Function at 0x140001290
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 0x10], rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x90]
sub rsp, 0x190
mov rax, qword [0x140008040]
xor rax, rsp
mov qword [rbp + 0x80], rax
mov r15, r9
mov rbx, r8
mov rdi, rcx
mov qword [rsp + 0x38], rbx
xor r14d, r14d
mov edx, 0x6c
mov r8d, 0xa
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rsi, rax
test rax, rax
je 0x1400015a0
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1400015a0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r13, rax
mov rdx, rsi
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
test r13, r13
je 0x1400015a0
test eax, eax
je 0x1400015a0
xorps xmm0, xmm0
movups xmmword [rsp + 0x58], xmm0
mov esi, eax
mov qword [rsp + 0x58], r14
mov qword [rsp + 0x60], r14
mov qword [rsp + 0x68], r14
cmp rsi, 0x1000
jb 0x140001377
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x14000161c
call fcn.140003480
test rax, rax
je 0x14000158b
lea r14, [rax + 0x27]
and r14, 0xffffffffffffffe0
mov qword [r14 - 8], rax
jmp 0x140001382
mov rcx, rsi
call fcn.140003480
mov r14, rax
mov qword [rsp + 0x58], r14
lea r12, [r14 + rsi]
mov qword [rsp + 0x68], r12
mov r8, rsi
mov rdx, r13
mov rcx, r14
call sub.VCRUNTIME140.dll_memmove
mov qword [rsp + 0x60], r12
xorps xmm0, xmm0
movdqu xmmword [rsp + 0x40], xmm0
xor r13d, r13d
mov qword [rsp + 0x50], r13
test rsi, rsi
je 0x14000142e
movabs rax, 0x7fffffffffffffff
cmp rsi, rax
ja 0x140001622
cmp rsi, 0x1000
jb 0x1400013fe
lea rcx, [rsi + 0x27]
cmp rcx, rsi
jbe 0x140001616
call fcn.140003480
test rax, rax
je 0x14000154f
lea rdi, [rax + 0x27]
and rdi, 0xffffffffffffffe0
mov qword [rdi - 8], rax
jmp 0x140001409
mov rcx, rsi
call fcn.140003480
mov rdi, rax
mov qword [rsp + 0x40], rdi
lea r13, [rdi + rsi]
mov qword [rsp + 0x50], r13
mov r8, rsi
xor edx, edx
mov rcx, rdi
call sub.VCRUNTIME140.dll_memset
mov rax, r13
mov qword [rsp + 0x48], rax
jmp 0x140001438
mov rax, qword [rsp + 0x48]
mov rdi, qword [rsp + 0x40]
mov qword [rsp + 0x30], rax
xor r9d, r9d
test rsi, rsi
je 0x14000147e
mov r10, r12
sub r10, r14
mov r11, r14
sub r11, rdi
mov r8, r15
cmp qword [r15 + 0x18], 0xf
jbe 0x14000145e
mov r8, qword [r15]
lea rcx, [rdi + r9]
xor edx, edx
mov rax, r9
div qword [r15 + 0x10]
movzx eax, byte [rdx + r8]
xor al, byte [r11 + rcx]
mov byte [rcx], al
inc r9
cmp r9, r10
jb 0x140001451
xor edx, edx
mov r8d, 0x108
lea rcx, [rsp + 0x70]
call sub.VCRUNTIME140.dll_memset
mov rdx, rbx
cmp qword [rbx + 0x18], 0xf
jbe 0x14000149d
mov rdx, qword [rbx]
lea rcx, [rsp + 0x70]
call fcn.140002d80
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, vtable.std::basic_ofstream_char__struct_std::char_traits_char__.0
mov qword [rsp + rcx + 0x70], rax
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea edx, [rcx - 0xa8]
mov dword [rsp + rcx + 0x6c], edx
cmp qword [rbp - 8], 0
je 0x14000151b
mov r8, qword [rsp + 0x30]
sub r8, rdi
mov rdx, rdi
lea rcx, [rsp + 0x70]
call qword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______ptr64___cdecl_std::basic_ostream_char__struct_std::char_traits_char__::write_char_const____ptr64__long_long___int64_____ptr64]
lea rcx, [rsp + 0x78]
call fcn.140002cc0
test rax, rax
jne 0x14000151b
mov rax, qword [rsp + 0x70]
movsxd rcx, dword [rax + 4]
lea rax, [rsp + 0x70]
add rcx, rax
xor r8d, r8d
mov edx, 2
call qword [sym.imp.MSVCP140.dll_public:_void___cdecl_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool____ptr64]
nop
lea rcx, [rsp + 0x70]
call fcn.140001630
nop
test rdi, rdi
je 0x140001562
sub r13, rdi
mov rax, rdi
cmp r13, 0x1000
jb 0x140001556
add r13, 0x27
mov rdi, qword [rdi - 8]
sub rax, rdi
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001556
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r13
mov rcx, rdi
call fcn.1400034bc
nop
test r14, r14
je 0x14000159d
sub r12, r14
mov rax, r14
cmp r12, 0x1000
jb 0x140001592
add r12, 0x27
mov r14, qword [r14 - 8]
sub rax, r14
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
jbe 0x140001592
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
int3
mov rdx, r12
mov rcx, r14
call fcn.1400034bc
xor r14d, r14d
mov rdx, qword [rbx + 0x18]
cmp rdx, 0xf
jbe 0x1400015d6
inc rdx
mov rcx, qword [rbx]
cmp rdx, 0x1000
jb 0x1400015d1
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x14000160f
mov rcx, r8
call fcn.1400034bc
mov byte [rbx], 0
mov qword [rbx + 0x18], 0xf
mov qword [rbx + 0x10], r14
mov rcx, qword [rbp + 0x80]
xor rcx, rsp
call fcn.140003460
mov rbx, qword [rsp + 0x1d8]
add rsp, 0x190
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret
call qword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
nop
call fcn.140001110
nop
call fcn.140001110
nop
call fcn.1400033e0
int3