Function at 0x1000e604
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x154
mov eax, 0x101c8624
call fcn.10096dff
mov dword [ebp - 0x128], ecx
mov esi, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
push 0x3c8
xor edi, edi
push edi
push ebx
call fcn.10096e70
add esp, 0xc
mov dword [ebp - 0x130], 1
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x138], edi
mov dword [ebp - 4], edi
mov eax, dword [ebp - 0x128]
cmp dword [eax + 4], edi
je 0x1000e660
push 2
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
jmp 0x1000e6c1
mov byte [ebp - 0x118], 0
push 0x103
push edi
lea eax, [ebp - 0x117]
push eax
call fcn.10096e70
push 0x104
lea eax, [ebp - 0x118]
push eax
push 0xffffffffffffffff
push esi
call fcn.1001c1d1
add esp, 0x1c
test eax, eax
jne 0x1000e6b1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x158], eax
push 0x10221774
lea eax, [ebp - 0x158]
push eax
call fcn.10099017
push 2
push edi
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov dword [ebp - 0x120], eax
cmp eax, edi
jne 0x1000e6e4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x13c], eax
push 0x10221774
lea eax, [ebp - 0x13c]
jmp 0x1000e6ab
mov dword [ebp - 0x134], edi
lea eax, [ebp - 0x134]
push eax
push 0x1000dc50
push 1
push 0x10
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesW]
push dword [ebp - 0x134]
push 1
push 0x10
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
mov esi, eax
cmp esi, edi
jne 0x1000e760
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x714
je 0x1000e74c
cmp eax, 0x715
je 0x1000e74c
mov dword [ebp - 0x144], eax
push 0x10221774
lea eax, [ebp - 0x144]
jmp 0x1000e6ab
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xor eax, eax
inc eax
jmp 0x1000eaca
push esi
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x124], eax
push esi
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, edi
jne 0x1000e7a0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x154], eax
push 0x10221774
lea eax, [ebp - 0x154]
jmp 0x1000e6ab
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
cmp esi, edi
jne 0x1000e7c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x14c], eax
push 0x10221774
lea eax, [ebp - 0x14c]
jmp 0x1000e6ab
mov eax, dword [ebp - 0x124]
lea edi, [esi + eax]
mov dword [ebp - 0x11c], edi
push edi
mov eax, esi
call fcn.1000dcfc
test eax, eax
jne 0x1000e7fb
or dword [ebp - 0x15c], 0xffffffff
push 0x10221764
lea eax, [ebp - 0x15c]
jmp 0x1000e6ab
push edi
mov eax, esi
call fcn.1000dcbe
push 0xc
pop ecx
cmp cx, word [esi + 2]
ja 0x1000e811
mov ecx, dword [eax + 8]
mov dword [ebx], ecx
push 0x10
pop ecx
cmp cx, word [esi + 2]
ja 0x1000e820
mov eax, dword [eax + 0xc]
mov dword [ebx + 4], eax
push edi
call fcn.1000dce0
mov esi, eax
push edi
mov ecx, esi
call fcn.1000dd62
test eax, eax
jne 0x1000e84b
or dword [ebp - 0x140], 0xffffffff
push 0x10221764
lea eax, [ebp - 0x140]
jmp 0x1000e6ab
push 0x101e5470
mov eax, esi
call fcn.1000dd3c
push eax
call fcn.10097619
pop ecx
pop ecx
test eax, eax
jne 0x1000ea96
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000dd40
mov edi, eax
push dword [ebp - 0x11c]
mov ecx, edi
call fcn.1000ddc6
test eax, eax
jne 0x1000e89e
or dword [ebp - 0x148], 0xffffffff
push 0x10221764
lea eax, [ebp - 0x148]
jmp 0x1000e6ab
push dword [ebp - 0x11c]
mov eax, edi
call fcn.1000dda4
mov esi, eax
push dword [ebp - 0x11c]
mov ecx, esi
call fcn.1000de56
test eax, eax
jne 0x1000e8d5
or dword [ebp - 0x150], 0xffffffff
push 0x10221764
lea eax, [ebp - 0x150]
jmp 0x1000e6ab
movzx eax, word [edi]
mov dword [ebp - 0x12c], eax
cmp dword [ebp - 0x12c], 0
jle 0x1000ea96
push dword [ebp - 0x11c]
mov ecx, esi
call fcn.1000de56
test eax, eax
je 0x1000ea96
push dword [ebp - 0x11c]
call fcn.1000de2a
movzx edi, ax
mov eax, esi
call fcn.1000de04
mov dword [ebp - 0x124], eax
push 0x101e5458
push eax
call fcn.10097619
pop ecx
pop ecx
test eax, eax
jne 0x1000e952
test edi, edi
jbe 0x1000e952
cmp edi, 0x50
jb 0x1000e938
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000de08
push eax
lea eax, [ebx + 0x288]
jmp 0x1000ea70
push 0x101e5438
push dword [ebp - 0x124]
call fcn.10097619
pop ecx
pop ecx
test eax, eax
jne 0x1000e98b
test edi, edi
jbe 0x1000e98b
cmp edi, 0x50
jb 0x1000e974
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000de08
push eax
lea eax, [ebx + 8]
jmp 0x1000ea70
push 0x101e541c
push dword [ebp - 0x124]
call fcn.10097619
pop ecx
pop ecx
test eax, eax
jne 0x1000e9c7
test edi, edi
jbe 0x1000e9c7
cmp edi, 0x50
jb 0x1000e9ad
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000de08
push eax
lea eax, [ebx + 0x148]
jmp 0x1000ea70
push 0x101e53fc
push dword [ebp - 0x124]
call fcn.10097619
pop ecx
pop ecx
test eax, eax
jne 0x1000ea00
test edi, edi
jbe 0x1000ea00
cmp edi, 0x50
jb 0x1000e9e9
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000de08
push eax
lea eax, [ebx + 0x328]
jmp 0x1000ea70
push 0x101e53d8
push dword [ebp - 0x124]
call fcn.10097619
pop ecx
pop ecx
test eax, eax
jne 0x1000ea39
test edi, edi
jbe 0x1000ea39
cmp edi, 0x50
jb 0x1000ea22
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000de08
push eax
lea eax, [ebx + 0xa8]
jmp 0x1000ea70
push 0x101e53c0
push dword [ebp - 0x124]
call fcn.10097619
pop ecx
pop ecx
test eax, eax
jne 0x1000ea79
test edi, edi
jbe 0x1000ea79
cmp edi, 0x50
jb 0x1000ea5b
push 0x4f
pop edi
push edi
push dword [ebp - 0x11c]
mov eax, esi
call fcn.1000de08
push eax
lea eax, [ebx + 0x1e8]
push eax
call fcn.1009740c
add esp, 0xc
movzx eax, word [esi]
add eax, 3
and eax, 0xfffffffc
sub dword [ebp - 0x12c], eax
mov eax, esi
call fcn.1000de4b
mov esi, eax
jmp 0x1000e8de
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x138], 0
je 0x1000eaaf
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_FreeResource]
cmp dword [ebp - 0x120], 0
je 0x1000eac4
push dword [ebp - 0x120]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x130]
call fcn.10096e5b
ret 8