Function at 0x1019a1d9
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x6c
mov eax, 0x1032a8a1
call fcn.1027911b
mov edi, dword [ebp + 8]
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
push dword [edi]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x40], esi
mov dword [ebp - 0x48], eax
call fcn.1016e40c
test al, al
je 0x1019a734
cmp byte [edi + 0xc], 0
jne 0x1019a22d
cmp dword [edi + 8], 0
jl 0x1019a734
push dword [edi]
call fcn.1016e1e6
movzx eax, byte [eax + 0x10]
cmp dword [edi + 8], eax
jge 0x1019a734
push dword [edi]
call fcn.1016e1e6
movzx eax, word [eax + 0xc]
mov dword [ebx], eax
xor ebx, ebx
push dword [edi]
inc ebx
cmp byte [edi + 0xc], 0
jne 0x1019a25c
call fcn.1016e1e6
push dword [edi]
cmp byte [eax + 0x10], bl
jbe 0x1019a25c
call fcn.1016e1e6
movzx eax, byte [eax + 0x11]
jmp 0x1019a265
call fcn.1016e1e6
movzx eax, word [eax + 0xe]
mov dword [esi], eax
mov eax, dword [ebp - 0x38]
cmp dword [eax], 0
je 0x1019a734
cmp dword [esi], 0
je 0x1019a734
cmp dword [edi + 4], ebx
push dword [edi]
sete byte [ebp - 0x2d]
call fcn.1016e1e6
cmp byte [ebp - 0x2d], 0
mov eax, dword [eax + 4]
mov esi, eax
mov dword [ebp - 0x44], eax
je 0x1019a2b4
push dword [edi]
call fcn.1016e1e6
cmp dword [eax + 8], 0xffffffff
je 0x1019a2b1
push dword [edi]
call fcn.1016e1e6
mov esi, dword [eax + 8]
jmp 0x1019a2c3
mov eax, dword [ebp - 0x44]
mov ecx, dword [edi + 4]
test ecx, ecx
je 0x1019a2c3
imul esi, ecx, 0x332c
add esi, eax
and dword [ebp - 0x2c], 0
and dword [ebp - 4], 0
call fcn.101738cc
test eax, eax
je 0x1019a2ee
call fcn.10173a3d
push eax
lea ecx, [ebp - 0x2c]
call fcn.10175425
cmp dword [eax], 0
jne 0x1019a321
xor bl, bl
jmp 0x1019a71b
mov ecx, dword [ebp - 0x2c]
and dword [ebp - 0x2c], 0
test ecx, ecx
je 0x1019a2ff
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
lea eax, [ebp - 0x2c]
push eax
push 0x236
call sub.WindowsCodecs.dll_WICCreateImagingFactory_Proxy
test eax, eax
js 0x1019a317
cmp dword [ebp - 0x2c], 0
jne 0x1019a321
push 0x25f381
call fcn.10153dc1
xor eax, eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 2
cmp byte [ebp - 0x2d], al
je 0x1019a50c
mov dword [ebp - 0x44], eax
push 0x2000
push eax
push eax
push eax
movzx eax, si
push eax
push dword [edi]
mov byte [ebp - 4], 3
call fcn.1016e2b9
push eax
call dword [sym.imp.USER32.dll_LoadImageW]
mov esi, eax
mov dword [ebp - 0x44], esi
test esi, esi
je 0x1019a704
push 0
lea ecx, [ebp - 0x78]
call fcn.1016d938
push esi
push dword [ebp - 0x78]
mov byte [ebp - 4], 4
call dword [sym.imp.GDI32.dll_SelectObject]
mov cl, byte [ebp - 0x74]
test bl, cl
jne 0x1019a38b
or cl, bl
mov dword [ebp - 0x70], eax
mov byte [ebp - 0x74], cl
call fcn.1016e087
push eax
mov eax, dword [0x10490cec]
inc eax
push eax
push 0
push dword [ebp - 0x78]
call dword [sym.imp.GDI32.dll_SetDIBColorTable]
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
and dword [ebp - 0x28], 0
push edx
push 2
mov ecx, dword [eax]
push 0
push esi
push eax
mov byte [ebp - 4], 5
call dword [ecx + 0x54]
test eax, eax
js 0x1019a4e3
mov ecx, dword [ebp - 0x3c]
and dword [ebp - 0x3c], 0
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], edx
test ecx, ecx
je 0x1019a3df
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov edx, dword [ebp - 0x4c]
mov eax, dword [edx]
lea ecx, [ebp - 0x3c]
push ecx
push edx
call dword [eax + 0x28]
test eax, eax
js 0x1019a4e3
mov eax, dword [ebp - 0x3c]
xor edx, edx
push edx
xorps xmm0, xmm0
mov ecx, dword [eax]
push ecx
push ecx
movsd qword [esp], xmm0
push edx
push edx
push 0x1039739c
push dword [ebp - 0x28]
push eax
call dword [ecx + 0x20]
test eax, eax
js 0x1019a4e3
and dword [ebp - 0x24], 0
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 6
push eax
push dword [ebp - 0x3c]
mov dword [ebp - 0x34], 0xffff00ff
call fcn.100344af
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x1019a4d1
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x24]
push eax
call fcn.10200563
mov ecx, dword [ebp - 0x48]
push dword [ebp - 0x40]
push dword [ebp - 0x38]
mov eax, dword [ecx]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
test eax, eax
js 0x1019a4ce
push dword [edi]
call fcn.1016e1e6
cmp byte [eax + 0x10], bl
jbe 0x1019a48c
cmp byte [edi + 0xc], 0
jne 0x1019a48c
push dword [edi]
call fcn.1016e1e6
mov edi, dword [ebp - 0x40]
xor edx, edx
movzx ecx, byte [eax + 0x10]
