Function at 0x40ddf0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rcx
mov rax, rsp
sub rsp, 0x138
mov qword [rsp + 0xf8], 0xfffffffffffffffe
mov qword [rax + 0x18], rbx
mov qword [rax + 0x20], rbp
mov qword [rax - 8], rsi
mov qword [rax - 0x10], rdi
mov qword [rax - 0x18], r12
mov qword [rax - 0x20], r13
mov qword [rax - 0x28], r14
mov qword [rax - 0x30], r15
mov r13d, edx
mov dword [rsp + 0x80], edx
mov rbp, rcx
xor edi, edi
mov dword [rsp + 0xd0], edi
mov eax, dword [0x00468970]
lea rsi, [0x0044f658]
lea rbx, [0x0044f970]
lea r12, [0x00468950]
lea r15, [0x0044f640]
test al, 1
jne 0x40dee2
or eax, 1
mov dword [0x00468970], eax
mov qword [0x00468938], rdi
mov dword [0x00468940], edi
mov qword [0x00468930], rsi
mov dword [0x00468948], edi
xor edx, edx
lea rcx, [0x00468930]
call qword [0x0044f660]
nop
mov qword [0x00468930], rbx
mov qword [rsp + 0xd0], r12
mov qword [0x00468958], rdi
mov dword [0x00468960], edi
mov qword [0x00468950], r15
mov dword [0x00468968], edi
xor edx, edx
mov rcx, r12
call qword [0x0044f648]
nop
lea rcx, [0x0044e9f0]
call fcn.00427950
nop
mov eax, dword [0x00468970]
test al, 2
jne 0x40df2d
or eax, 2
mov dword [0x00468970], eax
mov qword [0x00468910], rdi
mov dword [0x00468918], edi
lea rax, [0x004501a0]
mov qword [0x00468908], rax
mov dword [0x00468920], edi
xor edx, edx
lea rcx, [0x00468908]
call qword [0x004501a8]
nop
lea rcx, [0x0044e9a0]
call fcn.00427950
nop
mov r14d, 1
mov ecx, dword [0x00468918]
test ecx, ecx
jne 0x40e398
mov qword [rsp + 0x98], rdi
mov dword [rsp + 0xa0], edi
mov qword [rsp + 0x90], rsi
mov dword [rsp + 0xa8], edi
xor edx, edx
lea rcx, [rsp + 0x90]
call qword [0x0044f660]
nop
mov qword [rsp + 0x90], rbx
lea rax, [rsp + 0xb0]
mov qword [rsp + 0xd0], rax
mov qword [rsp + 0xb8], rdi
mov dword [rsp + 0xc0], edi
mov qword [rsp + 0xb0], r15
mov dword [rsp + 0xc8], edi
xor edx, edx
lea rcx, [rsp + 0xb0]
call qword [0x0044f648]
nop
mov qword [rsp + 0x48], rdi
mov dword [rsp + 0x50], edi
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x58], edi
xor edx, edx
lea rcx, [rsp + 0x40]
call qword [0x0044f648]
nop
lea rax, [0x0044f678]
mov qword [rsp + 0x40], rax
mov ebx, edi
lea rax, str.message
nop
inc ebx
inc rax
cmp byte [rax], 0
jne 0x40dff0
movsxd rsi, dword [rsp + 0x50]
lea edx, [rsi + rbx]
lea rcx, [rsp + 0x40]
call qword [0x0044f680]
cmp esi, esi
jge 0x40e02f
mov rax, qword [rsp + 0x48]
lea rdx, [rax + rsi]
movsxd rcx, ebx
add rcx, rax
add rcx, rsi
mov eax, esi
sub eax, esi
movsxd r8, eax
call fcn.004266e0
movsxd r8, ebx
mov rcx, rsi
add rcx, qword [rsp + 0x48]
lea rdx, str.message
call fcn.004266e0
nop
lea rax, [0x0044f708]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x30], r14d
mov dword [rsp + 0x28], edi
lea rax, [rsp + 0x90]
mov qword [rsp + 0x20], rax
lea r9, [0x00416740]
lea r8, [rsp + 0x40]
lea rdx, [rsp + 0xd8]
mov rcx, qword [0x004687c8]
call fcn.00413440
mov qword [rsp + 0xd8], r15
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xe0], rdi
mov dword [rsp + 0xe8], edi
mov dword [rsp + 0xf0], edi
test rcx, rcx
je 0x40e0ba
call fcn.00426530
nop
mov qword [rsp + 0x40], r15
mov rcx, qword [rsp + 0x48]
mov qword [rsp + 0x48], rdi
mov dword [rsp + 0x50], edi
mov dword [rsp + 0x58], edi
test rcx, rcx
je 0x40e0db
call fcn.00426530
mov r12d, edi
cmp dword [rsp + 0xa0], edi
jle 0x40e276
mov r13, rdi
nop
mov edx, dword [rsp + 0xc0]
lea rcx, [rsp + 0xb0]
mov rax, qword [rsp + 0xb0]
call qword [rax + 8]
mov r11, qword [rsp + 0x98]
movsxd rbx, dword [r11 + r13]
add rbx, qword [rsp + 0xb8]
mov edx, 0x3d
mov rcx, rbx
call fcn.00428500
mov rsi, rax
test rax, rax
je 0x40e259
mov byte [rax], 0
mov rcx, rbx
call fcn.00428970
mov r15d, eax
test eax, eax
jle 0x40e252
movsxd rbx, dword [0x00468918]
lea edx, [rbx + 1]
lea rcx, [0x00468908]
mov r8, qword [0x00468908]
call qword [r8 + 8]
cmp ebx, ebx
jge 0x40e18c
mov rax, qword [0x00468910]
lea rdx, [rax + rbx*4]
lea rcx, [rdx + 4]
mov eax, ebx
sub eax, ebx
movsxd r8, eax
shl r8, 2
call fcn.004266e0
mov rax, qword [0x00468910]
mov dword [rax + rbx*4], r15d
mov r15d, dword [0x00468940]
movsxd rbx, dword [0x00468918]
lea edx, [rbx + 1]
lea rcx, [0x00468908]
mov rax, qword [0x00468908]
call qword [rax + 8]
cmp ebx, ebx
jge 0x40e1dc
mov rax, qword [0x00468910]
lea rdx, [rax + rbx*4]
lea rcx, [rdx + 4]
mov eax, ebx
sub eax, ebx
movsxd r8, eax
shl r8, 2
call fcn.004266e0
mov rax, qword [0x00468910]
mov dword [rax + rbx*4], r15d
lea rdx, [rsi + 1]
lea rcx, [rsp + 0xd8]
call fcn.0040cab0
mov rbx, rax
mov r8, qword [rax]
mov edx, dword [rax + 0x10]
mov rcx, rax
call qword [r8 + 8]
mov rdx, qword [rbx + 8]
lea rcx, [0x00468930]
call fcn.00402d30
nop
lea r15, [0x0044f640]
mov qword [rsp + 0xd8], r15
mov rcx, qword [rsp + 0xe0]
mov qword [rsp + 0xe0], rdi
mov dword [rsp + 0xe8], edi
mov dword [rsp + 0xf0], edi
test rcx, rcx
je 0x40e259
call fcn.00426530
jmp 0x40e259
lea r15, [0x0044f640]
inc r12d
add r13, 4
cmp r12d, dword [rsp + 0xa0]
jl 0x40e0f0
mov r13d, dword [rsp + 0x80]
movsxd rbx, dword [0x00468918]
lea edx, [rbx + 1]
lea rcx, [0x00468908]
mov rax, qword [0x00468908]
call qword [rax + 8]
cmp ebx, ebx
jge 0x40e2b4
mov rax, qword [0x00468910]
lea rdx, [rax + rbx*4]
lea rcx, [rdx + 4]
mov eax, ebx
sub eax, ebx
movsxd r8, eax
shl r8, 2
call fcn.004266e0
mov rax, qword [0x00468910]
mov dword [rax + rbx*4], edi
movsxd rbx, dword [0x00468918]
lea edx, [rbx + 1]
lea rcx, [0x00468908]
mov rax, qword [0x00468908]
call qword [rax + 8]
cmp ebx, ebx
jge 0x40e2fc
mov rax, qword [0x00468910]
lea rdx, [rax + rbx*4]
lea rcx, [rdx + 4]
mov eax, ebx
sub eax, ebx
movsxd r8, eax
shl r8, 2
call fcn.004266e0
mov rax, qword [0x00468910]
mov dword [rax + rbx*4], edi
mov qword [rsp + 0xb0], r15
mov rcx, qword [rsp + 0xb8]
mov qword [rsp + 0xb8], rdi
mov dword [rsp + 0xc0], edi
mov dword [rsp + 0xc8], edi
test rcx, rcx
je 0x40e336
call fcn.00426530
lea rax, [0x0044f620]
mov qword [rsp + 0xb0], rax
lea rax, [0x0044f658]
mov qword [rsp + 0x90], rax
mov rcx, qword [rsp + 0x98]
mov qword [rsp + 0x98], rdi
mov dword [rsp + 0xa0], edi
mov dword [rsp + 0xa8], edi
test rcx, rcx
je 0x40e38b
call fcn.00426530
mov ecx, dword [0x00468918]
lea r12, [0x00468950]
jmp 0x40e398
mov ecx, dword [0x00468918]
lea r12, [0x00468950]
cmp ecx, 1
jle 0x40e48d
mov rax, qword [0x00468910]
mov edx, dword [0x00468940]
nop
cmp dword [rax], r13d
jne 0x40e3c1
movsxd rbx, dword [rax + 4]
test ebx, ebx
js 0x40e3c1
cmp ebx, edx
jl 0x40e3d3
add r14d, 2
add rax, 8
cmp r14d, ecx
jl 0x40e3b0
jmp 0x40e48d
mov edx, dword [0x00468960]
mov rcx, r12
mov rax, qword [0x00468950]
call qword [rax + 8]
mov rax, qword [0x00468938]
