Function at 0x10001653
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x10074a60
call fcn.1002fbac
sub esp, 0x70
mov ecx, dword [0x1009053c]
mov eax, dword [ecx]
push ebx
push esi
push edi
call dword [eax + 4]
mov ebx, eax
xor edi, edi
cmp ebx, edi
je 0x1000186a
mov al, byte [ebp - 0xd]
push edi
lea ecx, [ebp - 0x24]
mov byte [ebp - 0x24], al
call fcn.10001fb2
push ebx
call fcn.1002f5c0
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x24]
call fcn.100021e0
cmp dword [ebp - 0x20], edi
mov dword [ebp - 4], edi
je 0x100016af
lea ecx, [ebp - 0x24]
call fcn.10001f86
mov eax, dword [ebp - 0x20]
jmp 0x100016b4
mov eax, 0x100783c4
cmp byte [eax], 0x5f
jne 0x100016fd
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x34]
push 0x1008223c
push eax
call fcn.100030f4
add esp, 0xc
mov esi, eax
mov ecx, dword [0x1009053c]
mov eax, dword [ecx]
push ebx
mov byte [ebp - 4], 1
call dword [eax + 8]
push esi
mov ecx, 0x10090500
mov ebx, eax
call fcn.10001ccc
and byte [ebp - 4], 0
mov dword [eax], ebx
push 1
lea ecx, [ebp - 0x34]
jmp 0x10001845
cmp dword [ebp - 0x20], edi
je 0x1000170f
lea ecx, [ebp - 0x24]
call fcn.10001f86
mov eax, dword [ebp - 0x20]
jmp 0x10001714
mov eax, 0x100783c4
movsx eax, byte [eax]
push eax
call fcn.100300eb
test eax, eax
pop ecx
jne 0x10001758
push dword [0x100783c0]
lea eax, [ebp - 0x44]
push 1
push eax
lea ecx, [ebp - 0x24]
call fcn.10001b02
push dword [0x100783c0]
lea ecx, [ebp - 0x24]
push edi
push eax
mov byte [ebp - 4], 2
call fcn.10001e36
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0x44]
call fcn.10001fb2
xor esi, esi
cmp dword [ebp - 0x1c], edi
jbe 0x100017ea
cmp dword [ebp - 0x1c], esi
jb 0x1000177c
cmp dword [ebp - 0x20], edi
je 0x1000177c
lea ecx, [ebp - 0x24]
call fcn.10001f86
mov eax, dword [ebp - 0x20]
add eax, esi
jmp 0x10001781
mov eax, 0x100783c4
movsx eax, byte [eax]
push eax
call fcn.100300eb
test eax, eax
pop ecx
jne 0x100017b2
cmp dword [ebp - 0x1c], esi
jb 0x100017a8
cmp dword [ebp - 0x20], edi
je 0x100017a8
lea ecx, [ebp - 0x24]
call fcn.10001f86
mov eax, dword [ebp - 0x20]
add eax, esi
jmp 0x100017ad
mov eax, 0x100783c4
cmp byte [eax], 0x5f
jne 0x100017ba
inc esi
cmp dword [ebp - 0x1c], esi
ja 0x10001768
jmp 0x100017ea
push esi
push edi
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x24]
call fcn.10001b02
push dword [0x100783c0]
lea ecx, [ebp - 0x24]
push edi
push eax
mov byte [ebp - 4], 3
call fcn.10001e36
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0x54]
call fcn.10001fb2
lea eax, [ebp - 0x24]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.10022210
push eax
lea eax, [ebp - 0x68]
push 0x10082238
push eax
mov byte [ebp - 4], 4
call fcn.100030f4
add esp, 0x14
mov esi, eax
mov ecx, dword [0x1009053c]
mov eax, dword [ecx]
push ebx
mov byte [ebp - 4], 5
call dword [eax + 8]
push esi
mov ecx, 0x10090500
mov ebx, eax
call fcn.10001ccc
push 1
lea ecx, [ebp - 0x68]
mov dword [eax], ebx
mov byte [ebp - 4], 4
call fcn.10001fb2
and byte [ebp - 4], 0
push 1
lea ecx, [ebp - 0x78]
call fcn.10001fb2
or dword [ebp - 4], 0xffffffff
push 1
lea ecx, [ebp - 0x24]
call fcn.10001fb2
mov ecx, dword [0x1009053c]
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, eax
jmp 0x10001672
push 0xa
push 0x457
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
cmp esi, edi
jne 0x10001883
call fcn.100019de
push esi
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov esi, eax
cmp esi, edi
jne 0x10001896
call fcn.100019de
push esi
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp eax, edi
mov dword [ebp - 0x14], eax
jne 0x100018a9
call fcn.100019de
mov eax, dword [ebp - 0x14]
mov esi, dword [eax]
add dword [ebp - 0x14], 4
push esi
call fcn.100300b5
push esi
push dword [ebp - 0x14]
mov dword [0x10090538], eax
push eax
call fcn.1002fd80
add dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add dword [ebp - 0x14], 4
add esp, 0x10
cmp eax, edi
mov ebx, 0x10090520
jle 0x10001930
mov edi, eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.100019f7
pop ecx
pop ecx
mov eax, dword [0x10090538]
cmp dword [ebp - 0x6c], eax
mov dword [ebp - 4], 6
jl 0x10001908
add eax, esi
cmp dword [ebp - 0x6c], eax
jl 0x1000190d
call fcn.100019de
lea eax, [ebp - 0x7c]
push eax
mov ecx, ebx
call fcn.10001ccc
mov ecx, dword [ebp - 0x6c]
or dword [ebp - 4], 0xffffffff
mov dword [eax], ecx
push 1
lea ecx, [ebp - 0x7c]
call fcn.10001fb2
dec edi
jne 0x100018e1
xor edi, edi
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add dword [ebp - 0x14], 4
cmp eax, edi
jle 0x10001979
mov edi, eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x7c]
push eax
call fcn.100019f7
mov esi, dword [ebp - 0x6c]
lea eax, [ebp - 0x7c]
push eax
mov dword [ebp - 4], 7
call fcn.10001a7c
or dword [ebp - 4], 0xffffffff
add esp, 0xc
sub eax, esi
add dword [esi], eax
push 1
lea ecx, [ebp - 0x7c]
call fcn.10001fb2
dec edi
jne 0x1000193f
xor edi, edi
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add dword [ebp - 0x14], 4
cmp eax, edi
jle 0x100019be
mov edi, eax
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.100019f7
mov esi, dword [ebp - 0x48]
lea eax, [ebp - 0x58]
push eax
mov dword [ebp - 4], 8
call fcn.10001a7c
add dword [esi], eax
or dword [ebp - 4], 0xffffffff
add esp, 0xc
push 1
lea ecx, [ebp - 0x58]
call fcn.10001fb2
dec edi
jne 0x10001988
mov ecx, 0x10090500
call fcn.1000218b
mov ecx, ebx
call fcn.1000218b
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret