Function at 0x1400225b0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov qword [rsp + 8], rbx
mov qword [rsp + 0x10], rsi
push rdi
sub rsp, 0x20
mov rsi, rcx
mov rdi, r8
xor ecx, ecx
mov rbx, rdx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
cmp rbx, rax
jne 0x14000f7ef
movabs r10, 0x100000001b3
mov r9d, esi
mov eax, esi
movabs rcx, 0xcbf29ce484222325
shr eax, 8
movzx edx, al
movzx eax, sil
xor rax, rcx
imul rax, r10
xor rdx, rax
mov eax, esi
imul rdx, r10
shr eax, 0x10
movzx ecx, al
xor rdx, rcx
mov eax, esi
mov rcx, qword [0x1401a50a0]
imul rdx, r10
shr rax, 0x18
xor rdx, rax
imul rdx, r10
and rcx, rdx
mov rdx, qword [0x1401a5078]
shl rcx, 4
add rcx, qword [0x1401a5088]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x14000f7b5
mov rcx, qword [rcx]
cmp r9d, dword [rax + 0x10]
je 0x14000f7b7
cmp rax, rcx
je 0x14000f7b5
mov rax, qword [rax + 8]
cmp r9d, dword [rax + 0x10]
jne 0x14000f7a4
jmp 0x14000f7b7
xor eax, eax
test rax, rax
mov rbx, rdx
cmovne rbx, rax
cmp rbx, rdx
je 0x14000f8bb
lea rcx, str.____Hello_from_Hamakaze_QueryResourceData_polyfill_r_n
call fcn.140001980
mov ecx, dword [rbx + 0x20]
mov dword [rdi], ecx
mov rax, qword [rbx + 0x18]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
cmp rbx, 0x1337
jne 0x14000f8cd
movabs r10, 0x100000001b3
mov r8d, esi
mov eax, esi
movabs rcx, 0xcbf29ce484222325
shr eax, 8
movzx edx, al
movzx eax, sil
xor rax, rcx
imul rax, r10
xor rdx, rax
mov eax, esi
shr eax, 0x10
movzx ecx, al
imul rdx, r10
mov eax, esi
xor rcx, rdx
shr rax, 0x18
mov rdx, qword [0x1401a50b8]
imul rcx, r10
xor rcx, rax
imul rcx, r10
and rcx, qword [0x1401a50e0]
shl rcx, 4
add rcx, qword [0x1401a50c8]
mov rax, qword [rcx + 8]
cmp rax, rdx
je 0x14000f885
mov rcx, qword [rcx]
cmp r8d, dword [rax + 0x10]
je 0x14000f887
cmp rax, rcx
je 0x14000f885
mov rax, qword [rax + 8]
cmp r8d, dword [rax + 0x10]
jne 0x14000f874
jmp 0x14000f887
xor eax, eax
test rax, rax
mov rbx, rdx
cmovne rbx, rax
cmp rbx, rdx
je 0x14000f8bb
lea rcx, str.____Hello_from_Tanikaze_QueryResourceData_polyfill_r_n
call fcn.140001980
mov ecx, dword [rbx + 0x20]
mov dword [rdi], ecx
mov rax, qword [rbx + 0x18]
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
xor eax, eax
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
ret
mov r8, rdi
mov rdx, rbx
mov rcx, rsi
mov rbx, qword [rsp + 0x30]
mov rsi, qword [rsp + 0x38]
add rsp, 0x20
pop rdi
jmp 0x1400225b0
mov r11, rsp
mov qword [r11 + 8], rbx
push rdi
sub rsp, 0x60
mov rax, qword [section..data]
xor rax, rsp
mov qword [rsp + 0x50], rax
xor eax, eax
mov rbx, r8
mov qword [r11 - 0x40], rax
mov rdi, rdx
mov dword [rsp + 0x20], eax
test rdx, rdx
je 0x140022637
mov qword [r11 - 0x28], rcx
lea r9, [r11 - 0x38]
mov rcx, rdi
mov qword [r11 - 0x30], 0xa
mov r8d, 3
mov qword [r11 - 0x20], rax
lea rdx, [r11 - 0x30]
call qword [sym.imp.ntdll.dll_LdrFindResource_U]
test eax, eax
js 0x140022632
mov rdx, qword [rsp + 0x30]
lea r9, [rsp + 0x20]
lea r8, [rsp + 0x28]
mov rcx, rdi
call qword [sym.imp.ntdll.dll_LdrAccessResource]
test eax, eax
js 0x140022632
test rbx, rbx
je 0x140022632
mov eax, dword [rsp + 0x20]
mov dword [rbx], eax
mov rax, qword [rsp + 0x28]
mov rcx, qword [rsp + 0x50]
xor rcx, rsp
call fcn.1400259b0
mov rbx, qword [rsp + 0x70]
add rsp, 0x60
pop rdi
ret