Function at 0x140002f10
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbx
sub rsp, 0x4b0
mov rax, qword [0x140033018]
xor rax, rsp
mov qword [rsp + 0x490], rax
lea r8, [0x14002d0b0]
mov edx, 0x6f
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x140003254
mov qword [rsp + 0x4d0], rdi
mov rdx, rax
xor ecx, ecx
mov qword [rsp + 0x4a0], r15
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov rdx, rbx
xor ecx, ecx
mov edi, eax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r15, rax
test rax, rax
je 0x140003244
mov qword [rsp + 0x4c0], rbp
mov rcx, rax
mov qword [rsp + 0x4c8], rsi
mov qword [rsp + 0x4d8], r12
call qword [sym.imp.KERNEL32.dll_LockResource]
mov edx, edi
mov rcx, r15
call fcn.140008350
xor r12d, r12d
mov rbx, rax
mov dword [rsp + 0x30], r12d
mov word [rsp + 0x34], r12w
mov dword [rsp + 0x25c], r12d
test rax, rax
jne 0x140002fda
mov ebp, r12d
mov dword [0x140034f24], 0x10000
jmp 0x140003075
cmp dword [rax], 1
je 0x140002fe9
mov ebp, r12d
mov eax, 0x80000
jmp 0x140003000
mov rcx, qword [rax + 8]
lea r8, [rsp + 0x30]
mov edx, 0xffffffff
call fcn.1400076c0
mov ebp, dword [rsp + 0x30]
cmp dword [rbx], 1
mov dword [0x140034f24], eax
je 0x140003017
mov dword [0x140034f24], 0x80000
jmp 0x140003075
mov rsi, qword [rbx + 8]
lea rdx, str.C:TqAgent_
mov r8d, 0x103
lea rcx, [rsi + 0x250]
call fcn.1400142f8
mov rax, 0xffffffffffffffff
nop dword [rax + rax]
cmp word [rsi + rax*2 + 0x252], r12w
lea rax, [rax + 1]
jne 0x140003040
movzx ecx, word [rsi + rax*2 + 0x24e]
cmp cx, 0x5c
je 0x14000306e
cmp cx, 0x2f
je 0x14000306e
mov dword [rsi + rax*2 + 0x250], 0x2f
mov dword [0x140034f24], r12d
mov esi, r12d
test ebp, ebp
jle 0x1400030ff
mov dword [rsp + 0x260], r12d
lea rdi, [rbx + 8]
mov word [rsp + 0x264], r12w
mov dword [rsp + 0x48c], r12d
test rbx, rbx
jne 0x1400030a9
mov eax, 0x10000
jmp 0x1400030f1
mov eax, dword [rbx]
cmp eax, 1
je 0x1400030b7
mov ecx, 0x80000
jmp 0x1400030cd
mov rcx, qword [rdi]
lea r8, [rsp + 0x260]
mov edx, esi
call fcn.1400076c0
mov ecx, eax
mov eax, dword [rbx]
mov dword [0x140034f24], ecx
cmp eax, 1
je 0x1400030df
mov eax, 0x80000
jmp 0x1400030f1
mov rcx, qword [rdi]
lea r8, [rsp + 0x264]
mov edx, esi
call fcn.140007fc0
inc esi
mov dword [0x140034f24], eax
cmp esi, ebp
jl 0x140003080
jmp 0x140003103
lea rdi, [rbx + 8]
test rbx, rbx
jne 0x140003117
mov dword [0x140034f24], 0x10000
jmp 0x140003223
cmp dword [rbx], 1
je 0x14000312b
mov dword [0x140034f24], 0x80000
jmp 0x140003223
mov rsi, qword [rdi]
mov qword [rsp + 0x4a8], r14
cmp dword [rsi + 8], 0xffffffff
je 0x140003182
mov rbp, qword [rsi]
test rbp, rbp
je 0x140003182
mov rdi, qword [rbp + 0x80]
test rdi, rdi
je 0x140003182
mov rcx, qword [rdi]
test rcx, rcx
je 0x14000315d
call fcn.140014340
mov qword [rdi], r12
cmp dword [rdi + 0x64], r12d
je 0x14000316f
lea rcx, [rdi + 8]
call fcn.1400059f0
mov rcx, rdi
mov dword [rdi + 0x64], r12d
call fcn.140014340
mov qword [rbp + 0x80], r12
mov r14, qword [rsi]
mov dword [rsi + 8], 0xffffffff
test r14, r14
je 0x1400031fc
mov rdi, qword [r14 + 0x80]
test rdi, rdi
je 0x1400031cf
mov rcx, qword [rdi]
test rcx, rcx
je 0x1400031aa
call fcn.140014340
mov qword [rdi], r12
cmp dword [rdi + 0x64], r12d
je 0x1400031bc
lea rcx, [rdi + 8]
call fcn.1400059f0
mov rcx, rdi
mov dword [rdi + 0x64], r12d
call fcn.140014340
mov qword [r14 + 0x80], r12
mov rdi, qword [r14]
test rdi, rdi
je 0x1400031f4
cmp byte [rdi + 0x18], r12b
je 0x1400031e7
mov rcx, qword [rdi + 8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, 0x30
mov rcx, rdi
call fcn.1400086d0
mov rcx, r14
call fcn.140014340
mov rcx, rsi
mov qword [rsi], r12
mov dword [0x140034f24], r12d
call fcn.1400084b0
mov edx, 0x10
mov rcx, rbx
call fcn.1400086d0
mov r14, qword [rsp + 0x4a8]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FreeResource]
mov r12, qword [rsp + 0x4d8]
mov rsi, qword [rsp + 0x4c8]
mov rbp, qword [rsp + 0x4c0]
mov rdi, qword [rsp + 0x4d0]
mov r15, qword [rsp + 0x4a0]
call qword [sym.imp.KERNEL32.dll_GetLastError]
mov rcx, qword [rsp + 0x490]
xor rcx, rsp
call fcn.1400086b0
add rsp, 0x4b0
pop rbx
ret