movsxd rsi, dword [rax + rbx*4]
mov qword [rbp + 8], rdi
mov dword [rbp + 0x10], edi
mov qword [rbp], r15
mov dword [rbp + 0x18], edi
xor edx, edx
mov rcx, rbp
call qword [0x0044f648]
nop
lea rax, [0x0044f678]
mov qword [rbp], rax
add rsi, qword [0x00468958]
je 0x40e43a
cmp byte [rsi], 0
je 0x40e43a
mov rax, rsi
nop
nop
nop
inc edi
inc rax
cmp byte [rax], 0
jne 0x40e430
movsxd rbx, dword [rbp + 0x10]
lea edx, [rbx + rdi]
mov rcx, rbp
call qword [0x0044f680]
cmp ebx, ebx
jge 0x40e467
mov rdx, rbx
add rdx, qword [rbp + 8]
movsxd rcx, edi
add rcx, rdx
mov eax, ebx
sub eax, ebx
movsxd r8, eax
call fcn.004266e0
movsxd r8, edi
mov rcx, rbx
add rcx, qword [rbp + 8]
mov rdx, rsi
call fcn.004266e0
nop
lea rax, [0x0044f708]
mov qword [rbp], rax
mov rax, rbp
jmp 0x40e663
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x70], edi
mov qword [rsp + 0x60], r15
mov dword [rsp + 0x78], edi
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [0x0044f648]
nop
lea r14, [0x0044f678]
mov qword [rsp + 0x60], r14
movsxd rbx, dword [rsp + 0x70]
mov edx, ebx
lea rcx, [rsp + 0x60]
call qword [0x0044f680]
cmp ebx, ebx
jge 0x40e4e7
mov rcx, qword [rsp + 0x68]
add rcx, rbx
mov eax, ebx
sub eax, ebx
movsxd r8, eax
mov rdx, rcx
call fcn.004266e0
nop
lea rax, [0x0044f708]
mov qword [rsp + 0x60], rax
xor edx, edx
lea rcx, [rsp + 0x60]
call qword [0x0044f710]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
mov ecx, r13d
shr ecx, 4
inc ecx
and r13d, 0xf
movzx edx, cx
mov r8d, 6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r12, rax
test rax, rax
je 0x40e5ce
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r11, rax
lea rax, [0x0044f618]
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], r11
shr ebx, 1
mov dword [rsp + 0x50], ebx
mov ecx, edi
test r13d, r13d
jle 0x40e5a5
mov r8d, r13d
nop
test ecx, ecx
js 0x40e592
cmp ecx, ebx
jge 0x40e592
movsxd rax, ecx
movzx edx, word [r11 + rax*2]
jmp 0x40e595
xor dx, dx
movzx eax, dx
lea ecx, [rcx + rax + 1]
dec r8
jne 0x40e580
test ecx, ecx
js 0x40e5b3
cmp ecx, ebx
jge 0x40e5b3
movsxd rax, ecx
movzx edx, word [r11 + rax*2]
jmp 0x40e5b6
xor dx, dx
movzx r8d, dx
lea eax, [rcx + 1]
cdqe
lea rdx, [r11 + rax*2]
lea rcx, [rsp + 0x60]
call fcn.00402b10
nop
mov qword [rbp + 8], rdi
mov dword [rbp + 0x10], edi
mov qword [rbp], r15
mov dword [rbp + 0x18], edi
xor edx, edx
mov rcx, rbp
call qword [0x0044f648]
nop
mov qword [rbp], r14
movsxd rsi, dword [rsp + 0x70]
mov r12, qword [rsp + 0x68]
movsxd rbx, dword [rbp + 0x10]
lea edx, [rsi + rbx]
mov rcx, rbp
call qword [0x0044f680]
cmp ebx, ebx
jge 0x40e621
mov rdx, rbx
add rdx, qword [rbp + 8]
lea rcx, [rdx + rsi]
mov eax, ebx
sub eax, ebx
movsxd r8, eax
call fcn.004266e0
mov r8, rsi
mov rcx, rbx
add rcx, qword [rbp + 8]
mov rdx, r12
call fcn.004266e0
nop
lea rax, [0x0044f708]
mov qword [rbp], rax
mov qword [rsp + 0x60], r15
mov rcx, qword [rsp + 0x68]
mov qword [rsp + 0x68], rdi
mov dword [rsp + 0x70], edi
mov dword [rsp + 0x78], edi
test rcx, rcx
je 0x40e660
call fcn.00426530
mov rax, rbp
mov rbx, qword [rsp + 0x150]
mov rbp, qword [rsp + 0x158]
mov rsi, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x128]
mov r12, qword [rsp + 0x120]
mov r13, qword [rsp + 0x118]
mov r14, qword [rsp + 0x110]
mov r15, qword [rsp + 0x108]
add rsp, 0x138
ret