Function at 0x14000e708
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
mov qword [rax + 0x10], rbx
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rax - 0x68]
sub rsp, 0x140
mov rax, qword [0x1400736a0]
xor rax, rsp
mov qword [rbp + 0x38], rax
mov r15, rcx
lea r12, [rcx + 0x258]
mov rcx, r12
call fcn.140001dd0
mov r8d, 2
lea rdx, str.129
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
xor esi, esi
test rax, rax
je 0x14000ebf4
mov rdx, rax
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x14000ebf4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdi, rax
test rax, rax
je 0x14000ebf4
mov rdx, rbx
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
lea ebx, [rax - 0x28]
mov edx, 0x400
lea rcx, [rbp - 0x50]
call fcn.1400215cc
nop
xor r9d, r9d
mov r8d, ebx
lea rdx, [rdi + 0x28]
lea rcx, [rbp - 0x50]
call fcn.1400216c4
mov qword [rsp + 0x20], rsi
mov r9d, 0x1000
lea r14d, [rsi + 1]
mov r8d, r14d
lea rdx, [rbp - 0x50]
lea rcx, [rsp + 0x30]
call fcn.14001b95c
nop
mov ecx, 0x1335ca
call fcn.14003cedc
mov byte [rbp + 0x30], sil
mov ebx, esi
lea edi, [rsi + 4]
call fcn.14003ceb0
mov r8d, eax
mov eax, 0x84210843
imul r8d
add edx, r8d
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add edx, ecx
imul ecx, edx, 0x3e
sub r8d, ecx
cmp r8b, 0x1a
jae 0x14000e82a
add r8b, 0x41
jmp 0x14000e83f
cmp r8b, 0x34
jae 0x14000e836
add r8b, 0x47
jmp 0x14000e83f
cmp r8b, 0x3e
jae 0x14000e844
sub r8b, dil
mov byte [rbp + rbx + 0x10], r8b
add rbx, r14
cmp rbx, 0x20
jl 0x14000e7fb
mov rdx, qword [rsp + 0x50]
test r14b, dl
je 0x14000ec39
mov r8, qword [rsp + 0x68]
lea rax, [r8 + 4]
mov rcx, qword [rsp + 0x70]
cmp rax, rcx
jbe 0x14000e88e
sub r8d, ecx
lea edx, [rdi + r8]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
add r8, rdi
mov qword [rsp + 0x68], r8
test r14b, dl
je 0x14000ec4e
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x14000e8c8
sub r8d, ecx
lea edx, [rdi + r8]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
add r8, rdi
mov qword [rsp + 0x68], r8
test r14b, dl
je 0x14000ec63
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x14000e902
sub r8d, ecx
lea edx, [rdi + r8]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov eax, dword [r8]
mov dword [rbp - 0x60], eax
add r8, rdi
mov qword [rsp + 0x68], r8
test r14b, dl
je 0x14000ec78
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x14000e942
sub r8d, ecx
lea edx, [rdi + r8]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov eax, dword [r8]
mov dword [rbp - 0x5c], eax
add r8, rdi
mov qword [rsp + 0x68], r8
test r14b, dl
je 0x14000ec8d
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x14000e982
sub r8d, ecx
lea edx, [rdi + r8]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov eax, dword [r8]
mov dword [rbp - 0x58], eax
add r8, rdi
mov qword [rsp + 0x68], r8
test r14b, dl
je 0x14000eca2
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x14000e9c2
sub r8d, ecx
lea edx, [rdi + r8]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x70]
mov r8, qword [rsp + 0x68]
mov rdx, qword [rsp + 0x50]
mov r13d, dword [r8]
add r8, rdi
mov qword [rsp + 0x68], r8
test r14b, dl
je 0x14000ecb7
lea rax, [r8 + 4]
cmp rax, rcx
jbe 0x14000e9f5
sub r8d, ecx
lea edx, [rdi + r8]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov r8, qword [rsp + 0x68]
movsxd rbx, dword [r8]
add r8, rdi
mov qword [rsp + 0x68], r8
mov rcx, rbx
call fcn.140002b8c
mov r14, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14001c608
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, r14
mov rcx, r15
call fcn.140011a5c
mov rbx, rax
or rdi, 0xffffffffffffffff
test rax, rax
jne 0x14000ea3d
mov ecx, esi
jmp 0x14000ea49
mov rcx, rdi
inc rcx
cmp word [rax + rcx*2], si
jne 0x14000ea40
mov r8d, ecx
mov rdx, rbx
mov rcx, r12
call fcn.140002024
mov rcx, rbx
call fcn.14001279c
mov rcx, r14
call fcn.14001279c
test byte [rsp + 0x50], 1
je 0x14000eccc
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
cmp rax, qword [rsp + 0x70]
jbe 0x14000ea98
sub ecx, dword [rsp + 0x70]
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140002b8c
mov r14, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14001c608
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, r14
mov rcx, r15
call fcn.140011a5c
mov rbx, rax
test rax, rax
jne 0x14000eadd
mov ecx, esi
jmp 0x14000eae9
mov rcx, rdi
inc rcx
cmp word [rax + rcx*2], si
jne 0x14000eae0
mov r8d, ecx
mov rdx, rbx
lea rcx, [r15 + 0x260]
call fcn.140002024
mov rcx, rbx
call fcn.14001279c
mov rcx, r14
call fcn.14001279c
test byte [rsp + 0x50], 1
je 0x14000ec21
mov rcx, qword [rsp + 0x68]
lea rax, [rcx + 4]
cmp rax, qword [rsp + 0x70]
jbe 0x14000eb3c
sub ecx, dword [rsp + 0x70]
lea edx, [rcx + 4]
lea rcx, [rsp + 0x30]
call fcn.14001c1f0
mov rcx, qword [rsp + 0x68]
movsxd rbx, dword [rcx]
add rcx, 4
mov qword [rsp + 0x68], rcx
mov rcx, rbx
call fcn.140002b8c
mov r14, rax
mov r8d, ebx
mov rdx, rax
lea rcx, [rsp + 0x30]
call fcn.14001c608
lea r9, [rbp + 0x10]
mov r8d, ebx
mov rdx, r14
mov rcx, r15
call fcn.140011a5c
mov rbx, rax
lea rcx, [r15 + 0x268]
test rax, rax
jne 0x14000eb88
mov edi, esi
jmp 0x14000eb91
inc rdi
cmp word [rax + rdi*2], si
jne 0x14000eb88
mov r8d, edi
mov rdx, rbx
call fcn.140002024
mov rcx, rbx
call fcn.14001279c
mov rcx, r14
call fcn.14001279c
cmp dword [rbp - 0x60], esi
sete sil
mov dword [r15 + 0x244], esi
mov eax, dword [rbp - 0x5c]
mov dword [r15 + 0x248], eax
mov dword [r15 + 0x24c], r13d
mov eax, dword [rbp - 0x58]
mov dword [r15 + 0x250], eax
lea rcx, [rsp + 0x30]
call fcn.14001c1d4
nop
lea rcx, [rsp + 0x30]
call fcn.14001bb14
nop
lea rcx, [rbp - 0x50]
call fcn.140021618
mov rcx, qword [rbp + 0x38]
xor rcx, rsp
call fcn.140031760
lea r11, [rsp + 0x140]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, 4
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, edi
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, edi
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, edi
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, edi
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, edi
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, edi
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, edi
call fcn.14001ce64
int3
lea rcx, [rsp + 0x48]
call fcn.140001ad4
mov rdx, rax
mov ecx, 4
call fcn.14001ce64
int3