Function at 0x18000d870
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r14
push r15
lea rbp, [rsp - 0x20]
sub rsp, 0x120
mov qword [rsp + 0x20], 0xfffffffffffffffe
mov rax, qword [0x1800960d0]
xor rax, rsp
mov qword [rbp + 0x10], rax
mov ebx, r9d
mov rdi, r8
mov rsi, rdx
mov r14, rcx
mov qword [rsp + 0x30], r8
call fcn.18000f570
lea rcx, [r14 + 0x10]
call fcn.18000f570
lea rcx, [r14 + 0x20]
call fcn.18000f570
lea rcx, [r14 + 0x30]
call fcn.18000f570
xor r12d, r12d
movzx edx, bx
lea r8d, [r12 + 0xa]
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
jne 0x18000d8fa
mov rcx, rdi
call fcn.180002530
xor al, al
jmp 0x18000db23
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x18000d8eb
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r15, rax
mov rdx, rbx
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
test r15, r15
jne 0x18000d92e
test eax, eax
je 0x18000d8eb
cmp qword [rdi + 0x10], r12
jbe 0x18000da46
mov rdx, rdi
lea rcx, [rsp + 0x78]
call fcn.180006620
nop
lea rcx, [rbp - 0x60]
call fcn.180003c40
lea rdx, [rsp + 0x78]
lea rcx, [rbp - 0x60]
call fcn.1800056b0
lea rdx, [rsp + 0x38]
lea rcx, [rbp - 0x60]
call fcn.180004ab0
nop
lea eax, [rsi + 1]
mov ebx, eax
mov ecx, eax
call fcn.180045730
mov r12, rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call fcn.1800423b0
lea r9, [rsp + 0x38]
cmp qword [rsp + 0x50], 0x10
cmovae r9, qword [rsp + 0x38]
mov r8d, esi
mov rdx, r12
mov rcx, r15
call fcn.180008270
nop
mov rdx, qword [rsp + 0x50]
cmp rdx, 0x10
jb 0x18000d9e5
inc rdx
mov rcx, qword [rsp + 0x38]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000d9e0
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000db41
call fcn.180022960
movdqa xmm0, xmmword [0x18006fa70]
movdqu xmmword [rsp + 0x48], xmm0
mov byte [rsp + 0x38], 0
mov rdx, qword [rbp - 0x70]
cmp rdx, 0x10
jb 0x18000da34
inc rdx
mov rcx, qword [rsp + 0x78]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000da2f
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000db47
call fcn.180022960
movdqa xmm0, xmmword [0x18006fa70]
movdqu xmmword [rbp - 0x78], xmm0
mov byte [rsp + 0x78], 0
movdqa xmm0, xmmword [0x18006fa70]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov r8, rsi
mov rdx, r12
lea rcx, [rsp + 0x58]
call fcn.180005da0
nop
lea rdx, [rsp + 0x58]
lea rcx, [rsp + 0x78]
call fcn.180006620
mov rdx, rax
mov rcx, r14
call fcn.18000db60
movzx ebx, al
mov rdx, qword [rsp + 0x70]
cmp rdx, 0x10
jb 0x18000dac4
inc rdx
mov rcx, qword [rsp + 0x58]
mov rax, rcx
cmp rdx, 0x1000
jb 0x18000dabf
add rdx, 0x27
mov rcx, qword [rcx - 8]
sub rax, rcx
add rax, 0xfffffffffffffff8
cmp rax, 0x1f
ja 0x18000db4d
call fcn.180022960
movdqa xmm0, xmmword [0x18006fa70]
movdqu xmmword [rsp + 0x68], xmm0
mov byte [rsp + 0x58], 0
mov rdx, qword [rdi + 0x18]
cmp rdx, 0x10
jb 0x18000db0d
inc rdx
mov rcx, qword [rdi]
cmp rdx, 0x1000
jb 0x18000db08
add rdx, 0x27
mov r8, qword [rcx - 8]
sub rcx, r8
lea rax, [rcx - 8]
cmp rax, 0x1f
ja 0x18000db53
mov rcx, r8
call fcn.180022960
mov qword [rdi + 0x10], 0
mov qword [rdi + 0x18], 0xf
mov byte [rdi], 0
movzx eax, bl
mov rcx, qword [rbp + 0x10]
xor rcx, rsp
call fcn.180023170
add rsp, 0x120
pop r15
pop r14
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret
call fcn.1800452ec
nop
call fcn.1800452ec
int3
call fcn.1800452ec
nop
call fcn.1800452ec
int3