Function at 0x140022440
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov rax, qword [0x1400f5608]
xor rax, rsp
mov qword [rbp + 0x68], rax
mov r15, rdx
mov rdi, rcx
mov qword [rsp + 0x38], rdx
mov edx, 1
lea r8d, [rdx + 0xf]
mov rcx, qword [rcx + 8]
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rbx, rax
mov rdx, rax
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
mov rdx, rbx
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r14, rax
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
mov ebx, esi
mov edx, esi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov rsi, rax
mov r8d, ebx
mov rdx, rdi
mov rcx, rax
call fcn.14008d5b0
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeResource]
lea r9, [rsp + 0x40]
lea r8, [rsp + 0x38]
lea rdx, [0x1400c2f00]
mov rcx, rsi
call sub.VERSION.dll_VerQueryValueA
mov rax, qword [rsp + 0x38]
mov edi, dword [rax + 0x10]
mov ebx, dword [rax + 0x14]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LocalFree]
movzx edx, bx
lea rcx, [rbp + 0x48]
call fcn.1400229c0
mov r14, rax
shr ebx, 0x10
mov edx, ebx
lea rcx, [rbp - 0x38]
call fcn.1400229c0
mov rsi, rax
movzx edx, di
lea rcx, [rbp - 0x58]
call fcn.1400229c0
mov rbx, rax
shr edi, 0x10
mov edx, edi
lea rcx, [rbp - 0x78]
call fcn.1400229c0
mov rcx, rax
mov rdx, qword [rax + 0x10]
mov r8, qword [rax + 0x18]
mov rax, r8
sub rax, rdx
cmp rax, 1
jb 0x140022575
lea rax, [rdx + 1]
mov qword [rcx + 0x10], rax
mov rax, rcx
cmp r8, 0x10
jb 0x14002256d
mov rax, qword [rcx]
mov word [rax + rdx], 0x2e
jmp 0x140022598
mov qword [rsp + 0x20], 1
lea r9, [0x1400c2730]
movzx r8d, byte [rsp + 0x30]
mov edx, 1
call fcn.14000eb20
mov rcx, rax
movups xmm0, xmmword [rcx]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rcx + 0x10]
movups xmmword [rbp + 0x38], xmm1
xor edi, edi
mov qword [rcx + 0x10], rdi
mov qword [rcx + 0x18], shutdown
mov byte [rcx], dil
mov r9, rbx
lea r8, [rbp + 0x28]
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x68]
call fcn.14000f5b0
nop
mov rcx, qword [rsp + 0x78]
mov rdx, qword [rbp - 0x80]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x140022609
lea rax, [rcx + 1]
mov qword [rsp + 0x78], rax
lea rax, [rsp + 0x68]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x68]
mov word [rax + rcx], 0x2e
lea rax, [rsp + 0x68]
jmp 0x14002262e
mov qword [rsp + 0x20], 1
lea r9, [0x1400c2730]
movzx r8d, byte [rsp + 0x30]
mov edx, 1
lea rcx, [rsp + 0x68]
call fcn.14000eb20
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], shutdown
mov byte [rax], 0
mov r9, rsi
lea r8, [rbp + 8]
movzx edx, byte [rsp + 0x30]
lea rcx, [rsp + 0x48]
call fcn.14000f5b0
nop
mov rcx, qword [rsp + 0x58]
mov rdx, qword [rsp + 0x60]
mov rax, rdx
sub rax, rcx
cmp rax, 1
jb 0x14002269e
lea rax, [rcx + 1]
mov qword [rsp + 0x58], rax
lea rax, [rsp + 0x48]
cmp rdx, 0x10
cmovae rax, qword [rsp + 0x48]
mov word [rax + rcx], 0x2e
lea rax, [rsp + 0x48]
jmp 0x1400226c3
mov qword [rsp + 0x20], 1
lea r9, [0x1400c2730]
movzx r8d, byte [rsp + 0x30]
mov edx, 1
lea rcx, [rsp + 0x48]
call fcn.14000eb20
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], rdi
mov qword [rax + 0x18], shutdown
mov byte [rax], 0
mov r9, r14
lea r8, [rbp - 0x18]
movzx edx, byte [rsp + 0x30]
mov rcx, r15
call fcn.14000f5b0
nop
mov rdx, qword [rbp]
cmp rdx, 0x10
jb 0x140022732
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002272c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002298c
call fcn.14008b4c8
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, 0x10
jb 0x14002276f
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002276a
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022992
call fcn.14008b4c8
mov qword [rsp + 0x58], rdi
mov qword [rsp + 0x60], shutdown
mov byte [rsp + 0x48], 0
mov rdx, qword [rbp + 0x20]
cmp rdx, 0x10
jb 0x1400227be
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400227b8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022998
call fcn.14008b4c8
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, 0x10
jb 0x1400227fa
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400227f5
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14002299e
call fcn.14008b4c8
mov qword [rsp + 0x78], rdi
mov qword [rbp - 0x80], shutdown
mov byte [rsp + 0x68], 0
mov rdx, qword [rbp + 0x40]
cmp rdx, 0x10
jb 0x140022848
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022842
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400229a4
call fcn.14008b4c8
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, 0x10
jb 0x140022883
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002287e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400229aa
call fcn.14008b4c8
mov qword [rbp - 0x68], rdi
mov qword [rbp - 0x60], shutdown
mov byte [rbp - 0x78], 0
mov rdx, qword [rbp - 0x40]
cmp rdx, 0x10
jb 0x1400228ce
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400228c9
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400229b0
call fcn.14008b4c8
mov qword [rbp - 0x48], rdi
mov qword [rbp - 0x40], shutdown
mov byte [rbp - 0x58], 0
mov rdx, qword [rbp - 0x20]
cmp rdx, 0x10
jb 0x140022919
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x140022914
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x1400229b6
call fcn.14008b4c8
mov qword [rbp - 0x28], rdi
mov qword [rbp - 0x20], shutdown
mov byte [rbp - 0x38], 0
mov rdx, qword [rbp + 0x60]
cmp rdx, 0x10
jb 0x140022960
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14002295b
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140022986
call fcn.14008b4c8
mov rax, r15
mov rcx, qword [rbp + 0x68]
xor rcx, rsp
call fcn.14008bad0
mov rbx, qword [rsp + 0x1b0]
add rsp, 0x170
pop r15
pop r14
pop rdi
pop rsi
pop rbp
ret
call fcn.140091b3c
nop
call fcn.140091b3c
nop
call fcn.140091b3c
nop
call fcn.140091b3c
nop
call fcn.140091b3c
nop
call fcn.140091b3c
nop
call fcn.140091b3c
nop
call fcn.140091b3c
nop
call fcn.140091b3c
int3