Function at 0x140001d98
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x18], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
mov rbp, rsp
sub rsp, 0x60
mov rax, qword [section..data]
xor rax, rsp
mov qword [rbp - 0x10], rax
mov rsi, rdx
mov qword [rbp - 0x40], rdx
mov r12, rcx
xorps xmm0, xmm0
movups xmmword [rbp - 0x30], xmm0
and qword [rbp - 0x20], 0
mov qword [rbp - 0x18], 0xf
mov byte [rbp - 0x30], 0
mov edx, 1
xor ecx, ecx
mov r8d, 0xdc
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
add rax, rdi
mov qword [rbp - 0x38], rax
jmp 0x140002031
mov r15, rbx
cmp byte [rbx], 0x7c
je 0x140001fe9
cmp r15, rax
jae 0x140001e3f
inc r15
cmp byte [r15], 0x7c
jne 0x140001e31
cmp byte [rbx], 0x2a
jne 0x140001fe9
movsx ecx, byte [rbx + 1]
sub ecx, 0x63
je 0x140001e85
cmp ecx, 1
je 0x140001e6c
mov rcx, r12
cmp qword [r12 + 0x18], 7
jbe 0x140001e65
mov rcx, qword [r12]
mov eax, dword [r12 + 0x10]
jmp 0x140001e9c
lea rcx, [r12 + 0x40]
cmp qword [r12 + 0x58], 7
jbe 0x140001e7e
mov rcx, qword [r12 + 0x40]
mov eax, dword [r12 + 0x50]
jmp 0x140001e9c
lea rcx, [r12 + 0x20]
cmp qword [r12 + 0x38], 7
jbe 0x140001e97
mov rcx, qword [r12 + 0x20]
mov eax, dword [r12 + 0x30]
movsxd rdx, eax
lea r8, [rbp - 0x30]
call fcn.14000121c
mov rsi, qword [rbp - 0x20]
mov r14, qword [rbp - 0x18]
cmp rsi, r14
jae 0x140001ed5
lea rax, [rsi + 1]
mov qword [rbp - 0x20], rax
lea rax, [rbp - 0x30]
cmp r14, 0xf
cmova rax, qword [rbp - 0x30]
mov word [rax + rsi], 0x5c
jmp 0x140001fe3
movabs rdx, 0x7fffffffffffffff
mov rax, rdx
sub rax, rsi
cmp rax, 1
jb 0x140002095
lea r13, [rsi + 1]
mov rdi, r13
or rdi, 0xf
cmp rdi, rdx
ja 0x140001f10
mov rcx, r14
shr rcx, 1
mov rax, rdx
sub rax, rcx
cmp r14, rax
jbe 0x140001f23
mov rdi, rdx
movabs rcx, 0x8000000000000000
add rcx, 0x27
jmp 0x140001f47
lea rax, [r14 + rcx]
cmp rdi, rax
cmovb rdi, rax
lea rax, [rdi + 1]
cmp rax, 0x1000
jb 0x140001f63
lea rcx, [rax + 0x27]
cmp rcx, rax
jbe 0x1400020a1
call fcn.140003810
test rax, rax
je 0x1400020a7
lea rbx, [rax + 0x27]
and rbx, 0xffffffffffffffe0
mov qword [rbx - 8], rax
jmp 0x140001f77
test rax, rax
je 0x140001f75
mov rcx, rax
call fcn.140003810
mov rbx, rax
jmp 0x140001f77
xor ebx, ebx
mov qword [rbp - 0x20], r13
mov qword [rbp - 0x18], rdi
mov r8, rsi
mov rcx, rbx
cmp r14, 0xf
jbe 0x140001fd0
mov rdi, qword [rbp - 0x30]
mov rdx, rdi
call fcn.140013ba0
mov word [rsi + rbx], 0x5c
lea rdx, [r14 + 1]
cmp rdx, 0x1000
jb 0x140001fc6
add rdx, 0x27
mov rcx, qword [rdi - 8]
sub rdi, rcx
lea rax, [rdi - 8]
cmp rax, 0x1f
ja 0x1400020a7
mov rdi, rcx
mov rcx, rdi
call fcn.14000384c
jmp 0x140001fdf
lea rdx, [rbp - 0x30]
call fcn.140013ba0
mov word [rsi + rbx], 0x5c
mov qword [rbp - 0x30], rbx
mov rsi, qword [rbp - 0x40]
jmp 0x140002029
lea rdx, [rbp - 0x30]
cmp qword [rbp - 0x18], 0xf
cmova rdx, qword [rbp - 0x30]
mov r8, qword [rbp - 0x20]
mov rcx, rsi
call fcn.1400032a4
mov r8, r15
sub r8, rbx
mov rdx, rbx
mov rcx, rsi
call fcn.1400032a4
mov r8d, 5
lea rdx, str..dll_
mov rcx, rsi
call fcn.1400032a4
lea rbx, [r15 + 1]
mov rax, qword [rbp - 0x38]
cmp rbx, rax
jb 0x140001e25
mov rdx, qword [rbp - 0x18]
cmp rdx, 0xf
jbe 0x140002071
inc rdx
mov rcx, qword [rbp - 0x30]
mov rax, rcx
cmp rdx, 0x1000
jb 0x14000206c
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x14000209b
call fcn.14000384c
mov rcx, qword [rbp - 0x10]
xor rcx, rsp
call fcn.1400037f0
mov rbx, qword [rsp + 0xb0]
add rsp, 0x60
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call fcn.140001158
nop
call fcn.14000b150
nop
call fcn.1400010c0
int3
call fcn.14000b150
int3