Function at 0x140003ed0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
sub rsp, 0x48
xor eax, eax
mov ecx, eax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov qword [rsp + 0x40], rax
mov rcx, qword [rsp + 0x40]
mov edx, 0x68
lea r8, [0x14000e872]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rsp + 0x38], rax
cmp qword [rsp + 0x38], 0
jne 0x140003f33
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_find_resource.
call fcn.140004130
mov rcx, rax
lea rdx, [0x1400044a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000411d
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rsp + 0x30], rax
cmp qword [rsp + 0x30], 0
jne 0x140003f7c
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_load_resource.
call fcn.140004130
mov rcx, rax
lea rdx, [0x1400044a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000411d
mov rcx, qword [rsp + 0x30]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rsp + 0x28], rax
cmp qword [rsp + 0x28], 0
jne 0x140003fc0
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_lock_resource.
call fcn.140004130
mov rcx, rax
lea rdx, [0x1400044a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000411d
mov rdx, qword [rsp + 0x38]
mov rcx, qword [rsp + 0x40]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov eax, eax
mov qword [0x1400111b8], rax
cmp qword [0x1400111b8], 0
jne 0x14000400f
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_get_resource_size.
call fcn.140004130
mov rcx, rax
lea rdx, [0x1400044a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000411d
mov rcx, qword [0x1400111b8]
call fcn.140007e80
mov qword [0x1400111a8], rax
mov rcx, qword [0x1400111b8]
call fcn.140007e80
mov qword [0x1400111a0], rax
cmp qword [0x1400111a8], 0
jne 0x14000406b
mov rcx, qword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
lea rdx, str.Failed_to_allocate_memory.
call fcn.140004130
mov rcx, rax
lea rdx, [0x1400044a0]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
jmp 0x14000411d
mov rcx, qword [0x1400111a8]
mov rdx, qword [rsp + 0x28]
mov r8, qword [0x1400111b8]
call sub.VCRUNTIME140.dll_memcpy
mov rax, qword [0x1400111a8]
mov rcx, qword [0x1400111b8]
mov rdx, qword [rax + rcx - 0x10]
mov qword [0x140011220], rdx
mov rax, qword [rax + rcx - 8]
mov qword [0x140011228], rax
mov rax, qword [0x1400111a8]
mov rcx, qword [0x1400111b8]
mov rdx, qword [rax + rcx - 0x10]
mov qword [0x140011230], rdx
mov rax, qword [rax + rcx - 8]
mov qword [0x140011238], rax
mov rax, qword [0x1400111b8]
sub rax, 0x10
mov r8d, eax
mov rdx, qword [0x1400111a0]
mov rcx, qword [0x1400111a8]
call fcn.140003cd0
mov rcx, qword [0x1400111a8]
mov r8, qword [0x1400111b8]
xor edx, edx
call sub.VCRUNTIME140.dll_memset
mov rcx, qword [0x1400111a8]
call qword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov qword [0x1400111a8], 0
add rsp, 0x48
ret