Function at 0x1002ef14
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x1005d799
call fcn.1005c418
sub esp, 0x1a0
cmp byte [ebp + 0xc], 0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edi, edx
je 0x1002ef64
mov edi, dword [ebp + 0x18]
lea ecx, [ebp - 0x194]
mov esi, dword [ebp + 0x14]
push dword [ebp + 0x10]
imul edx, dword [edi], 0x18
add edx, dword [esi]
call fcn.1002e4d1
pop ecx
imul ecx, dword [edi], 0x18
push eax
add ecx, dword [esi]
call fcn.1000f681
push 0
lea ecx, [ebp - 0x194]
jmp 0x1002fa53
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x3c], 0xd6c05baf
mov dword [ebp - 0x98], 0x5ef13550
mov dword [ebp - 0x3c], 0xffffffed
cmp dword [ebp - 0x3c], 0xffffffe5
mov dword [ebp - 0x60], eax
jg 0x1002f068
push 1
lea ecx, [ebp - 0x104]
call fcn.1000f820
push ecx
push ecx
lea eax, [ebp - 0xb0]
mov dword [ebp - 4], ebx
push eax
push ecx
xor esi, esi
xor dl, dl
inc esi
push ecx
mov dword [ebp - 0x40], esi
lea ecx, [ebp - 0x104]
mov dword [ebp - 0x90], 0xfffffff9
call fcn.1002e761
add esp, 0x14
mov dword [ebp - 0x40], ebx
cmp dword [ebp - 0x40], ebx
jl 0x1002f04a
xor eax, eax
mov dword [ebp - 0xa8], 0x34bf8f0a
inc eax
lea edx, [ebp - 0x104]
push eax
push ecx
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp - 0x3c]
push eax
push 0x369
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x90]
push 0x2b23
push eax
lea ecx, [ebp - 0x98]
call fcn.1002ea4a
add esp, 0x20
mov byte [ebp - 0x29], bl
lea eax, [ebp - 0x29]
push 0x227a
push ecx
push 0x4099
push eax
push ebx
mov ecx, 0x650e
call fcn.10030cb0
add esp, 0x1c
dec dword [ebp - 0x40]
jns 0x1002efd1
xor esi, esi
inc esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x104]
call fcn.1000f8a3
dec dword [ebp - 0x3c]
cmp dword [ebp - 0x3c], 0xffffffe5
jle 0x1002ef8e
jmp 0x1002f06b
xor esi, esi
inc esi
push edi
lea ecx, [ebp - 0x128]
call fcn.1000f646
mov dword [ebp - 4], esi
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0x48], 0xffffffef
cmp dword [ebp - 0x48], 0xffffffe5
jg 0x1002f1bf
mov dword [ebp - 0x28], 0x78b3
cmp dword [ebp - 0x28], 0x79a0
jle 0x1002f13a
mov edi, ebx
mov dword [ebp - 0x1c], ebx
mov ecx, edi
mov dword [ebp - 0x14], 0x3350
mov dword [ebp - 0x20], ecx
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edx, ecx
mov edi, ebx
mov ecx, eax
shl edx, cl
mov dword [ebp - 0x18], edx
mov eax, edx
lea ecx, [ebp - 0x164]
and eax, edi
cdq
push edx
push eax
call fcn.10001a5f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f0e5
mov eax, dword [eax]
push eax
call fcn.10044793
pop ecx
push ebx
push esi
lea ecx, [ebp - 0x164]
call fcn.1001017e
mov edx, dword [ebp - 0x18]
inc edi
cmp edi, 0x3a2f
jl 0x1002f0c9
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x4866
jl 0x1002f0be
dec ecx
dec dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
jne 0x1002f0b9
mov edi, dword [ebp - 0x1c]
inc edi
mov dword [ebp - 0x1c], edi
cmp edi, 0x42f7
jl 0x1002f0ad
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0xa4], 0x51cd
cmp dword [ebp - 0x28], 0x764e
jge 0x1002f158
push str.ravwyjfoz_mirxpzxma_stdx_xuihy_uiqovsemg_wlsoiimfs
call fcn.10044793
pop ecx
lea eax, [ebp - 0x8c]
mov dword [ebp - 4], esi
push eax
lea eax, [ebp - 0x48]
mov dword [ebp - 0x9c], 0x71f09a2b
push eax
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x8c], 0xfffffffd
push eax
push ebx
push 0x469c
lea eax, [ebp - 0x9c]
mov dword [ebp - 0xc0], 0xa07c
push eax
lea eax, [ebp - 0xc8]
push eax
push 0xc57
lea ecx, [ebp - 0xa4]
call fcn.1002e571
add esp, 0x20
call fcn.10031321
dec dword [ebp - 0x48]
jmp 0x1002f08a
push ecx
push dword [ebp + 0x1c]
lea ecx, [ebp - 0x128]
call fcn.10032bfc
mov esi, eax
xor cl, cl
mov dword [ebp - 0x4c], esi
mov dword [ebp - 0xc4], 0x1928c176
call fcn.1002e7ac
push 0x3327
push ebx
push 0x68c7
lea edx, [ebp - 0xc4]
mov ecx, 0x2780
call fcn.10030d75
add esp, 0xc
cmp esi, 0xffffffff
je 0x1002f2f5
push 2
lea ecx, [ebp - 0xf8]
call fcn.1000f820
push 3
pop esi
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xac], 0xffffffff
push esi
call fcn.1000f820
push ecx
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 5
push eax
mov edx, 0x475a
lea ecx, [ebp - 0xf8]
call fcn.100310e3
pop ecx
pop ecx
mov dword [ebp - 0x38], ebx
jmp 0x1002f268
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0xec]
mov dword [eax + ecx*4], 0x3531f145
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], esi
jl 0x1002f255
push 0x3729
push 0xe61
xor dl, dl
mov ecx, 0x306b
call fcn.10030ef6
push 0x28aa
lea eax, [ebp - 0xf8]
xor cl, cl
push eax
lea eax, [ebp - 0xac]
push eax
lea edx, [ebp - 0xec]
call fcn.10030ba6
add esp, 0x14
lea ecx, [ebp - 0xec]
call fcn.1000f8a3
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 1
call fcn.1000f8a3
push 0x3af7
push 0x61e6
push 0x32bb
push 1
lea eax, [ebp - 0x128]
mov ecx, 0x2e59
push eax
push 0x67cd
lea eax, [ebp - 0x4c]
push 0x5a7d
push eax
call fcn.1002e571
add esp, 0x20
jmp 0x1002f2f8
push 3
pop esi
push dword [ebp - 0xb0]
movdqa xmm0, xmmword [0x1006b940]
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x13c]
mov dword [ebp - 0x14], 0x70ade216
push eax
push ebx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], ebx
movdqu xmmword [ebp - 0x13c], xmm0
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
call fcn.10013128
mov byte [ebp - 4], 6
mov dword [ebp - 0x18], 0x35c0de45
mov dword [ebp - 0x1c], 4
mov dword [ebp - 0x50], 0x83800955
mov dword [ebp - 0x54], 0xfff8
mov dword [ebp - 0x44], 0xfffffff7
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x18], 0x2c5d
cmp dword [ebp - 0x18], 0x2d5e
jle 0x1002f3e0
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x28], 0x4a55
mov edi, dword [ebp - 0x20]
mov esi, ebx
mov ecx, esi
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x17c]
cdq
push edx
push eax
call fcn.10001a5f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f3a8
mov eax, dword [eax]
push eax
call fcn.10044793
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x17c]
call fcn.1001017e
inc esi
cmp esi, 0x21e1
jl 0x1002f38a
mov edi, dword [ebp - 0x24]
add dword [ebp - 0x20], edi
dec dword [ebp - 0x28]
jne 0x1002f385
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x400b
jl 0x1002f37b
push 3
pop esi
mov dword [ebp - 0x68], 0x1d1a932d
cmp dword [ebp - 0x18], 0x2c31
jge 0x1002f3fb
push str.smsbp_fckwye_zceq_nsifmp
call fcn.10044793
pop ecx
mov dword [ebp - 4], 6
xor edx, edx
mov eax, dword [ebp - 0x88]
inc edx
mov dword [ebp - 0x12c], 0xfffffff6
xor ecx, ecx
mov dword [ebp - 0x18], 0x795b
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, edx
setl cl
mov dword [ebp - 0x50], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], edx
xor edx, edx
mov ecx, dword [ebp - 0x44]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x1c]
setl dl
imul eax, edx
cmp eax, dword [ebp - 0x6c]
je 0x1002f584
mov dword [ebp - 0x14], 0x39eb
cmp dword [ebp - 0x14], 0x3d58
jle 0x1002f4fa
mov esi, ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x24], ebx
mov eax, esi
mov dword [ebp - 0x28], 0x1d9b
mov dword [ebp - 0x18], eax
mov esi, eax
mov edi, 0x5221
mov eax, esi
lea ecx, [ebp - 0x1ac]
cdq
push edx
push eax
call fcn.10001a5f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f4a6
mov eax, dword [eax]
push eax
call fcn.10044793
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1ac]
