Function at 0x140001000
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbx
push r15
sub rsp, 0xe8
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0xc8], rax
mov rbx, rcx
call qword [sym.imp.USER32.dll_GetDesktopWindow]
mov rcx, rax
lea rdx, [0x140005710]
call qword [sym.imp.USER32.dll_GetWindowRect]
mov rax, qword [sym.imp.USER32.dll_DefWindowProcW]
lea rcx, [rsp + 0x60]
xor r15d, r15d
mov qword [rsp + 0x68], rax
lea rax, str.NeAcJpScW
mov qword [rsp + 0x78], r15
xorps xmm0, xmm0
mov qword [rsp + 0xa0], rax
xorps xmm1, xmm1
mov dword [rsp + 0x60], 0x50
mov dword [rsp + 0x64], 0x200
mov qword [rsp + 0x70], r15
movdqa xmmword [rsp + 0x80], xmm0
movdqa xmmword [rsp + 0x90], xmm1
mov qword [rsp + 0xa8], r15
call qword [sym.imp.USER32.dll_RegisterClassExW]
test ax, ax
jne 0x1400010a7
lea eax, [r15 + 1]
jmp 0x140001182
mov qword [rsp + 0x58], r15
lea r8, [0x1400033fc]
mov qword [rsp + 0x50], rbx
mov r9d, 0x10000000
mov qword [rsp + 0x48], r15
mov ecx, 0x800a8
mov qword [rsp + 0x40], r15
mov dword [rsp + 0x38], r15d
mov dword [rsp + 0x30], r15d
mov qword [rsp + 0x108], rbp
mov dword [rsp + 0x28], r15d
mov qword [rsp + 0x118], rdi
movzx edx, ax
mov dword [rsp + 0x20], r15d
mov qword [rsp + 0xd0], r14
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov edx, 0xfffffff0
mov r8d, 0x800000
mov rcx, rax
mov qword [0x140005720], rax
call qword [sym.imp.USER32.dll_SetWindowLongW]
mov edi, 0xa
xor ecx, ecx
mov r8d, edi
lea edx, [rdi + 0x5b]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x140001165
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rbp, rax
test rax, rax
je 0x140001165
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r14, rax
test rax, rax
jne 0x14000119d
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, 3
mov rdi, qword [rsp + 0x118]
mov rbp, qword [rsp + 0x108]
mov r14, qword [rsp + 0xd0]
mov rcx, qword [rsp + 0xc8]
xor rcx, rsp
call fcn.140001680
add rsp, 0xe8
pop r15
pop rbx
ret
mov qword [rsp + 0x110], rsi
mov rdx, rbx
mov qword [rsp + 0xe0], r12
xor ecx, ecx
mov qword [rsp + 0xd8], r13
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ecx, eax
mov ebx, eax
mov esi, eax
call fcn.1400016a8
mov qword [0x140005760], rax
test ebx, ebx
je 0x1400011fb
mov rdx, r15
nop dword [rax]
movzx ecx, byte [r14 + rdx]
mov byte [rdx + rax], cl
lea rdx, [rdx + 1]
sub rsi, 1
je 0x1400011fb
mov rax, qword [0x140005760]
jmp 0x1400011e0
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov rax, qword [0x140005760]
mov ecx, dword [rax]
mov edx, dword [rax + 4]
mov dword [0x14000576c], ecx
imul ecx, edx
mov dword [0x140005768], edx
shl ecx, 2
call fcn.1400016a8
mov r12d, dword [0x140005768]
mov r10, rax
mov r13d, dword [0x14000576c]
mov ebp, r12d
imul ebp, r13d
mov r9d, r15d
mov qword [0x140005708], rax
shl ebp, 2
test ebp, ebp
je 0x1400012e5
nop dword [rax]
nop dword [rax + rax]
mov r8, qword [0x140005760]
lea eax, [rdi - 2]
lea ebx, [rdi - 1]
mov esi, edi
lea r14d, [rdi + 1]
lea r15d, [rdi + 2]
movzx r11d, byte [rax + r8]
lea eax, [r9 + 2]
movzx ecx, byte [rbx + r8]
lea r8d, [rax - 1]
mov edx, r9d
add r9d, 4
sub r11d, 1
mov byte [rdx + r10], cl
mov rcx, qword [0x140005760]
movzx edx, byte [rsi + rcx]
mov byte [r8 + r10], dl
lea r8d, [rax + 1]
mov rcx, qword [0x140005760]
movzx edx, byte [r14 + rcx]
mov byte [rax + r10], dl
lea eax, [rax + 4]
mov rcx, qword [0x140005760]
movzx edx, byte [r15 + rcx]
mov byte [r8 + r10], dl
js 0x1400012d9
mov r8, qword [0x140005760]
jmp 0x140001280
add edi, 5
cmp r9d, ebp
jb 0x140001260
xor ecx, ecx
mov dword [0x140005730], 0x28
mov dword [0x140005734], r13d
mov dword [0x140005738], r12d
mov qword [0x14000573c], 0x200001
mov dword [0x140005744], ebp
mov byte [0x140005728], 0
mov word [0x14000572a], 0x1ff
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, rax
mov rbx, rax
