Function at 0x140009d20
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push r15
push r14
push r13
push r12
push rsi
push rdi
push rbx
sub rsp, 0xc8
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x40], 0xfffffffffffffffe
stmxcsr dword [rbp - 0x10]
or dword [rbp - 0x10], 0x8040
ldmxcsr dword [rbp - 0x10]
mov edx, 3
mov r8d, 1
xor ecx, ecx
xor r9d, r9d
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
mov esi, 0xffffffff
test rax, rax
je 0x14000a165
mov rdi, rax
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x14000a165
mov rbx, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rbp + 0x10], rax
test rax, rax
je 0x14000a165
xor ecx, ecx
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rbp + 0x2c], eax
test eax, eax
je 0x14000a165
lea rcx, [rbp - 0x50]
call fcn.140004880
xorps xmm0, xmm0
movaps xmmword [rbp - 0x30], xmm0
mov qword [rbp - 0x20], 0
mov r14, qword [rbp - 0x50]
mov rax, qword [rbp - 0x48]
mov qword [rbp + 0x18], rax
cmp r14, rax
je 0x14000a151
mov qword [rbp - 0x38], rbx
xor esi, esi
xor r13d, r13d
xor r15d, r15d
mov rdi, qword [rbp + 0x10]
mov ebx, dword [rbp + 0x2c]
jmp 0x140009e16
call fcn.140011f2c
add r14, 0x20
mov rsi, r12
cmp r14, qword [rbp + 0x18]
je 0x14000a08f
cmp qword [r14 + 0x18], 8
mov rcx, r14
jb 0x140009e23
mov rcx, qword [r14]
mov qword [rbp + 0x30], rcx
call fcn.140016334
mov qword [rbp + 0x38], rax
lea rcx, [rbp - 0x10]
lea rdx, [rbp + 0x30]
call fcn.140005150
mov ecx, 0x38
call fcn.140011ee8
mov dword [rax], ebx
mov qword [rax + 8], rdi
mov r12, rax
add r12, 0x10
mov rcx, r12
lea rdx, [rbp - 0x10]
mov qword [rbp + 0x20], rax
call fcn.1400055a0
lea rax, [0x1400074a0]
mov r9, qword [rbp + 0x20]
mov qword [r9 + 0x30], rax
lea rax, [rbp + 0x38]
mov qword [rsp + 0x28], rax
mov dword [rsp + 0x20], 0
xor ecx, ecx
xor edx, edx
lea r8, [0x14000a3f0]
call fcn.1400144dc
mov qword [rbp + 0x30], rax
test rax, rax
je 0x14000a180
cmp r15, r13
je 0x140009ec0
mov qword [r15], rax
mov eax, dword [rbp + 0x38]
mov dword [r15 + 8], eax
add r15, 0x10
mov qword [rbp - 0x28], r15
mov r12, rsi
jmp 0x14000a041
mov rdi, r13
sub rdi, rsi
sar rdi, 4
lea r15, [rdi + 1]
mov rax, rdi
shr rax, 1
movabs rdx, 0xfffffffffffffff
mov rcx, rdx
sub rcx, rax
add rax, rdi
cmp rax, r15
cmovbe rax, r15
cmp rdi, rcx
cmova rax, rdx
mov rcx, rax
shr rcx, 0x3c
jne 0x14000a1b8
mov rbx, rax
shl rbx, 4
cmp rax, 0x100
jb 0x140009f3f
movabs rcx, 0xffffffffffffffe
cmp rax, rcx
jae 0x14000a1bd
lea rcx, [rbx + 0x27]
call fcn.140011ee8
mov r12, rax
add r12, 0x27
and r12, 0xffffffffffffffe0
mov qword [r12 - 8], rax
jmp 0x140009f60
test rax, rax
je 0x140009f51
mov rcx, rbx
call fcn.140011ee8
mov r12, rax
jmp 0x140009f60
xor r12d, r12d
nop word cs:[rax + rax]
shl rdi, 4
mov rax, qword [rbp + 0x30]
mov qword [r12 + rdi], rax
mov eax, dword [rbp + 0x38]
mov dword [r12 + rdi + 8], eax
mov qword [rbp + 0x30], 0
mov dword [rbp + 0x38], 0
cmp rsi, r13
je 0x140009fc2
xor eax, eax
nop word [rax + rax]
mov rcx, qword [rsi + rax]
mov qword [r12 + rax], rcx
mov ecx, dword [rsi + rax + 8]
mov dword [r12 + rax + 8], ecx
mov qword [rsi + rax], 0
mov dword [rsi + rax + 8], 0
lea rcx, [rsi + rax]
add rcx, 0x10
add rax, 0x10
cmp rcx, r13
jne 0x140009f90
test rsi, rsi
je 0x14000a017
cmp rsi, r13
je 0x140009fe3
mov rax, rsi
nop
cmp dword [rax + 8], 0
jne 0x14000a17b
add rax, 0x10
cmp rax, r13
jne 0x140009fd0
mov rdx, qword [rbp - 0x20]
sub rdx, rsi
cmp rdx, 0x1000
jb 0x14000a00f
mov rax, qword [rsi - 8]
add rsi, 0xfffffffffffffff8
sub rsi, rax
cmp rsi, 0x20
jae 0x14000a1b3
add rdx, 0x27
mov rsi, rax
mov rcx, rsi
call fcn.140011f2c
mov qword [rbp - 0x30], r12
shl r15, 4
add r15, r12
mov qword [rbp - 0x28], r15
add rbx, r12
mov qword [rbp - 0x20], rbx
cmp dword [rbp + 0x38], 0
mov r13, rbx
mov rdi, qword [rbp + 0x10]
mov ebx, dword [rbp + 0x2c]
jne 0x14000a17b
mov rax, qword [rbp + 8]
cmp rax, 8
jb 0x140009e05
mov rcx, qword [rbp - 0x10]
lea rdx, [rax*2 + 2]
cmp rdx, 0x1000
jb 0x140009e00
mov r8, qword [rcx - 8]
add rcx, 0xfffffffffffffff8
sub rcx, r8
cmp rcx, 0x20
jae 0x14000a1b3
add rax, rax
add rax, 0x29
mov rdx, rax
mov rcx, r8
jmp 0x140009e00
cmp r12, r15
je 0x14000a0ee
lea rsi, [rbp - 0x10]
mov rdi, r12
nop dword [rax + rax]
mov ebx, dword [rdi + 8]
test ebx, ebx
je 0x14000a195
call sub.KERNEL32.dll_GetCurrentThreadId
cmp ebx, eax
je 0x14000a19f
mov rax, qword [rdi]
mov qword [rbp - 0x10], rax
mov eax, dword [rdi + 8]
mov dword [rbp - 8], eax
mov rcx, rsi
xor edx, edx
call fcn.1400117e0
test eax, eax
jne 0x14000a1a9
mov qword [rdi], 0
mov dword [rdi + 8], 0
add rdi, 0x10
cmp rdi, r15
jne 0x14000a0a0
mov rcx, qword [rbp - 0x38]
call qword [sym.imp.KERNEL32.dll_FreeResource]
test r12, r12
je 0x14000a15a
cmp r12, r15
je 0x14000a11f
mov rax, r12
nop word cs:[rax + rax]
cmp dword [rax + 8], 0
jne 0x14000a17b
add rax, 0x10
cmp rax, r15
jne 0x14000a110
sub r13, r12
cmp r13, 0x1000
jb 0x14000a144
mov rax, qword [r12 - 8]
add r12, 0xfffffffffffffff8
sub r12, rax
cmp r12, 0x20
jae 0x14000a1b3
add r13, 0x27
mov r12, rax
mov rcx, r12
mov rdx, r13
call fcn.140011f2c
jmp 0x14000a15a
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeResource]
lea rcx, [rbp - 0x50]
call fcn.1400057d0
xor esi, esi
mov eax, esi
add rsp, 0xc8
pop rbx
pop rdi
pop rsi
pop r12
pop r13
pop r14
pop r15
pop rbp
ret
call fcn.140016308
mov qword [rbp + 0x18], r12
mov dword [rbp + 0x38], 0
mov ecx, 6
call fcn.140010fc0
mov ecx, 1
call fcn.140010fc0
mov ecx, 5
call fcn.140010fc0
mov ecx, 2
call fcn.140010fc0
call fcn.14001582c
call fcn.1400056a0
call fcn.1400056a0
int3