Function at 0x1812ac57
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, dword [0x181ce008]
xor eax, esp
mov dword [esp + 0x40], eax
movzx eax, word [ebp + 8]
push ebx
push esi
push edi
push 0xf0
push eax
push dword [0x181d3ec8]
mov dword [esp + 0x34], ecx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
and dword [esp + 0x24], 0
xor edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x1812acb3
push eax
push dword [0x181d3ec8]
call ebx
test eax, eax
je 0x1812acb3
push eax
call esi
mov dword [esp + 0x24], eax
movzx ecx, word [ebp + 8]
push 5
push ecx
push dword [0x181d3ec8]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x1812afca
push eax
push dword [0x181d3ec8]
call ebx
test eax, eax
je 0x1812afc3
push eax
call esi
mov edx, eax
test edx, edx
je 0x1812afc3
movzx ecx, word [edx + 2]
xor eax, eax
mov ebx, 0xffff
mov esi, ecx
cmp cx, bx
mov dword [esp + 0x18], esi
sete al
mov dword [esp + 0x34], eax
xor eax, eax
cmp cx, bx
mov ecx, edx
sete al
lea eax, [eax*8 + 8]
movzx eax, word [eax + edx]
mov dword [esp + 0x2c], eax
call fcn.18126c98
mov ebx, eax
mov eax, dword [esp + 0x28]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 0x14], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x20], edx
cmp ax, word [esp + 0x2c]
jae 0x1812afca
mov ecx, 0xffff
cmp si, cx
sete al
dec eax
and eax, 0xfffffffa
add eax, 0x18
mov dword [esp + 0x38], eax
cmp si, cx
jne 0x1812ad6d
mov ecx, dword [ebx + 0x14]
jmp 0x1812ad71
movzx ecx, word [ebx + 0x10]
add eax, ebx
mov dword [esp + 0x30], eax
cmp word [eax], 0x7b
jne 0x1812af82
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x10]
and dword [esp + 0x10], 0
push eax
call fcn.18126d83
pop ecx
mov edi, eax
xor ecx, ecx
mov dword [esp + 0xc], ecx
test edi, edi
je 0x1812ae01
push edi
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x1812afa2
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x1812af99
push edi
push dword [esp + 0x14]
mov edx, edi
mov ecx, eax
call fcn.18004487
push eax
call fcn.180045b5
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea eax, [esp + 0xc]
push eax
push 1
push esi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov edi, eax
test edi, edi
js 0x1812afa7
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x18]
and dword [esp + 0x1c], 0
lea edx, [esp + 0x1c]
call fcn.18126f5b
mov edi, eax
test edi, edi
js 0x1812af3b
and dword [esp + 0x10], 0
call fcn.1812a2cc
mov edi, 0xffff
cmp si, di
jne 0x1812ae33
movzx eax, word [ebx + 0xc]
jmp 0x1812ae37
movzx eax, word [ebx + 8]
movsx ecx, ax
mov dword [esp + 0x3c], ecx
jne 0x1812ae46
movzx eax, word [ebx + 0xe]
jmp 0x1812ae4a
movzx eax, word [ebx + 0xa]
movsx edx, ax
mov dword [esp + 0x40], edx
jne 0x1812ae59
movzx eax, word [ebx + 0x10]
jmp 0x1812ae5d
movzx eax, word [ebx + 0xc]
cwde
add eax, ecx
mov dword [esp + 0x44], eax
cmp si, di
jne 0x1812ae6f
movzx eax, word [ebx + 0x12]
jmp 0x1812ae73
movzx eax, word [ebx + 0xe]
mov edi, dword [esp + 0x28]
cwde
add eax, edx
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, 0xffff
cmp si, ax
jne 0x1812aea1
mov eax, dword [ebx + 0x14]
lea edx, [ebx + 8]
mov ecx, dword [ebx + 4]
jmp 0x1812aea9
movzx eax, word [ebx + 0x10]
xor ecx, ecx
mov edx, ebx
push ecx
push eax
mov eax, dword [edx]
push ecx
or eax, 0x10000
push eax
push ecx
lea eax, [esp + 0x50]
push eax
push dword [edi + 4]
lea ecx, [esp + 0x2c]
push str.AtlAxWinLic140
call fcn.1800801c
mov esi, dword [esp + 0x10]
test esi, esi
je 0x1812af34
mov eax, 0xffff
cmp word [esp + 0x18], ax
jne 0x1812aeed
cmp dword [ebx], 0
je 0x1812aeed
push dword [ebx]
push esi
call dword [sym.imp.USER32.dll_SetWindowContextHelpId]
push dword [esp + 0x1c]
lea ecx, [esp + 0x14]
sub esp, 0x10
push dword [esp + 0x20]
push dword [esp + 0x48]
call fcn.1812b5d6
mov edi, eax
test edi, edi
js 0x1812afb7
xor eax, eax
push 0x13
push eax
push eax
push eax
push eax
mov eax, dword [esp + 0x34]
movzx eax, ax
neg eax
sbb eax, eax
and eax, dword [esp + 0x28]
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [esp + 0x14], esi
jmp 0x1812af3b
call fcn.18004702
mov edi, eax
push dword [esp + 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1812af53
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
mov ecx, ebx
call fcn.18126d27
mov edx, dword [esp + 0x20]
mov ebx, eax
inc edx
mov dword [esp + 0x20], edx
cmp dx, word [esp + 0x2c]
jae 0x1812afca
mov eax, dword [esp + 0x38]
mov ecx, 0xffff
jmp 0x1812ad63
test dx, dx
je 0x1812af57
push 2
push dword [esp + 0x18]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 0x14], eax
jmp 0x1812af57
call fcn.18004702
mov edi, eax
jmp 0x1812afa7
mov edi, 0x8007000e
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1812afca
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x1812afca
push dword [esp + 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x1812afa7
call fcn.18004702
mov edi, eax
mov ecx, dword [esp + 0x4c]
mov eax, edi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.18145efd
mov esp, ebp
pop ebp
ret 4