Function at 0x1400054f0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x14004b200]
xor rax, rsp
mov qword [rsp + 0x128], rax
mov rbp, rcx
add rcx, 0x258
call fcn.140001f90
mov r8d, 2
lea rdx, str.129
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x140005a32
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140005a32
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
test rax, rax
je 0x140005a32
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea edi, [rax - 0x28]
mov edx, 0x400
lea rcx, [rsp + 0xb0]
call fcn.14001aa54
nop
xor r9d, r9d
mov r8d, edi
lea rdx, [rbx + 0x28]
lea rcx, [rsp + 0xb0]
call fcn.14001aaa0
xor r13d, r13d
mov qword [rsp + 0x20], r13
mov r9d, 0x1000
lea r8d, [r13 + 1]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.140015978
nop
mov ecx, 0x1335ca
call fcn.14002221c
mov byte [rsp + 0x120], r13b
mov rbx, r13
call fcn.140022234
mov edi, eax
mov eax, 0x84210843
imul edi
add edx, edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x3e
sub edi, edx
cmp dil, 0x1a
jae 0x14000562b
add dil, 0x41
mov byte [rsp + rbx + 0x100], dil
jmp 0x140005651
cmp dil, 0x34
jae 0x14000563f
add dil, 0x47
mov byte [rsp + rbx + 0x100], dil
jmp 0x140005651
cmp dil, 0x3e
jae 0x140005651
sub dil, 4
mov byte [rsp + rbx + 0x100], dil
inc rbx
cmp rbx, 0x20
jl 0x1400055f8
mov edi, dword [rsp + 0x50]
test dil, 1
jne 0x140005674
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x1400056a4
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x1400056c3
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x1400056e9
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005708
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x14000572e
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r15d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005750
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140005776
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r14d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005798
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x1400057be
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r12d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x1400057e0
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x1400057fd
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b2a8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140014a40
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a200
mov rbx, rax
test rax, rax
jne 0x140005847
mov ecx, r13d
jmp 0x140005859
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x258]
call fcn.140002180
mov rcx, rbx
call fcn.14000b2a0
mov rcx, rsi
call fcn.14000b2a0
test byte [rsp + 0x50], 1
jne 0x140005892
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x1400058b9
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b2a8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140014a40
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a200
mov rbx, rax
test rax, rax
jne 0x140005903
mov ecx, r13d
jmp 0x140005915
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x260]
call fcn.140002180
mov rcx, rbx
call fcn.14000b2a0
mov rcx, rsi
call fcn.14000b2a0
test byte [rsp + 0x50], 1
jne 0x14000594e
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015d80
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140005975
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014cdc
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b2a8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140014a40
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a200
mov rbx, rax
test rax, rax
jne 0x1400059bf
mov ecx, r13d
jmp 0x1400059d1
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x268]
call fcn.140002180
mov rcx, rbx
call fcn.14000b2a0
mov rcx, rsi
call fcn.14000b2a0
test r15d, r15d
sete r13b
mov dword [rbp + 0x244], r13d
mov dword [rbp + 0x248], r14d
mov dword [rbp + 0x24c], r12d
lea rcx, [rsp + 0x30]
call fcn.14001548c
nop
lea rcx, [rsp + 0x30]
call fcn.14001591c
nop
lea rcx, [rsp + 0xb0]
call fcn.14001aedc
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1400214b0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret