Function at 0x1800191a0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbx
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x2e8
mov qword [rsp + 0x78], 0xfffffffffffffffe
mov rax, qword [0x18009b4d0]
xor rax, rsp
mov qword [rsp + 0x2d0], rax
mov dword [rsp + 0x60], r9d
mov esi, r8d
mov eax, edx
mov dword [rsp + 0x64], eax
mov qword [rsp + 0x68], rcx
mov r15, qword [0x18009daf0]
movzx edi, dx
mov r8d, 0xf1
mov rdx, rdi
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_FindResourceA]
test rax, rax
je 0x1800195c0
mov rdx, rax
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
je 0x1800195c0
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov r12, rax
test rax, rax
je 0x1800195c0
lea rbx, [rax + 8]
xor r8d, r8d
mov r13d, r8d
test esi, esi
setne r13b
movzx eax, word [rax + 6]
add eax, r13d
mov qword [rsp + 0xc0], r8
movsxd r14, eax
je 0x180019299
xor edx, edx
or rax, 0xffffffffffffffff
div r14
cmp rax, 0x20
jb 0x18001928e
mov rdx, r14
shl rdx, 5
cmp rdx, 0x200
jbe 0x180019299
lea rcx, [rsp + 0xc0]
call fcn.1800172f0
mov rbp, qword [rsp + 0xc0]
xor r8d, r8d
jmp 0x1800192a9
mov ecx, 0x80070057
call fcn.180003100
int3
lea rbp, [rsp + 0xc8]
mov qword [rsp + 0xc0], rbp
test rbp, rbp
jne 0x1800192cf
lea rax, [rsp + 0xc8]
test rax, rax
je 0x1800192c8
lea rcx, [rsp + 0xc0]
call fcn.180017220
xor eax, eax
jmp 0x1800195c0
test esi, esi
je 0x1800192ee
mov dword [rbp], 4
mov dword [rbp + 4], r8d
mov byte [rbp + 8], 0
mov byte [rbp + 9], 1
mov qword [rbp + 0x10], r8
mov qword [rbp + 0x18], r8
mov esi, r8d
mov edx, r8d
movsxd rax, r13d
cmp r8w, word [r12 + 6]
jae 0x180019358
shl rax, 5
lea rcx, [rax + rbp + 8]
cmp word [rbx], 0
je 0x18001932a
mov dword [rcx - 8], esi
inc esi
movzx eax, word [rbx]
mov dword [rcx - 4], eax
mov byte [rcx], 4
mov byte [rcx + 1], 0
mov qword [rcx + 8], r8
mov qword [rcx + 0x10], r8
jmp 0x180019344
mov dword [rcx - 8], 8
mov dword [rcx - 4], r8d
mov byte [rcx], 0
mov byte [rcx + 1], 1
mov qword [rcx + 8], r8
mov qword [rcx + 0x10], r8
inc edx
add rbx, 2
add rcx, 0x20
movzx eax, word [r12 + 6]
cmp edx, eax
jl 0x180019308
movsxd rcx, dword [rsp + 0x350]
mov qword [rsp + 0x58], r8
mov rax, qword [0x18009dae8]
mov qword [rsp + 0x50], rax
mov qword [rsp + 0x48], rcx
mov rax, qword [rsp + 0x68]
mov qword [rsp + 0x40], rax
mov dword [rsp + 0x38], 0x64
mov dword [rsp + 0x30], 0x64
mov dword [rsp + 0x28], r8d
mov dword [rsp + 0x20], r8d
mov r9d, dword [rsp + 0x60]
xor r8d, r8d
lea rdx, str.ToolbarWindow32
xor ecx, ecx
call qword [sym.imp.USER32.dll_CreateWindowExA]
mov r13, rax
test rax, rax
jne 0x1800193df
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xc0], rax
je 0x1800193d8
lea rcx, [rsp + 0xc0]
call fcn.180017220
xor eax, eax
jmp 0x1800195c0
xor r9d, r9d
mov edx, 0x41e
lea r8d, [r9 + 0x20]
mov rcx, rax
call qword [sym.imp.USER32.dll_SendMessageA]
xor r9d, r9d
xor r8d, r8d
lea edx, [r9 + 0x31]
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageA]
mov rbx, rax
test rax, rax
jne 0x18001941b
lea ecx, [rax + 0x11]
call qword [sym.imp.GDI32.dll_GetStockObject]
mov rbx, rax
mov dword [rsp + 0x80], 0
xor edx, edx
lea r8d, [rdx + 0x38]
lea rcx, [rsp + 0x84]
call fcn.1800220a0
lea r8, [rsp + 0x80]
mov edx, 0x3c
mov rcx, rbx
call qword [sym.imp.GDI32.dll_GetObjectA]
mov eax, dword [rsp + 0x80]
cdq
xor eax, edx
sub eax, edx
mov dword [rsp + 0x60], eax
mov rbx, qword [0x18009daf0]
mov r8d, 2
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
movzx ecx, word [rax + 0xe]
cmp cx, 4
jbe 0x1800194ec
mov eax, 0xff000000
or edx, 0xffffffff
cmp cx, 0x20
cmove eax, edx
movzx r8d, word [r12 + 2]
mov dword [rsp + 0x30], 0x2040
mov dword [rsp + 0x28], 0
mov dword [rsp + 0x20], eax
mov r9d, 1
mov rdx, rdi
mov rcx, qword [0x18009daf0]
call qword [sym.imp.COMCTL32.dll_ImageList_LoadImageA]
mov r9, rax
xor r8d, r8d
mov edx, 0x430
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageA]
jmp 0x180019517
xor eax, eax
mov qword [rsp + 0x70], rax
mov qword [rsp + 0x68], r15
mov eax, dword [rsp + 0x64]
mov qword [rsp + 0x70], rax
movsxd r8, esi
lea r9, [rsp + 0x68]
mov edx, 0x413
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageA]
mov r9, rbp
mov r8, r14
mov edx, 0x414
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageA]
movzx eax, word [r12 + 4]
mov ebx, dword [rsp + 0x60]
movzx ecx, bx
cmp ax, bx
cmova cx, ax
movzx ecx, cx
shl ecx, 0x10
movzx eax, word [r12 + 2]
or ecx, eax
movsxd r9, ecx
xor r8d, r8d
mov edx, 0x420
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageA]
movzx r11d, word [r12 + 4]
cmp r11w, bx
cmova bx, r11w
add bx, 7
movzx edx, bx
shl edx, 0x10
movzx eax, word [r12 + 2]
add ax, 7
movzx ecx, ax
or edx, ecx
movsxd r9, edx
xor r8d, r8d
mov edx, 0x41f
mov rcx, r13
call qword [sym.imp.USER32.dll_SendMessageA]
nop
lea rax, [rsp + 0xc8]
cmp qword [rsp + 0xc0], rax
je 0x1800195bd
lea rcx, [rsp + 0xc0]
call fcn.180017220
mov rax, r13
mov rcx, qword [rsp + 0x2d0]
xor rcx, rsp
call fcn.180022070
add rsp, 0x2e8
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
pop rbx
ret