Function at 0x10fe10b
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x28
mov eax, 0x11bc194
call fcn.010aa62e
or dword [ebp - 0x1c], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.010f4e48
xor edi, edi
mov dword [ebp - 4], edi
push 0x400
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 1
call fcn.01081fbb
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 0x14]
mov byte [ebp - 4], 2
push dword [ebp + 0xc]
push 1
call fcn.010f5a9e
mov esi, eax
cmp esi, edi
jl 0x10fe192
mov eax, dword [ebp - 0x20]
mov eax, dword [eax + 0xc]
push edi
push edi
push 2
push edi
push edi
push 0xc00c0000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x1c], eax
cmp eax, 0xffffffff
jne 0x10fe192
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, edi
mov ebx, 0xffff
mov edi, 0x80070000
jg 0x10fe18c
mov esi, eax
jmp 0x10fe19c
and eax, ebx
or eax, edi
jmp 0x10fe188
mov ebx, 0xffff
mov edi, 0x80070000
lea ecx, [ebp - 0x20]
call fcn.0107d6e4
and dword [ebp - 4], 0
jmp 0x10fe1e1
test esi, esi
jl 0x10fe62d
push 1
push dword [ebp - 0x1c]
call fcn.011aba80
mov esi, eax
test esi, esi
jge 0x10fe209
push 0x173
call fcn.010f17c2
pop ecx
jmp 0x10fe62d
push dword [ebp - 0x1c]
lea ecx, [ebp - 0x34]
call fcn.010f4e58
or dword [ebp - 0x1c], 0xffffffff
push 9
lea ecx, [ebp - 0x34]
call fcn.010f4f5c
mov esi, eax
test esi, esi
jl 0x10fe63c
push 0xa
push 0x12f
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x18], eax
cmp eax, esi
jne 0x10fe25a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, esi
jg 0x10fe254
mov esi, eax
jmp 0x10fe63c
and eax, ebx
or eax, edi
jmp 0x10fe24d
push dword [ebp - 0x18]
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x10fe243
push dword [ebp - 0x18]
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x10fe243
mov eax, dword [ebp + 8]
sub eax, esi
je 0x10fe302
dec eax
je 0x10fe2a3
dec eax
je 0x10fe4c9
mov esi, 0x80004005
jmp 0x10fe63c
push dword [ebp + 0x10]
lea eax, [ebp - 0x34]
push dword [ebp + 0xc]
push 0x101c378
push 0
push 0
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push eax
call fcn.010fdda0
mov esi, eax
test esi, esi
jge 0x10fe2d7
push 0x162
call fcn.010f17c2
pop ecx
jmp 0x10fe63c
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 0x101bdcc
push 0
push 0
push dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push dword [ebp - 0x14]
push eax
call fcn.010fdda0
mov esi, eax
test esi, esi
jge 0x10fe33a
push 0x163
jmp 0x10fe2cc
push dword [ebp + 0x10]
lea eax, [ebp - 0x34]
push dword [ebp + 0xc]
push 0x101c490
push 0
push 0
push dword [ebp - 0x18]
push dword [ebp - 0x14]
push eax
call fcn.010fdda0
mov esi, eax
test esi, esi
jge 0x10fe32d
push 0x161
jmp 0x10fe2cc
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push 0x101cadc
jmp 0x10fe2e2
push 0xa
push 0x130
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
jne 0x10fe35c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jmp 0x10fe24b
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x10fe34f
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x14]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x10fe34f
mov ecx, dword [ebp + 8]
sub ecx, 0
je 0x10fe39a
dec ecx
jne 0x10fe299
mov ecx, 0x101c39b
jmp 0x10fe39f
mov ecx, 0x101c4b3
push 0xffffffffffffffff
push 3
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ecx
push esi
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.010fdf6c
mov esi, eax
test esi, esi
jl 0x10fe63c
push 0xa
push 0x131
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
je 0x10fe34f
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x10fe34f
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x14]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x10fe34f
mov ecx, dword [ebp + 8]
sub ecx, 0
je 0x10fe41e
dec ecx
jne 0x10fe299
mov ecx, 0x101c3be
jmp 0x10fe423
mov ecx, 0x101c4d6
push 0xffffffffffffffff
push 5
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ecx
push esi
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.010fdf6c
mov esi, eax
test esi, esi
jl 0x10fe63c
push 0xa
push 0x133
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
je 0x10fe34f
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x10fe34f
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x14]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x10fe34f
mov ecx, dword [ebp + 8]
sub ecx, 0
je 0x10fe4a2
dec ecx
jne 0x10fe299
mov ecx, 0x101c3e1
jmp 0x10fe4a7
mov ecx, 0x101c4f9
push 1
push 5
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push ecx
push esi
push eax
lea eax, [ebp - 0x34]
push eax
call fcn.010fdf6c
mov esi, eax
test esi, esi
jl 0x10fe63c
xor esi, esi
push 0xa
push 0x132
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x18], eax
cmp eax, esi
je 0x10fe243
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x10fe243
push dword [ebp - 0x18]
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x14], eax
cmp eax, esi
je 0x10fe243
mov eax, dword [ebp + 8]
sub eax, esi
je 0x10fe535
dec eax
je 0x10fe52e
dec eax
jne 0x10fe299
mov eax, 0x101c634
jmp 0x10fe53a
mov eax, 0x101c404
jmp 0x10fe53a
mov eax, 0x101c51c
push 1
push 5
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push dword [ebp - 0x14]
push eax
call fcn.010fdf6c
mov esi, eax
test esi, esi
jl 0x10fe63c
mov eax, dword [ebp + 8]
sub eax, 0
je 0x10fe57e
dec eax
je 0x10fe577
dec eax
jne 0x10fe299
mov eax, 0x101c657
jmp 0x10fe583
mov eax, 0x101c427
jmp 0x10fe583
mov eax, 0x101c53f
push 1
push 3
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push dword [ebp - 0x14]
push eax
call fcn.010fdf6c
mov esi, eax
test esi, esi
jl 0x10fe63c
mov eax, dword [ebp + 8]
sub eax, 0
je 0x10fe5c7
dec eax
je 0x10fe5c0
dec eax
jne 0x10fe299
mov eax, 0x101c67a
jmp 0x10fe5cc
mov eax, 0x101c44a
jmp 0x10fe5cc
mov eax, 0x101c562
push 1
push 5
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push dword [ebp - 0x14]
push eax
call fcn.010fdf6c
mov esi, eax
test esi, esi
jl 0x10fe63c
mov eax, dword [ebp + 8]
sub eax, 0
je 0x10fe60c
dec eax
je 0x10fe605
dec eax
jne 0x10fe299
mov eax, 0x101c69d
jmp 0x10fe611
mov eax, 0x101c46d
jmp 0x10fe611
mov eax, 0x101c585
push 1
push 1
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push eax
push dword [ebp - 0x18]
lea eax, [ebp - 0x34]
push dword [ebp - 0x14]
push eax
call fcn.010fdf6c
mov esi, eax
cmp dword [ebp - 0x1c], 0xffffffff
je 0x10fe63c
push dword [ebp - 0x1c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x34]
call fcn.010f514f
test eax, eax
jge 0x10fe64e
test esi, esi
jl 0x10fe652
mov esi, eax
test esi, esi
jge 0x10fe65d
push dword [ebp + 0x14]
push dword [ebp + 0xc]
call fcn.010fcd97
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
call fcn.010f52d5
mov eax, esi
call fcn.010aa6e2
ret 0x10