Function at 0x1400056f0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push r14
lea rbp, [rsp - 0x38]
sub rsp, 0x138
lea rcx, str.atimuixx.dll
call qword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov r14, rax
test rax, rax
je 0x14000601d
mov qword [rsp + 0x150], rbx
mov qword [rsp + 0x158], rsi
mov qword [rsp + 0x160], rdi
mov qword [rsp + 0x130], r15
xor r15d, r15d
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
lea edx, [r15 + 6]
mov rcx, r14
movzx r9d, ax
lea r8d, [r15 + 0xa]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005814
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005814
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop
movzx ecx, word [r8]
cmp edx, 5
je 0x1400057ba
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x1400057a0
jmp 0x1400057dd
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400057dd
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005814
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d900
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x1400058f4
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400058f4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 6
je 0x14000589a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005880
jmp 0x1400058bd
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x1400058bd
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x1400058f4
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d901
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x1400059d4
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x1400059d4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 7
je 0x14000597a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005960
jmp 0x14000599d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x14000599d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x1400059d4
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d902
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005ab4
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005ab4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 8
je 0x140005a5a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005a40
jmp 0x140005a7d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005a7d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005ab4
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.FriendlyName
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d903
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005b94
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005b94
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 9
je 0x140005b3a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005b20
jmp 0x140005b5d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005b5d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005b94
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005c74
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005c74
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xa
je 0x140005c1a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005c00
jmp 0x140005c3d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005c3d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005c74
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d90
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005d54
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005d54
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xb
je 0x140005cfa
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005ce0
jmp 0x140005d1d
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005d1d
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005d54
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d900
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005e34
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005e34
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xc
je 0x140005dda
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005dc0
jmp 0x140005dfd
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005dfd
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005e34
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d901
call fcn.140008070
mov esi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005f14
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rdi, rax
test rax, rax
je 0x140005f14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xd
je 0x140005eba
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005ea0
jmp 0x140005edd
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005edd
lea rdx, [r8 + 2]
mov rsi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rsi*2 + 0x30], r15w
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test esi, esi
je 0x140005f14
lea eax, [rsi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d902
call fcn.140008070
mov edi, r15d
call qword [sym.imp.KERNEL32.dll_GetSystemDefaultLangID]
mov edx, 6
mov rcx, r14
movzx r9d, ax
lea r8d, [rdx + 4]
call qword [sym.imp.KERNEL32.dll_FindResourceExA]
xor edx, edx
lea rcx, [rsp + 0x30]
mov r8d, 0x100
mov rbx, rax
call fcn.140013d20
test rbx, rbx
je 0x140005ff4
mov rdx, rbx
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rsi, rax
test rax, rax
je 0x140005ff4
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r8, rax
mov edx, r15d
nop dword [rax + rax]
movzx ecx, word [r8]
cmp edx, 0xe
je 0x140005f9a
lea r8, [r8 + rcx*2]
inc edx
add r8, 2
cmp edx, 0x10
jb 0x140005f80
jmp 0x140005fbd
lea eax, [rcx - 1]
cmp ax, 0x7e
ja 0x140005fbd
lea rdx, [r8 + 2]
mov rdi, rcx
mov r8, rcx
lea rcx, [rsp + 0x30]
call fcn.140048730
mov word [rsp + rdi*2 + 0x30], r15w
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test edi, edi
je 0x140005ff4
lea eax, [rdi*2 + 2]
mov rcx, 0xffffffff80000002
lea r9, [rsp + 0x30]
mov dword [rsp + 0x20], eax
lea r8, str.Description
lea rdx, str.SYSTEMCurrentControlSetControlPowerPowerSettingsc763b4ec_0e50_4b6b_9bed_2b92a6ee884e7ec1751b_60ed_4588_afb5_9819d3d77d903
call fcn.140008070
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
mov r15, qword [rsp + 0x130]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x158]
mov rbx, qword [rsp + 0x150]
add rsp, 0x138
pop r14
pop rbp
ret