Function at 0x1400112b0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x490
lea rbp, [rsp + 0x30]
mov qword [rbp + 0x38], 0xfffffffffffffffe
mov qword [rbp + 0x4a0], rbx
mov rax, qword [0x14006c868]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov r15, r9
mov r14, r8
mov r13, rdx
xor edi, edi
mov rbx, rdi
mov qword [rbp + 0x18], rbx
mov qword [rbp + 0x30], rcx
mov qword [rbp + 0x28], rdi
mov qword [rbp + 0x40], rdi
test rdx, rdx
je 0x140011643
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
movsxd rsi, eax
add rsi, rsi
mov eax, 0x80000000
add rax, rsi
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x14001163f
cmp esi, 0x400
jg 0x140011374
movsxd r12, esi
mov rcx, r12
call fcn.140009a80
test al, al
je 0x140011374
lea rax, [r12 + 0xf]
cmp rax, r12
ja 0x140011361
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.14004f000
sub rsp, rax
lea rcx, [rsp + 0x30]
jmp 0x1400113a9
movsxd rcx, esi
or rax, 0xffffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x140011634
add rcx, 0x10
call fcn.1400233a0
test rax, rax
jne 0x14001139b
mov rcx, rdi
jmp 0x1400113a9
mov qword [rax], rdi
mov rbx, rax
mov qword [rbp + 0x18], rax
lea rcx, [rax + 0x10]
mov r9d, 3
mov r8d, esi
mov rdx, r13
call fcn.140008720
test rax, rax
je 0x14001163f
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rsi, rax
mov qword [rbp + 0x20], rax
test rax, rax
jne 0x14001141b
lea rax, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_statreg.h
mov qword [rbp], rax
mov dword [rbp + 8], 0x188
mov qword [rsp + 0x20], r13
lea r9, str.Failed_to_LoadLibrary_on__s_n
xor r8d, r8d
mov rdx, qword [0x14006e580]
lea rcx, [rbp]
call fcn.140008810
call fcn.140008a40
mov edi, eax
jmp 0x1400115fe
mov r8, r15
mov rdx, r14
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov r12, rax
test rax, rax
jne 0x140011489
lea rax, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_statreg.h
mov qword [rbp], rax
mov dword [rbp + 8], 0x191
mov rax, r14
shr rax, 0x10
lea rcx, str.Failed_to_FindResource_on_ID:_d_TYPE:_s_n
lea r9, str.Failed_to_FindResource_on_ID:_s_TYPE:_s_n
test ax, ax
cmove r9, rcx
mov qword [rsp + 0x28], r15
mov qword [rsp + 0x20], r14
xor r8d, r8d
mov rdx, qword [0x14006e580]
lea rcx, [rbp]
call fcn.140008810
call fcn.140008a40
mov edi, eax
jmp 0x1400115f4
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r13, rax
mov qword [rbp], rax
test rax, rax
jne 0x1400114d9
lea rax, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_statreg.h
mov qword [rbp], rax
mov dword [rbp + 8], 0x19c
lea r9, str.Failed_to_LoadResource_n
xor r8d, r8d
mov rdx, qword [0x14006e580]
lea rcx, [rbp]
call fcn.140008810
call fcn.140008a40
mov edi, eax
jmp 0x1400115f4
mov rdx, r12
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov r12d, eax
mov dword [rbp + 0x10], eax
inc eax
cmp eax, r12d
jae 0x14001152a
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x140011506
lea rcx, [rbp + 0x40]
call fcn.140009900
nop
test rbx, rbx
je 0x140011520
nop dword [rax + rax]
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.1400233e0
test rbx, rbx
jne 0x140011510
mov eax, 0x8007000e
jmp 0x140011675
mov ecx, eax
test eax, eax
je 0x140011542
xor edx, edx
or rax, 0xffffffffffffffff
div rcx
cmp rax, 1
jb 0x140011599
mov rdi, rcx
cmp qword [rbp + 0x40], 0
je 0x140011574
lea rax, str.m_p__0
mov qword [rsp + 0x20], rax
xor r9d, r9d
mov r8d, 0x20a
lea rdx, str.D:Program_FilesMicrosoft_Visual_Studio_9.0VCATLMFCINCLUDE_atlalloc.h
lea ecx, [r9 + 2]
call fcn.14001e440
cmp eax, 1
jne 0x140011574
int3
cmp rdi, 0x400
jbe 0x14001158f
mov rdx, rdi
lea rcx, [rbp + 0x40]
call fcn.140009970
mov rcx, qword [rbp + 0x40]
jmp 0x140011597
lea rcx, [rbp + 0x48]
mov qword [rbp + 0x40], rcx
jmp 0x1400115b8
mov ecx, 0x80070057
call fcn.140008870
nop
mov rbx, qword [rbp + 0x18]
mov rcx, qword [rbp + 0x40]
mov rsi, qword [rbp + 0x20]
mov r13, qword [rbp]
mov r12d, dword [rbp + 0x10]
test rcx, rcx
jne 0x1400115c4
mov edi, 0x8007000e
jmp 0x1400115f4
mov edi, r12d
mov r9d, r12d
mov r8, r13
mov edx, r12d
call fcn.140008920
mov r11, qword [rbp + 0x40]
mov byte [rdi + r11], 0
mov r8d, dword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x28]
call fcn.1400109a0
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x140011612
lea rcx, [rbp + 0x40]
call fcn.140009900
nop
test rbx, rbx
je 0x140011630
nop word [rax + rax]
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.1400233e0
test rbx, rbx
jne 0x140011620
mov eax, edi
jmp 0x140011675
mov ecx, 0x80070057
call fcn.140008870
int3
mov rdi, qword [rbp + 0x40]
lea rax, [rbp + 0x48]
cmp rdi, rax
je 0x140011656
lea rcx, [rbp + 0x40]
call fcn.140009900
nop
test rbx, rbx
je 0x140011670
nop dword [rax + rax]
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.1400233e0
test rbx, rbx
jne 0x140011660
mov eax, 0x8007000e
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.14001f7f0
mov rbx, qword [rbp + 0x4a0]
lea rsp, [rbp + 0x460]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret