Function at 0x14008ba20
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x20], r9
mov dword [rsp + 0x18], r8d
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0xe0
mov rbp, r9
mov r12, rdx
mov rbx, rcx
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor ecx, ecx
mov edx, 0x25f
lea r8d, [rcx + 6]
mov r14, rax
mov qword [rsp + 0x70], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r13, rax
mov qword [rsp + 0x78], rax
call qword [sym.imp.USER32.dll_GetForegroundWindow]
xor r8d, r8d
mov edx, 0x20d
xor ecx, ecx
mov qword [rsp + 0x60], rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
or rdi, 0xffffffffffffffff
mov r9, rax
mov qword [rsp + 0x68], rax
mov rcx, rdi
nop dword [rax + rax]
inc rcx
cmp byte [rbx + rcx], 0
jne 0x14008baa0
mov rax, rdi
nop dword [rax]
inc rax
cmp byte [r12 + rax], 0
jne 0x14008bab0
mov r8d, dword [rsp + 0x130]
mov rsi, qword [rsp + 0x148]
imul ecx, eax
mov rdx, rdi
imul ecx, r8d
cmp byte [rsi + rdx + 1], 0
lea rdx, [rdx + 1]
jne 0x14008bad4
mov r15, qword [rsp + 0x140]
lea edx, [rdx + r9*2]
add edx, edx
sub ecx, edx
sub ecx, r14d
mov r14, rdi
inc r14
cmp byte [r15 + r14], 0
jne 0x14008baf5
lea eax, [rcx + rbp]
mov rcx, rdi
add r14d, eax
nop dword [rax + rax]
inc rcx
cmp byte [rsi + rcx], 0
jne 0x14008bb10
movzx eax, r13b
imul cl
movzx ecx, al
movzx eax, bpl
imul cl
mov rcx, rdi
movzx ebp, al
sub bpl, r8b
sub bpl, 0x14
inc rcx
cmp byte [rbx + rcx], 0
jne 0x14008bb35
add bpl, cl
movzx eax, bpl
movzx r10d, bpl
mov dword [rsp + 0x80], r10d
imul r14b
movzx ecx, al
add cl, cl
lea r13d, [rcx + rax]
mov rcx, rdi
add r13b, r13b
inc rcx
cmp byte [rsi + rcx], 0
jne 0x14008bb63
imul ecx, dword [rsp + 0x70]
mov eax, r14d
imul eax, r10d
sub eax, ecx
mov rcx, qword [rsp + 0x78]
lea ecx, [rax + rcx*2]
mov rax, rdi
inc rax
cmp byte [r12 + rax], 0
jne 0x14008bb85
sub ecx, eax
mov rax, rdi
inc rax
cmp byte [rbx + rax], 0
jne 0x14008bb94
add ecx, 3
lea rdx, [0x1400ed3b8]
add eax, ecx
mov ecx, r10d
mov dword [rsp + 0xa8], eax
xor eax, eax
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rax
mov qword [rsp + 0x40], 2
mov dword [rsp + 0x38], r10d
mov dword [rsp + 0x30], r8d
mov dword [rsp + 0x28], r10d
mov dword [rsp + 0x20], r8d
lea r9d, [rax + 2]
lea r8, str.drill
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov qword [rsp + 0xb0], rax
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
call qword [sym.imp.USER32.dll_GetForegroundWindow]
mov qword [rsp + 0x88], rax
cmp r13b, 2
jge 0x14008bc25
call qword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, 0xffff
call qword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
call qword [sym.imp.KERNEL32.dll_GetTickCount]
mov rcx, qword [rsp + 0x78]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdx, rdi
nop dword [rax]
inc rdx
cmp byte [r15 + rdx], 0
jne 0x14008bc40
movzx ecx, byte [rsp + 0x70]
add cl, bpl
movzx ebp, byte [rsp + 0x60]
movzx eax, cl
shl al, 2
add cl, al
mov rax, rdi
sub bpl, cl
sub bpl, byte [rsp + 0xa8]
sub bpl, byte [rsp + 0x68]
add bpl, r13b
add bpl, byte [rsp + 0x138]
sub bpl, dl
sub bpl, 4
inc rax
cmp byte [rbx + rax], 0
jne 0x14008bc84
add bpl, al
movsx ecx, bpl
call qword [sym.imp.KERNEL32.dll_GetStdHandle]
movsx rdx, bpl
mov rbp, rdi
mov qword [rsp + 0x98], rax
mov qword [rsp + 0x90], rdx
inc rbp
cmp byte [rbx + rbp], 0
jne 0x14008bcb1
mov ecx, dword [rsp + 0x60]
mov rax, qword [rsp + 0x88]
add edx, 0xfffffff9
lea eax, [rax + rax*4]
imul ecx, dword [rsp + 0x68]
imul ecx, r14d
add ecx, eax
movsx rax, r13b
add ecx, ecx
sub eax, ecx
mov rcx, rbx
sub eax, dword [rsp + 0x70]
add eax, edx
add ebp, eax
call qword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov rdx, qword [rsp + 0x68]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
movsx r10d, r13b
mov rcx, rdi
mov r11d, eax
nop dword [rax + rax]
inc rcx
cmp byte [r12 + rcx], 0
jne 0x14008bd10
mov r13, qword [rsp + 0x88]
mov edx, dword [rsp + 0x60]
mov eax, r13d
imul eax, r10d
imul eax, r14d
lea eax, [rax + rax*4]
sub edx, eax
mov rax, rdi
add edx, dword [rsp + 0x138]
sub edx, ecx
inc rax
cmp byte [r15 + rax], 0
jne 0x14008bd42
sub edx, eax
mov rax, rdi
inc rax
cmp byte [rbx + rax], 0
jne 0x14008bd51
lea r8d, [rdx - 0xc]
add r8d, eax
mov rax, rdi
inc rax
cmp byte [rsi + rax], 0
jne 0x14008bd64
add r8d, eax
mov rdx, rdi
inc rdx
cmp byte [rbx + rdx], 0
jne 0x14008bd73
mov rax, rdi
nop
inc rax
cmp byte [r12 + rax], 0
jne 0x14008bd80
mov rcx, qword [rsp + 0x138]
imul edx, eax
mov rax, rdi
imul edx, ecx
imul edx, dword [rsp + 0x130]
inc rax
cmp byte [r15 + rax], 0
jne 0x14008bda3
nop dword [rax]
inc rdi
cmp byte [rsi + rdi], 0
jne 0x14008bdb0
mov r9, qword [rsp + 0x90]
mov rbx, qword [rsp + 0x120]
imul eax, edi
add edx, eax
mov eax, dword [rsp + 0xb0]
add r13d, 0xfffffff8
imul r9d, dword [rsp + 0x98]
add r9d, dword [rsp + 0x60]
imul eax, r10d
add r9d, r9d
imul eax, dword [rsp + 0x80]
sub r9d, eax
lea eax, [rcx + rbp]
sub r9d, dword [rsp + 0x70]
lea ecx, [rax + rax*4]
add r9d, r9d
sub r9d, ecx
lea eax, [r9 + rdx]
sub eax, r8d
sub eax, r11d
sub eax, dword [rsp + 0x78]
sub eax, dword [rsp + 0x68]
add eax, ebp
add eax, r13d
add eax, r14d
add rsp, 0xe0
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret