Function at 0x1400feea0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x18], rsi
mov qword [rsp + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x3270]
mov eax, 0x33a0
call fcn.1401e33b0
sub rsp, rax
mov rax, qword [0x1402a76c0]
xor rax, rsp
mov qword [rbp + 0x3260], rax
mov rbx, rdx
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x2a40]
call fcn.1401e7e40
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x2e50]
call fcn.1401e7e40
lea rcx, [rbp - 0x68]
call fcn.14005f660
nop
lea rcx, [rbp - 0x70]
call fcn.14009ffa0
nop
mov r15, qword [rbx]
mov r12, qword [rbx + 8]
cmp r15, r12
je 0x1400ff362
xor r13d, r13d
mov rdx, r15
lea rcx, [rbp - 0x60]
call fcn.140003120
nop
cmp dword [rbp + 0x1c30], 0
je 0x1400ff346
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x2a40]
call fcn.1401e7e40
xor edx, edx
mov r8d, 0x410
lea rcx, [rbp + 0x2e50]
call fcn.1401e7e40
lea rcx, [rbp + 0xbd0]
mov rax, 0xffffffffffffffff
inc rax
cmp word [rcx + rax*2], 0
jne 0x1400fef80
lea r8, [rbp + 0xbd0]
lea rcx, [rbp + 0x7c0]
test rax, rax
cmove r8, rcx
mov edx, 0x208
lea rcx, [rbp + 0x2a40]
call fcn.1401ebfa8
call fcn.1401bb0c4
mov rcx, rax
test rax, rax
je 0x1400ff3b0
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
add rax, 0x18
mov qword [rbp - 0x80], rax
lea r8, [rbp - 0x80]
lea rdx, [rbp + 0x2a40]
lea rcx, [rbp - 0x70]
call fcn.1400a0600
mov rbx, qword [rbp - 0x80]
mov edx, 0x208
lea rcx, [rbp + 0x2a40]
cmp dword [rbx - 0x10], 0
mov r8, rbx
jg 0x1400ff00a
lea r8, [rbp + 0x3b0]
call fcn.1401ebfa8
lea r8, [rbp + 0x2e50]
lea rdx, [rbp + 0x2a40]
lea rcx, [rbp - 0x68]
call fcn.1400620c0
mov rcx, qword [0x1402bbf50]
mov rax, qword [rcx]
mov rax, qword [rax + 0x20]
call qword [case.0x1400136d6.0]
cmp dword [rax + 0xa64], 2
jne 0x1400ff249
call fcn.1401bb0c4
mov rcx, rax
test rax, rax
je 0x1400ff3a5
mov rax, qword [rax]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
lea rbx, [rax + 0x18]
mov qword [rbp - 0x78], rbx
mov ecx, 0x13f6
call fcn.1401bb5fc
mov rsi, rax
test rax, rax
je 0x1400ff172
mov edx, 0x140
mov r8d, 6
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov r14, rax
test rax, rax
je 0x1400ff172
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400ff172
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x1400ff172
mov rdx, r14
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edx, eax
add rdx, rdi
mov ecx, 6
cmp rdi, rdx
jae 0x1400ff172
movzx eax, word [rdi]
lea rdi, [rdi + rax*2]
add rdi, 2
add ecx, 0xffffffff
jne 0x1400ff0e3
cmp rdi, rdx
jae 0x1400ff172
cmp word [rdi], cx
je 0x1400ff172
test rdi, rdi
je 0x1400ff172
movzx esi, word [rdi]
lfence
mov rbx, qword [rbp - 0x78]
mov ecx, 1
sub ecx, dword [rbx - 8]
mov eax, dword [rbx - 0xc]
sub eax, esi
or eax, ecx
jge 0x1400ff138
lfence
mov edx, esi
lea rcx, [rbp - 0x78]
call fcn.140004e00
mov rbx, qword [rbp - 0x78]
lea r8, [rdi + 2]
movzx r9d, word [rdi]
mov rdx, rsi
mov rcx, rbx
call fcn.1401ebe84
test eax, eax
je 0x1400ff161
cmp eax, 0xc
je 0x1400ff3c1
cmp eax, 0x50
jne 0x1400ff3bb
cmp esi, dword [rbx - 0xc]
jg 0x1400ff3c7
mov dword [rbx - 0x10], esi
mov word [rbx + rsi*2], r13w
mov rcx, qword [0x1402bbf50]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
mov r10, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x98]
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x98], rcx
mov dword [rsp + 0x90], r13d
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x78], rbx
mov dword [rsp + 0x70], r13d
mov dword [rsp + 0x68], r13d
mov dword [rsp + 0x60], r13d
mov dword [rsp + 0x58], r13d
mov qword [rsp + 0x50], r13
mov dword [rsp + 0x48], r13d
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0xffffffff
lea rcx, [rbp + 0x2044]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x2e50]
lea r8, [rbp + 0x3b0]
xor edx, edx
mov rcx, r10
call qword [case.0x1400136d6.0]
nop
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ff240
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
mov rbx, qword [rbp - 0x80]
jmp 0x1400ff2f0
mov rcx, qword [0x1402bbf50]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
mov r10, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x98]
lea rcx, [rbp + 0x1a8]
mov qword [rsp + 0x98], rcx
mov dword [rsp + 0x90], r13d
mov qword [rsp + 0x88], r13
mov qword [rsp + 0x80], r13
mov qword [rsp + 0x78], r13
mov dword [rsp + 0x70], r13d
mov dword [rsp + 0x68], r13d
mov dword [rsp + 0x60], r13d
mov dword [rsp + 0x58], r13d
mov qword [rsp + 0x50], r13
mov dword [rsp + 0x48], r13d
mov dword [rsp + 0x40], r13d
mov qword [rsp + 0x38], r13
mov qword [rsp + 0x30], r13
mov dword [rsp + 0x28], 0xffffffff
lea rcx, [rbp + 0x2044]
mov qword [rsp + 0x20], rcx
lea r9, [rbp + 0x2e50]
lea r8, [rbp + 0x3b0]
xor edx, edx
mov rcx, r10
call qword [case.0x1400136d6.0]
mov rcx, qword [0x1402bbf50]
mov rax, qword [rcx]
mov rax, qword [rax + 0x18]
call qword [case.0x1400136d6.0]
mov r9, rax
mov rcx, qword [rax]
mov rax, qword [rcx + 0x10]
xor r8d, r8d
lea edx, [r8 + 1]
mov rcx, r9
call qword [case.0x1400136d6.0]
nop
lea rdx, [rbx - 0x18]
mov eax, 0xffffffff
lock xadd dword [rdx + 0x10], eax
sub eax, 1
jg 0x1400ff346
lfence
mov rcx, qword [rdx]
mov rax, qword [rcx]
mov rax, qword [rax + 8]
call qword [case.0x1400136d6.0]
nop
lea rcx, [rbp + 0x1c10]
call fcn.1400048a0
add r15, 0x2aa0
cmp r15, r12
jne 0x1400fef30
lea rcx, [rbp - 0x70]
call fcn.1400a0110
nop
lea rcx, [rbp - 0x68]
call fcn.14005f7d0
mov rcx, qword [rbp + 0x3260]
xor rcx, rsp
call fcn.1401e2900
lea r11, [rsp + 0x33a0]
mov rbx, qword [r11 + 0x30]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
mov ecx, 0x80004005
call fcn.140001470
nop
mov ecx, 0x80004005
call fcn.140001470
nop
call fcn.1401bb848
int3
call fcn.1401bb86c
int3
mov ecx, 0x80070057
call fcn.140001470
int3