Function at 0x1016256
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xac
mov eax, 0x1056139
call fcn.0100f1d3
mov eax, dword [ebp + 8]
mov esi, dword [0x1061d3c]
mov dword [ebp - 0x80], eax
movzx eax, word [ebp + 0x10]
push 0xf1
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
xor ebx, ebx
cmp eax, ebx
jne 0x101628f
xor al, al
jmp 0x101658f
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
je 0x1016288
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
cmp edi, ebx
je 0x1016288
movzx esi, word [edi + 6]
xor ecx, ecx
push 0x14
pop edx
mov eax, esi
mul edx
seto cl
mov dword [ebp - 0x9c], esi
neg ecx
or ecx, eax
push ecx
call sub.msvcrt.dll_void____cdecl_operator_new___unsigned_int_
pop ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 4], ebx
xor edx, edx
xor ecx, ecx
mov dword [ebp - 0x74], ebx
cmp dx, word [edi + 6]
jae 0x101632a
add eax, 8
cmp word [edi + ecx*2 + 8], bx
je 0x1016308
mov edx, dword [ebp - 0x74]
inc dword [ebp - 0x74]
mov dword [eax - 8], edx
movzx edx, word [edi + ecx*2 + 8]
mov dword [eax - 4], edx
mov byte [eax], 4
mov byte [eax + 1], bl
jmp 0x1016318
mov dword [eax - 8], 8
mov dword [eax - 4], ebx
mov byte [eax], bl
mov byte [eax + 1], 1
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
movzx edx, word [edi + 6]
inc ecx
add eax, 0x14
cmp ecx, edx
jl 0x10162e8
push dword [ebp + 0xc]
push dword [ebp - 0x80]
call dword [sym.imp.USER32.dll_GetDlgItem]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push 0x14
push 0x41e
push eax
mov dword [ebp - 0x78], eax
call esi
push ebx
push ebx
push 0x31
push dword [ebp - 0x78]
call esi
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 1
cmp eax, ebx
jne 0x1016369
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x80]
call fcn.01018b94
mov eax, dword [ebp - 0x6c]
cdq
xor eax, edx
sub eax, edx
movzx eax, ax
mov dword [ebp - 0x98], eax
movzx eax, word [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
mov dword [ecx], eax
call fcn.01015388
cmp al, bl
je 0x101640f
movzx eax, word [ebp + 0x10]
push 0x2000
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
mov dword [ecx], eax
call fcn.010153a9
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x7c], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xb8]
push ecx
push 0x18
push eax
call dword [sym.imp.GDI32.dll_GetObjectW]
movzx eax, word [edi + 4]
push 1
push dword [ebp - 0x74]
push 0x2a020
push eax
movzx eax, word [edi + 2]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push ebx
push dword [ebp - 0x70]
mov dword [ebp - 0x74], eax
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Add]
push dword [ebp - 0x74]
push ebx
push 0x430
push dword [ebp - 0x78]
call esi
mov byte [ebp - 4], 1
cmp dword [ebp - 0x70], ebx
je 0x1016487
lea ecx, [ebp - 0x7c]
jmp 0x1016482
mov dword [ebp - 0x70], ebx
mov byte [ebp - 4], 3
movzx eax, word [ebp + 0x10]
push ecx
mov ecx, esp
mov dword [ecx], eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x7c], esp
call fcn.01010def
movzx eax, word [edi + 4]
push 1
push dword [ebp - 0x74]
push 0x2a011
push eax
movzx eax, word [edi + 2]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
mov dword [ebp - 0x7c], eax
cmp byte [ebp + 0x14], bl
je 0x101645d
push 0xc0c0c0
push dword [ebp - 0x70]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
jmp 0x1016468
push ebx
push dword [ebp - 0x70]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Add]
push dword [ebp - 0x7c]
push ebx
push 0x430
push dword [ebp - 0x78]
call esi
mov byte [ebp - 4], 1
cmp dword [ebp - 0x70], ebx
je 0x1016487
lea ecx, [ebp - 0x70]
call fcn.01010e7b
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x8c]
push eax
movzx eax, word [edi + 4]
push eax
movzx eax, word [edi + 2]
push eax
call fcn.01038fd8
push dword [ebp - 0x88]
push dword [ebp - 0x9c]
push 0x444
push dword [ebp - 0x78]
call esi
push ebx
push 1
push 0x200c
push dword [ebp - 0x78]
call esi
movzx edi, word [ebp - 0x98]
mov eax, dword [ebp - 0x84]
cmp eax, edi
jg 0x10164da
mov eax, edi
movzx ecx, word [ebp - 0x8c]
movzx eax, ax
shl eax, 0x10
or eax, ecx
push eax
push ebx
push 0x420
push dword [ebp - 0x78]
call esi
cmp dword [ebp - 0x84], edi
jle 0x1016503
mov edi, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x8c]
add edi, 7
movzx eax, di
mov edi, dword [ebp - 0x78]
add ecx, 7
movzx ecx, cx
shl eax, 0x10
or eax, ecx
push eax
push ebx
push 0x41f
push edi
call esi
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], ebx
call fcn.01010e38
push 0x16
push dword [ebp - 0x90]
push dword [ebp - 0x94]
push ebx
push ebx
push ebx
push edi
call dword [sym.imp.USER32.dll_SetWindowPos]
push ebx
push ebx
push 0x439
push edi
call esi
or eax, 0x100
push eax
lea ecx, [ebp - 0x70]
call fcn.0101542e
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x88], ebx
je 0x101658d
push dword [ebp - 0x88]
call sub.msvcrt.dll_void___cdecl_operator_delete_void__
pop ecx
mov al, 1
call fcn.0100f265
ret 0x10