Function at 0x1003b350
Capabilities:
Check if file exists
Extract resource via kernel32 functions
Get file attributes
Read file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003e348
mov eax, dword fs:[0]
push eax
sub esp, 0x45c
mov eax, dword [0x1006e024]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov byte [ebp - 0x459], cl
push 0x10044c6c
push 0x10044c74
push dword [0x10078ef8]
mov dword [ebp - 0x460], 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
test edi, edi
je 0x1003b3f7
push edi
push dword [0x10078ef8]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push edi
push dword [0x10078ef8]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, 0x400
cmp edi, esi
cmovb esi, edi
push esi
push eax
lea eax, [ebp - 0x410]
mov dword [ebp - 0x460], esi
push eax
call fcn.10012fe0
add esp, 0xc
jmp 0x1003b616
or esi, 0xffffffff
mov dword [ebp - 0x468], esi
lea ecx, [ebp - 0x440]
mov dword [ebp - 4], 0
call fcn.1003d680
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x428]
push 4
xor eax, eax
mov dword [ebp - 0x414], 7
push 0x10044c88
mov dword [ebp - 0x418], 0
mov word [ebp - 0x428], ax
call fcn.10001920
sub esp, 8
mov byte [ebp - 4], 2
lea eax, [ebp - 0x464]
mov dword [ebp - 0x464], 0x2e
lea ecx, [ebp - 0x440]
push eax
call fcn.100030a0
push esi
push 0
lea ecx, [ebp - 0x428]
push ecx
push esi
push eax
lea ecx, [ebp - 0x440]
call fcn.10002820
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x414]
cmp eax, 8
jb 0x1003b49b
inc eax
push eax
push dword [ebp - 0x428]
call fcn.100011f0
cmp dword [ebp - 0x42c], 8
lea eax, [ebp - 0x440]
cmovae eax, dword [ebp - 0x440]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x1003b7a1
test al, 0x10
jne 0x1003b7a1
xor eax, eax
mov dword [ebp - 0x414], 7
push 0xffffffffffffffff
push eax
mov word [ebp - 0x428], ax
lea ecx, [ebp - 0x428]
lea eax, [ebp - 0x440]
mov dword [ebp - 0x418], 0
push eax
call fcn.10001a20
cmp dword [ebp - 0x414], 8
lea eax, [ebp - 0x428]
push 0
cmovae eax, dword [ebp - 0x428]
push 0x80
push 3
push 0
push 1
push SysReAllocStringLen
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov dword [ebp - 0x468], esi
cmp esi, 0xffffffff
jne 0x1003b583
call edi
mov edi, eax
test edi, edi
jle 0x1003b54a
movzx edi, di
or edi, 0x80070000
mov eax, dword [ebp - 0x414]
cmp eax, 8
jb 0x1003b562
inc eax
push eax
push dword [ebp - 0x428]
call fcn.100011f0
test edi, edi
jns 0x1003b59d
cmp byte [ebp - 0x459], 0
je 0x1003b7c4
mov edx, 0x98
push edi
push 0x76
lea ecx, [edx - 1]
jmp 0x1003b7bc
mov eax, dword [ebp - 0x414]
cmp eax, 8
jb 0x1003b5a3
inc eax
push eax
push dword [ebp - 0x428]
call fcn.100011f0
jmp 0x1003b5a3
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
lea eax, [ebp - 0x460]
push eax
push 0x400
lea eax, [ebp - 0x410]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x1003b5f2
call edi
test eax, eax
jle 0x1003b5d3
movzx eax, ax
or eax, 0x80070000
test eax, eax
jns 0x1003b5f2
cmp byte [ebp - 0x459], 0
je 0x1003b7c4
mov edx, 0x98
push eax
push 0x76
lea ecx, [edx - 1]
jmp 0x1003b7bc
lea ecx, [ebp - 0x440]
call fcn.10001090
mov dword [ebp - 4], 0xffffffff
cmp esi, 0xffffffff
je 0x1003b610
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x460]
cmp esi, 3
jb 0x1003b6d9
mov al, byte [ebp - 0x410]
cmp al, 0xef
je 0x1003b6d9
cmp al, 0xff
jne 0x1003b63a
cmp byte [ebp - 0x40f], 0xfe
jmp 0x1003b649
cmp al, 0xfe
jne 0x1003b6d9
cmp byte [ebp - 0x40f], 0xff
jne 0x1003b6d9
xor eax, eax
mov dword [ebp - 0x414], 7
mov word [ebp - 0x428], ax
lea ecx, [ebp - 0x428]
push esi
lea eax, [ebp - 0x410]
mov dword [ebp - 0x418], 0
push eax
call fcn.10001920
lea eax, [ebp - 0x428]
cmp ebx, eax
je 0x1003b6c7
mov eax, dword [ebx + 0x14]
cmp eax, 8
jb 0x1003b69a
inc eax
push eax
push dword [ebx]
call fcn.100011f0
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x1003b6b2
mov eax, dword [ebx]
jmp 0x1003b6b4
mov eax, ebx
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x428]
push eax
mov ecx, ebx
call fcn.10001b40
lea ecx, [ebp - 0x428]
call fcn.10001090
xor eax, eax
jmp 0x1003b80a
push esi
lea eax, [ebp - 0x410]
mov dword [ebp - 0x444], 0xf
push eax
lea ecx, [ebp - 0x458]
mov dword [ebp - 0x448], 0
mov byte [ebp - 0x458], 0
call fcn.10001bb0
lea edx, [ebp - 0x458]
mov dword [ebp - 4], 3
lea ecx, [ebp - 0x440]
call fcn.1003e040
mov esi, eax
cmp ebx, esi
je 0x1003b75d
mov eax, dword [ebx + 0x14]
cmp eax, 8
jb 0x1003b736
inc eax
push eax
push dword [ebx]
call fcn.100011f0
mov dword [ebx + 0x14], 7
cmp dword [ebx + 0x14], 8
mov dword [ebx + 0x10], 0
jb 0x1003b74e
mov eax, dword [ebx]
jmp 0x1003b750
mov eax, ebx
xor ecx, ecx
mov word [eax], cx
mov ecx, ebx
push esi
call fcn.10001b40
mov eax, dword [ebp - 0x42c]
cmp eax, 8
jb 0x1003b775
inc eax
push eax
push dword [ebp - 0x440]
call fcn.100011f0
xor eax, eax
mov dword [ebp - 0x42c], 7
lea ecx, [ebp - 0x458]
mov dword [ebp - 0x430], 0
mov word [ebp - 0x440], ax
call fcn.100010d0
xor eax, eax
jmp 0x1003b80a
cmp byte [ebp - 0x459], 0
je 0x1003b7c4
mov edx, 0x95
push 0x80004005
push 0x96
lea ecx, [edx - 1]
call fcn.1003c090
add esp, 8
mov eax, dword [ebp - 0x42c]
cmp eax, 8
jb 0x1003b7dc
inc eax
push eax
push dword [ebp - 0x440]
call fcn.100011f0
xor eax, eax
mov dword [ebp - 0x42c], 7
mov dword [ebp - 0x430], 0
mov word [ebp - 0x440], ax
cmp esi, 0xffffffff
je 0x1003b805
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x80004005
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10003475
mov esp, ebp
pop ebp
ret