Function at 0x1400265f0
Capabilities:
Extract resource via kernel32 functions
Write file on windows

Disassembly:
mov qword [rsp + 0x10], rbx
mov qword [rsp + 8], rcx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0xa0]
sub rsp, 0x1a0
mov r13, rdx
mov rbx, rcx
xor r14d, r14d
mov edi, r14d
mov dword [rbp + 0xf0], r14d
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
mov esi, r14d
mov qword [rsp + 0x50], r14
xor ecx, ecx
lea r8d, [r14 + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rbp + 0xf0], rax
mov r12d, r14d
test rax, rax
je 0x140026675
lea r8, [rbp + 0xf0]
xor edx, edx
lea rcx, [rsp + 0x40]
call fcn.1400202e0
mov rsi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x48]
jmp 0x1400269f1
mov r15, qword [rsp + 0x48]
lea rbx, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
lea rdx, vtable.std::basic_ios_wchar_t__struct_std::char_traits_wchar_t__.0
lea rcx, [0x140000000]
lea rax, [rcx + 0xc4a90]
mov qword [rbp - 0x80], rax
lea rax, [rcx + 0xc4a98]
mov qword [rbp - 0x70], rax
mov qword [rbp + 0x20], r14
mov qword [rbp + 0x48], r14
xorps xmm0, xmm0
movdqa xmmword [rbp + 0x50], xmm0
mov qword [rbp + 0x18], rdx
or edi, 1
mov dword [rbp + 0xf0], edi
xor r9d, r9d
xor r8d, r8d
lea rdx, [rbp - 0x68]
lea rcx, [rbp - 0x80]
call fcn.14000ff30
nop
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx - 0x70], rax
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 0x74], edx
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rsp + rcx + 0x7c], edx
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
mov qword [rbp + rcx - 0x80], rbx
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x7c], edx
lea rax, vtable.std::basic_streambuf_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp - 0x68], rax
mov ecx, 0x10
call fcn.14005541c
mov rbx, rax
test rax, rax
je 0x140026765
mov cl, 1
call fcn.14002822c
mov qword [rbx + 8], rax
jmp 0x140026768
mov rbx, r14
mov qword [rbp - 8], rbx
lea rax, [rbp - 0x60]
mov qword [rbp - 0x50], rax
lea rax, [rbp - 0x58]
mov qword [rbp - 0x48], rax
lea rax, [rbp - 0x40]
mov qword [rbp - 0x30], rax
lea rax, [rbp - 0x38]
mov qword [rbp - 0x28], rax
lea rax, [rbp - 0x20]
mov qword [rbp - 0x18], rax
lea rax, [rbp - 0x1c]
mov qword [rbp - 0x10], rax
mov qword [rbp - 0x58], r14
mov qword [rbp - 0x38], r14
mov qword [rbp - 0x20], r14
mov qword [rbp - 0x60], r14
mov qword [rbp - 0x40], r14
lea rax, vtable.std::basic_stringbuf_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp - 0x68], rax
mov qword [rbp], r14
mov dword [rbp + 8], r14d
mov rdx, r13
lea rcx, [rbp - 0x70]
call fcn.14001feb0
mov edx, r12d
mov rcx, rax
call fcn.140021970
inc r12d
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x68], r14
mov r9d, 7
mov qword [rsp + 0x70], r9
mov word [rsp + 0x58], r14w
or edi, 0x10
mov dword [rbp + 0xf0], edi
xorps xmm0, xmm0
movups xmmword [rbp + 0x80], xmm0
mov ecx, dword [rbp + 8]
mov eax, ecx
and al, 0x22
cmp al, 2
je 0x14002683a
mov rax, qword [rbp - 0x28]
mov r8, qword [rax]
test r8, r8
je 0x14002683a
mov rax, qword [rbp - 0x48]
mov rdx, qword [rax]
cmp r8, qword [rbp]
cmovb r8, qword [rbp]
sub r8, rdx
sar r8, 1
jmp 0x140026875
test cl, 4
jne 0x140026867
mov rax, qword [rbp - 0x30]
mov rcx, qword [rax]
test rcx, rcx
je 0x140026867
mov rax, qword [rbp - 0x50]
mov rdx, qword [rax]
mov rax, qword [rbp - 0x18]
movsxd r8, dword [rax]
add r8, r8
sub r8, rdx
add r8, rcx
sar r8, 1
jmp 0x140026875
mov r8, qword [rbp + 0x88]
mov rdx, qword [rbp + 0x80]
test rdx, rdx
je 0x140026889
lea rcx, [rsp + 0x58]
call fcn.14000b680
mov r9, qword [rsp + 0x70]
and edi, 0xffffffef
or edi, 8
lea rdx, [rsp + 0x58]
cmp r9, 8
cmovae rdx, qword [rsp + 0x58]
xor ecx, ecx
lea r8d, [rcx + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
mov qword [rbp + 0xf0], rax
mov rdx, qword [rsp + 0x70]
cmp rdx, 8
jb 0x1400268f7
lea rdx, [rdx*2 + 2]
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x1400268f1
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026c9e
call fcn.140055458
nop
test rbx, rbx
je 0x140026934
cmp r15, rsi
je 0x14002690f
mov qword [r15], rbx
add r15, 8
mov qword [rsp + 0x48], r15
jmp 0x140026934
lea r8, [rbp + 0xf0]
mov rdx, r15
lea rcx, [rsp + 0x40]
call fcn.1400202e0
mov rsi, qword [rsp + 0x50]
mov r15, qword [rsp + 0x48]
mov rbx, qword [rbp + 0xf0]
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_stringstream_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x98]
mov dword [rsp + rcx + 0x7c], edx
lea rcx, [rbp - 0x68]
call fcn.140021510
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_iostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x20]
mov dword [rsp + rcx + 0x7c], edx
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ostream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx - 0x70], rax
mov rax, qword [rbp - 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x10]
mov dword [rbp + rcx - 0x74], edx
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_istream_wchar_t__struct_std::char_traits_wchar_t__.0
mov qword [rbp + rcx - 0x80], rax
mov rax, qword [rbp - 0x80]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0x18]
mov dword [rsp + rcx + 0x7c], edx
lea rax, vtable.std::ios_base.0
mov qword [rbp + 0x18], rax
lea rcx, [rbp + 0x18]
call fcn.140028a78
nop
test rbx, rbx
jne 0x14002667a
mov rbx, qword [rbp + 0xe0]
mov rdi, qword [rsp + 0x40]
cmp rdi, r15
jne 0x140026a56
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
test rdi, rdi
je 0x140026a46
sub rsi, rdi
sar rsi, 3
lea rdx, [rsi*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140026a3d
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026c98
mov rcx, rdi
call fcn.140055458
nop
mov rcx, rbx
call fcn.14000ad90
mov eax, r14d
jmp 0x140026c77
mov rcx, rbx
cmp qword [rbx + 0x18], 8
jb 0x140026a63
mov rcx, qword [rbx]
mov qword [rsp + 0x30], r14
mov dword [rsp + 0x28], 0x80
mov dword [rsp + 0x20], 2
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 4]
call qword [sym.imp.KERNEL32.dll_CreateFileW]
mov qword [rbp + 0xf8], rax
cmp rax, 0xffffffffffffffff
jne 0x140026af0
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
test rdi, rdi
je 0x140026ae0
sub rsi, rdi
sar rsi, 3
lea rdx, [rsi*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140026ad7
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026ca4
mov rcx, rdi
call fcn.140055458
nop
mov rcx, rbx
call fcn.14000ad90
mov eax, r14d
jmp 0x140026c77
mov rbx, rdi
nop dword [rax]
nop word [rax + rax]
mov r12, qword [rbx]
mov rdx, r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r13, rax
test rax, rax
je 0x140026c23
mov rdx, r12
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r12d, eax
test eax, eax
je 0x140026bd3
mov rcx, r13
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdx, rax
mov qword [rsp + 0x20], r14
lea r9, [rbp + 0xf0]
mov r8d, r12d
mov r12, qword [rbp + 0xf8]
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x140026b6a
add rbx, 8
cmp rbx, r15
jne 0x140026b00
jmp 0x140026b73
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov r14d, eax
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CloseHandle]
nop
test rdi, rdi
je 0x140026bbf
sub rsi, rdi
sar rsi, 3
lea rdx, [rsi*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140026bb6
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026caa
mov rcx, rdi
call fcn.140055458
nop
mov rcx, qword [rbp + 0xe0]
call fcn.14000ad90
mov eax, r14d
jmp 0x140026c77
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test rdi, rdi
je 0x140026c69
sub rsi, rdi
sar rsi, 3
lea rdx, [rsi*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140026c18
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026cb0
mov rcx, rdi
call fcn.140055458
nop
jmp 0x140026c69
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, eax
test rdi, rdi
je 0x140026c69
sub rsi, rdi
sar rsi, 3
lea rdx, [rsi*8]
mov rax, rdi
cmp rdx, 0x1000
jb 0x140026c60
add rdx, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x140026c92
mov rcx, rdi
call fcn.140055458
nop
mov rcx, qword [rbp + 0xe0]
call fcn.14000ad90
mov eax, ebx
mov rbx, qword [rsp + 0x1e8]
add rsp, 0x1a0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140065fb8
nop
call fcn.140065fb8
nop
call fcn.140065fb8
nop
call fcn.140065fb8
nop
call fcn.140065fb8
nop
call fcn.140065fb8
int3