Function at 0x14006a8e7
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rax
pushf
mov eax, 0xa182deb1
pushf
not eax
add eax, 0x245b46e1
xor eax, 0x20c301b8
rol eax, 0xf5
popf
pushf
not eax
add eax, 0x111c8599
xor eax, 0x2568ac1e
rol eax, 0xd1
popf
pushf
not eax
add eax, 0x5aad0a83
xor eax, 0x278e32a2
rol eax, 0x6e
popf
pushf
not eax
add eax, 0x42c154af
xor eax, 0x79187e3b
rol eax, 0x31
popf
cmp eax, 1
jne 0x14006a94a
popf
pop rax
jmp 0x14006aa92
cmp eax, 4
jne 0x14006a959
popf
pop rax
jmp 0x14006abd0
cmp eax, 8
jne 0x14006a968
popf
pop rax
jmp 0x14006ae28
cmp eax, 6
jne 0x14006a977
popf
pop rax
jmp 0x14006ad5e
cmp eax, 3
jne 0x14006a986
popf
pop rax
jmp 0x14006ab5a
cmp eax, 9
jne 0x14006a995
popf
pop rax
jmp 0x14006ae70
cmp eax, 2
jne 0x14006a9a4
popf
pop rax
jmp 0x14006aadc
cmp eax, 5
jne 0x14006a9b3
popf
pop rax
jmp 0x14006acdb
cmp eax, 0
jne 0x14006a9c2
popf
pop rax
jmp 0x14006a9d1
cmp eax, 7
jne 0x14006a9d1
popf
pop rax
jmp 0x14006addc
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], rsi
push rdi
sub rsp, 0x40
and dword [rsp + 0x58], 0
mov rsi, r9
mov rbx, r8
mov rdi, rdx
test r8, r8
je 0x14006aa39
push rax
pushf
mov eax, 0x2cba5869
pushf
not eax
add eax, 0x76324306
xor eax, 0x29ba0420
rol eax, 0xb0
popf
pushf
not eax
add eax, 0x2345db25
xor eax, 0x1ed1af32
rol eax, 0xea
popf
pushf
not eax
add eax, 0x7e750624
xor eax, 0x131f717a
rol eax, 0xc5
popf
jmp 0x14006a93b
push rax
pushf
mov eax, 0xe829c99e
pushf
not eax
add eax, 0x31caefad
xor eax, 0x1c59c2f9
rol eax, 0x22
popf
pushf
not eax
add eax, 0x798af277
xor eax, 0x270a3d8b
rol eax, 0xf0
popf
pushf
not eax
add eax, 0x1828297f
xor eax, 0x3b1d2ce3
rol eax, 0xa9
popf
pushf
not eax
add eax, 0x4df5b6fa
xor eax, 0x3fd951dd
rol eax, 0xe6
popf
jmp 0x14006a93b
and dword [r8], 0
push rax
pushf
mov eax, 0x76cb30a8
pushf
not eax
add eax, 0x496668df
xor eax, 0x5fc1ee0e
rol eax, 0xe1
popf
pushf
not eax
add eax, 0x26b3546b
xor eax, 0x5e9e6408
rol eax, 0x83
popf
pushf
not eax
add eax, 0xd383ec2
xor eax, 0x621a9f37
rol eax, 0x92
popf
jmp 0x14006a93b
test rdi, rdi
jne 0x14006ab14
push rax
pushf
mov eax, 0x6e76af6d
pushf
not eax
add eax, 0x1d7e7dcd
xor eax, 0x4e8c72f9
rol eax, 0x83
popf
pushf
not eax
add eax, 0xc68b9d3
xor eax, 0x18ad49b
rol eax, 0x69
popf
jmp 0x14006a93b
push rax
pushf
mov eax, 0xa5047f5e
pushf
not eax
add eax, 0x1fa49753
xor eax, 0x7d001a18
rol eax, 0x7a
popf
pushf
not eax
add eax, 0x799db6ac
xor eax, 0x1f750c60
rol eax, 0x25
popf
pushf
not eax
add eax, 0x1e5d7b03
xor eax, 0x5d363868
rol eax, 0xcd
popf
jmp 0x14006a93b
mov eax, 0xcb51cc95
pushf
not eax
add eax, 0x34b8e0db
xor eax, 0x9e47d7
rol eax, 8
popf
pushf
not eax
add eax, 0x654a821c
xor eax, 0x5b48bcb2
rol eax, 0x34
popf
pushf
not eax
add eax, 0x6cf15db4
xor eax, 0x24ee51d0
rol eax, 0x23
popf
jmp 0x14006ae70
and qword [rsp + 0x30], 0
lea r9, [rsp + 0x60]
mov qword [rsp + 0x28], rcx
lea rdx, [rsp + 0x20]
mov rcx, rdi
mov qword [rsp + 0x20], 0xa
mov r8d, 0x2530dae7
pushf
not r8d
add r8d, 0xaa42f35
xor r8d, 0xfcd0321
rol r8d, 0x79
popf
pushf
not r8d
add r8d, 0x5acf0740
xor r8d, 0x717511d6
rol r8d, 0x5d
popf
pushf
not r8d
add r8d, 0x6ad06a34
xor r8d, 0x6c9ed0cb
rol r8d, 0x37
popf
jmp 0x14006ac43
call qword [sym.imp.ntdll.dll_LdrFindResource_U]
mov ecx, eax
test eax, eax
js 0x14006ac95
push rax
pushf
mov eax, 0xcb4d822d
pushf
not eax
add eax, 0x49e270fa
xor eax, 0x74f3104
rol eax, 0x9d
popf
pushf
not eax
add eax, 0x53435156
xor eax, 0x2ffffae7
rol eax, 0x76
popf
pushf
not eax
add eax, 0x2c20ee9b
xor eax, 0x3d45f20f
rol eax, 0xb9
popf
jmp 0x14006a93b
push rax
pushf
mov eax, 0x77ee3678
pushf
not eax
add eax, 0x77a50deb
xor eax, 0x64775dca
rol eax, 0x14
popf
pushf
not eax
add eax, 0x15bb1924
xor eax, 0x309ecfc8
rol eax, 0xb2
popf
pushf
not eax
add eax, 0x5728cb16
xor eax, 0xc1b605f
rol eax, 0xc0
popf
jmp 0x14006a93b
mov rdx, qword [rsp + 0x60]
lea r9, [rsp + 0x58]
mov r8, rsi
mov rcx, rdi
jmp 0x14006acec
call qword [sym.imp.ntdll.dll_LdrAccessResource]
mov ecx, eax
test eax, eax
js 0x14006ad2b
push rax
pushf
mov eax, 0xa8c27586
pushf
not eax
add eax, 0x66521791
xor eax, 0x4e20c7c0
rol eax, 0x7b
popf
pushf
not eax
add eax, 0x6e0b2da3
xor eax, 0x166eb274
rol eax, 0xb1
popf
jmp 0x14006a93b
push rax
pushf
mov eax, 0x495c9f96
pushf
not eax
add eax, 0x54aac49
xor eax, 0x75130e4c
rol eax, 0xab
popf
pushf
not eax
add eax, 0x25feb0c7
xor eax, 0x3de63a4f
rol eax, 0x94
popf
jmp 0x14006a93b
test rbx, rbx
je 0x14006ada9
push rax
pushf
mov eax, 0x521c5760
pushf
not eax
add eax, 0x14a486f2
xor eax, 0x374f3633
rol eax, 0x4d
popf
pushf
not eax
add eax, 0x31494086
xor eax, 0x34220941
rol eax, 0x6f
popf
pushf
not eax
add eax, 0x7505c107
xor eax, 0xcf83eb
rol eax, 0x6c
popf
jmp 0x14006a93b
push rax
pushf
mov eax, 0xa7d8eb75
pushf
not eax
add eax, 0x78aea160
xor eax, 0x33ebb604
rol eax, 0x87
popf
pushf
not eax
add eax, 0x386a8aa
xor eax, 0x6484b13a
rol eax, 0x62
popf
jmp 0x14006a93b
mov eax, dword [rsp + 0x58]
mov dword [rbx], eax
push rax
pushf
mov eax, 0xb62f097c
pushf
not eax
add eax, 0x47dcf7ff
xor eax, 0x2f8def6f
rol eax, 0xac
popf
pushf
not eax
add eax, 0x556a4fbd
xor eax, 0x13365ce7
rol eax, 0xb5
popf
pushf
not eax
add eax, 0x3c62a7e5
xor eax, 0x54a9d83f
rol eax, 0x6f
popf
jmp 0x14006a93b
mov eax, ecx
push rax
pushf
mov eax, 0xcf0b461c
pushf
not eax
add eax, 0x7fa8ef8b
xor eax, 0x42201f6
rol eax, 0x30
popf
pushf
not eax
add eax, 0x1bb6f5a3
xor eax, 0x25a1a8bd
rol eax, 0xd7
popf
pushf
not eax
add eax, 0x792de6a6
xor eax, 0x4a028695
rol eax, 0x1e
popf
jmp 0x14006a93b
mov rbx, qword [rsp + 0x50]
mov rsi, qword [rsp + 0x68]
add rsp, 0x40
pop rdi
ret