Function at 0x140003710
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov r11, rsp
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x530
mov qword [rsp + 0xf0], 0xfffffffffffffffe
mov qword [r11 + 0x10], rbx
mov qword [r11 + 0x18], rbp
mov rax, qword [0x140090f00]
xor rax, rsp
mov qword [rsp + 0x520], rax
mov rbp, rcx
lea rcx, [r11 - 0x4d8]
call fcn.140068c30
nop
mov rax, qword [0x1400981a0]
lea r8, [0x140079928]
lea rdx, str.CONFIGURE
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
jne 0x1400037ba
lea rax, [0x140078a28]
mov qword [rsp + 0x80], rax
lea rax, [0x140098088]
mov rcx, qword [rsp + 0xd8]
cmp rcx, rax
je 0x1400037a6
call fcn.140015198
lea rcx, [rsp + 0x80]
call fcn.140068860
xor eax, eax
jmp 0x140003c23
mov rax, qword [0x1400981a0]
mov rdx, rdi
mov rcx, qword [rax]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
mov rcx, qword [0x1400981a0]
mov rdx, rdi
mov rcx, qword [rcx]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
lea ecx, [rbx + 1]
mov edi, ecx
call fcn.1400151a0
mov r12, rax
mov r8, rdi
xor edx, edx
mov rcx, rax
call fcn.14004a690
mov r8, rbx
mov rdx, rsi
mov rcx, r12
call fcn.140047160
xor r9d, r9d
xor r8d, r8d
mov rdx, r12
lea rcx, [rsp + 0x80]
call fcn.1400667d0
lea rdx, str.TheConfigure
lea rcx, [rsp + 0x80]
call fcn.140067ff0
mov rdi, rax
test rax, rax
jne 0x14000388d
mov rcx, r12
call fcn.140015198
nop
lea rax, [0x140078a28]
mov qword [rsp + 0x80], rax
lea rax, [0x140098088]
mov rcx, qword [rsp + 0xd8]
cmp rcx, rax
je 0x140003879
call fcn.140015198
lea rcx, [rsp + 0x80]
call fcn.140068860
xor eax, eax
jmp 0x140003c23
mov word [rsp + 0x310], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x312]
call fcn.14004a690
mov word [rsp + 0x100], 0
xor edx, edx
mov r8d, 0x206
lea rcx, [rsp + 0x102]
call fcn.14004a690
lea rdx, str.Application
mov rcx, rdi
call fcn.140068080
test rax, rax
jne 0x14000391b
lea rax, [0x140078a28]
mov qword [rsp + 0x80], rax
lea rax, [0x140098088]
mov rcx, qword [rsp + 0xd8]
cmp rcx, rax
je 0x140003907
call fcn.140015198
lea rcx, [rsp + 0x80]
call fcn.140068860
xor eax, eax
jmp 0x140003c23
mov rcx, rax
call fcn.140068040
mov rsi, rax
test rax, rax
je 0x140003be0
xor r13d, r13d
movabs r14, 0x7ffffffffffffffe
nop
mov rbx, qword [rsi + 0x38]
mov rcx, qword [rsi + 0x28]
test rcx, rcx
jne 0x140003952
mov rdi, r13
jmp 0x14000396a
mov rax, qword [rcx]
call qword [rax + 0x60]
test rax, rax
jne 0x140003962
mov rdi, r13
jmp 0x14000396a
mov rdi, qword [rax + 0x38]
add rdi, 0x10
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
or r9d, 0xffffffff
lea r8, [rbx + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x310]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
lea r8, [rbx + 0x10]
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], r13d
mov qword [rsp + 0x20], r13
or r9d, 0xffffffff
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov dword [rsp + 0x28], eax
