Function at 0x180011690
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rbx
push rsi
push rdi
push r12
push r13
push r14
sub rsp, 0x480
lea rbp, [rsp + 0x20]
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov rax, qword [0x18003d928]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov r14, r9
mov r13, r8
mov r12, rdx
xor ebx, ebx
mov qword [rbp + 8], rbx
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x20], rbx
mov eax, ebx
mov qword [rbp + 0x40], rbx
test rdx, rdx
je 0x180011903
mov rcx, rdx
call qword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
movsxd rdi, eax
add rdi, rdi
mov eax, 0x80000000
add rax, rdi
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x1800118ff
cmp edi, 0x400
jg 0x18001174a
movsxd rsi, edi
mov rcx, rsi
call fcn.180001410
test al, al
je 0x18001174a
lea rax, [rsi + 0xf]
cmp rax, rsi
ja 0x180011737
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.1800193e0
sub rsp, rax
lea rcx, [rsp + 0x20]
jmp 0x18001177f
movsxd rcx, edi
or rax, 0xffffffffffffffff
sub rax, rcx
cmp rax, 0x10
jb 0x1800118f4
add rcx, 0x10
call fcn.180018ae4
test rax, rax
jne 0x180011771
mov rcx, rbx
jmp 0x18001177f
mov qword [rax], rbx
mov rbx, rax
mov qword [rbp + 8], rax
lea rcx, [rax + 0x10]
mov r9d, 3
mov r8d, edi
mov rdx, r12
call fcn.180001060
test rax, rax
je 0x1800118ff
xor edx, edx
lea r8d, [rdx + 2]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov rsi, rax
mov qword [rbp + 0x18], rax
test rax, rax
jne 0x1800117c0
call fcn.180001140
mov edi, eax
jmp 0x1800118bf
mov r8, r14
mov rdx, r13
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
test rax, rax
jne 0x1800117e1
call fcn.180001140
jmp 0x1800118b3
mov rdx, rax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r12, rax
mov qword [rbp + 0x10], rax
test rax, rax
jne 0x180011803
call fcn.180001140
jmp 0x1800118b3
mov rdx, rdi
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov dword [rbp], edi
lea eax, [rdi + 1]
cmp eax, edi
jae 0x180011825
mov edi, 0x8007000e
jmp 0x1800118b5
mov ecx, eax
test eax, eax
je 0x18001185f
xor edx, edx
or rax, 0xffffffffffffffff
div rcx
cmp rax, 1
jae 0x180011844
mov ecx, 0x80070216
call fcn.1800010d0
cmp rcx, 0x400
jbe 0x18001185f
mov rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.18000eea0
mov rcx, qword [rbp + 0x40]
jmp 0x180011867
lea rcx, [rbp + 0x48]
mov qword [rbp + 0x40], rcx
jmp 0x18001187c
test rcx, rcx
jne 0x180011888
mov edi, 0x8007000e
jmp 0x1800118b5
mov r9, rdi
mov r8, r12
mov rdx, rdi
call fcn.1800046c0
mov r11, qword [rbp + 0x40]
mov byte [rdi + r11], 0
mov r8d, dword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.180011390
mov edi, eax
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x1800118d3
lea rcx, [rbp + 0x40]
call fcn.18000ee90
nop
test rbx, rbx
je 0x1800118f0
nop dword [rax + rax]
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.180018b9c
test rbx, rbx
jne 0x1800118e0
mov eax, edi
jmp 0x180011935
mov ecx, 0x80070216
call fcn.1800010d0
int3
mov rax, qword [rbp + 0x40]
lea rcx, [rbp + 0x48]
cmp rax, rcx
je 0x180011916
lea rcx, [rbp + 0x40]
call fcn.18000ee90
nop
test rbx, rbx
je 0x180011930
nop dword [rax + rax]
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.180018b9c
test rbx, rbx
jne 0x180011920
mov eax, 0x8007000e
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.1800193b0
lea rsp, [rbp + 0x460]
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbx
pop rbp
ret