Function at 0x140005530
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x130
mov qword [rsp + 0xa0], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x14004b200]
xor rax, rsp
mov qword [rsp + 0x128], rax
mov rbp, rcx
add rcx, 0x250
call fcn.140001fc0
mov r8d, 2
lea rdx, str.129
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x140005a2b
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140005a2b
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbx, rax
test rax, rax
je 0x140005a2b
mov rdx, rdi
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea edi, [rax - 0x28]
mov edx, 0x400
lea rcx, [rsp + 0xb0]
call fcn.14001ae1c
nop
xor r9d, r9d
mov r8d, edi
lea rdx, [rbx + 0x28]
lea rcx, [rsp + 0xb0]
call fcn.14001ae68
xor r12d, r12d
mov qword [rsp + 0x20], r12
mov r9d, 0x1000
lea r8d, [r12 + 1]
lea rdx, [rsp + 0xb0]
lea rcx, [rsp + 0x30]
call fcn.140015af4
nop
mov ecx, 0x1335ca
call fcn.14002242c
mov byte [rsp + 0x120], r12b
mov rbx, r12
nop dword [rax]
call fcn.140022444
mov edi, eax
mov eax, 0x84210843
imul edi
add edx, edi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul edx, edx, 0x3e
sub edi, edx
cmp dil, 0x1a
jae 0x140005673
add dil, 0x41
mov byte [rsp + rbx + 0x100], dil
jmp 0x140005699
cmp dil, 0x34
jae 0x140005687
add dil, 0x47
mov byte [rsp + rbx + 0x100], dil
jmp 0x140005699
cmp dil, 0x3e
jae 0x140005699
sub dil, 4
mov byte [rsp + rbx + 0x100], dil
inc rbx
cmp rbx, 0x20
jl 0x140005640
mov edi, dword [rsp + 0x50]
test dil, 1
jne 0x1400056bc
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015efc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x1400056ec
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014e58
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x14000570b
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015efc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140005731
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014e58
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005750
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015efc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140005776
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014e58
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r14d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x140005798
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015efc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x1400057be
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014e58
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov edi, dword [rsp + 0x50]
mov r13d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test dil, 1
jne 0x1400057e0
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015efc
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x1400057fd
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014e58
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b3f8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140014bbc
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a340
mov rbx, rax
test rax, rax
jne 0x140005847
mov ecx, r12d
jmp 0x140005859
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x250]
call fcn.1400021a0
mov rcx, rbx
call fcn.14000b3f0
mov rcx, rsi
call fcn.14000b3f0
test byte [rsp + 0x50], 1
jne 0x140005892
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015efc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x1400058b9
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014e58
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b3f8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140014bbc
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a340
mov rbx, rax
test rax, rax
jne 0x140005903
mov ecx, r12d
jmp 0x140005915
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x258]
call fcn.1400021a0
mov rcx, rbx
call fcn.14000b3f0
mov rcx, rsi
call fcn.14000b3f0
test byte [rsp + 0x50], 1
jne 0x14000594e
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140015efc
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140005975
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140014e58
mov rcx, qword [rsp + 0x68]
movsxd rdi, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rdi
call fcn.14000b3f8
mov rsi, rax
mov r8d, edi
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.140014bbc
lea r9, [rsp + 0x100]
mov r8d, edi
mov rdx, rsi
mov rcx, rbp
call fcn.14000a340
mov rbx, rax
test rax, rax
jne 0x1400059bf
mov ecx, r12d
jmp 0x1400059d1
xor eax, eax
or rcx, 0xffffffffffffffff
mov rdi, rbx
repne scasw ax, word [rdi]
not rcx
dec rcx
mov r8d, ecx
mov rdx, rbx
lea rcx, [rbp + 0x260]
call fcn.1400021a0
mov rcx, rbx
call fcn.14000b3f0
mov rcx, rsi
call fcn.14000b3f0
test r14d, r14d
sete r12b
mov dword [rbp + 0x244], r12d
mov dword [rbp + 0x248], r13d
lea rcx, [rsp + 0x30]
call fcn.140015608
nop
lea rcx, [rsp + 0x30]
call fcn.140015a98
nop
lea rcx, [rsp + 0xb0]
call fcn.14001b2ac
mov rcx, qword [rsp + 0x128]
xor rcx, rsp
call fcn.1400216a0
lea r11, [rsp + 0x130]
mov rbx, qword [r11 + 0x38]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret