, qword [rbp - 0x48]
mov rcx, qword [rbp - 0x18]
mov r8, qword [rbp - 0x78]
sub rsp, 0x20
call fcn.14002b320
add rsp, 0x20
mov eax, 0xd8d2d64e
jmp 0x140017440
cmp eax, 0xa094026b
jg 0x140017600
cmp eax, 0x90d6336c
jg 0x14001770d
cmp eax, 0x88331fc2
je 0x14001788b
cmp eax, 0x8fe9fcb4
jne 0x140017440
mov rax, qword [rbp - 0x28]
mov rcx, qword [rbp - 0x68]
mov rax, qword [rax + rcx*8]
mov qword [rbp - 0x70], rax
mov eax, 0xc32628d9
jmp 0x140017440
cmp eax, 0x64a2893d
jg 0x14001762d
cmp eax, 0x5b7c8a98
jg 0x14001777a
cmp eax, 0x51f29104
je 0x1400178a8
cmp eax, 0x590ae837
jne 0x140017440
cmp byte [rbp + 0x26], 0
mov eax, 0x88331fc2
mov ecx, 0xd0af73b8
cmovne eax, ecx
jmp 0x140017440
cmp eax, 0xc926e17f
jg 0x14001779d
cmp eax, 0xb7496faf
je 0x1400178ba
cmp eax, 0xc32628d9
jne 0x140017440
mov rax, qword [rbp - 0x70]
mov ecx, dword [rbp + 0x20]
sub rsp, 0x20
call rax
add rsp, 0x20
mov edi, dword [rbp + 0x20]
add edi, 1
mov eax, 0xe81e101
jmp 0x140017440
cmp eax, 0x10eeb976
jg 0x1400177c0
cmp eax, 0x20026ad
je 0x1400178d1
cmp eax, 0xe81e101
jne 0x140017440
mov dword [rbp + 0x20], edi
mov eax, dword [rbp + 0x20]
cmp eax, 3
mov eax, 0x90d6336d
mov ecx, 0x51f29104
cmovl eax, ecx
jmp 0x140017440
cmp eax, 0xadbcad8b
jg 0x1400177e8
cmp eax, 0xa094026c
je 0x1400178e3
cmp eax, 0xab52f944
jne 0x140017440
mov eax, 0xe81e101
xor edi, edi
jmp 0x140017440
cmp eax, 0x75ec248c
jg 0x14001780b
cmp eax, 0x64a2893e
je 0x1400178f0
cmp eax, 0x67faac8f
jne 0x140017440
mov eax, 0xf3a5748c
xor r15d, r15d
jmp 0x140017440
cmp eax, 0xd8d2d64e
je 0x140017923
cmp eax, 0xdf781f54
jne 0x140017440
mov eax, 0x20
call fcn.140027e20
sub rsp, rax
mov rax, rsp
mov qword [rbp - 0x28], rax
mov eax, 0x10
call fcn.140027e20
sub rsp, rax
mov rax, rsp
mov qword [rbp + 8], rax
sub rsp, 0x20
mov r8d, 0xa
mov rcx, rbx
mov rdx, qword [rbp - 0x60]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
add rsp, 0x20
mov qword [rbp], rax
lea rax, [rbp + 0x18]
mov qword [rbp - 0x30], rax
mov rax, qword [rbp - 0x30]
mov dword [rbp + 0x18], 0xff
lea rax, [rbp + 0x1c]
mov qword [rbp - 0x38], rax
mov rax, qword [rbp - 0x38]
mov eax, 0x64a2893e
jmp 0x140017440
cmp eax, 0x4445088d
je 0x140017931
cmp eax, 0x49d9889e
jne 0x140017440
cmp byte [rbp + 0x27], 0
mov eax, 0x9749e70e
mov ecx, 0xa094026c
cmovne eax, ecx
jmp 0x140017440
cmp eax, 0x90d6336d
je 0x140017941
cmp eax, 0x9749e70e
jne 0x140017440
sub rsp, 0x20
xor ecx, ecx
call fcn.1400172c0
lea rcx, str.0____i_n
mov edx, eax
call fcn.140001b40
mov ecx, 1
call fcn.1400172c0
lea rcx, str.1____i_n
mov edx, eax
call fcn.140001b40
mov ecx, 3
call fcn.1400172c0
lea rcx, str.3____i_n
mov edx, eax
call fcn.140001b40
add rsp, 0x20
mov eax, 0xefb01729
jmp 0x140017440
cmp eax, 0x5b7c8a99
je 0x140017968
cmp eax, 0x5ce606da
jne 0x140017440
mov eax, 0x10eeb977
mov r12, r14
jmp 0x140017440
cmp eax, 0xc926e180
je 0x1400179cf
cmp eax, 0xd0af73b8
jne 0x140017440
mov eax, 0x10eeb977
xor r12d, r12d
jmp 0x140017440
cmp eax, 0x10eeb977
je 0x1400179d9
cmp eax, 0x1f88fed1
jne 0x140017440
mov rax, qword [rbp - 8]
mov eax, 0x25070d15
mov qword [rbp - 0x20], r13
jmp 0x140017440
cmp eax, 0xadbcad8c
je 0x1400179ea
cmp eax, 0xb18e7a9f
jne 0x140017440
mov eax, 0x5ce606da
xor r14d, r14d
jmp 0x140017440
cmp eax, 0x75ec248d
je 0x140017a11
cmp eax, 0x7a248ad4
jne 0x140017440
mov eax, dword [rsi]
mov qword [rbp - 0x78], rax
mov eax, 0x3ac392a6
jmp 0x140017440
sub rsp, 0x20
mov ecx, 5
call fcn.1400172c0
lea rcx, str.5____i_n
mov edx, eax
call fcn.140001b40
add rsp, 0x20
mov rdx, qword [rbp]
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
add rsp, 0x20
mov qword [rbp - 0x40], rax
mov eax, 0x2ed113db
jmp 0x140017440
cmp qword [rbp - 0x40], 0
mov eax, 0x75ec248d
mov ecx, 0x67faac8f
cmove eax, ecx
jmp 0x140017440
mov ecx, dword [rsi]
sub rsp, 0x20
call fcn.140034424
add rsp, 0x20
mov qword [rbp - 0x18], rax
mov eax, 0xc926e180
jmp 0x140017440
movsxd rax, dword [rbp + 0x20]
mov qword [rbp - 0x68], rax
mov eax, 0x8fe9fcb4
jmp 0x140017440
cmp qword [rbp - 0x18], 0
mov eax, 0x7a248ad4
mov ecx, 0xb18e7a9f
cmove eax, ecx
jmp 0x140017440
mov rax, qword [rbp - 0x28]
mov qword [rbp - 8], rax
mov eax, 0xadbcad8c
jmp 0x140017440
mov eax, 0x1f88fed1
xor r13d, r13d
jmp 0x140017440
mov dword [rbp + 0x1c], 0x80
sub rsp, 0x20
lea rcx, [rbp + 0x18]
lea rdx, [rbp + 0x1c]
call fcn.140017190
add rsp, 0x20
cmp qword [rbp], 0
mov eax, 0x20026ad
mov ecx, 0x4445088d
cmove eax, ecx
jmp 0x140017440
mov eax, 0x5ce606da
mov r14, qword [rbp - 0x18]
jmp 0x140017440
mov eax, 0x25070d15
xor ecx, ecx
mov qword [rbp - 0x20], rcx
jmp 0x140017440
mov rdx, qword [rbp]
sub rsp, 0x20
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
add rsp, 0x20
mov dword [rbp + 0x14], eax
mov eax, dword [rbp + 0x14]
mov dword [rsi], eax
mov eax, 0xf94c3527
jmp 0x140017440
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax]
sub rsp, 0x20
lea rcx, str._s_is__d_years_old._n
mov r8d, 0x1b
call fcn.140001b40
add rsp, 0x20
mov rcx, qword [rbp + 8]
sub rsp, 0x20
call fcn.140017390
add rsp, 0x20
mov rax, qword [rbp - 0x58]
mov r8d, dword [rax]
mov rax, qword [rbp - 0x10]
mov rdx, qword [rax]
sub rsp, 0x20
lea rcx, str.Happy_birthday___s_is_now__d_years_old._n
call fcn.140001b40
add rsp, 0x20
cmp qword [rbp - 0x48], 0
sete byte [rbp + 0x26]
mov eax, 0x590ae837
jmp 0x140017440
mov eax, 0xb7496faf
jmp 0x140017440
mov rax, qword [rbp - 0x50]
mov eax, 0xf3a5748c
mov r15, r12
jmp 0x140017440
mov rax, qword [rbp - 8]
mov rax, qword [rbp - 8]
mov rcx, qword [0x14004e980]
mov qword [rax + 0x10], rcx
movaps xmm0, xmmword [0x14004e970]
movaps xmmword [rax], xmm0
mov eax, 0xab52f944
jmp 0x140017440
mov rcx, qword [rbp - 0x40]
sub rsp, 0x20
call qword [sym.imp.KERNEL32.dll_LockResource]
add rsp, 0x20
mov qword [rbp - 0x48], rax
mov rax, qword [rbp + 8]
mov qword [rbp - 0x50], rax
mov rax, qword [rbp - 0x50]
mov rax, qword [rbp + 8]
mov qword [rbp - 0x10], rax
mov rax, qword [rbp - 0x10]
lea rcx, str.John
mov qword [rax], rcx
mov rax, qword [rbp + 8]
add rax, 8
mov qword [rbp - 0x58], rax
mov rax, qword [rbp - 0x58]
mov dword [rax], 0x1b
mov eax, 0x5b7c8a99
jmp 0x140017440
cmp eax, 0x25070d15
jne 0x140017440
mov rax, qword [rbp - 0x38]
mov rax, qword [rbp - 0x30]
mov rax, qword [rbp - 0x20]
lea rsp, [rbp + 0x28]
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret