Function at 0x140005320
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push r14
lea rbp, [rsp - 0x38]
sub rsp, 0x138
lea rcx, str.atimuixx.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x140005c4d
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x130], r15
xor r15d, r15d
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
lea edx, [r15 + 6]
mov rcx, r14
movzx r9d, ax
lea r8d, [r15 + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x140005444
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005444
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop
movzx ecx, word [r8]
cmp edx, 5
je 0x1400053ea
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x1400053d0
jmp 0x14000540d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x14000540d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005444
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d900
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x140005524
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005524
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 6
je 0x1400054ca
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x1400054b0
jmp 0x1400054ed
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400054ed
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005524
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d901
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x140005604
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005604
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 7
je 0x1400055aa
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005590
jmp 0x1400055cd
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400055cd
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005604
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d902
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x1400056e4
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400056e4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 8
je 0x14000568a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005670
jmp 0x1400056ad
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400056ad
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x1400056e4
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d903
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x1400057c4
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400057c4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 9
je 0x14000576a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005750
jmp 0x14000578d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x14000578d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x1400057c4
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x1400058a4
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400058a4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xa
je 0x14000584a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005830
jmp 0x14000586d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x14000586d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x1400058a4
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d90
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x140005984
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005984
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xb
je 0x14000592a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005910
jmp 0x14000594d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x14000594d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005984
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d900
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x140005a64
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005a64
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xc
je 0x140005a0a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x1400059f0
jmp 0x140005a2d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005a2d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005a64
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d901
call fcn.1400076b0
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x140005b44
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005b44
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xd
je 0x140005aea
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005ad0
jmp 0x140005b0d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005b0d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005b44
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d902
call fcn.1400076b0
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000ce80
test rbx, rbx
je 0x140005c24
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rsi, rax
test rax, rax
je 0x140005c24
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xe
je 0x140005bca
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005bb0
jmp 0x140005bed
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005bed
lea rdx, [r8 + 2]
mov rdi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140033d18
mov word [rsp + rdi*2 + 0x30], r15w
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test edi, edi
je 0x140005c24
lea eax, [rdi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d903
call fcn.1400076b0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r15, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x150]
add rsp, 0x138
pop r14
pop rbp
ret