Function at 0x100093a0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018883d
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x101f7004]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x30], 0x101cfc20
mov dword [ebp - 0x30], vtable.CVolObject.0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x30], vtable.CVolMem.0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x18], 0x40
mov dword [ebp - 4], 1
mov ecx, 0x102007a0
mov eax, dword [0x102007a0]
mov dword [ebp - 0x1c], 0
call dword [eax]
push 0xa
mov esi, eax
push 0x1f6
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x1000953c
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov ebx, eax
test ebx, ebx
je 0x1000953c
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
test edi, edi
je 0x10009535
push dword [ebp - 0x10]
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
mov dword [ebp - 0x1c], 0
cmp dword [ebp - 0x20], esi
jl 0x100094cd
cmp esi, 1
jne 0x10009492
mov eax, dword [ebp - 0x24]
mov cl, byte [edi]
mov byte [eax], cl
inc dword [ebp - 0x1c]
jmp 0x100094e5
cmp esi, 2
jne 0x100094a5
mov eax, dword [ebp - 0x24]
mov cx, word [edi]
mov word [eax], cx
add dword [ebp - 0x1c], esi
jmp 0x100094e5
cmp esi, 4
jne 0x100094b6
mov eax, dword [ebp - 0x24]
mov ecx, dword [edi]
mov dword [eax], ecx
add dword [ebp - 0x1c], esi
jmp 0x100094e5
cmp esi, 8
jne 0x100094cd
mov ecx, dword [ebp - 0x24]
mov eax, dword [edi]
mov dword [ecx], eax
mov eax, dword [edi + 4]
mov dword [ecx + 4], eax
add dword [ebp - 0x1c], esi
jmp 0x100094e5
test esi, esi
jle 0x100094e5
push esi
lea ecx, [ebp - 0x30]
call fcn.1001c800
push esi
push edi
push eax
call fcn.1016a0f0
add esp, 0xc
push ebx
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov eax, dword [ebp + 8]
mov esi, dword [eax + 0xc]
test esi, esi
jne 0x10009503
cmp dword [eax + 0x24], esi
mov esi, 0x101cd86c
je 0x10009503
mov esi, dword [eax + 0x1c]
mov eax, dword [ebp - 0x14]
mov edx, dword [eax + 0xc]
test edx, edx
jne 0x1000951a
cmp dword [eax + 0x24], edx
mov edx, 0x101cd86c
je 0x1000951a
mov edx, dword [eax + 0x1c]
mov eax, dword [ebp - 0x1c]
xor edi, edi
mov ecx, dword [ebp - 0x24]
test eax, eax
push esi
push edx
cmove ecx, edi
push eax
push ecx
call dword [sym.imp.XCGUI.dll_XImage_LoadZipMem]
mov esi, eax
jmp 0x1000953e
push ebx
call dword [sym.imp.KERNEL32.dll_FreeResource]
xor esi, esi
mov dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x30], vtable.CVolMem.0
mov dword [ebp - 4], 3
mov ecx, dword [ebp - 0x24]
test ecx, ecx
je 0x10009579
mov eax, dword [ebp - 0x30]
push ecx
mov eax, dword [eax + 0xc]
cmp eax, method.CWString.virtual_12
jne 0x10009574
mov ecx, 0x102007a8
call fcn.1001d170
jmp 0x10009579
lea ecx, [ebp - 0x30]
call eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
mov eax, esi
mov dword [ebp - 0x30], vtable.CVolObject.0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4