Function at 0x140005230
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x14004b200]
xor rax, rsp
mov qword [rsp + 0x128], rax
mov rbp, rcx
add rcx, 0x258
call fcn.140001c50
mov r8d, 2
lea rdx, str.129
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x140005772
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140005772
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
test rax, rax
je 0x140005772
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea edi, [rax - 0x28]
mov edx, 0x400
lea rcx, [rsp + 0xb0]
call fcn.14001ab80
nop
xor r9d, r9d
mov r8d, edi
lea rdx, [rbx + 0x28]
lea rcx, [rsp + 0xb0]
call fcn.14001abcc
xor r13d, r13d
mov qword [rsp + 0x20], r13
mov r9d, 0x1000
lea r8d, [r13 + 1]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.140014ad4
nop
mov ecx, 0x1335ca
call fcn.140021d34
mov byte [rsp + 0x120], r13b
mov rbx, r13
call fcn.140021d4c
mov edi, eax
mov eax, 0x84210843
imul edi
add edx, edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x3e
sub edi, edx
cmp dil, 0x1a
jae 0x14000536b
add dil, 0x41
mov byte [rsp + rbx + 0x100], dil
jmp 0x140005391
cmp dil, 0x34
jae 0x14000537f
add dil, 0x47
mov byte [rsp + rbx + 0x100], dil
jmp 0x140005391
cmp dil, 0x3e
jae 0x140005391
sub dil, 4
mov byte [rsp + rbx + 0x100], dil
inc rbx
cmp rbx, 0x20
jl 0x140005338
mov edi, dword [rsp + 0x50]
test dil, 1
jne 0x1400053b4
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x1400053e4
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005403
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140005429
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005448
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x14000546e
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r15d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005490
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x1400054b6
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r14d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x1400054d8
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x1400054fe
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r12d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005520
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x14000553d
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b1e8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140013b9c
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a130
mov rbx, rax
test rax, rax
jne 0x140005587
mov ecx, r13d
jmp 0x140005599
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x258]
call fcn.140001e30
mov rcx, rbx
call fcn.14000b1e0
mov rcx, rsi
call fcn.14000b1e0
test byte [rsp + 0x50], 1
jne 0x1400055d2
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x1400055f9
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b1e8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140013b9c
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a130
mov rbx, rax
test rax, rax
jne 0x140005643
mov ecx, r13d
jmp 0x140005655
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x260]
call fcn.140001e30
mov rcx, rbx
call fcn.14000b1e0
mov rcx, rsi
call fcn.14000b1e0
test byte [rsp + 0x50], 1
jne 0x14000568e
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140014edc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x1400056b5
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140013e38
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b1e8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140013b9c
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a130
mov rbx, rax
test rax, rax
jne 0x1400056ff
mov ecx, r13d
jmp 0x140005711
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x268]
call fcn.140001e30
mov rcx, rbx
call fcn.14000b1e0
mov rcx, rsi
call fcn.14000b1e0
test r15d, r15d
sete r13b
mov dword [rbp + 0x244], r13d
mov dword [rbp + 0x248], r14d
mov dword [rbp + 0x24c], r12d
lea rcx, [rsp + 0x30]
call fcn.1400145e8
nop
lea rcx, [rsp + 0x30]
call fcn.140014a78
nop
lea rcx, [rsp + 0xb0]
call fcn.14001b008
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1400213b0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret