Function at 0x1000d2a0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
lea ebp, [esp - 0x408]
sub esp, 0x408
push 0xffffffffffffffff
push 0x1003a170
mov eax, dword fs:[0]
push eax
sub esp, 0x1c
mov eax, dword [0x10048ff4]
xor eax, ebp
mov dword [ebp + 0x404], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 0x414]
mov edx, dword [ebp + 0x418]
mov ebx, dword [ebp + 0x410]
xor esi, esi
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], edx
xor edi, edi
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], edi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], edi
mov dword [ebp], edi
mov byte [ebp - 4], 1
cmp ebx, edi
je 0x1000d375
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push edi
inc eax
cdq
push 2
push edx
push eax
call fcn.100248b0
mov edi, eax
add eax, 0x80000000
adc edx, esi
test edx, edx
ja 0x1000d373
jb 0x1000d336
cmp eax, 0xffffffff
ja 0x1000d373
cmp edi, 0x400
jg 0x1000d359
push edi
call fcn.10009d10
add esp, 4
test al, al
je 0x1000d359
mov eax, edi
call fcn.10025240
mov dword [ebp - 0x10], esp
mov eax, esp
jmp 0x1000d365
push edi
lea ecx, [ebp - 0x14]
call fcn.1000a160
mov esi, dword [ebp - 0x14]
push 3
push edi
push ebx
push eax
call fcn.100090e0
test eax, eax
jne 0x1000d3ab
xor edi, edi
lea eax, [ebp + 4]
cmp dword [ebp], eax
je 0x1000d385
lea ecx, [ebp]
call fcn.10009c90
cmp esi, edi
je 0x1000d3a1
lea esp, [esp]
mov eax, esi
mov esi, dword [esi]
push eax
call fcn.10024b1c
add esp, 4
cmp esi, edi
jne 0x1000d390
mov eax, 0x8007000e
jmp 0x1000d4d3
push 2
push 0
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov ebx, eax
mov dword [ebp - 0x20], ebx
test ebx, ebx
jne 0x1000d3cb
call fcn.10009240
mov edi, eax
jmp 0x1000d4a5
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
push ecx
push edx
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov edi, eax
test edi, edi
jne 0x1000d3ea
call fcn.10009240
jmp 0x1000d49c
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x1c], eax
test eax, eax
jne 0x1000d403
call fcn.10009240
jmp 0x1000d49c
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
lea eax, [edi + 1]
mov dword [ebp - 0x18], edi
cmp eax, edi
jae 0x1000d439
lea eax, [ebp + 4]
cmp dword [ebp], eax
je 0x1000d427
lea ecx, [ebp]
call fcn.10009c90
lea ecx, [ebp - 0x14]
call fcn.10009c30
mov eax, 0x8007000e
jmp 0x1000d4d3
push eax
lea ecx, [ebp]
mov byte [ebp - 4], 2
call fcn.1000a8d0
mov dword [ebp - 4], 1
jmp 0x1000d465
mov eax, dword [ebp]
test eax, eax
jne 0x1000d473
mov edi, 0x8007000e
jmp 0x1000d49e
mov ecx, dword [ebp - 0x1c]
push edi
push ecx
push edi
push eax
call fcn.10009210
mov edx, dword [ebp]
mov eax, dword [ebp + 0x41c]
add esp, 0x10
mov byte [edx + edi], 0
mov ecx, dword [ebp]
push eax
push ecx
lea ecx, [ebp - 0x28]
call fcn.1000c810
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea edx, [ebp + 4]
cmp dword [ebp], edx
je 0x1000d4b5
lea ecx, [ebp]
call fcn.10009c90
test esi, esi
je 0x1000d4d1
lea esp, [esp]
mov eax, esi
mov esi, dword [esi]
push eax
call fcn.10024b1c
add esp, 4
test esi, esi
jne 0x1000d4c0
mov eax, edi
lea esp, [ebp - 0x38]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x404]
xor ecx, ebp
call fcn.100233b7
add ebp, 0x408
mov esp, ebp
pop ebp
ret 0x10