Function at 0x140020bb4
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov dword [rsp + 8], ecx
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r15
sub rsp, 0x70
xor ebp, ebp
mov rdi, rdx
movzx ebx, r9w
lea rax, [r8 + rbx]
mov r12, r8
mov r13d, 1
mov rcx, rdi
mov r8d, 0xda
mov rdx, r13
mov qword [rsp + 0x58], rax
mov qword [rsp + 0x48], rbp
movzx esi, bp
movzx r15d, bp
mov word [rsp + 0x40], bp
call qword [sym.imp.KERNEL32.dll_FindResourceA]
test rax, rax
jne 0x140020c1b
mov ax, bp
add rsp, 0x70
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret
mov rdx, rax
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x140020c09
mov rcx, rax
mov qword [rsp + 0xb8], r14
call qword [sym.imp.KERNEL32.dll_LockResource]
movzx ecx, byte [rsp + 0xe0]
mov r8, rax
mov qword [rsp + 0x50], rax
movzx eax, cl
and al, r13b
mov byte [rsp + 0xc8], al
je 0x140020c9c
test cl, 8
je 0x140020c6b
mov rdi, qword [rsp + 0xd0]
jmp 0x140020c7b
mov rdi, qword [rsp + 0xd0]
add rdi, 2
mov word [rdi - 2], bp
test bx, bx
jne 0x140020c88
mov word [rdi], bp
jmp 0x140020faa
movzx eax, word [rsp + 0xd8]
mov r10, qword [rsp + 0x48]
lea r14, [rdi + rax*2 - 2]
jmp 0x140020cf9
test bx, bx
jne 0x140020cbe
mov rax, qword [rsp + 0xd0]
mov byte [rax], bpl
test cl, 4
je 0x140020faa
mov byte [rax + 1], bpl
jmp 0x140020faa
movzx eax, word [rsp + 0xd8]
mov r8, qword [rsp + 0xe8]
lea rdx, [rsp + 0x48]
lea rbx, [rax + rax]
mov rcx, rbx
call fcn.1400161e8
test eax, eax
js 0x140020faa
mov r10, qword [rsp + 0x48]
mov r8, qword [rsp + 0x50]
lea r14, [rbx + r10 - 2]
mov rdi, r10
mov qword [rsp + 0x60], rdi
cmp r12, qword [rsp + 0x58]
jae 0x140020de4
cmp rdi, r14
jae 0x140020dd3
movzx r13d, byte [r12]
inc r12
mov qword [rsp + 0xc0], r12
mov r12d, 8
movzx eax, r13b
movzx edx, si
shr al, 7
movzx eax, al
mov r15, rax
mov word [rsp + 0x40], ax
lea rax, [rdx + rdx*2]
lea rcx, [r15 + rax*2]
mov si, word [r8 + rcx*2]
test si, si
jne 0x140020db3
lea rax, [rdx + rdx*2]
mov dx, bp
lea r9, [r8 + rax*4 + 4]
mov rax, r9
cmp word [r9], dx
jne 0x140020d6b
mov edx, 1
jmp 0x140020d7d
add rax, 2
cmp dx, 4
jae 0x140020d7d
inc dx
cmp word [rax], bp
jne 0x140020d6b
movzx eax, dx
lea rcx, [rdi + rax*2]
cmp rcx, r14
jbe 0x140020d92
mov rdx, r14
sub rdx, rdi
sar rdx, 1
movzx ebx, dx
mov rcx, rdi
mov rdx, r9
add rbx, rbx
mov r8, rbx
call fcn.140008ec4
mov r8, qword [rsp + 0x50]
add rdi, rbx
mov si, word [r8 + r15*2]
add r13b, r13b
sub r12d, 1
jne 0x140020d28
mov r12, qword [rsp + 0xc0]
cmp r12, qword [rsp + 0x58]
jb 0x140020d09
mov r10, qword [rsp + 0x48]
mov r15w, word [rsp + 0x40]
mov r13d, 1
movzx edx, si
movzx eax, r15w
lea rcx, [rdx + rdx*2]
lea rcx, [rax + rcx*2]
cmp word [r8 + rcx*2], bp
jne 0x140020e55
lea rax, [rdx + rdx*2]
lea rdx, [r8 + rax*4 + 4]
movzx eax, bp
mov rcx, rdx
cmp word [rdx], ax
je 0x140020e24
add rcx, 2
cmp ax, 4
jae 0x140020e20
inc ax
cmp word [rcx], bp
jne 0x140020e0e
mov r13w, ax
movzx eax, r13w
lea rcx, [rdi + rax*2]
cmp rcx, r14
jbe 0x140020e3b
sub r14, rdi
sar r14, 1
mov r13w, r14w
movzx ebx, r13w
mov rcx, rdi
add rbx, rbx
mov r8, rbx
call fcn.140008ec4
mov r10, qword [rsp + 0x48]
add rdi, rbx
mov rax, qword [rsp + 0x60]
sub rdi, 2
cmp rdi, rax
jb 0x140020e68
cmp word [rdi], bp
je 0x140020e5a
add rdi, 2
cmp byte [rsp + 0xc8], bpl
je 0x140020eb4
mov al, byte [rsp + 0xe0]
mov word [rdi], bp
test al, 4
je 0x140020ea1
mov rax, qword [rsp + 0xd0]
sub rdi, rax
sar rdi, 1
dec di
mov word [rax], di
movzx eax, dil
jmp 0x140020fad
sub rdi, qword [rsp + 0xd0]
sar rdi, 1
mov ax, di
jmp 0x140020fad
mov al, byte [rsp + 0xe0]
test al, 8
je 0x140020f2b
mov rcx, qword [rsp + 0xd0]
sub rdi, r10
sar rdi, 1
cmp r10, rcx
je 0x140020f0c
movzx eax, word [rsp + 0xd8]
mov r9, rcx
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x30], rbp
mov r8d, edi
mov rdx, r10
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], eax
call fcn.14001e78c
mov r10, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xd0]
mov ebp, eax
movzx eax, word [rsp + 0xd8]
test ax, ax
je 0x140020f22
movzx eax, ax
cmp ebp, eax
jne 0x140020f22
dec ebp
movsxd rax, ebp
mov byte [rax + rcx], 0
jmp 0x140020f9a
mov rcx, qword [rsp + 0xd0]
sub rdi, r10
lea r9, [rcx + 1]
sar rdi, 1
cmp r10, r9
je 0x140020f79
movzx eax, word [rsp + 0xd8]
mov ecx, dword [rsp + 0xb0]
mov qword [rsp + 0x30], rbp
mov r8d, edi
mov rdx, r10
mov qword [rsp + 0x28], rbp
mov dword [rsp + 0x20], eax
call fcn.14001e78c
mov r10, qword [rsp + 0x48]
mov rcx, qword [rsp + 0xd0]
mov ebp, eax
mov ax, word [rsp + 0xd8]
test ax, ax
je 0x140020f8f
movzx eax, ax
cmp ebp, eax
jne 0x140020f8f
dec ebp
movsxd rax, ebp
mov byte [rcx], bpl
mov byte [rax + rcx + 1], 0
mov rdx, qword [rsp + 0xe8]
mov rcx, r10
call fcn.140016304
mov ax, bp
mov r14, qword [rsp + 0xb8]
add rsp, 0x70
pop r15
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret