Function at 0x1000da0c
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x154
mov eax, 0x101c4fd0
call fcn.10094b65
mov dword [ebp - 0x128], ecx
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
push 0x3c8
xor edi, edi
push edi
push ebx
call fcn.10094bd0
add esp, 0xc
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x138], edi
mov dword [ebp - 4], edi
mov eax, dword [ebp - 0x128]
cmp dword [eax + 4], edi
je 0x1000da68
push 2
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x1000dac9
mov byte [ebp - 0x118], 0
push 0x103
push edi
lea eax, [ebp - 0x117]
push eax
call fcn.10094bd0
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push esi
call fcn.1001b0b4
add esp, 0x1c
test eax, eax
jne 0x1000dab9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x158], eax
push 0x1021c3e8
lea eax, [ebp - 0x158]
push eax
call fcn.10096c87
push 2
push edi
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov dword [ebp - 0x120], eax
cmp eax, edi
jne 0x1000daec
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x13c], eax
push 0x1021c3e8
lea eax, [ebp - 0x13c]
jmp 0x1000dab3
mov dword [ebp - 0x134], edi
lea eax, [ebp - 0x134]
push eax
push 0x1000d058
push 1
push 0x10
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesW]
push dword [ebp - 0x134]
push 1
push 0x10
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
mov esi, eax
cmp esi, edi
jne 0x1000db68
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x714
je 0x1000db54
cmp eax, 0x715
je 0x1000db54
mov dword [ebp - 0x144], eax
push 0x1021c3e8
lea eax, [ebp - 0x144]
jmp 0x1000dab3
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
inc eax
jmp 0x1000ded2
push esi
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x124], eax
push esi
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, edi
jne 0x1000dba8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x154], eax
push 0x1021c3e8
lea eax, [ebp - 0x154]
jmp 0x1000dab3
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
cmp esi, edi
jne 0x1000dbd1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x14c], eax
push 0x1021c3e8
lea eax, [ebp - 0x14c]
jmp 0x1000dab3
mov eax, dword [ebp - 0x124]
lea edi, [esi + eax]
mov dword [ebp - 0x11c], edi
push edi
mov eax, esi
call fcn.1000d104
test eax, eax
jne 0x1000dc03
or dword [ebp - 0x15c], 0xffffffff
push 0x1021c3d8
lea eax, [ebp - 0x15c]
jmp 0x1000dab3
push edi
mov eax, esi
call fcn.1000d0c6
push 0xc
pop ecx
cmp cx, word [esi + 2]
ja 0x1000dc19
mov ecx, dword [eax + 8]
mov dword [ebx], ecx
push 0x10
pop ecx
cmp cx, word [esi + 2]
ja 0x1000dc28
mov eax, dword [eax + 0xc]
mov dword [ebx + 4], eax
push edi
call fcn.1000d0e8
mov esi, eax
push edi
mov ecx, esi
call fcn.1000d16a
test eax, eax
jne 0x1000dc53
or dword [ebp - 0x140], 0xffffffff
push 0x1021c3d8
lea eax, [ebp - 0x140]
jmp 0x1000dab3
push 0x101e1198
mov eax, esi
call fcn.1000d144
push eax
call fcn.1009539f
pop ecx
pop ecx
test eax, eax
jne 0x1000de9e
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000d148
mov edi, eax
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.1000d1ce
test eax, eax
jne 0x1000dca6
or dword [ebp - 0x148], 0xffffffff
push 0x1021c3d8
lea eax, [ebp - 0x148]
jmp 0x1000dab3
push dword [ebp - 0x11c]
mov eax, edi
call fcn.1000d1ac
mov esi, eax
push dword [ebp - 0x11c]
mov ecx, esi
call fcn.1000d25e
test eax, eax
jne 0x1000dcdd
or dword [ebp - 0x150], 0xffffffff
push 0x1021c3d8
lea eax, [ebp - 0x150]
jmp 0x1000dab3
movzx eax, word [edi]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jle 0x1000de9e
push dword [ebp - 0x11c]
mov ecx, esi
call fcn.1000d25e
test eax, eax
je 0x1000de9e
push dword [ebp - 0x11c]
call fcn.1000d232
movzx edi, ax
mov eax, esi
call fcn.1000d20c
mov dword [ebp - 0x124], eax
push 0x101e1180
push eax
call fcn.1009539f
pop ecx
pop ecx
test eax, eax
jne 0x1000dd5a
test edi, edi
jbe 0x1000dd5a
cmp edi, 0x50
jb 0x1000dd40
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000d210
push eax
lea eax, [ebx + 0x288]
jmp 0x1000de78
push 0x101e1160
push dword [ebp - 0x124]
call fcn.1009539f
pop ecx
pop ecx
test eax, eax
jne 0x1000dd93
test edi, edi
jbe 0x1000dd93
cmp edi, 0x50
jb 0x1000dd7c
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000d210
push eax
lea eax, [ebx + 8]
jmp 0x1000de78
push 0x101e1144
push dword [ebp - 0x124]
call fcn.1009539f
pop ecx
pop ecx
test eax, eax
jne 0x1000ddcf
test edi, edi
jbe 0x1000ddcf
cmp edi, 0x50
jb 0x1000ddb5
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000d210
push eax
lea eax, [ebx + 0x148]
jmp 0x1000de78
push 0x101e1124
push dword [ebp - 0x124]
call fcn.1009539f
pop ecx
pop ecx
test eax, eax
jne 0x1000de08
test edi, edi
jbe 0x1000de08
cmp edi, 0x50
jb 0x1000ddf1
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000d210
push eax
lea eax, [ebx + 0x328]
jmp 0x1000de78
push 0x101e1100
push dword [ebp - 0x124]
call fcn.1009539f
pop ecx
pop ecx
test eax, eax
jne 0x1000de41
test edi, edi
jbe 0x1000de41
cmp edi, 0x50
jb 0x1000de2a
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000d210
push eax
lea eax, [ebx + 0xa8]
jmp 0x1000de78
push 0x101e10e8
push dword [ebp - 0x124]
call fcn.1009539f
pop ecx
pop ecx
test eax, eax
jne 0x1000de81
test edi, edi
jbe 0x1000de81
cmp edi, 0x50
jb 0x1000de63
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000d210
push eax
lea eax, [ebx + 0x1e8]
push eax
call fcn.1009516c
add esp, 0xc
movzx eax, word [esi]
add eax, 3
and eax, 0xfffffffc
sub dword [ebp - 0x12c], eax
mov eax, esi
call fcn.1000d253
mov esi, eax
jmp 0x1000dce6
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x138], 0
je 0x1000deb7
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_FreeResource]
cmp dword [ebp - 0x120], 0
je 0x1000decc
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x130]
call fcn.10094bc1
ret 8