Function at 0x18014fa10
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push r12
push r13
push r14
push r15
lea rbp, [rsp - 0x13a0]
mov eax, 0x14a0
call fcn.1800c19a0
sub rsp, rax
mov qword [rsp + 0x40], 0xfffffffffffffffe
mov qword [rsp + 0x14d8], rbx
mov qword [rsp + 0x14e0], rsi
mov qword [rsp + 0x14e8], rdi
mov rax, qword [0x180248950]
xor rax, rsp
mov qword [rbp + 0x1390], rax
mov r15, rcx
mov r12d, 1
mov dword [rcx], r12d
xor r14d, r14d
mov word [rbp], r14w
xor edx, edx
mov r8d, 0x3e6
lea rcx, [rbp + 2]
call fcn.1800be330
lea rcx, [rsp + 0x60]
call fcn.18015a9e0
nop
lea r8, str.DICT
lea rdx, str.ZFHDATA
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rbx, rax
test rax, rax
je 0x18014fd64
mov rdx, rax
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rsi, rax
mov rdx, rbx
mov rcx, qword [r15 + 8]
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
lea ecx, [rdi + 1]
mov ebx, ecx
call fcn.1800b4760
mov r13, rax
mov r8d, ebx
xor edx, edx
mov rcx, rax
call fcn.1800be330
mov r8d, edi
mov rdx, rsi
mov rcx, r13
call fcn.1800bcc30
xor r9d, r9d
xor r8d, r8d
mov rdx, r13
lea rcx, [rsp + 0x60]
call fcn.18015d9f0
lea rdx, str.Symbol
lea rcx, [rsp + 0x60]
call fcn.18015b760
test rax, rax
je 0x18014fd64
lea rdx, str.SymbolList
mov rcx, rax
call fcn.18015b7b0
mov rcx, rax
call fcn.18015b890
mov r14, rax
xor ebx, ebx
mov word [rbp + 0x3f0], bx
xor edx, edx
mov r8d, 0xf9e
lea rcx, [rbp + 0x3f2]
call fcn.1800be330
test r14, r14
je 0x18014fd55
mov ecx, 0x40
call fcn.1800b543c
mov rdi, rax
test rax, rax
je 0x18014fba5
mov qword [rax + 0x18], 7
mov qword [rax + 0x10], rbx
mov word [rax], bx
mov qword [rax + 0x38], 7
mov qword [rax + 0x30], rbx
mov word [rax + 0x20], bx
jmp 0x18014fba8
mov rdi, rbx
lea rdx, [0x1801e1984]
mov rcx, r14
call fcn.18015af30
test rax, rax
je 0x18014fbf7
lea rdx, [rbp]
mov rcx, rax
call fcn.18000d890
cmp word [rbp], 0
jne 0x18014fbd4
mov r8, rbx
jmp 0x18014fbeb
lea rax, [rbp]
or r8, 0xffffffffffffffff
nop dword [rax]
inc r8
cmp word [rax + r8*2], 0
jne 0x18014fbe0
lea rdx, [rbp]
mov rcx, rdi
call fcn.180005450
mov rcx, r14
call fcn.18015b910
test rax, rax
je 0x18014fc48
lea rdx, [rbp + 0x3f0]
mov rcx, rax
call fcn.18000d890
lea rcx, [rdi + 0x20]
cmp word [rbp + 0x3f0], 0
jne 0x18014fc26
mov r8, rbx
jmp 0x18014fc3c
lea rax, [rbp + 0x3f0]
or r8, 0xffffffffffffffff
inc r8
cmp word [rax + r8*2], 0
jne 0x18014fc31
lea rdx, [rbp + 0x3f0]
call fcn.180005450
mov rcx, r14
call fcn.18015bc50
mov r14, rax
mov rsi, qword [r15 + 0x10]
mov rdx, rdi
mov rcx, rsi
call fcn.180037c50
mov rbx, rax
cmp rax, qword [rsi]
je 0x18014fc86
lea rdx, [rax + 0x20]
mov rcx, rdi
call fcn.18000a1e0
test eax, eax
js 0x18014fc86
mov qword [rsp + 0x38], rbx
lea rax, [rsp + 0x38]
jmp 0x18014fc93
mov rax, qword [rsi]
mov qword [rsp + 0x30], rax
lea rax, [rsp + 0x30]
mov rax, qword [rax]
mov rcx, qword [r15 + 0x10]
cmp rax, qword [rcx]
jne 0x18014fcfb
mov qword [rbp - 0x18], 7
xor ebx, ebx
mov qword [rbp - 0x20], rbx
mov word [rbp - 0x30], bx
or r9, 0xffffffffffffffff
xor r8d, r8d
mov rdx, rdi
lea rcx, [rbp - 0x30]
call fcn.180005100
mov qword [rbp - 0x10], rdi
movzx eax, byte [0x1802781d5]
mov byte [rsp + 0x20], al
lea r9, [rbp - 0x30]
xor r8d, r8d
lea rdx, [rsp + 0x48]
mov rcx, qword [r15 + 0x10]
call fcn.1800fe200
nop
cmp qword [rbp - 0x18], 8
jb 0x18014fd4c
mov rcx, qword [rbp - 0x30]
call fcn.1800b5354
jmp 0x18014fd4c
test rdi, rdi
je 0x18014fd4a
cmp qword [rdi + 0x38], 8
jb 0x18014fd10
mov rcx, qword [rdi + 0x20]
call fcn.1800b5354
mov qword [rdi + 0x38], 7
xor ebx, ebx
mov qword [rdi + 0x30], rbx
mov word [rdi + 0x20], bx
cmp qword [rdi + 0x18], 8
jb 0x18014fd31
mov rcx, qword [rdi]
call fcn.1800b5354
mov qword [rdi + 0x18], 7
mov qword [rdi + 0x10], rbx
mov word [rdi], bx
mov rcx, rdi
call fcn.1800b5354
jmp 0x18014fd4c
xor ebx, ebx
test r14, r14
jne 0x18014fb72
test r13, r13
je 0x18014fd67
mov rcx, r13
call fcn.1800bcdc8
jmp 0x18014fd67
mov r12d, r14d
lea rax, vtable.TiXmlDocument.0
mov qword [rsp + 0x60], rax
lea rax, [0x180278200]
mov rcx, qword [rbp - 0x48]
cmp rcx, rax
je 0x18014fd88
call fcn.1800bcdc8
lea rcx, [rsp + 0x60]
call fcn.18015ac90
mov eax, r12d
mov rcx, qword [rbp + 0x1390]
xor rcx, rsp
call fcn.1800b5370
lea r11, [rsp + 0x14a0]
mov rbx, qword [r11 + 0x38]
mov rsi, qword [r11 + 0x40]
mov rdi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rbp
ret