Function at 0x140005360
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push r14
lea rbp, [rsp - 0x38]
sub rsp, 0x138
lea rcx, str.atimuixx.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x140005ca8
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x130], r15
xor r15d, r15d
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
lea edx, [r15 + 6]
mov rcx, r14
movzx r9d, ax
lea r8d, [r15 + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x14000548d
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x14000548d
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop
movzx ecx, word [r8]
cmp edx, 5
je 0x140005433
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005410
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x14000548d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005456
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x14000548d
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d900
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x14000556e
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x14000556e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 6
je 0x140005514
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x1400054f1
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x14000556e
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005537
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x14000556e
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d901
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x14000564f
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x14000564f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 7
je 0x1400055f5
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x1400055d2
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x14000564f
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005618
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x14000564f
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d902
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x140005730
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005730
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 8
je 0x1400056d6
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x1400056b3
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x140005730
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400056f9
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005730
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d903
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x140005811
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005811
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 9
je 0x1400057b7
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005794
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x140005811
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400057da
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005811
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x1400058f2
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400058f2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 0xa
je 0x140005898
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005875
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x1400058f2
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400058bb
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x1400058f2
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d90
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x1400059d6
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400059d6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 0xb
je 0x14000597c
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005956
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x1400059d6
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x14000599f
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x1400059d6
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d900
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x140005abd
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005abd
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop word [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xc
je 0x140005a63
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005a40
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x140005abd
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005a86
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005abd
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d901
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x140005b9e
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005b9e
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 0xd
je 0x140005b44
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005b21
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x140005b9e
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005b67
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005b9e
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d902
call fcn.140007750
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.14000d320
test rbx, rbx
je 0x140005c7f
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005c7f
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
movzx ecx, word [r8]
cmp edx, 0xe
je 0x140005c25
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005c02
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
jmp 0x140005c7f
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005c48
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140041010
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005c7f
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d903
call fcn.140007750
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r15, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x150]
add rsp, 0x138
pop r14
pop rbp
ret