Function at 0x1400108d0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov qword [rbp - 0x58], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140079698]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
add rcx, 0x258
call fcn.140001fa0
mov r8d, 2
lea rdx, str.129
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x140010de4
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140010de4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x140010de4
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea ebx, [rax - 0x28]
mov edx, 0x400
lea rcx, [rbp - 0x50]
call fcn.140025804
nop
xor r9d, r9d
mov r8d, ebx
lea rdx, [rdi + 0x28]
lea rcx, [rbp - 0x50]
call fcn.14002591c
xor r15d, r15d
mov qword [rsp + 0x20], r15
mov r9d, 0x1000
lea r8d, [r15 + 1]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001f548
nop
mov ecx, 0x1335ca
call fcn.1400404a4
mov byte [rbp + 0x30], r15b
mov ebx, r15d
call fcn.140040478
mov ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3e
sub ecx, eax
cmp cl, 0x1a
jae 0x1400109ed
add cl, 0x41
jmp 0x1400109ff
cmp cl, 0x34
jae 0x1400109f7
add cl, 0x47
jmp 0x1400109ff
cmp cl, 0x3e
jae 0x140010a03
sub cl, 4
mov byte [rbp + rbx + 0x10], cl
inc rbx
cmp rbx, 0x20
jl 0x1400109c4
mov r8, qword [rsp + 0x50]
test r8b, 1
jne 0x140010a27
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140010a58
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010a77
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010a9e
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010abd
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010ae4
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
mov eax, dword [rcx]
mov dword [rbp - 0x60], eax
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010b08
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010b2f
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
mov eax, dword [rcx]
mov dword [rbp - 0x5c], eax
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010b53
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010b7a
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
mov r13d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010b9c
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010bb9
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140015344
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400202d0
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.1400142d0
mov rbx, rax
or rdi, 0xffffffffffffffff
test rax, rax
jne 0x140010c03
mov ecx, r15d
jmp 0x140010c10
mov rcx, rdi
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140010c06
mov r8d, ecx
mov rdx, rbx
lea rcx, [r14 + 0x258]
call fcn.1400022a0
mov rcx, rbx
call fcn.14001533c
mov rcx, rsi
call fcn.14001533c
test byte [rsp + 0x50], 1
jne 0x140010c49
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140010c70
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140015344
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400202d0
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.1400142d0
mov rbx, rax
test rax, rax
jne 0x140010cb6
mov ecx, r15d
jmp 0x140010cca
mov rcx, rdi
nop dword [rax]
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140010cc0
mov r8d, ecx
mov rdx, rbx
lea rcx, [r14 + 0x260]
call fcn.1400022a0
mov rcx, rbx
call fcn.14001533c
mov rcx, rsi
call fcn.14001533c
test byte [rsp + 0x50], 1
jne 0x140010d03
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140020bfc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140010d2a
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001fe4c
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140015344
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400202d0
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.1400142d0
mov rbx, rax
lea rcx, [r14 + 0x268]
test rax, rax
jne 0x140010d80
mov edi, r15d
jmp 0x140010d8a
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140010d80
mov r8d, edi
mov rdx, rbx
call fcn.1400022a0
mov rcx, rbx
call fcn.14001533c
mov rcx, rsi
call fcn.14001533c
cmp dword [rbp - 0x60], 0
sete r15b
mov dword [r14 + 0x244], r15d
mov eax, dword [rbp - 0x5c]
mov dword [r14 + 0x248], eax
mov dword [r14 + 0x24c], r13d
lea rcx, [rsp + 0x30]
call fcn.14001fe30
nop
lea rcx, [rsp + 0x30]
call fcn.14001f72c
nop
lea rcx, [rbp - 0x50]
call fcn.140025850
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140037060
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret