Function at 0x1006bdc0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10094e43
mov eax, dword fs:[0]
push eax
sub esp, 0xbc
mov eax, dword [0x100dc06c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x28]
call fcn.10035590
mov dword [ebp - 4], 0
push 0x100cec5c
lea ecx, [ebp - 0xb0]
call fcn.10035460
mov byte [ebp - 4], 1
lea eax, [ebp - 0xb0]
push eax
lea ecx, [ebp - 0x40]
call fcn.10028ed0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xb0]
call fcn.100219a0
push 0x2c
lea ecx, [ebp - 0x6c]
call fcn.10017350
lea ecx, [ebp - 0x6c]
call fcn.100330e0
mov byte [ebp - 4], 4
push 0
push str.D2SE_SETUP.ini
lea ecx, [ebp - 0xc8]
call fcn.1003cb70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xc8]
push ecx
call fcn.100299e0
add esp, 4
mov byte [ebp - 0x6d], al
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xc8]
call fcn.100173e0
movzx edx, byte [ebp - 0x6d]
test edx, edx
jne 0x1006bf8a
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [ebp - 0x80], eax
push 0x10
push 1
mov eax, dword [ebp - 0x80]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x7c], eax
cmp dword [ebp - 0x7c], 0
jne 0x1006beda
mov byte [ebp - 0x6e], 4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.10028e60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.10028f00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.100219a0
mov al, byte [ebp - 0x6e]
jmp 0x1006c0e4
mov ecx, dword [ebp - 0x7c]
push ecx
mov edx, dword [ebp - 0x80]
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0
jne 0x1006bf24
mov byte [ebp - 0x6f], 4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.10028e60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.10028f00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.100219a0
mov al, byte [ebp - 0x6f]
jmp 0x1006c0e4
mov eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 0x84]
push ecx
call fcn.1006bca0
add esp, 4
mov byte [ebp - 0x70], al
mov edx, dword [ebp - 0x78]
push edx
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov al, byte [ebp - 0x70]
mov byte [ebp - 0x71], al
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.10028e60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.10028f00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.100219a0
mov al, byte [ebp - 0x71]
jmp 0x1006c0e4
lea ecx, [ebp - 0x6c]
push ecx
lea ecx, [ebp - 0x40]
call fcn.10028f20
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x94], esp
push str.Protected
call fcn.10035460
lea ecx, [ebp - 0x6c]
call fcn.10032fd0
mov dword [ebp - 0x88], eax
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x8c], edx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x98], esp
push str.D2Core
call fcn.10035460
mov ecx, dword [ebp - 0x8c]
call fcn.10032e80
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x90]
push eax
lea ecx, [ebp - 0x28]
call fcn.10035310
push str.1.10f
lea ecx, [ebp - 0x28]
push ecx
call fcn.1006cd40
add esp, 8
movzx edx, al
test edx, edx
je 0x1006c045
mov byte [ebp - 0x72], 0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.10028e60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.10028f00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.100219a0
mov al, byte [ebp - 0x72]
jmp 0x1006c0e4
push str.1.13c
lea eax, [ebp - 0x28]
push eax
call fcn.1006cd40
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x1006c08d
mov byte [ebp - 0x73], 1
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.10028e60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.10028f00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.100219a0
mov al, byte [ebp - 0x73]
jmp 0x1006c0e4
mov byte [ebp - 0x74], 4
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x6c]
call fcn.10028e60
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.10028f00
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.100219a0
mov al, byte [ebp - 0x74]
jmp 0x1006c0e4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006f1fb
mov esp, ebp
pop ebp
ret