Function at 0x140011cf0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x78]
sub rsp, 0x150
mov qword [rbp - 0x50], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x14007a6a0]
xor rax, rsp
mov qword [rbp + 0x48], rax
mov r14, rcx
add rcx, 0x258
call fcn.140002060
mov r8d, 2
lea rdx, str.129
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x1400121fe
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400121fe
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x1400121fe
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea ebx, [rax - 0x28]
mov edx, 0x400
lea rcx, [rbp - 0x40]
call fcn.140025ed0
nop
xor r9d, r9d
mov r8d, ebx
lea rdx, [rdi + 0x28]
lea rcx, [rbp - 0x40]
call fcn.140025fc8
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x1000
lea r8d, [r12 + 1]
lea rdx, [rbp - 0x40]
lea rcx, [rsp + 0x30]
call fcn.140020230
nop
mov ecx, 0x1335ca
call fcn.14003f6f4
mov byte [rbp + 0x40], r12b
mov ebx, r12d
call fcn.14003f6c8
mov ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3e
sub ecx, eax
cmp cl, 0x1a
jae 0x140011e0e
add cl, 0x41
jmp 0x140011e20
cmp cl, 0x34
jae 0x140011e18
add cl, 0x47
jmp 0x140011e20
cmp cl, 0x3e
jae 0x140011e24
sub cl, 4
mov byte [rbp + rbx + 0x20], cl
inc rbx
cmp rbx, 0x20
jl 0x140011de5
mov rdx, qword [rsp + 0x50]
test dl, 1
je 0x140012243
mov r8, qword [rsp + 0x68]
lea rax, [r8 + 4]
mov rcx, qword [rsp + 0x70]
cmp rax, rcx
jbe 0x140011e6e
sub r8d, ecx
lea edx, [r8 + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
add r8, 4
mov qword [rsp + 0x68], r8
test dl, 1
je 0x14001225b
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x140011ea9
sub r8d, ecx
lea edx, [r8 + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
add r8, 4
mov qword [rsp + 0x68], r8
test dl, 1
je 0x140012273
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x140011ee4
sub r8d, ecx
lea edx, [r8 + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov eax, dword [r8]
mov dword [rbp - 0x60], eax
add r8, 4
mov qword [rsp + 0x68], r8
test dl, 1
je 0x14001228b
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x140011f25
sub r8d, ecx
lea edx, [r8 + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov eax, dword [r8]
mov dword [rbp - 0x5c], eax
add r8, 4
mov qword [rsp + 0x68], r8
test dl, 1
je 0x1400122a3
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x140011f66
sub r8d, ecx
lea edx, [r8 + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov eax, dword [r8]
mov dword [rbp - 0x58], eax
add r8, 4
mov qword [rsp + 0x68], r8
test dl, 1
je 0x1400122bb
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x140011fa7
sub r8d, ecx
lea edx, [r8 + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov r13d, dword [r8]
add r8, 4
mov qword [rsp + 0x68], r8
test dl, 1
je 0x1400122d3
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x140011fdb
sub r8d, ecx
lea edx, [r8 + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov r8, qword [rsp + 0x68]
movsxd rbx, dword [r8]
add r8, 4
mov qword [rsp + 0x68], r8
mov rcx, rbx
call fcn.140017048
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140020ef0
lea r9, [rbp + 0x20]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.140016300
mov rbx, rax
mov rdi, 0xffffffffffffffff
test rax, rax
jne 0x140012028
mov ecx, r12d
jmp 0x14001203a
mov rcx, rdi
nop dword [rax + rax]
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140012030
mov r8d, ecx
mov rdx, rbx
lea rcx, [r14 + 0x258]
call fcn.140002300
mov rcx, rbx
call fcn.140017040
mov rcx, rsi
call fcn.140017040
test byte [rsp + 0x50], 1
je 0x1400122eb
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x14001208e
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140017048
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140020ef0
lea r9, [rbp + 0x20]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.140016300
mov rbx, rax
test rax, rax
jne 0x1400120d4
mov ecx, r12d
jmp 0x1400120ea
mov rcx, rdi
nop word [rax + rax]
inc rcx
cmp word [rax + rcx*2], 0
jne 0x1400120e0
mov r8d, ecx
mov rdx, rbx
lea rcx, [r14 + 0x260]
call fcn.140002300
mov rcx, rbx
call fcn.140017040
mov rcx, rsi
call fcn.140017040
test byte [rsp + 0x50], 1
je 0x14001222b
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x14001213e
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020ad0
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140017048
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140020ef0
lea r9, [rbp + 0x20]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.140016300
mov rbx, rax
lea rcx, [r14 + 0x268]
test rax, rax
jne 0x140012190
mov edi, r12d
jmp 0x14001219a
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140012190
mov r8d, edi
mov rdx, rbx
call fcn.140002300
mov rcx, rbx
call fcn.140017040
mov rcx, rsi
call fcn.140017040
cmp dword [rbp - 0x60], 0
sete r12b
mov dword [r14 + 0x244], r12d
mov eax, dword [rbp - 0x5c]
mov dword [r14 + 0x248], eax
mov dword [r14 + 0x24c], r13d
mov eax, dword [rbp - 0x58]
mov dword [r14 + 0x250], eax
lea rcx, [rsp + 0x30]
call fcn.140020ab4
nop
lea rcx, [rsp + 0x30]
call fcn.1400203f4
nop
lea rcx, [rbp - 0x40]
call fcn.140025f1c
mov rcx, qword [rbp + 0x48]
xor rcx, rsp
call fcn.1400361e0
lea r11, [rsp + 0x150]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3
lea rcx, [rsp + 0x48]
call fcn.140001c00
mov rdx, rax
mov ecx, 4
call fcn.140021750
int3