mov eax, dword [edi]
div ecx
mov dword [edi], eax
mov ecx, dword [ebp - 0x24]
and dword [ebp - 0x24], 0
mov byte [ebp - 4], 5
test ecx, ecx
je 0x1019a4a1
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x28]
and dword [ebp - 0x28], 0
mov byte [ebp - 4], 4
test ecx, ecx
je 0x1019a4b6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
lea ecx, [ebp - 0x78]
call fcn.1016da4f
push esi
mov byte [ebp - 4], 2
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x1019a6d2
mov ecx, dword [ebp - 0x24]
and dword [ebp - 0x24], 0
mov byte [ebp - 4], 5
test ecx, ecx
je 0x1019a4e3
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x28]
and dword [ebp - 0x28], 0
mov byte [ebp - 4], 4
test ecx, ecx
je 0x1019a4f8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
lea ecx, [ebp - 0x78]
call fcn.1016da4f
push esi
call dword [sym.imp.GDI32.dll_DeleteObject]
jmp 0x1019a704
push 0x105
movzx eax, si
push eax
push dword [edi]
call fcn.1016e2b9
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x40], eax
test eax, eax
jne 0x1019a557
mov eax, dword [ebp - 0x44]
cmp esi, eax
je 0x1019a704
push 0x105
movzx eax, ax
push eax
push dword [edi]
call fcn.1016e2b9
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x40], eax
test eax, eax
je 0x1019a704
push eax
push dword [edi]
call fcn.1016e2b9
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x1019a704
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x1019a704
push dword [ebp - 0x40]
push dword [edi]
call fcn.1016e2b9
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
test edi, edi
je 0x1019a704
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x28]
and dword [ebp - 0x28], 0
push edx
push eax
mov ecx, dword [eax]
mov byte [ebp - 4], 7
call dword [ecx + 0x38]
test eax, eax
js 0x1019a6e5
mov eax, dword [ebp - 0x28]
test eax, eax
je 0x1019a6e5
mov ecx, dword [eax]
push edi
push esi
push eax
call dword [ecx + 0x40]
test eax, eax
jns 0x1019a5d8
push 0x25d204
jmp 0x1019a6ea
mov eax, dword [ebp - 0x2c]
lea edx, [ebp - 0x38]
and dword [ebp - 0x38], 0
push edx
push ebx
mov ecx, dword [eax]
push 0
push dword [ebp - 0x28]
mov byte [ebp - 4], 8
push eax
call dword [ecx + 0x10]
test eax, eax
js 0x1019a65b
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x1019a65e
and dword [ebp - 0x24], 0
lea edx, [ebp - 0x24]
mov eax, dword [ecx]
push edx
push 0
push ecx
mov byte [ebp - 4], 9
call dword [eax + 0x34]
test eax, eax
js 0x1019a646
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x10]
test eax, eax
js 0x1019a646
and dword [ebp - 0x34], 0
lea eax, [ebp - 0x34]
push eax
push 0x1039739c
push dword [ebp - 0x24]
call fcn.10034466
cmp dword [ebp - 0x34], 0
jne 0x1019a676
and dword [ebp - 0x34], 0
mov ecx, dword [ebp - 0x24]
and dword [ebp - 0x24], 0
mov byte [ebp - 4], 8
test ecx, ecx
je 0x1019a65b
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x38]
and dword [ebp - 0x38], 0
mov byte [ebp - 4], 7
test ecx, ecx
je 0x1019a6ef
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
jmp 0x1019a6ef
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x34]
push eax
call fcn.10200563
mov ecx, dword [ebp - 0x34]
and dword [ebp - 0x34], 0
test ecx, ecx
je 0x1019a693
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x24]
and dword [ebp - 0x24], 0
mov byte [ebp - 4], 8
test ecx, ecx
je 0x1019a6a8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x38]
and dword [ebp - 0x38], 0
mov byte [ebp - 4], 7
test ecx, ecx
je 0x1019a6bd
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x28]
and dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
test ecx, ecx
je 0x1019a6d2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [ebp - 0x2c]
and dword [ebp - 0x2c], 0
test ecx, ecx
je 0x1019a706
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
jmp 0x1019a706
push 0x25d203
call fcn.10153dc1
mov ecx, dword [ebp - 0x28]
and dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
test ecx, ecx
je 0x1019a704
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
xor bl, bl
mov ecx, dword [ebp - 0x3c]
and dword [ebp - 0x3c], 0
mov byte [ebp - 4], 0
test ecx, ecx
je 0x1019a71b
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x2c]
or dword [ebp - 4], 0xffffffff
and dword [ebp - 0x2c], 0
test eax, eax
je 0x1019a730
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov al, bl
jmp 0x1019a736
xor al, al
call fcn.102790cd
ret 0x10