Function at 0x180004a84
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push rbp
push rsi
push rdi
push r12
push r13
push r14
push r15
sub rsp, 0x4a0
lea rbp, [rsp + 0x40]
mov qword [rbp + 0x30], 0xfffffffffffffffe
mov qword [rbp + 0x4a0], rbx
mov rax, qword [0x180029008]
xor rax, rbp
mov qword [rbp + 0x450], rax
mov r13, r9
mov r12, r8
mov r15, rdx
xor esi, esi
mov ebx, esi
mov qword [rbp + 8], rbx
mov qword [rbp + 0x28], rcx
mov qword [rbp + 0x20], rsi
mov qword [rbp + 0x40], rsi
test rdx, rdx
je 0x180004d24
or rax, 0xffffffffffffffff
inc rax
cmp word [rdx + rax*2], si
jne 0x180004ae6
inc eax
movsxd rdi, eax
add rdi, rdi
mov eax, 0x80000000
add rax, rdi
mov ecx, 0xffffffff
cmp rax, rcx
ja 0x180004bb0
cmp edi, 0x400
jg 0x180004b4a
movsxd r14, edi
mov rcx, r14
call fcn.180003ce4
test al, al
je 0x180004b4a
lea rax, [r14 + 0xf]
cmp rax, r14
ja 0x180004b37
movabs rax, 0xffffffffffffff0
and rax, 0xfffffffffffffff0
call fcn.18001a640
sub rsp, rax
lea r14, [rsp + 0x40]
jmp 0x180004b79
movsxd rcx, edi
mov rax, rcx
not rax
cmp rax, 0x10
jb 0x180004d19
add rcx, 0x10
call fcn.18000f7ac
test rax, rax
je 0x180004bb0
mov qword [rax], rsi
mov rbx, rax
mov qword [rbp + 8], rax
lea r14, [rax + 0x10]
test r14, r14
je 0x180004bb0
mov byte [r14], sil
mov qword [rsp + 0x38], rsi
mov qword [rsp + 0x30], rsi
mov dword [rsp + 0x28], edi
mov qword [rsp + 0x20], r14
or r9d, 0xffffffff
mov r8, r15
xor edx, edx
lea ecx, [rdx + 3]
call qword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
neg eax
sbb rdi, rdi
and rdi, r14
jmp 0x180004bb3
mov rdi, rsi
test rdi, rdi
je 0x180004d24
xor edx, edx
lea r8d, [rdx + 0x60]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r14, rax
mov qword [rbp + 0x10], rax
test rax, rax
jne 0x180004bfe
xor edx, edx
lea r8d, [rax + 2]
mov rcx, rdi
call qword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov r14, rax
mov qword [rbp + 0x10], rax
test rax, rax
jne 0x180004bfe
call fcn.180003ec4
mov edi, eax
jmp 0x180004cef
mov r8, r13
mov rdx, r12
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FindResourceA]
mov rdi, rax
test rax, rax
jne 0x180004c1f
call fcn.180003ec4
jmp 0x180004cde
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov r15, rax
mov qword [rbp + 0x18], rax
test rax, rax
je 0x180004c15
mov rdx, rdi
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
mov dword [rbp], edi
lea eax, [rdi + 1]
cmp eax, edi
jae 0x180004c59
mov edi, 0x8007000e
jmp 0x180004ce0
mov ecx, eax
test eax, eax
je 0x180004c8f
xor edx, edx
or rax, 0xffffffffffffffff
div rcx
cmp rax, 1
jae 0x180004c78
mov ecx, 0x80070216
call fcn.180003e1c
cmp rcx, 0x400
jbe 0x180004c8f
mov rdx, rcx
lea rcx, [rbp + 0x40]
call fcn.180009360
jmp 0x180004c97
lea rax, [rbp + 0x48]
mov qword [rbp + 0x40], rax
jmp 0x180004caa
cmp qword [rbp + 0x40], rsi
je 0x180004c4f
mov r9, rdi
mov r8, r15
mov rdx, rdi
mov rcx, qword [rbp + 0x40]
call fcn.180003e38
mov rax, qword [rbp + 0x40]
mov byte [rdi + rax], sil
mov r8d, dword [rbp + 0x4c0]
mov rdx, qword [rbp + 0x40]
lea rcx, [rbp + 0x20]
call fcn.1800060e8
mov edi, eax
test r14, r14
je 0x180004cef
mov rcx, r14
call qword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x180004d03
lea rcx, [rbp + 0x40]
call fcn.180009358
nop
jmp 0x180004d10
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.18000f68c
test rbx, rbx
jne 0x180004d05
mov eax, edi
jmp 0x180004d4f
mov ecx, 0x80070216
call fcn.180003e1c
nop
lea rax, [rbp + 0x48]
cmp qword [rbp + 0x40], rax
je 0x180004d38
lea rcx, [rbp + 0x40]
call fcn.180009358
nop
jmp 0x180004d45
mov rcx, rbx
mov rbx, qword [rbx]
call fcn.18000f68c
test rbx, rbx
jne 0x180004d3a
mov eax, 0x8007000e
mov rcx, qword [rbp + 0x450]
xor rcx, rbp
call fcn.1800095a0
mov rbx, qword [rbp + 0x4a0]
lea rsp, [rbp + 0x460]
pop r15
pop r14
pop r13
pop r12
pop rdi
pop rsi
pop rbp
ret