Function at 0x180014100
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x880
mov qword [rsp + 0x58], 0xfffffffffffffffe
mov qword [rax + 8], rbx
mov qword [rax + 0x18], rbp
mov qword [rax + 0x20], rsi
mov rax, qword [0x18007f130]
xor rax, rsp
mov qword [rsp + 0x870], rax
mov r15, rdx
mov qword [rsp + 0x50], rcx
xor r14d, r14d
mov r12, r14
xor edx, edx
lea r8d, [r14 + 2]
mov rcx, r15
call qword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov rbx, rax
test rax, rax
je 0x1800146c2
mov ecx, 8
call fcn.180034140
test rax, rax
je 0x18001417c
lea rcx, [rsp + 0x20]
mov qword [rax], rcx
jmp 0x18001417f
mov rax, r14
mov qword [rsp + 0x20], rax
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
lea r9, [rsp + 0x20]
lea r8, [0x180013ec0]
mov edx, 0xe
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
test eax, eax
jne 0x1800141ea
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800141ca
call fcn.1800340d0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
mov rcx, qword [rsp + 0x40]
sub rcx, qword [rsp + 0x38]
movabs rax, 0x3fa08f29421cd4c1
imul rcx
mov r13, rdx
sar r13, 9
mov rax, r13
shr rax, 0x3f
add r13, rax
test r13d, r13d
jg 0x180014250
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x180014230
call fcn.1800340d0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
mov dword [rsp + 0x60], r14d
mov dword [rsp + 0x64], r14d
xor edx, edx
mov r8d, 0x802
lea rcx, [rsp + 0x68]
call fcn.180035fe0
cmp r13d, 1
jne 0x180014296
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.180014b20
lea rcx, [rsp + 0x60]
mov rdx, rax
mov r8d, 0x80c
call fcn.18003b330
jmp 0x18001433f
mov esi, r14d
xor eax, eax
mov edi, eax
test r13d, r13d
jle 0x18001431d
mov rbp, rax
nop word [rax + rax]
mov rdx, rbp
lea rcx, [rsp + 0x20]
call fcn.180014b20
cmp dword [rax], 1
jne 0x1800142ea
mov rdx, rbp
lea rcx, [rsp + 0x20]
call fcn.180014b20
mov ecx, dword [rax + 4]
test ecx, ecx
je 0x1800142ea
test esi, esi
jne 0x1800142e1
mov esi, ecx
mov r14d, edi
jmp 0x1800142ea
cmp ecx, esi
jae 0x1800142ea
mov esi, ecx
mov r14d, edi
inc edi
inc rbp
cmp edi, r13d
jl 0x1800142b0
test esi, esi
je 0x18001431d
movsxd rdx, r14d
lea rcx, [rsp + 0x20]
call fcn.180014b20
lea rcx, [rsp + 0x60]
mov rdx, rax
mov r8d, 0x80c
call fcn.18003b330
xor r14d, r14d
jmp 0x18001433f
xor edx, edx
lea rcx, [rsp + 0x20]
call fcn.180014b20
lea rcx, [rsp + 0x60]
mov rdx, rax
mov r8d, 0x80c
call fcn.18003b330
xor r14d, r14d
lea rcx, [rsp + 0x20]
call fcn.180014d10
mov edx, dword [rsp + 0x60]
sub edx, 1
je 0x18001437d
cmp edx, 1
jne 0x18001468b
xor eax, eax
or rcx, 0xffffffffffffffff
lea rdi, [rsp + 0x68]
repne scasw ax, word [rdi]
not rcx
cmp rcx, 1
je 0x18001468b
lea rdx, [rsp + 0x68]
jmp 0x180014396
cmp dword [rsp + 0x64], 0
jbe 0x18001468b
movzx edx, word [rsp + 0x64]
test rdx, rdx
je 0x18001468b
mov r8d, 0xe
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
test rax, rax
jne 0x1800143e3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800143c3
call fcn.1800340d0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
jne 0x18001442d
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18001440d
call fcn.1800340d0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rbp, rax
test rax, rax
jne 0x180014477
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x180014457
call fcn.1800340d0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
movzx eax, word [rax + 4]
dec eax
movsxd rcx, eax
imul rcx, rcx, 0x38
add rcx, 0x450
call fcn.1800355d0
mov r12, rax
test rax, rax
jne 0x1800144d1
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800144b1
call fcn.1800340d0
mov qword [rsp + 0x38], r14
mov qword [rsp + 0x40], r14
mov qword [rsp + 0x48], r14
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
movzx eax, word [rbp + 4]
mov dword [r12 + 0x414], eax
lea rcx, [r12 + 0x20c]
mov rdx, r15
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
lea rcx, [r12 + 4]
lea rdx, [0x18006c5a8]
call qword [sym.imp.KERNEL32.dll_lstrcpyW]
mov esi, r14d
cmp dword [r12 + 0x414], 0
jbe 0x18001468b
lea r13, [r12 + 0x428]
add rbp, 0x12
mov r15, qword [rsp + 0x50]
movzx edx, word [rbp]
mov r8d, 3
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceW]
mov rdi, rax
test rax, rax
je 0x18001464b
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r14, rax
test rax, rax
je 0x18001460b
mov rdx, rdi
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov ecx, eax
mov dword [r13 + 8], ecx
call fcn.1800355d0
mov qword [r13], rax
mov edi, dword [r13 + 8]
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LockResource]
mov rdx, rax
mov r8, rdi
mov rcx, qword [r13]
call fcn.18003b330
mov edx, esi
imul rdx, rdx, 0x38
lea rdx, [rdx + r12 + 0x418]
mov rcx, r15
call fcn.180014070
test eax, eax
je 0x1800145c8
inc esi
add rbp, 0xe
add r13, 0x38
cmp esi, dword [r12 + 0x414]
jb 0x180014523
jmp 0x18001468b
mov rcx, r12
call fcn.180035540
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800145e9
call fcn.1800340d0
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
mov rcx, r12
call fcn.180035540
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18001462c
call fcn.1800340d0
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
mov rcx, r12
call fcn.180035540
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x18001466c
call fcn.1800340d0
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
xor eax, eax
jmp 0x1800146c2
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov rcx, qword [rsp + 0x38]
test rcx, rcx
je 0x1800146a4
call fcn.1800340d0
xor eax, eax
mov qword [rsp + 0x38], rax
mov qword [rsp + 0x40], rax
mov qword [rsp + 0x48], rax
mov rcx, qword [rsp + 0x20]
call fcn.1800340d0
mov rax, r12
mov rcx, qword [rsp + 0x870]
xor rcx, rsp
call fcn.1800340f0
lea r11, [rsp + 0x880]
mov rbx, qword [r11 + 0x30]
mov rbp, qword [r11 + 0x40]
mov rsi, qword [r11 + 0x48]
mov rsp, r11
pop r15
pop r14
pop r13
pop r12
pop rdi
ret