Function at 0x140011d6b
Capabilities:
Extract resource via kernel32 functions

Disassembly:
jmp 0x140026b30
mov qword [rsp + 8], rcx
push rbp
push rdi
sub rsp, 0x488
lea rbp, [rsp + 0x20]
lea rdi, [rsp + 0x20]
mov ecx, 0xba
mov eax, 0xcccccccc
rep stosd dword [rdi], eax
mov rcx, qword [rsp + 0x4a8]
mov rax, qword [0x140041018]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov dword [rbp + 0x434], 0
lea rcx, [0x140049104]
call fcn.140011ed3
lea r8, [0x140039f18]
mov edx, 0x65
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rbp + 8], rax
mov rdx, qword [rbp + 8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [rbp + 0x24], eax
mov rdx, qword [rbp + 8]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rbp + 0x48], rax
mov rcx, qword [rbp + 0x48]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rbp + 0x68], rax
cmp qword [rbp + 0x68], 0
jne 0x140026c20
lea rdx, str.Failed_to_lock_resource.
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400111b8
lea rdx, [0x14001108c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.error
mov rcx, qword [rbp + 0x480]
call fcn.140011640
mov eax, dword [rbp + 0x434]
or eax, 1
mov dword [rbp + 0x434], eax
mov rax, qword [rbp + 0x480]
jmp 0x140026f55
mov eax, dword [rbp + 0x24]
mov r8d, eax
mov rdx, qword [rbp + 0x68]
lea rcx, [rbp + 0x88]
call fcn.14001119a
nop
mov eax, 0x104
mov eax, eax
mov ecx, dword [0x140041ec0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x1400416dc], eax
jle 0x140026c9d
lea rcx, [0x1400416dc]
call fcn.140011d39
cmp dword [0x1400416dc], 0xffffffff
jne 0x140026c9d
lea rdx, str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea rcx, [0x1400416e0]
call fcn.140011640
lea rcx, [0x140034270]
call fcn.140011582
nop
lea rcx, [0x1400416dc]
call fcn.140011d89
mov eax, 0x104
mov eax, eax
mov ecx, dword [0x140041ec0]
mov rdx, qword gs:[0x58]
mov rcx, qword [rdx + rcx*8]
mov eax, dword [rax + rcx]
cmp dword [0x140041730], eax
jle 0x140026d03
lea rcx, [0x140041730]
call fcn.140011d39
cmp dword [0x140041730], 0xffffffff
jne 0x140026d03
lea rdx, str.Rj_v_B_3w___eJ_9lDc8P_X2Q_O5rsKzASTWu_:xFH1po_qN_hCU6_4_i0d_YgV_LbMf_7a.Z6E9_gN_ZpV1a_lh_D3_Jv_IO8ZT_4rAoQn_msMx_qD7_I_5LjD0_O9_E_ePlzhBF_S__fr_RqMJ7o_s_02Cf_w_s4:H_yeU_C_G_v__zbpjmt_dWvkI8o_9x_SlD1CT.Y___wvrSLs6toT_b:W4_I_9
lea rcx, [0x140041708]
call fcn.140011640
lea rcx, [0x1400342a0]
call fcn.140011582
nop
lea rcx, [0x140041730]
call fcn.140011d89
mov edx, 0x50
lea rcx, [rbp + 0xd0]
call fcn.140011979
lea r8, [0x140041708]
lea rdx, [0x1400416e0]
lea rcx, [rbp + 0xd0]
call fcn.140011de8
nop
lea rcx, [rbp + 0x138]
call fcn.140011eb5
nop
mov qword [rbp + 0x178], 0
jmp 0x140026d5b
mov rax, qword [rbp + 0x178]
add rax, 4
mov qword [rbp + 0x178], rax
lea rcx, [rbp + 0x88]
call fcn.140011c76
cmp qword [rbp + 0x178], rax
jae 0x140026ede
mov r9d, 4
mov r8, qword [rbp + 0x178]
lea rdx, [rbp + 0x198]
lea rcx, [rbp + 0x88]
call fcn.14001173f
nop
mov edx, 0x18
lea rcx, [rbp + 0x1d8]
call fcn.140011a69
lea r8, [rbp + 0x198]
lea rdx, [rbp + 0x1d8]
lea rcx, [rbp + 0xd0]
call fcn.140011654
nop
lea rdx, [rbp + 0x3a8]
lea rcx, [rbp + 0xd0]
call fcn.140011910
mov qword [rbp + 0x448], rax
mov rdx, qword [rbp + 0x448]
lea rcx, [rbp + 0x1d8]
call fcn.140011244
mov byte [rbp + 0x384], al
lea rcx, [rbp + 0x3a8]
call fcn.140011d7a
movzx eax, byte [rbp + 0x384]
test eax, eax
je 0x140026e2f
lea rcx, [rbp + 0x1d8]
call fcn.1400115a0
add rax, 0x28
mov rdx, rax
lea rcx, [rbp + 0x138]
call fcn.140011334
jmp 0x140026ec0
lea rdx, str.Error:_Encrypted_value_not_found_in_decryption_map
mov rcx, qword [sym.imp.MSVCP140D.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cerr]
call fcn.1400111b8
lea rdx, [0x14001108c]
mov rcx, rax
call qword [sym.imp.MSVCP140D.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64____cdecl___class_std::basic_ostream_char__struct_std::char_traits_char______ptr64_____ptr64]
lea rdx, str.error
mov rcx, qword [rbp + 0x480]
call fcn.140011640
mov eax, dword [rbp + 0x434]
or eax, 1
mov dword [rbp + 0x434], eax
lea rcx, [rbp + 0x1d8]
call fcn.140011d7a
nop
lea rcx, [rbp + 0x198]
call fcn.1400112a3
nop
lea rcx, [rbp + 0x138]
call fcn.1400112a3
nop
lea rcx, [rbp + 0xd0]
call fcn.140011e56
nop
lea rcx, [rbp + 0x88]
call fcn.1400112a3
mov rax, qword [rbp + 0x480]
jmp 0x140026f55
lea rcx, [rbp + 0x1d8]
call fcn.140011d7a
nop
lea rcx, [rbp + 0x198]
call fcn.1400112a3
jmp 0x140026d49
lea rax, [rbp + 0x3d8]
mov qword [rbp + 0x418], rax
lea rdx, [rbp + 0x138]
mov rcx, qword [rbp + 0x418]
call fcn.1400111fe
mov qword [rbp + 0x448], rax
mov rdx, qword [rbp + 0x448]
mov rcx, qword [rbp + 0x480]
call fcn.14001137a
mov eax, dword [rbp + 0x434]
or eax, 1
mov dword [rbp + 0x434], eax
lea rcx, [rbp + 0x138]
call fcn.1400112a3
nop
lea rcx, [rbp + 0xd0]
call fcn.140011e56
nop
lea rcx, [rbp + 0x88]
call fcn.1400112a3
mov rax, qword [rbp + 0x480]
mov rdi, rax
lea rcx, [rbp - 0x20]
lea rdx, [0x140038ee0]
call fcn.140011c0d
mov rax, rdi
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.1400116cc
lea rsp, [rbp + 0x468]
pop rdi
pop rbp
ret