Function at 0x1003a182
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [0x100cea68]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, ecx
mov dword [ebp - 0x28], edx
xor ecx, ecx
mov byte [ebp - 9], cl
mov al, cl
push esi
push edi
mov edi, ecx
test ebx, ebx
je 0x1003a1b0
cmp dword [ebx + 4], ecx
jne 0x1003a1b0
mov al, 1
test edx, edx
je 0x1003a1bd
cmp dword [edx + 4], ecx
jne 0x1003a1bd
mov byte [ebp - 9], 1
test al, al
je 0x1003a33e
imul eax, dword [ebp + 8], 0x5c
push 0x10008e8c
mov dword [ebp - 0x24], eax
mov eax, dword [eax + 0x100d1a44]
movzx eax, ax
push eax
push dword [0x100d5398]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
jne 0x1003a1f7
mov eax, 0x80004005
jmp 0x1003a3a6
push esi
push dword [0x100d5398]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push dword [0x100d5398]
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x1003a2c3
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
push 2
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov esi, eax
mov dword [ebp - 0x1c], esi
test esi, esi
jne 0x1003a244
mov edi, 0x8007000e
jmp 0x1003a2b2
push esi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
jne 0x1003a254
mov edi, 0x8007000e
and dword [ebp - 0x10], 0
test edi, edi
js 0x1003a2a4
push dword [ebp - 0x14]
push dword [ebp - 0x18]
push eax
call sub.msvcrt.dll_memcpy
add esp, 0xc
lea eax, [ebp - 0x10]
push eax
push 0
push esi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov edi, eax
test edi, edi
js 0x1003a28a
push dword [ebp - 0x10]
mov ecx, ebx
call fcn.1003c5fa
mov edi, eax
mov ecx, dword [ebp - 0x10]
test ecx, ecx
je 0x1003a2a4
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x100d6738]
call esi
mov esi, dword [ebp - 0x1c]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push esi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_FreeResource]
test edi, edi
js 0x1003a3a4
cmp dword [ebx + 0x18], 0x20
jne 0x1003a2d2
mov ecx, ebx
call fcn.1003a890
mov edi, eax
test edi, edi
js 0x1003a3a4
mov ebx, dword [ebp - 0x24]
xor esi, esi
xor ecx, ecx
mov edx, dword [ebx + 0x100d1a54]
mov eax, dword [edx + 0xc]
mov edx, dword [ebx + 0x100d1a4c]
mov dword [ebx + 0x100d1a70], eax
xor eax, eax
inc eax
shl eax, cl
test edx, eax
je 0x1003a300
inc esi
inc ecx
cmp ecx, 0x20
jl 0x1003a2f6
mov edx, dword [ebx + 0x100d1a54]
test esi, esi
je 0x1003a31f
mov eax, dword [edx + 0x10]
xor edx, edx
div esi
mov dword [ebx + 0x100d1a74], eax
jmp 0x1003a324
mov edi, 0x80004005
test edi, edi
js 0x1003a3a4
and dword [ebx + 0x100d1a78], 0
lea eax, [ebx + 0x100d1a7c]
push eax
call dword [sym.imp.USER32.dll_SetRectEmpty]
xor ecx, ecx
imul esi, dword [ebp + 8], 0x5c
cmp dword [esi + 0x100d1a48], ecx
je 0x1003a3a4
cmp byte [ebp - 9], 0
je 0x1003a3a4
push 8
mov dword [ebp - 0x38], ecx
call dword [sym.imp.USER32.dll_GetSysColor]
push 0x11
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 0xffff
call dword [sym.imp.USER32.dll_GetSysColor]
push 2
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x38]
push eax
push 0
push dword [esi + 0x100d1a48]
push dword [0x100d5398]
call dword [sym.imp.COMCTL32.dll_CreateMappedBitmap]
test eax, eax
jne 0x1003a393
mov edi, 0x8007000e
test edi, edi
js 0x1003a3a4
mov ecx, dword [ebp - 0x28]
push 0
mov dword [ecx + 4], eax
call fcn.1003bf7c
mov eax, edi
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100c6890
mov esp, ebp
pop ebp
ret 4