lea rax, [rsp + 0x100]
mov qword [rsp + 0x20], rax
or r9d, 0xffffffff
mov r8, rdi
xor edx, edx
mov ecx, 0xfde9
call qword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edx, 7
mov qword [rsp + 0x78], rdx
mov r8, r13
mov qword [rsp + 0x70], r13
mov word [rsp + 0x60], r8w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x100]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
cmp rcx, r14
jbe 0x140003a39
call fcn.140064b10
mov rdx, qword [rsp + 0x78]
mov r8, qword [rsp + 0x70]
cmp rdx, rbx
jae 0x140003a52
mov rdx, rbx
lea rcx, [rsp + 0x58]
call fcn.140002af0
mov rdx, qword [rsp + 0x78]
jmp 0x140003a70
test rbx, rbx
jne 0x140003a70
mov qword [rsp + 0x70], r13
lea rax, [rsp + 0x60]
cmp rdx, 8
cmovae rax, qword [rsp + 0x60]
mov word [rax], bx
jmp 0x140003ab7
test rbx, rbx
je 0x140003ab7
lea rcx, [rsp + 0x60]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x60]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x100]
call fcn.140046d10
mov qword [rsp + 0x70], rbx
lea rax, [rsp + 0x60]
cmp qword [rsp + 0x78], 8
cmovae rax, qword [rsp + 0x60]
mov word [rdi + rax], 0
mov edx, 7
mov qword [rsp + 0x50], rdx
mov r8, r13
mov qword [rsp + 0x48], r13
mov word [rsp + 0x38], r8w
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x310]
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov rbx, rcx
cmp rcx, r14
jbe 0x140003afe
call fcn.140064b10
mov rdx, qword [rsp + 0x50]
mov r8, qword [rsp + 0x48]
cmp rdx, rbx
jae 0x140003b17
mov rdx, rbx
lea rcx, [rsp + 0x30]
call fcn.140002af0
mov rdx, qword [rsp + 0x50]
jmp 0x140003b35
test rbx, rbx
jne 0x140003b35
mov qword [rsp + 0x48], r13
lea rax, [rsp + 0x38]
cmp rdx, 8
cmovae rax, qword [rsp + 0x38]
mov word [rax], bx
jmp 0x140003b7c
test rbx, rbx
je 0x140003b7c
lea rcx, [rsp + 0x38]
cmp rdx, 8
cmovae rcx, qword [rsp + 0x38]
lea rdi, [rbx + rbx]
add rdx, rdx
mov r9, rdi
lea r8, [rsp + 0x310]
call fcn.140046d10
mov qword [rsp + 0x48], rbx
lea rax, [rsp + 0x38]
cmp qword [rsp + 0x50], 8
cmovae rax, qword [rsp + 0x38]
mov word [rdi + rax], 0
mov rcx, qword [rbp + 0x218]
mov rax, qword [rcx]
lea r8, [rsp + 0x58]
lea rdx, [rsp + 0x30]
call qword [rax]
nop
cmp qword [rsp + 0x50], 8
jb 0x140003ba5
mov rcx, qword [rsp + 0x38]
call fcn.140015198
mov qword [rsp + 0x50], 7
mov qword [rsp + 0x48], r13
mov word [rsp + 0x38], 0
cmp qword [rsp + 0x78], 8
jb 0x140003bcc
mov rcx, qword [rsp + 0x60]
call fcn.140015198
mov rcx, rsi
call fcn.140068160
mov rsi, rax
test rax, rax
jne 0x140003940
mov rcx, r12
call fcn.140015198
nop
lea rax, [0x140078a28]
mov qword [rsp + 0x80], rax
lea rax, [0x140098088]
mov rcx, qword [rsp + 0xd8]
cmp rcx, rax
je 0x140003c11
call fcn.140015198
lea rcx, [rsp + 0x80]
call fcn.140068860
mov eax, 1
mov rcx, qword [rsp + 0x520]
xor rcx, rsp
call fcn.1400469b0
lea r11, [rsp + 0x530]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsp, r11
pop r14
pop r13
pop r12
pop rdi
pop rsi
ret