Function at 0x4686c0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov rax, rsp
sub rsp, 0x48
mov qword [rax + 8], rbx
mov qword [rax + 0x10], rbp
mov qword [rax + 0x18], rsi
mov qword [rax + 0x20], rdi
mov qword [rax - 8], r12
mov qword [rax - 0x10], r13
mov qword [rax - 0x18], r14
mov rax, qword [0x00507908]
mov rbp, rcx
lea rcx, [0x00507908]
mov rbx, r9
movzx r12d, r8w
mov r14d, edx
call qword [rax + 0x18]
lea rdx, [0x004d0d8c]
test rdx, 0xffffffffffff0000
lea rdi, [rax + 0x18]
mov rsi, 0xffffffffffffffff
mov qword [rsp + 0x20], rdi
jne 0x46874b
movzx r13d, dx
xor edx, edx
mov ecx, r13d
call fcn.00407f30
test rax, rax
je 0x46876c
lea rcx, [rsp + 0x20]
mov r8d, r13d
mov rdx, rax
call fcn.00415cf0
mov rdi, qword [rsp + 0x20]
jmp 0x46876c
xor eax, eax
mov rdi, rdx
mov rcx, rsi
repne scasw ax, word [rdi]
not rcx
lea r8d, [rcx - 1]
lea rcx, [rsp + 0x20]
call fcn.00415b80
mov rdi, qword [rsp + 0x20]
test r12w, r12w
mov r13, qword [rsp + 0x38]
jne 0x468780
call fcn.00468310
mov r12w, ax
test rbx, rbx
jne 0x468790
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov rbx, rax
movzx ecx, r14w
movzx r9d, r12w
mov edx, 6
shr cx, 4
add cx, 1
movzx r8d, cx
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_FindResourceExW]
test rax, rax
jne 0x46882f
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
cmp dword [rdi - 8], 0
mov rcx, rax
jl 0x4687db
cmp rax, qword [rdi - 0x18]
jne 0x4687db
lea rbx, [rdi - 0x18]
lock add dword [rdi - 8], 1
jmp 0x468818
mov rax, qword [rax]
mov edx, dword [rdi - 0x10]
mov r8d, 2
call qword [rax]
test rax, rax
mov rbx, rax
jne 0x4687f7
call fcn.00408730
int3
mov eax, dword [rdi - 0x10]
lea rcx, [rbx + 0x18]
mov r8, rdi
mov dword [rbx + 8], eax
mov eax, dword [rdi - 0x10]
add eax, 1
movsxd rdx, eax
add rdx, rdx
mov r9, rdx
call fcn.00490ae0
lea rax, [rbx + 0x18]
mov qword [rbp], rax
lock xadd dword [rdi - 8], esi
add esi, 0xffffffff
test esi, esi
jmp 0x46898c
mov rdx, rax
mov rcx, rbx
call qword [sym.imp.KERNEL32.dll_LoadResource]
test rax, rax
mov rbx, rax
jne 0x468886
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
cmp dword [rdi - 8], ebx
mov rcx, rax
jl 0x468866
cmp rax, qword [rdi - 0x18]
jne 0x468866
lea rbx, [rdi - 0x18]
lock add dword [rdi - 8], 1
jmp 0x468818
mov rax, qword [rax]
mov edx, dword [rdi - 0x10]
mov r8d, 2
call qword [rax]
test rax, rax
mov rbx, rax
jne 0x4687f7
call fcn.00408730
int3
movzx eax, r14w
cdq
and edx, 0xf
add eax, edx
and eax, 0xf
sub eax, edx
test eax, eax
jle 0x4688ae
mov ecx, eax
nop
nop
sub rcx, 1
movzx eax, word [rbx]
lea rbx, [rbx + rax*2 + 2]
jne 0x4688a0
movzx edi, word [rbx]
mov eax, 2
lea ecx, [rdi + 1]
mul rcx
cmovo rax, rsi
mov rcx, rax
call fcn.0048efe0
lea rdx, [rbx + 2]
mov r8, rdi
mov rcx, rax
mov r12, rax
call fcn.00493d90
test r12, r12
mov word [r12 + rdi*2], 0
jne 0x4688ea
xor ecx, ecx
jmp 0x4688fc
xor eax, eax
mov rcx, rsi
mov rdi, r12
repne scasw ax, word [rdi]
not rcx
sub rcx, 1
mov r8d, ecx
lea rcx, [rsp + 0x20]
mov rdx, r12
call fcn.00415b80
mov rcx, r12
call fcn.00491a30
mov rdi, qword [rsp + 0x20]
mov rcx, qword [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + 0x20]
cmp dword [rdi - 8], 0
mov rcx, rax
jl 0x46893d
cmp rax, qword [rdi - 0x18]
jne 0x46893d
lea rbx, [rdi - 0x18]
lock add dword [rdi - 8], 1
jmp 0x46897a
mov rax, qword [rax]
mov edx, dword [rdi - 0x10]
mov r8d, 2
call qword [rax]
test rax, rax
mov rbx, rax
jne 0x468959
call fcn.00408730
int3
mov eax, dword [rdi - 0x10]
lea rcx, [rbx + 0x18]
mov r8, rdi
mov dword [rbx + 8], eax
mov eax, dword [rdi - 0x10]
add eax, 1
movsxd rdx, eax
add rdx, rdx
mov r9, rdx
call fcn.00490ae0
lea rax, [rbx + 0x18]
mov qword [rbp], rax
lock xadd dword [rdi - 8], esi
add esi, 0xffffffff
test esi, esi
jg 0x46899c
mov rcx, qword [rdi - 0x18]
lea rdx, [rdi - 0x18]
mov rax, qword [rcx]
call qword [rax + reloc.OLEAUT32.dll_VariantClear]
mov r14, qword [rsp + 0x30]
mov r12, qword [rsp + 0x40]
mov rdi, qword [rsp + 0x68]
mov rsi, qword [rsp + 0x60]
mov rbx, qword [rsp + 0x50]
mov rax, rbp
mov rbp, qword [rsp + 0x58]
add rsp, 0x48
ret