call fcn.1001017e
dec esi
dec edi
jne 0x1002f48c
mov eax, dword [ebp - 0x18]
mov edi, dword [ebp - 0x24]
add eax, edi
dec dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
jne 0x1002f485
mov esi, dword [ebp - 0x20]
inc edi
mov dword [ebp - 0x24], edi
cmp edi, 0x506b
jl 0x1002f479
inc esi
mov dword [ebp - 0x20], esi
cmp esi, 0x6763
jl 0x1002f476
push ebx
push 0x13ca
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
push 3
pop esi
push esi
lea ecx, [ebp - 0x110]
call fcn.1000f820
cmp dword [ebp - 0x14], 0x37a0
jge 0x1002f51a
push str.ffabsgp_qsvbr_lqned_llk_jpp_zrrode
call fcn.10044793
pop ecx
push 0x7bf3
lea eax, [ebp - 0x110]
mov dword [ebp - 4], 9
push eax
push 1
lea eax, [ebp - 0xb8]
mov edx, 0x18f0
push eax
push 0x6694
push 0x256d
push ebx
push 0x64fe
xor cl, cl
call fcn.10031211
lea eax, [ebp - 0x54]
xor dl, dl
push eax
push 0xcfd
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp - 0x50]
call fcn.10030300
add esp, 0x30
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x110]
call fcn.1000f8a3
jmp 0x1002f5ba
push ebx
push ecx
push 0x31f
push 0x6d9c
push ecx
push 0x1c35
lea eax, [ebp - 0x68]
mov edx, 0x3ec9
push eax
push 0x3129
lea eax, [ebp - 0x44]
mov ecx, 0x4672
push eax
push 0x1864
call fcn.1002ea4a
add esp, 0x28
push 0x2144
push 1
push 0x78f5
push ecx
push 0xfcc
push 0x40c5
push ebx
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x88]
push eax
push 0x400e
lea eax, [ebp - 0x54]
push eax
push 0x43a5
push ebx
push 0x353f
lea edx, [ebp - 0x68]
lea ecx, [ebp - 0x6c]
call fcn.1002e5e8
add esp, 0x3c
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x88]
call fcn.1000f8a3
push 0x2232
push 0x5370
push 1
push dword [ebp + 0x1c]
lea eax, [ebp - 0x128]
xor dl, dl
push 0x4812
push 0x4620
push 0x17b2
push eax
push ebx
push 0x13e7
lea ecx, [ebp - 0x4c]
call fcn.10031168
mov dword [ebp - 0x58], 0xb90d
add esp, 0x28
mov dword [ebp - 0xb4], 0xfffffff7
mov dword [ebp - 0x18], 0x2419
cmp dword [ebp - 0x18], 0x129a
jge 0x1002f6e4
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x5c]
push eax
lea eax, [ebp - 0xbc]
push eax
push str._ld__ld__ld
call fcn.100444ab
mov edi, dword [ebp - 0x64]
add esp, 0x10
mov ecx, dword [ebp - 0x5c]
mov esi, ebx
mov dword [ebp - 0x18], 0xa
mov eax, ecx
cdq
idiv dword [ebp - 0x18]
cmp edx, 7
je 0x1002f6d4
mov eax, edi
cdq
idiv dword [ebp - 0x18]
cmp edx, 7
je 0x1002f6d4
sub edi, dword [ebp - 0xbc]
mov dword [ebp - 0x64], edi
jns 0x1002f6c1
add edi, 0x3c
dec ecx
mov dword [ebp - 0x64], edi
mov dword [ebp - 0x5c], ecx
test ecx, ecx
jns 0x1002f6cb
add ecx, 0x18
mov dword [ebp - 0x5c], ecx
inc esi
cmp esi, 0x5a0
jl 0x1002f696
push esi
push str._ld_n
call fcn.10044793
pop ecx
pop ecx
push 3
pop esi
mov dword [ebp - 0x70], 0x6c21
cmp dword [ebp - 0x58], ebx
je 0x1002f72e
push 0x59d0
push 0x872
lea eax, [ebp - 0xb4]
mov dword [ebp - 0xa0], 0x2eac4530
push eax
lea eax, [ebp - 0xa0]
xor dl, dl
push eax
push 0x2d08
lea eax, [ebp - 0x58]
mov cl, 1
push 1
push eax
call fcn.1002e8dc
add esp, 0x1c
jmp 0x1002f7f9
mov dword [ebp - 0x18], 0x147f
cmp dword [ebp - 0x18], 0x165d
jle 0x1002f768
mov edi, ebx
mov esi, ebx
mov eax, esi
mov ecx, 0x10078798
or eax, edi
cdq
push edx
push eax
call fcn.1000f531
inc esi
cmp esi, 0x3823
jl 0x1002f742
inc edi
cmp edi, 0x1004
jl 0x1002f740
push 3
pop esi
mov dword [ebp - 0x28], 0x576c5165
mov byte [ebp - 4], 0xc
cmp dword [ebp - 0x18], 0x12ba
jge 0x1002f78b
mov edx, str.hmqiakktp_retthkv_udlm_ofcylfrci_lnvnngeiz_naem_rfsexohmq_hhyhquau_gfnxtsc_okzt_qjs_uloia
mov ecx, 0x10078798
call fcn.10012752
xor ecx, ecx
inc ecx
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x58]
mov eax, dword [ebp - 0x70]
mov eax, dword [ebp - 0x28]
dec eax
je 0x1002f7ef
push ebx
push ebx
lea eax, [ebp - 0x70]
mov edx, 0x226f
push eax
push 0x7f96
push ecx
push 0x2098
mov ecx, 0x7b2d
call fcn.1002ec52
add esp, 0x18
jmp 0x1002f7f9
mov edx, 0x1597
call fcn.100313fb
cmp dword [ebp - 0x4c], 0xffffffff
je 0x1002fa34
mov dword [ebp - 0x34], 0xfffffffc
lea ecx, [ebp - 0xe0]
push esi
call fcn.1000f820
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x13c]
push dword [ebp - 0xb8]
movdqa xmm0, xmmword [0x1006b910]
lea ecx, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x14c]
mov dword [ebp - 0x7c], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
call fcn.10013128
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x30], 0xefa1e1c5
mov dword [ebp - 0x60], 0xffffffff
mov dword [ebp - 0x1c], ebx
jmp 0x1002f87a
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xe0]
mov dword [eax + ecx*4], 0xfffffff8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1002f867
lea eax, [ebp - 0x34]
push eax
push ecx
push 0x3846
push 0x71c0
push ecx
push 0x4c48
push ecx
push 0x1bbc
push ecx
lea eax, [ebp - 0x30]
push eax
push ecx
push 1
lea edx, [ebp - 0xe0]
lea ecx, [ebp - 0x7c]
call fcn.1002e226
add esp, 0x30
mov dword [ebp - 0x30], ebx
cmp dword [ebp - 0x30], esi
jg 0x1002f9e2
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], 0xfffffffc
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x14], ebx
jmp 0x1002f8ec
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0xd4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], esi
jl 0x1002f8db
mov dword [ebp - 0x34], ebx
cmp dword [ebp - 0x34], esi
jg 0x1002f96b
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x60]
sub ecx, eax
neg ecx
sbb ecx, ecx
inc ecx
cmp dword [ebp - 0x14], ecx
jle 0x1002f918
cmp dword [ebp - 0x1c], ebx
je 0x1002f918
xor edi, edi
inc edi
jmp 0x1002f91a
mov edi, ebx
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setle dl
xor ecx, ecx
imul edx, edi
sub edx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp eax, edx
setle cl
add ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
neg ecx
sbb ecx, ecx
neg ecx
dec dword [ebp - 0x20]
cmp eax, ecx
jge 0x1002f955
xor eax, eax
inc eax
jmp 0x1002f957
mov eax, ebx
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x1c], eax
inc dword [ebp - 0x34]
cmp dword [ebp - 0x34], esi
jle 0x1002f8f9
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
xor edx, edx
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x24]
cmp dword [ecx + 8], eax
mov eax, dword [ebp - 0x1c]
setle dl
sub edx, dword [ecx + 4]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
sete cl
xor edx, edx
cmp ecx, 0xfffffff9
mov ecx, 0xbadcab39
setl dl
dec edx
neg edx
sbb edx, edx
xor eax, eax
neg edx
cmp edx, 0x6c09
setne al
cmp ecx, eax
mov ecx, 0xfef6f1ac
sbb eax, eax
inc eax
cmp ecx, eax
mov eax, dword [ebp - 0xe0]
sbb ecx, ecx
inc ecx
mov dword [eax], ecx
inc dword [ebp - 0x30]
mov ecx, dword [ebp - 0x18]
cmp dword [ebp - 0x30], esi
jle 0x1002f8c5
lea ecx, [ebp - 0x7c]
call fcn.1000f8a3
lea ecx, [ebp - 0xe0]
mov byte [ebp - 4], 1
call fcn.1000f8a3
lea eax, [ebp - 0x128]
mov dl, 1
push eax
push 0x3f44
push 1
push 0x2ba5
push 0x669c
lea eax, [ebp - 0x4c]
mov ecx, 0x2774
push eax
push 0x30da
push 0x585f
push ebx
push 0x28f5
call fcn.10031168
add esp, 0x28
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x128]
cmp eax, ecx
je 0x1002fa4c
push 0xffffffffffffffff
push ebx
push ecx
mov ecx, eax
call fcn.10010210
push ebx
lea ecx, [ebp - 0x128]
push 1
call fcn.10010352
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret