Function at 0x1400011e0
Capabilities:
Allocate or change rwx memory
Extract resource via kernel32 functions

Disassembly:
push rbp
push r15
push r14
push rsi
push rdi
push rbx
sub rsp, 0x198
lea rbp, [rsp + 0x80]
mov qword [rbp + 0x110], 0xfffffffffffffffe
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rsi, rax
mov eax, dword [0x140047033]
mov dword [rbp - 0x2d], eax
mov eax, dword [0x140047030]
mov dword [rbp - 0x30], eax
mov eax, dword [0x140053da8]
mov ecx, dword [0x140054978]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
cmp eax, dword [rcx + 4]
jg 0x1400017be
lea rcx, [0x140053da0]
call fcn.140001ca0
mov edx, 0x66
mov rcx, rsi
mov r8, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
mov rcx, rsi
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
mov rcx, rsi
mov rdx, rdi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rsi, rax
lea r14d, [rbx - 0x192bf]
add ebx, 0xfffe6d42
mov rcx, rbx
call fcn.140037a8c
mov rdi, rax
mov rcx, rax
xor edx, edx
mov r8, rbx
call fcn.1400346c0
lea rdx, [rsi + 0x192bf]
mov rcx, rdi
mov r8, r14
call fcn.140034010
lea rsi, [rbp - 0x50]
mov rcx, rsi
mov rdx, rdi
call fcn.140001e60
mov rcx, rdi
call fcn.1400379c0
mov ecx, 0x4da0e976
jmp 0x1400012f0
mov rcx, qword [rbp + 0x90]
call fcn.14000b260
mov ecx, 0x5a1d79a7
nop word [rax + rax]
cmp ecx, 0x4da0e975
jg 0x140001320
cmp ecx, 0x17440a97
je 0x1400012d6
cmp ecx, 0x24d6109f
jne 0x1400012f0
mov rcx, qword [rbp + 0xc0]
mov qword [rbp + 0x90], rcx
mov ecx, 0x17440a97
jmp 0x1400012f0
cmp ecx, 0x4da0e976
je 0x140001332
cmp ecx, 0x5a1d79a7
jne 0x1400012f0
jmp 0x140001340
mov qword [rbp + 0xc0], rsi
mov ecx, 0x24d6109f
jmp 0x1400012f0
mov qword [rbp - 0x30], rax
mov rdx, qword [rbp - 0x30]
lea rcx, [rbp - 0x30]
call fcn.140001e60
lea rcx, [rbp + 0x108]
lea r14, [rbp + 0x90]
lea r8, [rbp - 0x30]
mov rdx, r14
call fcn.14000ede0
mov eax, 0x5eb4f20
mov r15d, 0xe47b77b9
mov edi, 0xba95cf94
lea rsi, [rbp - 0x30]
jmp 0x1400013b0
mov rcx, rsi
call fcn.140002960
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x71e5d11f
cmove eax, r15d
cmp dword [0x140053db0], 0xa
cmovl eax, r15d
nop dword [rax]
cmp eax, 0x2f1d13c0
jg 0x1400013e0
cmp eax, 0xed261c15
jg 0x140001410
cmp eax, 0xba95cf94
je 0x140001381
cmp eax, 0xe47b77b9
jne 0x1400013b0
mov eax, 0x2f1d13c1
jmp 0x1400013b0
cmp eax, 0x2f1d13c1
je 0x140001449
cmp eax, 0x5b1b7977
je 0x14000145a
cmp eax, 0x71e5d11f
jne 0x1400013b0
mov rcx, rsi
call fcn.140002960
mov eax, 0xba95cf94
jmp 0x1400013b0
cmp eax, 0x5eb4f20
je 0x140001423
cmp eax, 0xed261c16
jne 0x1400013b0
jmp 0x1400014b0
mov eax, dword [0x140053dac]
lea ecx, [rax - 1]
imul ecx, eax
test cl, 1
mov eax, 0x71e5d11f
cmove eax, edi
cmp dword [0x140053db0], 0xa
cmovl eax, edi
jmp 0x1400013b0
mov qword [rbp + 0xf0], rsi
mov eax, 0x5b1b7977
jmp 0x1400013b0
mov rbx, qword [rbp + 0xf0]
mov eax, 0xa39599aa
nop word cs:[rax + rax]
cmp eax, 0x7f33240c
je 0x1400014a6
cmp eax, 0xc4a7f57b
je 0x140001493
cmp eax, 0xa39599aa
jne 0x140001470
mov qword [rbp + 0xc0], rbx
mov eax, 0xc4a7f57b
jmp 0x140001470
mov rcx, qword [rbp + 0xc0]
call fcn.140003e00
mov eax, 0x7f33240c
jmp 0x140001470
mov eax, 0xed261c16
jmp 0x1400013b0
mov eax, 0xe062f480
jmp 0x1400014d0
mov rax, qword [rbp + 0xf0]
add rax, 0x10
mov qword [rbp + 0xc0], rax
mov eax, 0x1c62f0f4
nop
cmp eax, 0x14df4df9
jg 0x140001500
cmp eax, 0xa27c57b0
je 0x1400014b7
cmp eax, 0xe062f480
jne 0x1400014d0
mov qword [rbp + 0xf0], r14
mov eax, 0xa27c57b0
jmp 0x1400014d0
cmp eax, 0x1c62f0f4
je 0x140001510
cmp eax, 0x14df4dfa
jne 0x1400014d0
jmp 0x140001525
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax]
mov qword [rbp - 0x30], rax
mov eax, 0x14df4dfa
jmp 0x1400014d0
mov rdx, qword [rbp - 0x30]
xor ecx, ecx
mov r8d, 0x3000
mov r9d, 4
call qword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov rsi, rax
mov ecx, 0x4da0e976
jmp 0x140001560
mov rcx, qword [rbp + 0xc0]
call fcn.14000b260
mov ecx, 0x5a1d79a7
nop dword [rax + rax]
cmp ecx, 0x4da0e975
jg 0x140001590
cmp ecx, 0x17440a97
je 0x140001547
cmp ecx, 0x24d6109f
jne 0x140001560
mov rcx, qword [rbp + 0xf0]
mov qword [rbp + 0xc0], rcx
mov ecx, 0x17440a97
jmp 0x140001560
cmp ecx, 0x4da0e976
je 0x1400015a2
cmp ecx, 0x5a1d79a7
jne 0x140001560
jmp 0x1400015b0
mov qword [rbp + 0xf0], r14
mov ecx, 0x24d6109f
jmp 0x140001560
mov qword [rbp - 0x30], rax
mov rdx, qword [rbp - 0x30]
mov eax, 0xe062f480
jmp 0x1400015e0
mov rax, qword [rbp + 0xf0]
add rax, 0x10
mov qword [rbp + 0xc0], rax
mov eax, 0x1c62f0f4
nop word cs:[rax + rax]
cmp eax, 0x14df4df9
jg 0x140001610
cmp eax, 0xa27c57b0
je 0x1400015bf
cmp eax, 0xe062f480
jne 0x1400015e0
mov qword [rbp + 0xf0], r14
mov eax, 0xa27c57b0
jmp 0x1400015e0
cmp eax, 0x1c62f0f4
je 0x140001620
cmp eax, 0x14df4dfa
jne 0x1400015e0
jmp 0x140001635
mov rax, qword [rbp + 0xc0]
mov rax, qword [rax]
mov qword [rbp - 0x30], rax
mov eax, 0x14df4dfa
jmp 0x1400015e0
mov r8, qword [rbp - 0x30]
mov rcx, rsi
call fcn.140034010
movaps xmm0, xmmword [0x140047010]
movaps xmmword [rbp + 0xd0], xmm0
movaps xmm0, xmmword [section..rdata]
movaps xmmword [rbp + 0xc0], xmm0
movaps xmm0, xmmword [0x140047020]
movaps xmmword [rbp + 0xf0], xmm0
lea rcx, [rbp - 0x30]
lea rdx, [rbp + 0xc0]
lea r8, [rbp + 0xf0]
call fcn.14000c230
mov eax, 0xe062f480
jmp 0x1400016a0
mov rax, qword [rbp + 0xb8]
add rax, 0x10
mov qword [rbp + 0xb0], rax
mov eax, 0x1c62f0f4
cmp eax, 0x14df4df9
jg 0x1400016d0
cmp eax, 0xa27c57b0
je 0x140001689
cmp eax, 0xe062f480
jne 0x1400016a0
mov qword [rbp + 0xb8], r14
mov eax, 0xa27c57b0
jmp 0x1400016a0
cmp eax, 0x1c62f0f4
je 0x1400016e0
cmp eax, 0x14df4dfa
jne 0x1400016a0
jmp 0x1400016f8
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax]
mov qword [rbp + 0xe8], rax
mov eax, 0x14df4dfa
jmp 0x1400016a0
mov r8, qword [rbp + 0xe8]
lea rcx, [rbp - 0x30]
mov rdx, rsi
call fcn.14000d1b0
mov eax, 0xe062f480
jmp 0x140001730
mov rax, qword [rbp + 0xb8]
add rax, 0x10
mov qword [rbp + 0xb0], rax
mov eax, 0x1c62f0f4
nop dword [rax]
cmp eax, 0x14df4df9
jg 0x140001760
cmp eax, 0xa27c57b0
je 0x140001712
cmp eax, 0xe062f480
jne 0x140001730
mov qword [rbp + 0xb8], r14
mov eax, 0xa27c57b0
jmp 0x140001730
cmp eax, 0x1c62f0f4
je 0x140001770
cmp eax, 0x14df4dfa
jne 0x140001730
jmp 0x140001788
mov rax, qword [rbp + 0xb0]
mov rax, qword [rax]
mov qword [rbp + 0xe8], rax
mov eax, 0x14df4dfa
jmp 0x140001730
mov rdi, qword [rbp + 0xe8]
call qword [sym.imp.KERNEL32.dll_GetCurrentProcess]
lea rcx, [rbp + 0xe8]
mov qword [rsp + 0x20], rcx
mov rcx, rax
mov rdx, rsi
mov r8, rdi
mov r9d, 0x40
call qword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov rcx, rsi
call section..text
lea rcx, [0x140053da8]
call fcn.1400323c8
cmp dword [0x140053da8], 0xffffffff
jne 0x140001244
lea rcx, [0x140053da0]
lea rdx, [rbp - 0x30]
call fcn.140002020
lea rcx, [0x140002710]
call fcn.140032620
lea rcx, [0x140053da8]
call fcn.140032460
jmp 0x140001244