Function at 0x14000b534
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rcx
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x70]
sub rsp, 0x170
mov r14, rcx
and dword [rsp + 0x20], 0
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rbx, rax
mov esi, 1
lea r8d, [rsi + 0xf]
mov edx, esi
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
and qword [r14], 0
and qword [r14 + 0x10], 0
mov qword [r14 + 0x18], 0xf
mov byte [r14], 0
mov dword [rsp + 0x20], esi
test rax, rax
je 0x14000b9ff
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r15, rax
test rax, rax
je 0x14000b9ff
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
mov edx, esi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LocalAlloc]
mov r12, rax
test rax, rax
je 0x14000b9f6
and dword [rbp + 0xb8], 0
and qword [rbp + 0xc0], 0
mov r8d, esi
mov rdx, rdi
mov rcx, rax
call fcn.14000fbe0
lea r9, [rbp + 0xb8]
lea r8, [rbp + 0xc0]
lea rdx, [0x14002dae8]
mov rcx, r12
call qword [sym.imp.VERSION.dll_VerQueryValueA]
mov rax, qword [rbp + 0xc0]
movzx edx, word [rax + 0x14]
lea rcx, [rbp + 0x48]
call fcn.140001378
mov rsi, rax
mov rcx, qword [rbp + 0xc0]
movzx edx, word [rcx + 0x16]
lea rcx, [rbp - 0x38]
call fcn.140001378
mov rdi, rax
mov rcx, qword [rbp + 0xc0]
movzx edx, word [rcx + 0x10]
lea rcx, [rbp - 0x58]
call fcn.140001378
mov rbx, rax
mov rcx, qword [rbp + 0xc0]
movzx edx, word [rcx + 0x12]
lea rcx, [rbp - 0x78]
call fcn.140001378
nop
mov r8d, 1
lea rdx, [0x14002daec]
mov rcx, rax
call fcn.14000224c
movups xmm0, xmmword [rax]
movups xmmword [rbp + 0x28], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x38], xmm1
and qword [rax + 0x10], 0
mov qword [rax + 0x18], 0xf
mov byte [rax], 0
mov dword [rsp + 0x20], 3
mov r8, rbx
lea rdx, [rbp + 0x28]
lea rcx, [rsp + 0x68]
call fcn.140002414
nop
mov r8d, 1
lea rdx, [0x14002daec]
mov rcx, rax
call fcn.14000224c
movups xmm0, xmmword [rax]
movups xmmword [rbp + 8], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp + 0x18], xmm1
xor ebx, ebx
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], 0xf
mov byte [rax], bl
mov dword [rsp + 0x20], 7
mov r8, rdi
lea rdx, [rbp + 8]
lea rcx, [rsp + 0x48]
call fcn.140002414
nop
lea r8d, [rbx + 1]
lea rdx, [0x14002daec]
mov rcx, rax
call fcn.14000224c
movups xmm0, xmmword [rax]
movups xmmword [rbp - 0x18], xmm0
movups xmm1, xmmword [rax + 0x10]
movups xmmword [rbp - 8], xmm1
mov qword [rax + 0x10], rbx
lea ecx, [rbx + 0xf]
mov qword [rax + 0x18], rcx
mov byte [rax], bl
mov dword [rsp + 0x20], ecx
mov r8, rsi
lea rdx, [rbp - 0x18]
lea rcx, [rsp + 0x28]
call fcn.140002414
mov rdx, rax
mov rcx, r14
call fcn.1400020e0
mov esi, 0x1000
mov rdx, qword [rsp + 0x40]
lea edi, [rbx + 0x10]
cmp rdx, rdi
jb 0x14000b7a3
inc rdx
mov rcx, qword [rsp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b79e
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba1a
call fcn.14000bc60
mov qword [rsp + 0x38], rbx
mov qword [rsp + 0x40], 0xf
mov byte [rsp + 0x28], bl
mov rdx, qword [rbp]
cmp rdx, rdi
jb 0x14000b7ec
inc rdx
mov rcx, qword [rbp - 0x18]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b7e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba20
call fcn.14000bc60
nop
mov rdx, qword [rsp + 0x60]
cmp rdx, rdi
jb 0x14000b824
inc rdx
mov rcx, qword [rsp + 0x48]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b81f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba26
call fcn.14000bc60
mov qword [rsp + 0x58], rbx
mov qword [rsp + 0x60], 0xf
mov byte [rsp + 0x48], bl
mov rdx, qword [rbp + 0x20]
cmp rdx, rdi
jb 0x14000b86d
inc rdx
mov rcx, qword [rbp + 8]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b867
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba2c
call fcn.14000bc60
nop
mov rdx, qword [rbp - 0x80]
cmp rdx, rdi
jb 0x14000b8a4
inc rdx
mov rcx, qword [rsp + 0x68]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b89f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba32
call fcn.14000bc60
mov qword [rsp + 0x78], rbx
mov qword [rbp - 0x80], 0xf
mov byte [rsp + 0x68], bl
mov rdx, qword [rbp + 0x40]
cmp rdx, rdi
jb 0x14000b8ec
inc rdx
mov rcx, qword [rbp + 0x28]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b8e6
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba38
call fcn.14000bc60
nop
mov rdx, qword [rbp - 0x60]
cmp rdx, rdi
jb 0x14000b922
inc rdx
mov rcx, qword [rbp - 0x78]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b91d
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba3e
call fcn.14000bc60
mov qword [rbp - 0x68], rbx
mov qword [rbp - 0x60], 0xf
mov byte [rbp - 0x78], bl
mov rdx, qword [rbp - 0x40]
cmp rdx, rdi
jb 0x14000b967
inc rdx
mov rcx, qword [rbp - 0x58]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b962
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba44
call fcn.14000bc60
mov qword [rbp - 0x48], rbx
mov qword [rbp - 0x40], 0xf
mov byte [rbp - 0x58], bl
mov rdx, qword [rbp - 0x20]
cmp rdx, rdi
jb 0x14000b9ac
inc rdx
mov rcx, qword [rbp - 0x38]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b9a7
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba4a
call fcn.14000bc60
mov qword [rbp - 0x28], rbx
mov qword [rbp - 0x20], 0xf
mov byte [rbp - 0x38], bl
mov rdx, qword [rbp + 0x60]
cmp rdx, rdi
jb 0x14000b9ed
inc rdx
mov rcx, qword [rbp + 0x48]
mov rax, rcx
cmp rdx, rsi
jb 0x14000b9e8
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000ba14
call fcn.14000bc60
mov rcx, r12
call qword [sym.imp.KERNEL32.dll_LocalFree]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, r14
add rsp, 0x170
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
nop
call fcn.140016740
int3