Function at 0x18005cb70
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov dword [rsp + 0x20], r9d
mov dword [rsp + 0x18], r8d
mov dword [rsp + 0x10], edx
mov qword [rsp + 8], rcx
push rbx
push rdi
sub rsp, 0x3b8
mov rax, qword [0x1801837f8]
xor rax, rsp
mov qword [rsp + 0x3a0], rax
call fcn.180054050
mov qword [rsp + 0x2a0], rax
movzx edx, word [rsp + 0x3d8]
mov r8d, 0xf1
mov rcx, qword [rsp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov qword [rsp + 0x338], rax
cmp qword [rsp + 0x338], 0
jne 0x18005cbe1
xor eax, eax
jmp 0x18005d324
mov rdx, qword [rsp + 0x338]
mov rcx, qword [rsp + 0x2a0]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov qword [rsp + 0x2b8], rax
cmp qword [rsp + 0x2b8], 0
jne 0x18005cc11
xor eax, eax
jmp 0x18005d324
mov rcx, qword [rsp + 0x2b8]
call qword [sym.imp.KERNEL32.dll_LockResource]
mov qword [rsp + 0x60], rax
cmp qword [rsp + 0x60], 0
jne 0x18005cc33
xor eax, eax
jmp 0x18005d324
mov rcx, qword [rsp + 0x60]
call fcn.18006dc80
mov qword [rsp + 0x298], rax
cmp dword [rsp + 0x3e0], 0
je 0x18005cc5c
mov dword [rsp + 0x390], 1
jmp 0x18005cc67
mov dword [rsp + 0x390], 0
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + 6]
add eax, dword [rsp + 0x390]
mov dword [rsp + 0x328], eax
lea rcx, [rsp + 0x80]
call fcn.18006dc90
movsxd rdx, dword [rsp + 0x328]
lea rcx, [rsp + 0x80]
call fcn.18006dce0
mov qword [rsp + 0x2a8], rax
cmp qword [rsp + 0x2a8], 0
jne 0x18005ccd9
mov qword [rsp + 0x368], 0
lea rcx, [rsp + 0x80]
call fcn.18006dcb0
mov rax, qword [rsp + 0x368]
jmp 0x18005d324
mov dword [rsp + 0x294], 8
cmp dword [rsp + 0x3e0], 0
je 0x18005cd43
mov rax, qword [rsp + 0x2a8]
mov dword [rax], 4
mov rax, qword [rsp + 0x2a8]
mov dword [rax + 4], 0
mov rax, qword [rsp + 0x2a8]
mov byte [rax + 8], 0
mov rax, qword [rsp + 0x2a8]
mov byte [rax + 9], 1
mov rax, qword [rsp + 0x2a8]
mov qword [rax + 0x10], 0
mov rax, qword [rsp + 0x2a8]
mov qword [rax + 0x18], 0
mov dword [rsp + 0x2b0], 0
mov dword [rsp + 0x340], 0
cmp dword [rsp + 0x3e0], 0
je 0x18005cd70
mov dword [rsp + 0x394], 1
jmp 0x18005cd7b
mov dword [rsp + 0x394], 0
mov eax, dword [rsp + 0x394]
mov dword [rsp + 0x344], eax
jmp 0x18005cdad
mov eax, dword [rsp + 0x340]
add eax, 1
mov dword [rsp + 0x340], eax
mov eax, dword [rsp + 0x344]
add eax, 1
mov dword [rsp + 0x344], eax
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + 6]
cmp dword [rsp + 0x340], eax
jge 0x18005cf53
movsxd rcx, dword [rsp + 0x340]
mov rax, qword [rsp + 0x298]
movzx eax, word [rax + rcx*2]
test eax, eax
je 0x18005ceab
movsxd rdx, dword [rsp + 0x344]
imul rdx, rdx, 0x20
mov rcx, qword [rsp + 0x2a8]
mov eax, dword [rsp + 0x2b0]
mov dword [rcx + rdx], eax
mov eax, dword [rsp + 0x2b0]
add eax, 1
mov dword [rsp + 0x2b0], eax
movsxd rcx, dword [rsp + 0x340]
mov rax, qword [rsp + 0x298]
movzx edx, word [rax + rcx*2]
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov dword [rax + rcx + 4], edx
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov byte [rax + rcx + 8], 4
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov byte [rax + rcx + 9], 0
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov qword [rax + rcx + 0x10], 0
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov qword [rax + rcx + 0x18], 0
jmp 0x18005cf4e
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov dword [rax + rcx], 8
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov dword [rax + rcx + 4], 0
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov byte [rax + rcx + 8], 0
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov byte [rax + rcx + 9], 1
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov qword [rax + rcx + 0x10], 0
movsxd rcx, dword [rsp + 0x344]
imul rcx, rcx, 0x20
mov rax, qword [rsp + 0x2a8]
mov qword [rax + rcx + 0x18], 0
jmp 0x18005cd8b
call fcn.18005d350
mov rdi, rax
mov ecx, dword [rsp + 0x3f0]
call fcn.18005d340
mov qword [rsp + 0x58], 0
mov qword [rsp + 0x50], rdi
mov qword [rsp + 0x48], rax
mov rax, qword [rsp + 0x3d0]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x64
mov dword [rsp + 0x30], 0x64
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], 0
mov r9d, dword [rsp + 0x3e8]
xor r8d, r8d
lea rdx, str.ToolbarWindow32
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExW]
mov qword [rsp + 0x68], rax
cmp qword [rsp + 0x68], 0
jne 0x18005cff4
mov qword [rsp + 0x370], 0
lea rcx, [rsp + 0x80]
call fcn.18006dcb0
mov rax, qword [rsp + 0x370]
jmp 0x18005d324
xor r9d, r9d
mov r8d, 0x20
mov edx, 0x41e
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_SendMessageW]
xor r9d, r9d
xor r8d, r8d
mov edx, 0x31
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.180065020
lea rcx, [rsp + 0x330]
call fcn.180065090
movzx eax, al
test eax, eax
je 0x18005d05c
call fcn.180056800
mov rdx, rax
lea rcx, [rsp + 0x330]
call fcn.180065060
mov dword [rsp + 0x2c0], 0
lea rdi, [rsp + 0x2c4]
xor eax, eax
mov ecx, 0x58
rep stosb byte [rdi], al
lea rdx, [rsp + 0x2c0]
lea rcx, [rsp + 0x330]
call fcn.1800650c0
mov ecx, dword [rsp + 0x2c0]
call fcn.18005d420
mov word [rsp + 0x324], ax
lea rax, [rsp + 0x378]
mov qword [rsp + 0x380], rax
mov edx, dword [rsp + 0x3d8]
mov rcx, qword [rsp + 0x380]
call fcn.180056900
mov rcx, qword [rax]
call fcn.18005d370
mov word [rsp + 0x320], ax
movzx eax, word [rsp + 0x320]
cmp eax, 4
jle 0x18005d174
mov dword [rsp + 0x350], 0xff000000
movzx eax, word [rsp + 0x320]
cmp eax, 0x20
jne 0x18005d109
mov dword [rsp + 0x350], 0xffffffff
mov rax, qword [rsp + 0x60]
movzx ebx, word [rax + 2]
movzx edi, word [rsp + 0x3d8]
call fcn.180054050
mov rcx, rax
mov dword [rsp + 0x30], 0x2040
mov dword [rsp + 0x28], 0
mov eax, dword [rsp + 0x350]
mov dword [rsp + 0x20], eax
mov r9d, 1
mov r8d, ebx
mov rdx, rdi
call qword [sym.imp.COMCTL32.dll_ImageList_LoadImageW]
mov qword [rsp + 0x348], rax
mov r9, qword [rsp + 0x348]
xor r8d, r8d
mov edx, 0x430
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_SendMessageW]
jmp 0x18005d1d0
mov qword [rsp + 0x358], 0
lea rdi, [rsp + 0x360]
xor eax, eax
mov ecx, 8
rep stosb byte [rdi], al
mov rax, qword [rsp + 0x2a0]
mov qword [rsp + 0x358], rax
mov eax, dword [rsp + 0x3d8]
mov qword [rsp + 0x360], rax
movsxd r8, dword [rsp + 0x2b0]
lea r9, [rsp + 0x358]
mov edx, 0x413
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_SendMessageW]
movsxd r8, dword [rsp + 0x328]
mov r9, qword [rsp + 0x2a8]
mov edx, 0x444
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rdx, qword [rsp + 0x60]
movzx ecx, word [rdx + 4]
movzx eax, word [rsp + 0x324]
cmp ecx, eax
jle 0x18005d218
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + 4]
mov word [rsp + 0x398], ax
jmp 0x18005d228
movzx eax, word [rsp + 0x324]
mov word [rsp + 0x398], ax
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + 2]
and rax, 0xffff
movzx edx, ax
movzx eax, word [rsp + 0x398]
and rax, 0xffff
movzx ecx, ax
shl ecx, 0x10
mov eax, edx
or eax, ecx
movsxd r9, eax
xor r8d, r8d
mov edx, 0x420
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_SendMessageW]
mov dword [rsp + 0x290], 7
mov rax, qword [rsp + 0x60]
movzx ecx, word [rax + 4]
movzx eax, word [rsp + 0x324]
cmp ecx, eax
jle 0x18005d29b
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + 4]
mov word [rsp + 0x39a], ax
jmp 0x18005d2ab
movzx eax, word [rsp + 0x324]
mov word [rsp + 0x39a], ax
mov rax, qword [rsp + 0x60]
movzx eax, word [rax + 2]
add eax, 7
cdqe
and rax, 0xffff
movzx edx, ax
movzx eax, word [rsp + 0x39a]
add eax, 7
cdqe
and rax, 0xffff
movzx ecx, ax
shl ecx, 0x10
mov eax, edx
or eax, ecx
movsxd r9, eax
xor r8d, r8d
mov edx, 0x41f
mov rcx, qword [rsp + 0x68]
call qword [sym.imp.USER32.dll_SendMessageW]
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x388], rax
lea rcx, [rsp + 0x330]
call fcn.180065040
lea rcx, [rsp + 0x80]
call fcn.18006dcb0
mov rax, qword [rsp + 0x388]
mov rcx, qword [rsp + 0x3a0]
xor rcx, rsp
call fcn.18008cb70
add rsp, 0x3b8
pop rdi
pop rbx
ret