call qword [sym.imp.GDI32.dll_CreateCompatibleDC]
mov rcx, rax
mov qword [0x140005770], rax
mov edx, 8
call qword [sym.imp.GDI32.dll_SetLayout]
mov r8d, dword [0x140005768]
mov rcx, rbx
mov edx, dword [0x14000576c]
call qword [sym.imp.GDI32.dll_CreateCompatibleBitmap]
mov rcx, qword [0x140005770]
mov rdx, rax
mov qword [0x140005778], rax
call qword [sym.imp.GDI32.dll_SelectObject]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov ecx, dword [0x140005768]
imul ecx, dword [0x14000576c]
shl ecx, 2
call fcn.1400016a8
mov r12d, dword [0x14000576c]
xor r13d, r13d
mov ebp, dword [0x140005768]
mov r15, rax
mov edi, r13d
test r12d, r12d
je 0x140001474
mov r14, qword [0x140005708]
nop word [rax + rax]
mov esi, r13d
test ebp, ebp
je 0x140001469
mov r13d, edi
imul r13d, ebp
add r13d, 2
nop word [rax + rax]
lea edx, [rsi + r13]
mov ebx, ebp
shl edx, 2
sub ebx, esi
dec ebx
inc esi
imul ebx, r12d
movzx ecx, byte [rdx + r14]
lea eax, [rdx + 1]
movzx r8d, byte [rax + r14]
lea eax, [rdx + 2]
movzx r10d, byte [rax + r14]
lea eax, [rdx + 3]
movzx r11d, byte [rax + r14]
add ebx, edi
imul ecx, r11d
mov eax, 0x80808081
shl ebx, 2
mul ecx
lea eax, [rbx + 2]
mov ecx, r8d
shr edx, 7
imul ecx, r11d
mov byte [rax + r15], dl
mov eax, 0x80808081
mul ecx
lea eax, [rbx + 1]
mov ecx, r10d
shr edx, 7
imul ecx, r11d
mov byte [rax + r15], dl
mov eax, 0x80808081
mul ecx
lea eax, [rbx + 3]
shr edx, 7
mov byte [rbx + r15], dl
mov byte [rax + r15], r11b
cmp esi, ebp
jb 0x1400013e0
xor r13d, r13d
inc edi
cmp edi, r12d
jb 0x1400013c0
mov rdx, qword [0x140005778]
lea rax, [0x140005730]
mov rcx, qword [0x140005770]
mov r9d, ebp
mov dword [rsp + 0x30], r13d
xor r8d, r8d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], r15
call qword [sym.imp.GDI32.dll_SetDIBits]
mov eax, dword [0x14000576c]
xor ecx, ecx
mov dword [rsp + 0xb8], eax
mov eax, dword [0x140005768]
mov dword [rsp + 0xbc], eax
mov qword [rsp + 0xc0], 0
mov qword [rsp + 0xb0], 0
call qword [sym.imp.USER32.dll_GetDC]
mov rcx, qword [0x140005770]
lea r9, [rsp + 0xb8]
mov rbx, rax
mov dword [rsp + 0x40], 2
lea rax, [0x140005728]
mov rdx, rbx
mov qword [rsp + 0x38], rax
lea r8, [rsp + 0xc0]
lea rax, [rsp + 0xb0]
mov dword [rsp + 0x30], r13d
mov qword [rsp + 0x28], rax
mov qword [rsp + 0x20], rcx
mov rcx, qword [0x140005720]
call qword [sym.imp.USER32.dll_UpdateLayeredWindow]
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.USER32.dll_ReleaseDC]
mov rcx, qword [0x140005770]
call qword [sym.imp.GDI32.dll_DeleteDC]
mov rcx, r15
call fcn.1400016a0
mov ecx, dword [0x140005768]
mov eax, dword [0x14000571c]
cdq
shr ecx, 1
sub eax, edx
mov dword [rsp + 0x30], 0x15
sar eax, 1
mov r9d, eax
mov dword [rsp + 0x28], r13d
mov eax, dword [0x140005718]
sub r9d, ecx
mov ecx, dword [0x14000576c]
cdq
sub eax, edx
shr ecx, 1
sar eax, 1
xor edx, edx
sub eax, ecx
mov dword [rsp + 0x20], r13d
mov rcx, qword [0x140005720]
mov r8d, eax
call qword [sym.imp.USER32.dll_SetWindowPos]
mov edx, 0xffffffff
xor ecx, ecx
call qword [sym.imp.WINMM.dll_waveOutSetVolume]
lea r8, [0x140003400]
mov edx, 0x66
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r13, qword [rsp + 0xd8]
mov r12, qword [rsp + 0xe0]
mov rsi, qword [rsp + 0x110]
test rax, rax
jne 0x1400015ed
mov eax, 0x3e9
jmp 0x14000116a
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x140001607
mov eax, 0x3ea
jmp 0x14000116a
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
test rax, rax
jne 0x14000161f
mov eax, 0x3eb
jmp 0x14000116a
xor edx, edx
mov rcx, rax
lea r8d, [rdx + 7]
call qword [sym.imp.WINMM.dll_PlaySoundW]
test eax, eax
jne 0x14000163c
mov eax, 0x3ec
jmp 0x14000116a
mov ecx, 0xc8
call qword [sym.imp.KERNEL32.dll_Sleep]
mov rcx, qword [0x140005720]
mov edx, 5
call qword [sym.imp.USER32.dll_ShowWindow]
mov ecx, 0x640
call qword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
jmp 0x14000116a