Function at 0x1400273a0
Capabilities:
Extract resource via kernel32 functions
Write file on windows

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x370]
sub rsp, 0x470
mov rax, qword [0x14005a018]
xor rax, rsp
mov qword [rbp + 0x360], rax
movaps xmm0, xmmword [0x140051910]
lea rcx, [rbp - 0x5f]
movaps xmm1, xmmword [0x140051920]
mov rsi, rdx
movzx eax, byte [0x140051950]
xor edx, edx
movaps xmmword [rsp + 0x60], xmm0
mov r8d, 0x1b3
movaps xmm0, xmmword [0x140051930]
movaps xmmword [rsp + 0x70], xmm1
movaps xmm1, xmmword [0x140051940]
movaps xmmword [rbp - 0x80], xmm0
movaps xmmword [rbp - 0x70], xmm1
mov byte [rbp - 0x60], al
call fcn.14002ec20
lea rcx, [0x140051960]
mov r8d, 0x11b
movups xmm0, xmmword [rcx]
lea rdx, [rbp + 0x160]
movups xmm1, xmmword [rcx + 0x10]
lea rcx, [rcx + 0x80]
mov rax, qword [rcx + 0x50]
movups xmmword [rdx], xmm0
movups xmm0, xmmword [rcx - 0x60]
movups xmmword [rdx + 0x10], xmm1
movups xmm1, xmmword [rcx - 0x50]
movups xmmword [rdx + 0x20], xmm0
movups xmm0, xmmword [rcx - 0x40]
movups xmmword [rdx + 0x30], xmm1
movups xmm1, xmmword [rcx - 0x30]
movups xmmword [rdx + 0x40], xmm0
movups xmm0, xmmword [rcx - 0x20]
movups xmmword [rdx + 0x50], xmm1
movups xmm1, xmmword [rcx]
movups xmmword [rdx + 0x60], xmm0
lea rdx, [rdx + 0x80]
movups xmm0, xmmword [rcx - 0x10]
movups xmmword [rdx - 0x10], xmm0
movups xmm0, xmmword [rcx + 0x10]
movups xmmword [rdx], xmm1
movups xmm1, xmmword [rcx + 0x20]
movups xmmword [rdx + 0x10], xmm0
movups xmm0, xmmword [rcx + 0x30]
movups xmmword [rdx + 0x20], xmm1
movups xmm1, xmmword [rcx + 0x40]
movups xmmword [rdx + 0x30], xmm0
movups xmmword [rdx + 0x40], xmm1
mov qword [rdx + 0x50], rax
movzx eax, byte [rcx + 0x58]
lea rcx, [rbp + 0x239]
mov byte [rdx + 0x58], al
xor edx, edx
call fcn.14002ec20
call fcn.14002fc44
xor r12d, r12d
lea rdx, [rsp + 0x50]
lea rcx, [rsp + 0x60]
mov qword [rsp + 0x50], r12
call fcn.140025790
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], r12
lea rcx, [rbp + 0x160]
call fcn.140025790
mov r14, qword [rsp + 0x50]
mov rdi, 0xffffffffffffffff
mov rbx, rdi
nop dword [rax + rax]
cmp byte [r14 + rbx + 1], r12b
lea rbx, [rbx + 1]
jne 0x140027510
mov edx, 1
lea rcx, [rbx - 4]
call fcn.14002f9e8
lea r9, [rbx - 5]
mov rcx, rax
lea r8, [r14 + 1]
lea rdx, [rbx - 4]
call fcn.1400333fc
mov rcx, r14
call fcn.14002fc28
lea rdx, [rsp + 0x50]
mov qword [rsp + 0x50], r12
lea rcx, [rsp + 0x60]
call fcn.140025790
mov r14, qword [rsp + 0x50]
mov rbx, rdi
cmp byte [r14 + rbx + 1], r12b
lea rbx, [rbx + 1]
jne 0x140027561
mov edx, 1
lea rcx, [rbx + 1]
call fcn.14002f9e8
mov r8, r14
lea rdx, [rbx + 1]
mov rcx, rax
mov r15, rax
call fcn.1400337a0
mov rcx, qword [rsp + 0x40]
call fcn.14002fc28
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], r12
lea rcx, [rbp + 0x160]
call fcn.140025790
mov r14, qword [rsp + 0x40]
mov rbx, rdi
cmp byte [r14 + rbx + 1], r12b
lea rbx, [rbx + 1]
jne 0x1400275b4
mov edx, 1
lea rcx, [rbx + 1]
call fcn.14002f9e8
mov r8, r14
mov qword [rsp + 0x48], rax
lea rdx, [rbx + 1]
mov rcx, rax
call fcn.1400337a0
lea rcx, [rsp + 0x40]
mov qword [rsp + 0x40], r12
call fcn.140027ee0
mov r12, qword [rsp + 0x40]
mov rbx, rdi
nop dword [rax + rax]
inc rbx
cmp byte [r12 + rbx], 0
jne 0x140027600
add rbx, 7
mov edx, 1
mov rcx, rbx
call fcn.14002f9e8
lea r8, [0x140051644]
mov rdx, rbx
mov rcx, rax
mov r14, rax
call fcn.14002fbc8
mov r8, r12
mov rdx, rbx
mov rcx, r14
call fcn.1400337a0
lea r8, [0x140051b48]
mov rdx, rbx
mov rcx, r14
call fcn.1400337a0
mov rcx, rdi
inc rcx
cmp byte [rsi + rcx], 0
jne 0x140027653
mov rax, rdi
nop
cmp byte [r15 + rax + 1], 0
lea rax, [rax + 1]
jne 0x140027660
lea rbx, [rax + 1]
mov edx, 1
add rbx, rcx
mov rcx, rbx
call fcn.14002f9e8
mov r8, rsi
mov rdx, rbx
mov rcx, rax
mov r13, rax
call fcn.1400337a0
mov r8, r15
mov rdx, rbx
mov rcx, r13
call fcn.1400337a0
mov rcx, rdi
cmp byte [rsi + rcx + 1], 0
lea rcx, [rcx + 1]
jne 0x1400276a2
nop dword [rax]
inc rdi
cmp byte [r14 + rdi], 0
jne 0x1400276b0
lea rbx, [rcx + 1]
mov edx, 1
add rbx, rdi
mov rcx, rbx
call fcn.14002f9e8
mov r8, rsi
mov rdx, rbx
mov rcx, rax
mov r12, rax
call fcn.1400337a0
mov r8, r14
mov rdx, rbx
mov rcx, r12
call fcn.1400337a0
lea rdx, [rsp + 0x40]
mov qword [rsp + 0x40], 0
lea rcx, [0x140051a40]
call fcn.140025790
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
test rax, rax
je 0x1400277c2
mov r8, qword [rsp + 0x40]
mov edx, 0x66
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
test rax, rax
je 0x1400277c2
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400277c2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
test rax, rax
je 0x1400277c8
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
mov rcx, r13
mov edi, eax
call qword [sym.imp.KERNEL32.dll_CreateFileA]
lea r9, [rsp + 0x50]
mov qword [rsp + 0x20], 0
mov rcx, rax
mov r8d, edi
mov rdx, rsi
mov rbx, rax
call qword [sym.imp.KERNEL32.dll_WriteFile]
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x1400277c8
call qword [sym.imp.KERNEL32.dll_GetLastError]
lea rdx, [rsp + 0x40]
lea rcx, [0x140051a70]
call fcn.140025790
mov rdx, qword [rsp + 0x40]
mov rcx, r13
call fcn.140025e50
test r12, r12
jne 0x1400277f3
call qword [sym.imp.KERNEL32.dll_GetLastError]
jmp 0x140027829
mov qword [rsp + 0x30], 0
xor r9d, r9d
mov dword [rsp + 0x28], 0x80
xor r8d, r8d
mov edx, 0x40000000
mov dword [rsp + 0x20], 2
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_CreateFileA]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov r9, qword [rsp + 0x48]
mov r8, r15
mov rdx, r13
mov rcx, r12
call fcn.140026550
mov rcx, r15
call fcn.14002fc28
mov rcx, r14
call fcn.14002fc28
mov rcx, r13
call fcn.14002fc28
mov rcx, r12
call fcn.14002fc28
mov rcx, qword [rsp + 0x48]
call fcn.14002fc28
mov rcx, qword [rbp + 0x360]
xor rcx, rsp
call fcn.14002d5c0
lea r11, [rsp + 0x470]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret