Function at 0x140010900
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov qword [rbp - 0x58], 0xfffffffffffffffe
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov rax, qword [0x140079698]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r14, rcx
add rcx, 0x258
call fcn.140002250
mov r8d, 2
lea rdx, str.129
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x140010e14
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140010e14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x140010e14
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea ebx, [rax - 0x28]
mov edx, 0x400
lea rcx, [rbp - 0x50]
call fcn.1400254b8
nop
xor r9d, r9d
mov r8d, ebx
lea rdx, [rdi + 0x28]
lea rcx, [rbp - 0x50]
call fcn.1400255d0
xor r15d, r15d
mov qword [rsp + 0x20], r15
mov r9d, 0x1000
lea r8d, [r15 + 1]
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001fb6c
nop
mov ecx, 0x1335ca
call fcn.14004023c
mov byte [rbp + 0x30], r15b
mov ebx, r15d
call fcn.140040210
mov ecx, eax
mov eax, 0x84210843
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add edx, eax
imul eax, edx, 0x3e
sub ecx, eax
cmp cl, 0x1a
jae 0x140010a1d
add cl, 0x41
jmp 0x140010a2f
cmp cl, 0x34
jae 0x140010a27
add cl, 0x47
jmp 0x140010a2f
cmp cl, 0x3e
jae 0x140010a33
sub cl, 4
mov byte [rbp + rbx + 0x10], cl
inc rbx
cmp rbx, 0x20
jl 0x1400109f4
mov r8, qword [rsp + 0x50]
test r8b, 1
jne 0x140010a57
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140010a88
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010aa7
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010ace
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010aed
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010b14
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
mov eax, dword [rcx]
mov dword [rbp - 0x60], eax
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010b38
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010b5f
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
mov eax, dword [rcx]
mov dword [rbp - 0x5c], eax
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010b83
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010baa
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rdx, qword [rsp + 0x70]
mov rcx, qword [rsp + 0x68]
mov r8, qword [rsp + 0x50]
mov r13d, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
test r8b, 1
jne 0x140010bcc
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
lea rax, [rcx + 4]
cmp rax, rdx
jbe 0x140010be9
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140015264
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400208f4
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.140014190
mov rbx, rax
or rdi, 0xffffffffffffffff
test rax, rax
jne 0x140010c33
mov ecx, r15d
jmp 0x140010c40
mov rcx, rdi
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140010c36
mov r8d, ecx
mov rdx, rbx
lea rcx, [r14 + 0x258]
call fcn.140002550
mov rcx, rbx
call fcn.14001525c
mov rcx, rsi
call fcn.14001525c
test byte [rsp + 0x50], 1
jne 0x140010c79
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140010ca0
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140015264
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400208f4
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.140014190
mov rbx, rax
test rax, rax
jne 0x140010ce6
mov ecx, r15d
jmp 0x140010cfa
mov rcx, rdi
nop dword [rax]
inc rcx
cmp word [rax + rcx*2], 0
jne 0x140010cf0
mov r8d, ecx
mov rdx, rbx
lea rcx, [r14 + 0x260]
call fcn.140002550
mov rcx, rbx
call fcn.14001525c
mov rcx, rsi
call fcn.14001525c
test byte [rsp + 0x50], 1
jne 0x140010d33
mov rdx, qword [rsp + 0x48]
mov ecx, 4
call fcn.140021220
int3
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
mov rdx, qword [rsp + 0x70]
cmp rax, rdx
jbe 0x140010d5a
sub ecx, edx
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.140020470
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140015264
mov rsi, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.1400208f4
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, rsi
mov rcx, r14
call fcn.140014190
mov rbx, rax
lea rcx, [r14 + 0x268]
test rax, rax
jne 0x140010db0
mov edi, r15d
jmp 0x140010dba
inc rdi
cmp word [rax + rdi*2], 0
jne 0x140010db0
mov r8d, edi
mov rdx, rbx
call fcn.140002550
mov rcx, rbx
call fcn.14001525c
mov rcx, rsi
call fcn.14001525c
cmp dword [rbp - 0x60], 0
sete r15b
mov dword [r14 + 0x244], r15d
mov eax, dword [rbp - 0x5c]
mov dword [r14 + 0x248], eax
mov dword [r14 + 0x24c], r13d
lea rcx, [rsp + 0x30]
call fcn.140020454
nop
lea rcx, [rsp + 0x30]
call fcn.14001fd50
nop
lea rcx, [rbp - 0x50]
call fcn.140025504
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.1400371e0
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret