Function at 0x1812716e
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x44
mov eax, dword [0x181c7008]
xor eax, esp
mov dword [esp + 0x40], eax
movzx eax, word [ebp + 8]
push ebx
push esi
push edi
push 0xf0
push eax
push dword [0x181ccd08]
mov dword [esp + 0x34], ecx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
and dword [esp + 0x24], 0
xor edi, edi
mov esi, dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x181271ca
push eax
push dword [0x181ccd08]
call ebx
test eax, eax
je 0x181271ca
push eax
call esi
mov dword [esp + 0x24], eax
movzx ecx, word [ebp + 8]
push 5
push ecx
push dword [0x181ccd08]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x181274e1
push eax
push dword [0x181ccd08]
call ebx
test eax, eax
je 0x181274da
push eax
call esi
mov edx, eax
test edx, edx
je 0x181274da
movzx ecx, word [edx + 2]
xor eax, eax
mov ebx, 0xffff
mov esi, ecx
cmp cx, bx
mov dword [esp + 0x18], esi
sete al
mov dword [esp + 0x34], eax
xor eax, eax
cmp cx, bx
mov ecx, edx
sete al
lea eax, [eax*8 + 8]
movzx eax, word [eax + edx]
mov dword [esp + 0x2c], eax
call fcn.181231af
mov ebx, eax
mov eax, dword [esp + 0x28]
push 5
push dword [eax + 4]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 0x14], eax
xor edx, edx
xor eax, eax
mov dword [esp + 0x20], edx
cmp ax, word [esp + 0x2c]
jae 0x181274e1
mov ecx, 0xffff
cmp si, cx
sete al
dec eax
and eax, 0xfffffffa
add eax, 0x18
mov dword [esp + 0x38], eax
cmp si, cx
jne 0x18127284
mov ecx, dword [ebx + 0x14]
jmp 0x18127288
movzx ecx, word [ebx + 0x10]
add eax, ebx
mov dword [esp + 0x30], eax
cmp word [eax], 0x7b
jne 0x18127499
mov edx, dword [esp + 0x24]
lea eax, [esp + 0x10]
and dword [esp + 0x10], 0
push eax
call fcn.1812329a
pop ecx
mov edi, eax
xor ecx, ecx
mov dword [esp + 0xc], ecx
test edi, edi
je 0x18127318
push edi
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
test esi, esi
je 0x181274b9
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x181274b0
push edi
push dword [esp + 0x14]
mov edx, edi
mov ecx, eax
call fcn.180043a9
push eax
call fcn.180044d7
add esp, 0xc
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea eax, [esp + 0xc]
push eax
push 1
push esi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov edi, eax
test edi, edi
js 0x181274be
mov ecx, dword [esp + 0xc]
mov esi, dword [esp + 0x18]
and dword [esp + 0x1c], 0
lea edx, [esp + 0x1c]
call fcn.18123472
mov edi, eax
test edi, edi
js 0x18127452
and dword [esp + 0x10], 0
call fcn.181267e3
mov edi, 0xffff
cmp si, di
jne 0x1812734a
movzx eax, word [ebx + 0xc]
jmp 0x1812734e
movzx eax, word [ebx + 8]
movsx ecx, ax
mov dword [esp + 0x3c], ecx
jne 0x1812735d
movzx eax, word [ebx + 0xe]
jmp 0x18127361
movzx eax, word [ebx + 0xa]
movsx edx, ax
mov dword [esp + 0x40], edx
jne 0x18127370
movzx eax, word [ebx + 0x10]
jmp 0x18127374
movzx eax, word [ebx + 0xc]
cwde
add eax, ecx
mov dword [esp + 0x44], eax
cmp si, di
jne 0x18127386
movzx eax, word [ebx + 0x12]
jmp 0x1812738a
movzx eax, word [ebx + 0xe]
mov edi, dword [esp + 0x28]
cwde
add eax, edx
mov dword [esp + 0x48], eax
lea eax, [esp + 0x3c]
push eax
push dword [edi + 4]
call dword [sym.imp.USER32.dll_MapDialogRect]
mov eax, 0xffff
cmp si, ax
jne 0x181273b8
mov eax, dword [ebx + 0x14]
lea edx, [ebx + 8]
mov ecx, dword [ebx + 4]
jmp 0x181273c0
movzx eax, word [ebx + 0x10]
xor ecx, ecx
mov edx, ebx
push ecx
push eax
mov eax, dword [edx]
push ecx
or eax, 0x10000
push eax
push ecx
lea eax, [esp + 0x50]
push eax
push dword [edi + 4]
lea ecx, [esp + 0x2c]
push str.AtlAxWinLic140
call fcn.18007c31
mov esi, dword [esp + 0x10]
test esi, esi
je 0x1812744b
mov eax, 0xffff
cmp word [esp + 0x18], ax
jne 0x18127404
cmp dword [ebx], 0
je 0x18127404
push dword [ebx]
push esi
call dword [sym.imp.USER32.dll_SetWindowContextHelpId]
push dword [esp + 0x1c]
lea ecx, [esp + 0x14]
sub esp, 0x10
push dword [esp + 0x20]
push dword [esp + 0x48]
call fcn.18127aed
mov edi, eax
test edi, edi
js 0x181274ce
xor eax, eax
push 0x13
push eax
push eax
push eax
push eax
mov eax, dword [esp + 0x34]
movzx eax, ax
neg eax
sbb eax, eax
and eax, dword [esp + 0x28]
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [esp + 0x14], esi
jmp 0x18127452
call fcn.18004624
mov edi, eax
push dword [esp + 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [esp + 0xc]
test eax, eax
je 0x1812746a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov esi, dword [esp + 0x18]
mov edx, dword [esp + 0x34]
mov ecx, ebx
call fcn.1812323e
mov edx, dword [esp + 0x20]
mov ebx, eax
inc edx
mov dword [esp + 0x20], edx
cmp dx, word [esp + 0x2c]
jae 0x181274e1
mov eax, dword [esp + 0x38]
mov ecx, 0xffff
jmp 0x1812727a
test dx, dx
je 0x1812746e
push 2
push dword [esp + 0x18]
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [esp + 0x14], eax
jmp 0x1812746e
call fcn.18004624
mov edi, eax
jmp 0x181274be
mov edi, 0x8007000e
mov eax, dword [esp + 0xc]
test eax, eax
je 0x181274e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x181274e1
push dword [esp + 0x1c]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x181274be
call fcn.18004624
mov edi, eax
mov ecx, dword [esp + 0x4c]
mov eax, edi
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.18141824
mov esp, ebp
pop ebp
ret 4