Function at 0x140072c10
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rbp
mov qword [rsp + 0x18], rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x40
mov rbp, r8
mov rbx, rdx
mov rsi, rcx
lea r8, [0x14011c6a8]
lea rdx, str.OLEAUT32.DLL
lea rcx, str.OleLoadPicture
xor r9d, r9d
call fcn.1400561c8
xor edi, edi
cmp qword [0x14011bdc0], rdi
jne 0x140072c73
xor edx, edx
xor ecx, ecx
call fcn.14001d710
cmp rax, rdi
jne 0x140072c73
or eax, 0xffffffff
jmp 0x140072e95
lea r12, [rsi + 0x18]
mov dword [rsi + 0x1c], edi
mov dword [r12], edi
cmp rbp, rdi
je 0x140072c88
mov eax, dword [rbp]
jmp 0x140072c8a
mov eax, edi
cmp rbx, rdi
mov ecx, 0x64
mov dword [rsi + 0x28], edi
cmove rbx, rcx
mov dword [rsi + 0x2c], edi
mov dword [rsi + 0x30], edi
cmp rbx, 0x10000
mov dword [rsi + 0x34], edi
jge 0x140072cf2
mov rbp, qword [0x14011be68]
lea r8, str.IMAGE
movzx edx, bx
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r13, rax
cmp rax, rdi
je 0x140072c6b
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
cmp rbx, 8
jb 0x140072c6b
mov rdx, r13
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
jmp 0x140072cfc
cmp eax, edi
je 0x140072d1b
mov rcx, qword [rbx]
movsxd rbx, eax
cmp rcx, rdi
je 0x140072c6b
lea r8, [rsi + 0x40]
mov rdx, rbx
lea rbp, [rsi + 0x38]
call fcn.14005afa8
mov qword [rbp], rax
jmp 0x140072d2b
lea rbp, [rsi + 0x38]
mov rcx, rbx
mov rdx, rbp
call qword [0x14011bd20]
cmp qword [rbp], rdi
jne 0x140072d3b
mov eax, 0xfffffffe
jmp 0x140072e95
mov rcx, qword [rbp]
lea rdx, [rsp + 0x20]
mov dword [rsp + 0x20], edi
call qword [0x14011bd48]
mov edx, dword [rsp + 0x20]
lea rcx, [rsp + 0x28]
shl rdx, 4
call fcn.14005c6f4
mov r8d, dword [rsp + 0x20]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rbp]
call qword [0x14011bd28]
mov rdx, qword [rsp + 0x28]
mov rcx, qword [rbp]
mov r8, r12
call qword [0x14011bd50]
cmp dword [r12], 1
ja 0x140072d95
or ebx, 0xffffffff
jmp 0x140072e89
mov rcx, qword [rbp]
mov r13d, 0x5100
lea r8, [rsp + 0x88]
mov edx, r13d
mov dword [rsp + 0x88], edi
call qword [0x14011bd58]
movsxd rdx, dword [rsp + 0x88]
lea rcx, [rsp + 0x30]
call fcn.14005c6f4
mov rbx, qword [rsp + 0x30]
mov r8d, dword [rsp + 0x88]
mov rcx, qword [rbp]
mov r9, rbx
mov edx, r13d
call qword [0x14011bd60]
mov r15d, dword [rsp + 0x88]
movsxd rcx, dword [r12]
lea r13, [rsi + 8]
sub r15, 0x18
mov r9d, 4
mov r8, r13
mov rdx, rsi
shr r15, 2
call fcn.14005cdcc
mov ebp, edi
cmp r15d, edi
jbe 0x140072e75
mov ebp, r15d
mov r13, rdi
mov r14, rdi
mov r15d, r15d
mov rax, qword [rbx + 0x10]
lea r8, [rsi + 8]
mov r9d, 4
mov ecx, dword [r14 + rax]
mov rdx, rsi
lea eax, [rcx + rcx*4]
mov rcx, r13
lea edi, [rax + rax]
call fcn.14005cdcc
inc r13
add r14, 4
sub r15, 1
mov dword [rax], edi
jne 0x140072e22
lea r12, [rsi + 0x18]
lea r13, [rsi + 8]
jmp 0x140072e75
mov ecx, ebp
mov r9d, 4
mov r8, r13
mov rdx, rsi
call fcn.14005cdcc
inc ebp
mov dword [rax], edi
cmp ebp, dword [r12]
jb 0x140072e5e
mov ebx, dword [r12]
lea rcx, [rsp + 0x30]
call fcn.140054c44
lea rcx, [rsp + 0x28]
call fcn.140054c44
mov eax, ebx
lea r11, [rsp + 0x40]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret