Function at 0x100007910
Capabilities:
Check mutex on windows
Extract resource via kernel32 functions

Disassembly:
mov r11, rsp
sub rsp, 0x178
mov rax, qword [0x100011410]
mov qword [rsp + 0x140], rax
mov qword [r11 + 0x20], rbx
mov qword [r11 - 8], rbp
mov qword [r11 - 0x10], rsi
mov qword [r11 - 0x18], rdi
mov rbp, rcx
mov qword [0x100012bc0], rcx
mov qword [r11 - 0x20], r12
mov r12, rdx
lea rcx, [0x1000122a0]
xor edx, edx
mov r8d, 0x910
xor ebx, ebx
call sub.msvcrt.dll_memset
lea rcx, [0x1000130e0]
xor edx, edx
mov r8d, 0x32c
call sub.msvcrt.dll_memset
lea rcx, [0x100012180]
xor edx, edx
mov r8d, 0x104
call sub.msvcrt.dll_memset
lea r8d, [rbx + 0xa]
lea rdx, [0x100001754]
xor ecx, ecx
mov dword [0x100012558], 1
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
cmp eax, 0x7f
mov edi, eax
ja 0x100007a0d
test eax, eax
je 0x100007d20
lea r8d, [rbx + 0xa]
lea rdx, [0x100001754]
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
test rax, rax
mov rsi, rax
je 0x100007d20
lea rcx, [0x1000122b8]
mov r8, rdi
mov rdx, rax
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test edi, edi
je 0x100007d20
cmp edi, 0x80
ja 0x100007d20
mov edx, 1
xor r9d, r9d
xor ecx, ecx
mov r8d, edx
call qword [sym.imp.KERNEL32.dll_CreateEventA]
mov rcx, rax
mov qword [0x100011bd0], rax
call qword [sym.imp.KERNEL32.dll_SetEvent]
lea rdx, [0x100001748]
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
cmp eax, 4
mov edi, eax
ja 0x100007ac3
test eax, eax
je 0x100007b58
lea rdx, [0x100001748]
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
test rax, rax
mov rsi, rax
je 0x100007b58
lea rcx, [0x100012ba4]
mov r8, rdi
mov rdx, rax
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test edi, edi
je 0x100007b58
mov eax, dword [0x100012ba4]
test al, 0x40
jne 0x100007add
test al, al
jns 0x100007c28
lea rdx, [0x100001738]
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_SizeofResource]
cmp eax, 0x104
mov edi, eax
ja 0x100007b54
test eax, eax
je 0x100007b58
lea rdx, [0x100001738]
mov r8d, 0xa
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_FindResourceA]
xor ecx, ecx
mov rdx, rax
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rcx, rax
call qword [sym.imp.KERNEL32.dll_LockResource]
test rax, rax
mov rsi, rax
je 0x100007b58
lea rcx, [rsp + 0x30]
mov r8, rdi
mov rdx, rax
call sub.msvcrt.dll_memcpy
mov rcx, rsi
call qword [sym.imp.KERNEL32.dll_FreeResource]
test edi, edi
jne 0x100007b85
xor r9d, r9d
xor r8d, r8d
mov edx, 0x4b1
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x10
call fcn.100005260
mov dword [0x100012170], 0x80070714
jmp 0x100007d3e
lea r8, [rsp + 0x30]
mov edx, 1
xor ecx, ecx
call qword [sym.imp.KERNEL32.dll_CreateMutexA]
test rax, rax
mov qword [0x100011bd8], rax
je 0x100007c28
call qword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
jne 0x100007c28
test byte [0x100012ba4], 0x80
je 0x100007be1
lea r8, [0x1000122b8]
xor r9d, r9d
mov edx, 0x54b
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x10
call fcn.100005260
jmp 0x100007c0c
lea r8, [0x1000122b8]
xor r9d, r9d
mov edx, 0x524
xor ecx, ecx
mov dword [rsp + 0x28], 4
mov dword [rsp + 0x20], 0x20
call fcn.100005260
cmp eax, 6
je 0x100007c28
mov rcx, qword [0x100011bd8]
call qword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [0x100012170], 0x800700b7
jmp 0x100007d3e
mov rcx, r12
mov dword [0x100012174], ebx
call fcn.100004590
test eax, eax
jne 0x100007c44
mov edx, 0x520
jmp 0x100007d25
cmp byte [0x1000130fa], bl
je 0x100007c5d
lea rcx, [0x1000130fa]
call fcn.1000037b0
jmp 0x100007d3e
lea rdx, [0x100001728]
mov r8d, 0xa
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_FindResourceA]
test rax, rax
je 0x100007c87
mov rdx, rax
mov rcx, rbp
call qword [sym.imp.KERNEL32.dll_LoadResource]
mov rbx, rax
cmp dword [0x100011400], 0
je 0x100007c96
call qword [sym.imp.COMCTL32.dll_InitCommonControls]
cmp dword [0x1000130e4], 0
jne 0x100007d19
mov rcx, rbx
call fcn.100006490
test eax, eax
je 0x100007d3e
movzx eax, word [0x100012178]
cmp ax, 1
je 0x100007cc8
cmp ax, 2
je 0x100007cc8
cmp ax, 3
jne 0x100007d19
bt dword [0x100012ba4], 8
jae 0x100007d19
test byte [0x1000130f8], 1
jne 0x100007d19
call fcn.100001a90
test eax, eax
jne 0x100007d19
mov rcx, qword [0x100012bc0]
lea r9, [0x100001c90]
xor r8d, r8d
mov edx, 0x7d6
mov qword [rsp + 0x28], 0x83e
mov qword [rsp + 0x20], 0x547
call fcn.1000063a0
cmp rax, 0x83d
jne 0x100007d3e
mov eax, 1
jmp 0x100007d40
mov edx, 0x4b1
xor r9d, r9d
xor r8d, r8d
xor ecx, ecx
mov dword [rsp + 0x28], ebx
mov dword [rsp + 0x20], 0x10
call fcn.100005260
xor eax, eax
mov r12, qword [rsp + 0x158]
mov rdi, qword [rsp + 0x160]
mov rsi, qword [rsp + 0x168]
mov rbp, qword [rsp + 0x170]
mov rbx, qword [rsp + 0x198]
mov rcx, qword [rsp + 0x140]
call fcn.10000ea20
add rsp, 0x178
ret