Function at 0x1001e260
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov dword [ebp - 0x18], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x20], 0xa
mov dword [ebp - 0x1c], 3
mov eax, dword [0x10050b6c]
push eax
push str.GetResData__:_g_CoreData.dwVirtualMachineFlag_u
call fcn.10018570
add esp, 8
mov dword [ebp - 0x10], 0
jmp 0x1001e2ca
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
cmp dword [ebp - 0x10], 2
jae 0x1001e30b
push 0x32
push 0x1e
push 0x10050d7c
call fcn.1001bc80
add esp, 0xc
imul eax, dword [0x10050b6c]
mov edx, dword [ebp - 0x10]
add eax, dword [ebp + edx*4 - 0x20]
push eax
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
je 0x1001e309
jmp 0x1001e30b
jmp 0x1001e2c1
cmp dword [ebp - 0x18], 0
jne 0x1001e343
mov edx, dword [ebp + 8]
push edx
mov eax, dword [ebp + 0xc]
push eax
push str.GetResData__:_FindResource___failed_res_id_s_hMod_p
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call main
add esp, 0x10
cmp dword [ebp + 0x1c], 0
je 0x1001e33c
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], 0xffffffff
xor eax, eax
jmp 0x1001e50e
mov edx, dword [ebp - 0x18]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 8], eax
mov ecx, dword [ebp + 8]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.GetResData__:_resource_size_d_hMod_p
call fcn.10018570
add esp, 0xc
mov eax, dword [ebp - 0x18]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
jne 0x1001e3ae
mov edx, dword [ebp - 8]
push edx
push str.GetResData__:_LoadResource___failed_file_size_u
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call main
add esp, 0xc
cmp dword [ebp + 0x1c], 0
je 0x1001e3a7
mov eax, dword [ebp + 0x1c]
mov dword [eax], 0xfffffffe
xor eax, eax
jmp 0x1001e50e
mov ecx, dword [ebp + 0x14]
and ecx, 1
je 0x1001e49f
mov edx, dword [ebp + 0x14]
and edx, 2
neg edx
sbb edx, edx
and edx, 4
push edx
mov eax, dword [ebp + 0x18]
push eax
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0xc]
push edx
call fcn.1001d6c0
add esp, 0x10
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x1001e410
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push str.GetResData__:_cannot_decrypt_resourse__s_file_size_u
push 0
call main
add esp, 0x10
cmp dword [ebp + 0x1c], 0
je 0x1001e40b
mov edx, dword [ebp + 0x1c]
mov dword [edx], 0xfffffffd
jmp 0x1001e4f8
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax + 0x428]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
push edx
push str.GetResData__:_file_size_u__decrypted_and_decompressed_
call fcn.10018570
add esp, 8
mov eax, dword [ebp - 8]
add eax, 1
push eax
call fcn.10019ae0
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x1001e475
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp - 8]
push edx
push str.GetResData__:_mem_alloc____u_bytes_failed__s
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call main
add esp, 0x10
cmp dword [ebp + 0x1c], 0
je 0x1001e470
mov eax, dword [ebp + 0x1c]
mov dword [eax], 0xfffffffc
jmp 0x1001e4f8
mov ecx, dword [ebp - 8]
push ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [edx + 0x424]
push eax
mov ecx, dword [ebp - 4]
push ecx
call fcn.10019c40
add esp, 0xc
push 0
lea edx, [ebp - 0x24]
push edx
call fcn.1001dd40
add esp, 8
jmp 0x1001e4e5
mov eax, dword [ebp - 8]
push eax
mov ecx, dword [ebp - 0xc]
push ecx
call fcn.10019b80
add esp, 8
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x1001e4e5
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp - 8]
push eax
push str.GetResData__:_mem_dup____u_bytes_failed__s
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call main
add esp, 0x10
cmp dword [ebp + 0x1c], 0
je 0x1001e4e3
mov ecx, dword [ebp + 0x1c]
mov dword [ecx], 0xfffffffb
jmp 0x1001e4f8
cmp dword [ebp + 0x10], 0
je 0x1001e4f3
mov edx, dword [ebp + 0x10]
mov eax, dword [ebp - 8]
mov dword [edx], eax
mov eax, dword [ebp - 4]
jmp 0x1001e50e
cmp dword [ebp - 0x24], 0
je 0x1001e50c
push 0
lea ecx, [ebp - 0x24]
push ecx
call fcn.1001dd40
add esp, 8
xor eax, eax
mov esp, ebp
pop ebp
ret