Function at 0x1010b4a0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1016ba56
mov eax, dword fs:[0]
push eax
mov eax, 0x140c
call fcn.100ac780
mov eax, dword [0x101bd92c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x13b8], edi
xor eax, eax
push 0x3e6
push eax
mov word [ebp - 0x3f8], ax
lea eax, [ebp - 0x3f6]
push eax
mov dword [edi], 1
call fcn.10098090
add esp, 0xc
lea ecx, [ebp - 0x1418]
call fcn.100b4370
push str.DICT
push str.ZFHDATA
push dword [edi + 4]
mov dword [ebp - 4], 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
je 0x1010b806
push esi
push dword [edi + 4]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push esi
push dword [edi + 4]
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
lea esi, [edi + 1]
push esi
call fcn.10090f8f
push esi
mov esi, eax
push 0
push esi
mov dword [ebp - 0x13bc], eax
call fcn.10098090
push edi
push ebx
push esi
call fcn.10096710
add esp, 0x1c
lea ecx, [ebp - 0x1418]
push 0
push 0
push esi
call fcn.100b6620
push str.Symbol
lea ecx, [ebp - 0x1418]
call fcn.100b38b0
test eax, eax
je 0x1010b806
push str.SymbolList
mov ecx, eax
call fcn.100b3980
mov ecx, eax
call fcn.100b3950
mov ebx, eax
xor eax, eax
push 0xf9e
push eax
mov word [ebp - 0x1398], ax
lea eax, [ebp - 0x1396]
push eax
call fcn.10098090
add esp, 0xc
test ebx, ebx
je 0x1010b7f2
push 0x30
call fcn.10092352
mov edi, eax
add esp, 4
test edi, edi
je 0x1010b607
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
xor eax, eax
mov word [edi], ax
mov dword [edi + 0x2c], 7
mov dword [edi + 0x28], eax
mov word [edi + 0x18], ax
jmp 0x1010b609
xor edi, edi
push 0x10189fa4
mov ecx, ebx
call fcn.100b4e30
test eax, eax
je 0x1010b65e
lea ecx, [ebp - 0x3f8]
push ecx
push eax
call fcn.1000ca20
add esp, 8
cmp word [ebp - 0x3f8], 0
jne 0x1010b637
xor ecx, ecx
jmp 0x1010b64f
lea ecx, [ebp - 0x3f8]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1010b640
sub ecx, edx
sar ecx, 1
push ecx
lea eax, [ebp - 0x3f8]
push eax
mov ecx, edi
call fcn.100048b0
mov ecx, ebx
call fcn.100b3a20
test eax, eax
je 0x1010b6af
lea ecx, [ebp - 0x1398]
push ecx
push eax
call fcn.1000ca20
add esp, 8
cmp word [ebp - 0x1398], 0
jne 0x1010b687
xor ecx, ecx
jmp 0x1010b69f
lea ecx, [ebp - 0x1398]
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1010b690
sub ecx, esi
sar ecx, 1
push ecx
lea eax, [ebp - 0x1398]
push eax
lea ecx, [edi + 0x18]
call fcn.100048b0
mov ecx, ebx
call fcn.100b39c0
mov ebx, dword [ebp - 0x13b8]
push edi
mov ebx, dword [ebx + 8]
mov ecx, ebx
mov dword [ebp - 0x13c0], eax
call fcn.1002bfd0
mov esi, eax
cmp esi, dword [ebx]
je 0x1010b701
cmp dword [esi + 0x24], 8
mov ecx, dword [esi + 0x20]
lea eax, [esi + 0x10]
jb 0x1010b6e1
mov eax, dword [eax]
push ecx
push eax
push dword [edi + 0x10]
mov ecx, edi
push 0
call fcn.10009c10
test eax, eax
js 0x1010b701
mov dword [ebp - 0x13c8], esi
lea eax, [ebp - 0x13c8]
jmp 0x1010b70f
mov eax, dword [ebx]
mov dword [ebp - 0x13c4], eax
lea eax, [ebp - 0x13c4]
mov ebx, dword [ebp - 0x13b8]
mov eax, dword [eax]
mov ecx, dword [ebx + 8]
cmp eax, dword [ecx]
jne 0x1010b789
xor eax, eax
push 0xffffffffffffffff
push eax
push edi
lea ecx, [ebp - 0x13b4]
mov dword [ebp - 0x13a0], 7
mov dword [ebp - 0x13a4], 0
mov word [ebp - 0x13b4], ax
call fcn.10004790
mov dword [ebp - 0x139c], edi
movzx eax, byte [0x101e1b11]
mov ecx, dword [ebx + 8]
push eax
lea eax, [ebp - 0x13b4]
push eax
push 0
lea eax, [ebp - 0x13d0]
push eax
mov byte [ebp - 4], 1
call fcn.10108270
cmp dword [ebp - 0x13a0], 8
mov byte [ebp - 4], 0
jb 0x1010b7de
push dword [ebp - 0x13b4]
jmp 0x1010b7d6
test edi, edi
je 0x1010b7de
cmp dword [edi + 0x2c], 8
jb 0x1010b79e
push dword [edi + 0x18]
call fcn.10091747
add esp, 4
xor eax, eax
mov dword [edi + 0x2c], 7
mov dword [edi + 0x28], 0
mov word [edi + 0x18], ax
cmp dword [edi + 0x14], 8
jb 0x1010b7c2
push dword [edi]
call fcn.10091747
add esp, 4
xor eax, eax
mov dword [edi + 0x14], 7
mov dword [edi + 0x10], 0
mov word [edi], ax
push edi
call fcn.10091747
add esp, 4
mov ebx, dword [ebp - 0x13c0]
test ebx, ebx
jne 0x1010b5d4
mov esi, dword [ebp - 0x13bc]
test esi, esi
je 0x1010b7ff
push esi
call fcn.1009503c
add esp, 4
mov esi, 1
jmp 0x1010b808
xor esi, esi
mov eax, dword [ebp - 0x13e4]
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - method.TiXmlDocument.virtual_0], vtable.TiXmlDocument.0
cmp eax, 0x101e189c
je 0x1010b82f
push eax
call fcn.1009503c
add esp, 4
lea ecx, [ebp - 0x1418]
call fcn.100b4000
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1009174c
mov esp, ebp
pop ebp
ret