Function at 0x100364c4
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x4d0
mov eax, 0x101dd115
call fcn.1005d984
mov dword [ebp - 0x450], ecx
and dword [ebp - 4], 0
lea ecx, [ebp - 0x4dc]
mov esi, dword [0x10296350]
call fcn.100594e0
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
push 0x101e893c
cmovae eax, dword [ebp + 8]
push eax
push esi
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
test edi, edi
je 0x10036c6c
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
lea esi, [edi + 1]
push esi
call fcn.1005da2d
push esi
push 0
push eax
mov dword [ebp - 0x444], eax
call fcn.10079740
push edi
push ebx
mov ebx, dword [ebp - 0x444]
push ebx
call fcn.1008e620
add esp, 0x1c
lea ecx, [ebp - 0x4dc]
push 0
push 0
push ebx
call fcn.1005c180
push 0x101eb0ac
lea ecx, [ebp - 0x4dc]
call fcn.1005a120
test eax, eax
je 0x10036c65
mov ecx, eax
call fcn.1005a1c0
mov esi, eax
mov dword [ebp - 0x444], esi
jmp 0x10036c5d
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.10079740
add esp, 0xc
mov ecx, esi
push 0x101eafb4
call fcn.10059a30
lea ecx, [ebp - 0x420]
push ecx
push eax
call fcn.10074257
pop ecx
pop ecx
mov ecx, esi
call fcn.1005a1c0
push 0xc
mov edi, eax
call fcn.1005d5a3
pop ecx
xor ecx, ecx
test eax, eax
je 0x100365e6
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
jmp 0x100365e8
mov eax, ecx
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x448], ecx
lea ecx, [ebp - 0x44c]
push eax
call fcn.10034706
mov byte [ebp - 4], 2
test edi, edi
je 0x10036bad
push 8
call fcn.1005d5a3
mov esi, eax
pop ecx
mov dword [ebp - 0x454], esi
mov byte [ebp - 4], 3
test esi, esi
je 0x10036636
and dword [esi], 0
mov ecx, esi
and dword [esi + 4], 0
call fcn.1002c1d3
mov dword [esi], eax
jmp 0x10036638
xor esi, esi
and dword [ebp - 0x440], 0
lea ecx, [ebp - 0x440]
and dword [ebp - 0x43c], 0
push esi
mov byte [ebp - 4], 2
call fcn.10029537
push 0x208
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 4
push 0
push eax
call fcn.10079740
add esp, 0xc
mov ecx, edi
push 0x101eb594
call fcn.10059a30
test eax, eax
je 0x10036c8b
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, str.text
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x45c]
mov byte [ebp - 4], 5
push eax
call fcn.10029758
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x45c]
jne 0x100366f7
xor eax, eax
jmp 0x10036704
lea eax, [ebp - 0x218]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eafb4
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x100367de
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101e56a8
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x464]
mov byte [ebp - 4], 6
push eax
call fcn.10029758
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x464]
jne 0x100367ae
xor eax, eax
jmp 0x100367bb
lea eax, [ebp - 0x218]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5a8
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x10036895
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101eb5ac
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 7
push eax
call fcn.10029758
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x46c]
jne 0x10036865
xor eax, eax
jmp 0x10036872
lea eax, [ebp - 0x218]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push str.page
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x1003694c
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101eafec
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x474]
mov byte [ebp - 4], 8
push eax
call fcn.10029758
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x474]
jne 0x1003691c
xor eax, eax
jmp 0x10036929
lea eax, [ebp - 0x218]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5b4
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x10036a03
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, str.type
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 9
push eax
call fcn.10029758
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x47c]
jne 0x100369d3
xor eax, eax
jmp 0x100369e0
lea eax, [ebp - 0x218]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5c8
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x10036aba
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, str.code
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x484]
mov byte [ebp - 4], 0xa
push eax
call fcn.10029758
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x484]
jne 0x10036a8a
xor eax, eax
jmp 0x10036a97
lea eax, [ebp - 0x218]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5dc
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x10036b71
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101eb5e0
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x48c]
mov byte [ebp - 4], 0xb
push eax
call fcn.10029758
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x48c]
jne 0x10036b41
xor eax, eax
jmp 0x10036b4e
lea eax, [ebp - 0x218]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
mov ecx, dword [ebp - 0x44c]
lea eax, [ebp - 0x440]
push eax
call fcn.10034689
mov ecx, edi
call fcn.1005a5f0
mov ecx, dword [ebp - 0x43c]
mov edi, eax
mov byte [ebp - 4], 2
test ecx, ecx
je 0x10036b9f
call fcn.10021ddf
test edi, edi
jne 0x1003660c
mov esi, dword [ebp - 0x444]
and dword [ebp - 0x428], 0
xor eax, eax
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
cmp word [ebp - 0x420], ax
je 0x10036bdd
lea eax, [ebp - 0x420]
push eax
call fcn.1008133f
pop ecx
push eax
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x438]
call fcn.10002750
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x494]
push eax
mov eax, dword [ebp - 0x450]
mov ecx, dword [eax + 0x334]
call fcn.10034773
mov ecx, dword [ebp - 0x494]
lea eax, [ebp - 0x44c]
push eax
add ecx, 0x28
call fcn.10029b3b
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 2
call fcn.10002690
mov ecx, esi
call fcn.1005a5f0
mov ecx, dword [ebp - 0x448]
mov esi, eax
mov dword [ebp - 0x444], esi
mov byte [ebp - 4], 1
test ecx, ecx
je 0x10036c5d
call fcn.10021ddf
test esi, esi
jne 0x10036594
push ebx
call fcn.1005d5e4
pop ecx
lea ecx, [ebp - 0x4dc]
call fcn.10029b18
push 0
push 1
lea ecx, [ebp + 8]
call fcn.10002690
call fcn.1005d93f
ret 0x18
mov ecx, dword [ebp - 0x43c]
test ecx, ecx
je 0x10036c9a
call fcn.10021ddf
mov ecx, dword [ebp - 0x448]
test ecx, ecx
je 0x10036c6c
call fcn.10021ddf
jmp 0x10036c6c