Function at 0x140033300
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
push rbp
push rdi
push r13
push r14
push r15
lea rbp, [rsp - 0x37]
sub rsp, 0xe0
mov rax, qword [0x140091240]
xor rax, rsp
mov qword [rbp + 0x27], rax
mov rdi, r8
mov rsi, rdx
mov r13, rcx
mov qword [rbp - 0x61], rdx
xor ebx, ebx
mov dword [rbp - 0x69], ebx
xorps xmm0, xmm0
movups xmmword [rdx], xmm0
movups xmmword [rdx + 0x10], xmm0
movups xmmword [rdx + 0x30], xmm0
movups xmmword [rdx + 0x50], xmm0
mov dword [rdx], 0xc8
mov qword [rdx + 8], rbx
mov qword [rdx + 0x10], rbx
mov qword [rdx + 0x18], rbx
movups xmmword [rdx + 0x20], xmm0
mov qword [rdx + 0x30], rbx
mov r15d, reloc.WS2_32.dll_ntohs
mov qword [rdx + 0x38], r15
mov byte [rdx + 0x20], bl
movups xmmword [rdx + 0x40], xmm0
mov qword [rdx + 0x50], rbx
mov qword [rdx + 0x58], r15
mov byte [rdx + 0x40], bl
mov dword [rbp - 0x69], 1
mov r14, qword [r8 + 0x10]
mov rcx, r8
cmp qword [r8 + 0x18], r15
jbe 0x14003339d
mov rcx, qword [r8]
cmp r14, 1
jne 0x1400334fb
mov r8, r14
lea rdx, [0x140083918]
call fcn.140052b90
test eax, eax
jne 0x1400334fb
mov rcx, qword [r13]
lea rax, str.__DOCTYPE_html__n_html__n_head__n_____meta_charset_utf_8___n_____title_WinPX__title__n_____link_rel_stylesheet__href_styles.css___n__head__n_body__n_____header__n_________h1_WinPX_V1.0.0__h1__n______header__n_____main__n_________h2_Status__h2__n_________p_Bytes_sent:___p__n_________p_Bytes_received:___p__n______main__n_____footer__n_________p_Copyright__c__2024_Marius_Greuel._All_rights_reserved.__p__n______footer__n__body__n__html__n
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x28], 0x1a8
mov rax, qword [rcx + 0x40]
mov qword [rbp + 0x17], rax
movabs rax, 0x4000000000000000
mov qword [rbp + 7], rax
mov rax, qword [rcx + 0x48]
mov qword [rbp + 0x1f], rax
movabs rax, 0x4000000000000008
mov qword [rbp + 0xf], rax
mov qword [rbp - 0x19], 2
lea rax, [rbp + 7]
mov qword [rbp - 0x11], rax
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x59], xmm0
movaps xmm1, xmmword [rsp + 0x20]
movdqa xmmword [rsp + 0x20], xmm1
lea r8, [rbp - 0x59]
lea rdx, [rsp + 0x20]
lea rcx, [rbp - 0x19]
call fcn.140009d00
mov dword [rbp - 0x69], 3
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 9
lea rdx, str.text_html
lea rcx, [rbp - 0x59]
call fcn.14001d9f0
nop
lea r9, [rbp - 0x19]
lea r8, [rbp - 0x59]
mov edx, 0xc8
mov rcx, rsi
call fcn.1400218f0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400334b8
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400334b2
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c67
call fcn.140036ba0
nop
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140033c1e
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033c19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c4f
jmp 0x140033c19
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x140033508
mov rcx, qword [rdi]
cmp r14, 0xb
jne 0x14003361e
mov r8, r14
lea rdx, str._styles.css
call fcn.140052b90
test eax, eax
jne 0x14003361e
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, 0xfa
lea rdx, str.__WinPX___nhtml__n____font_family:__Segoe_UI___Arial__sans_serif__n_n_nbody__n____max_width:_720px__n____margin:_1rem_auto__n____display:_grid__n____color:_111__n_n_nheader__n_n_nmain__n_n_nfooter__n____border_top:_1px_solid_ccc__n____text_align:_center__n_n
lea rcx, [rsp + 0x20]
call fcn.14001d9f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 8
lea rdx, [0x140083550]
lea rcx, [rbp - 0x59]
call fcn.14001d9f0
nop
lea r9, [rsp + 0x20]
lea r8, [rbp - 0x59]
mov edx, 0xc8
mov rcx, rsi
call fcn.1400218f0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400335c9
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400335c4
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c6d
call fcn.140036ba0
movdqa xmm0, xmmword [0x1400839c0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov rdx, qword [rbp - 0x71]
cmp rdx, 0xf
jbe 0x140033c1e
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033c19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c55
jmp 0x140033c19
mov rcx, rdi
cmp qword [rdi + 0x18], 0xf
jbe 0x14003362b
mov rcx, qword [rdi]
cmp r14, 0xa
jne 0x14003387b
mov r8, r14
lea rdx, str._winpx.pac
call fcn.140052b90
test eax, eax
jne 0x14003387b
mov rax, qword [r13]
lea rcx, str.___WinPX_proxy_configuration_script_nfunction_FindProxyForURL_url__host___n__return_PROXY_127.0.0.1:__n_n
mov qword [rbp - 0x59], rcx
mov qword [rbp - 0x51], WSACleanup
movzx eax, word [rax + 0x50]
mov dword [rsp + 0x28], eax
movabs rax, 0x2000000000000000
mov qword [rsp + 0x20], rax
mov qword [rbp - 0x19], 1
lea rax, [rsp + 0x20]
mov qword [rbp - 0x11], rax
movaps xmm0, xmmword [rbp - 0x19]
movdqa xmmword [rbp - 0x19], xmm0
movaps xmm1, xmmword [rbp - 0x59]
movdqa xmmword [rbp - 0x59], xmm1
lea r8, [rbp - 0x19]
lea rdx, [rbp - 0x59]
lea rcx, [rbp + 7]
call fcn.140009d00
mov dword [rbp - 0x69], 5
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 0x21
lea rdx, str.application_x_ns_proxy_autoconfig
lea rcx, [rbp - 0x59]
call fcn.14001d9f0
nop
lea r9, [rbp + 7]
lea r8, [rbp - 0x59]
mov edx, 0xc8
mov rcx, rsi
call fcn.1400218f0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x14003372c
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033727
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c73
call fcn.140036ba0
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x49], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.Cache_Control
lea rcx, [rbp - 0x59]
call fcn.14001d9f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x39], xmm0
xorps xmm1, xmm1
movdqa xmmword [rbp - 0x29], xmm1
mov r8d, 8
lea rdx, str.no_cache
lea rcx, [rbp - 0x39]
call fcn.14001d9f0
nop
lea rcx, [rsi + 8]
mov rdx, qword [rcx + 8]
cmp rdx, qword [rcx + 0x10]
je 0x1400337b7
movaps xmm0, xmmword [rbp - 0x59]
movups xmmword [rdx], xmm0
movaps xmm1, xmmword [rbp - 0x49]
movups xmmword [rdx + 0x10], xmm1
mov byte [rbp - 0x59], 0
movaps xmm0, xmmword [rbp - 0x39]
movups xmmword [rdx + 0x20], xmm0
movaps xmm1, xmmword [rbp - 0x29]
movups xmmword [rdx + 0x30], xmm1
mov rdx, r15
mov byte [rbp - 0x39], 0
add qword [rcx + 8], 0x40
jmp 0x1400337c8
lea r8, [rbp - 0x59]
call fcn.1400205e0
mov rdx, qword [rbp - 0x21]
mov r15, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x1400337ff
inc rdx
mov rcx, qword [rbp - 0x39]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400337fa
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c79
call fcn.140036ba0
cmp r15, 0xf
jbe 0x140033838
lea rdx, [r15 + 1]
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033832
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c79
call fcn.140036ba0
nop
mov rdx, qword [rbp + 0x1f]
cmp rdx, 0xf
jbe 0x140033c1e
inc rdx
mov rcx, qword [rbp + 7]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033c19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c5b
jmp 0x140033c19
cmp qword [rdi + 0x18], 0xf
jbe 0x140033885
mov rdi, qword [rdi]
cmp r14, 0xc
jne 0x140033b38
mov r8, r14
lea rdx, str._favicon.ico
mov rcx, rdi
call fcn.140052b90
test eax, eax
jne 0x140033b38
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
mov qword [rbp - 0x59], rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rdi, rax
mov qword [rbp - 0x51], rbx
mov qword [rbp - 0x49], rbx
lea r8, [0x140083910]
mov edx, WSAGetLastError
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r14, rax
test rax, rax
jne 0x1400338fb
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1400338f6
movzx eax, ax
or eax, 0x80070000
mov rdi, rbx
jmp 0x140033950
mov rdx, r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r15, rax
test rax, rax
je 0x1400338e4
mov rdx, r14
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov qword [rbp - 0x51], rdi
test eax, eax
je 0x14003393e
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
mov qword [rbp - 0x49], rax
test rax, rax
jne 0x140033a4b
call qword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x140033952
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x140033a4b
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
xor r8d, r8d
lea rdx, [0x140082100]
lea rcx, [rbp - 0x19]
call fcn.14001d9f0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, 9
lea rdx, str.text_html
lea rcx, [rsp + 0x20]
call fcn.14001d9f0
nop
lea r9, [rbp - 0x19]
lea r8, [rsp + 0x20]
mov edx, 0x194
mov rcx, rsi
call fcn.1400218f0
nop
mov rdx, qword [rbp - 0x71]
cmp rdx, 0xf
jbe 0x1400339f6
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400339f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c7f
call fcn.140036ba0
movdqa xmm0, xmmword [0x1400839c0]
movdqu xmmword [rbp - 0x79], xmm0
mov byte [rsp + 0x20], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140033b33
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033b2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c61
jmp 0x140033b2d
xorps xmm0, xmm0
movups xmmword [rbp - 0x19], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 9], xmm1
mov r8, rdi
mov rdx, rbx
lea rcx, [rbp - 0x19]
call fcn.14001d9f0
nop
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
mov r8d, reloc.WS2_32.dll_listen
lea rdx, str.image_svgxml
lea rcx, [rsp + 0x20]
call fcn.14001d9f0
nop
lea r9, [rbp - 0x19]
lea r8, [rsp + 0x20]
mov edx, 0xc8
mov rcx, rsi
call fcn.1400218f0
nop
mov rdx, qword [rbp - 0x71]
cmp rdx, 0xf
jbe 0x140033ae5
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033ae0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c85
call fcn.140036ba0
movdqa xmm0, xmmword [0x1400839c0]
movdqu xmmword [rbp - 0x79], xmm0
mov byte [rsp + 0x20], 0
mov rdx, qword [rbp - 1]
cmp rdx, 0xf
jbe 0x140033b33
inc rdx
mov rcx, qword [rbp - 0x19]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033b2d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c8b
call fcn.140036ba0
nop
jmp 0x140033c1e
xorps xmm0, xmm0
movups xmmword [rsp + 0x20], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x79], xmm1
xor r8d, r8d
lea rdx, [0x140082100]
lea rcx, [rsp + 0x20]
call fcn.14001d9f0
nop
xorps xmm0, xmm0
movups xmmword [rbp - 0x59], xmm0
xorps xmm1, xmm1
movdqu xmmword [rbp - 0x49], xmm1
mov r8d, 9
lea rdx, str.text_html
lea rcx, [rbp - 0x59]
call fcn.14001d9f0
nop
lea r9, [rsp + 0x20]
lea r8, [rbp - 0x59]
mov edx, 0x194
mov rcx, rsi
call fcn.1400218f0
nop
mov rdx, qword [rbp - 0x41]
cmp rdx, 0xf
jbe 0x140033bd5
inc rdx
mov rcx, qword [rbp - 0x59]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033bd0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c91
call fcn.140036ba0
movdqa xmm0, xmmword [0x1400839c0]
movdqu xmmword [rbp - 0x49], xmm0
mov byte [rbp - 0x59], 0
mov rdx, qword [rbp - 0x71]
cmp rdx, 0xf
jbe 0x140033c1e
inc rdx
mov rcx, qword [rsp + 0x20]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140033c19
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140033c49
call fcn.140036ba0
mov rax, rsi
mov rcx, qword [rbp + 0x27]
xor rcx, rsp
call fcn.140036b80
lea r11, [rsp + 0xe0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rsp, r11
pop r15
pop r14
pop r13
pop rdi
pop rbp
ret
call fcn.14003cc58
int3
call fcn.14003cc58
int3
call fcn.14003cc58
int3
call fcn.14003cc58
nop
call fcn.14003cc58
nop
call fcn.14003cc58
nop
call fcn.14003cc58
nop
call fcn.14003cc58
int3
call fcn.14003cc58
nop
call fcn.14003cc58
nop
call fcn.14003cc58
nop
call fcn.14003cc58
nop
call fcn.14003cc58
int3