Function at 0x100cf81
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3bc
mov eax, dword [0x101348c]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push 0x24
pop edi
mov dword [ebp - 0x30c], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x310], eax
mov eax, dword [ebp + 0x14]
xor esi, esi
push 0x20
pop edx
mov dword [ebp - 0x320], eax
xor eax, eax
inc eax
push 0x1c
pop ecx
mov word [ebp - 0x392], cx
mov word [ebp - 0x37a], cx
mov word [ebp - 0x36e], cx
mov word [ebp - 0x34a], cx
mov word [ebp - 0x332], cx
mov word [ebp - 0x326], cx
mov word [ebp - 0x3b6], di
mov word [ebp - 0x386], di
mov word [ebp - 0x356], di
mov word [ebp - 0x32c], di
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x384], eax
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x348], eax
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0x204]
rep stosd dword es:[edi], eax
mov word [ebp - 0x3bc], 0x304
mov word [ebp - 0x3ba], 0x34
mov word [ebp - 0x3b8], 4
mov dword [ebp - 0x3b4], esi
mov word [ebp - 0x3b0], 0x262
mov word [ebp - 0x3ae], si
mov word [ebp - 0x3ac], 0x60
mov word [ebp - 0x3aa], dx
mov dword [ebp - 0x3a8], esi
mov word [ebp - 0x3a4], 0x23e
mov word [ebp - 0x3a2], si
mov word [ebp - 0x3a0], 0x84
mov word [ebp - 0x39e], 0x14
mov dword [ebp - 0x39c], esi
mov word [ebp - 0x394], 0x9c
mov word [ebp - 0x388], 0xe8
mov word [ebp - 0x380], 0x32
mov word [ebp - 0x37e], 9
mov word [ebp - 0x37c], 0x128
mov dword [ebp - 0x378], esi
mov word [ebp - 0x370], 0x15c
mov word [ebp - 0x368], 0x80
mov word [ebp - 0x366], 0x2e
mov word [ebp - 0x364], 0x194
mov word [ebp - 0x362], dx
mov dword [ebp - 0x360], esi
mov word [ebp - 0x358], 0x214
mov word [ebp - 0x34c], 0x254
mov word [ebp - 0x344], 0x36
mov word [ebp - 0x342], 9
mov word [ebp - 0x340], 0x28c
mov word [ebp - 0x33e], dx
mov dword [ebp - 0x33c], esi
mov word [ebp - 0x338], 0x44
mov word [ebp - 0x336], si
mov word [ebp - 0x334], 0x2c4
mov dword [ebp - 0x330], esi
mov word [ebp - 0x32a], 4
mov word [ebp - 0x328], 0x2e4
mov dword [ebp - 0x324], esi
mov ecx, edx
lea edi, [ebp - 0x104]
rep stosd dword es:[edi], eax
mov ecx, edx
lea edi, [ebp - 0x304]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x204]
push eax
push dword [ebp - 0x310]
call fcn.0100cf5d
mov word [ebp - 0x396], ax
lea eax, [eax + eax + 0x20]
mov word [ebp - 0x398], ax
lea eax, [ebp - 0x104]
push eax
push ebx
call fcn.0100cf5d
mov word [ebp - 0x38a], ax
lea eax, [eax + eax + 0x28]
mov word [ebp - 0x38c], ax
lea eax, [ebp - 0x104]
push eax
push ebx
call fcn.0100cf5d
mov word [ebp - 0x372], ax
lea eax, [eax + eax + 0x20]
mov word [ebp - 0x374], ax
lea eax, [ebp - 0x304]
push eax
push dword [ebp - 0x30c]
call fcn.0100cf5d
mov word [ebp - 0x35a], ax
lea eax, [eax + eax + 0x28]
mov word [ebp - 0x35c], ax
lea eax, [ebp - 0x104]
push eax
push ebx
call fcn.0100cf5d
mov word [ebp - 0x34e], ax
push 0x400
lea eax, [eax + eax + 0x20]
mov word [ebp - 0x350], ax
call fcn.0100e9e7
mov ebx, eax
xor eax, eax
cmp ebx, esi
pop ecx
mov dword [ebp - 0x308], ebx
je 0x100d483
push 0xa
push 0x10017e0
mov ecx, 0x100
mov edi, ebx
push esi
rep stosd dword es:[edi], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, esi
je 0x100d281
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp eax, esi
mov dword [ebp - 0x30c], eax
jne 0x100d28f
push ebx
call fcn.0100e922
pop ecx
xor eax, eax
jmp 0x100d483
mov edx, dword [ebp - 0x308]
push 0x26
pop ecx
mov esi, eax
push 3
mov edi, edx
pop eax
mov ebx, 0x98
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x318], eax
mov edi, dword [ebp - 0x30c]
lea eax, [eax + eax*2]
shl eax, 2
mov cx, word [ebp + eax - 0x3bc]
movzx esi, word [ebp + eax - 0x3b8]
mov word [ebx + edx], cx
xor ecx, ecx
mov cx, word [ebp + eax - 0x3ba]
inc ebx
inc ebx
mov word [ebx + edx], cx
inc ebx
inc ebx
mov dword [ebp - 0x31c], esi
mov dword [ebp - 0x310], ecx
movzx ecx, word [ebp + eax - 0x3b6]
mov dword [ebp - 0x314], ecx
add esi, edi
lea edi, [ebx + edx]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
add ebx, edx
cmp dword [ebp + eax - 0x3b4], 0
rep movsb byte es:[edi], byte [esi]
je 0x100d3e1
mov eax, dword [ebp - 0x318]
sub eax, 3
je 0x100d3a3
dec eax
je 0x100d371
dec eax
dec eax
je 0x100d371
dec eax
dec eax
je 0x100d33f
dec eax
je 0x100d371
mov edx, dword [ebp - 0x308]
jmp 0x100d418
lea eax, [ebp - 0x304]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, eax
mov eax, dword [ebp - 0x308]
shl ecx, 1
lea edi, [ebx + eax]
mov eax, ecx
shr ecx, 2
lea esi, [ebp - 0x304]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
movzx eax, word [ebp - 0x35a]
jmp 0x100d3d3
lea eax, [ebp - 0x104]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, eax
mov eax, dword [ebp - 0x308]
shl ecx, 1
lea edi, [ebx + eax]
mov eax, ecx
shr ecx, 2
lea esi, [ebp - 0x104]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
movzx eax, word [ebp - 0x310]
jmp 0x100d3d3
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, eax
mov eax, dword [ebp - 0x308]
shl ecx, 1
lea edi, [ebx + eax]
mov eax, ecx
shr ecx, 2
lea esi, [ebp - 0x204]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
movzx eax, word [ebp - 0x396]
mov edx, dword [ebp - 0x308]
and ecx, 3
lea ebx, [ebx + eax*2]
jmp 0x100d416
movzx ecx, word [ebp - 0x310]
mov eax, dword [ebp - 0x31c]
shl ecx, 1
mov dword [ebp - 0x314], ecx
lea esi, [eax + edx]
add esi, dword [ebp - 0x30c]
mov edx, dword [ebp - 0x308]
mov eax, ecx
shr ecx, 2
lea edi, [ebx + edx]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
add ebx, eax
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x318]
mov ecx, ebx
neg ecx
and ecx, 3
add ebx, ecx
inc eax
cmp eax, 0xb
mov dword [ebp - 0x318], eax
jl 0x100d2ac
mov esi, dword [ebp - 0x30c]
mov eax, ebx
sub eax, ecx
lea ecx, [eax - 0x5c]
mov word [edx + 0x5c], cx
add eax, 0xffffff80
add esi, 0x2c0
mov word [edx + 0x80], ax
push 0x11
lea edi, [ebx + edx]
add ebx, 0x44
pop ecx
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x320]
mov ecx, ebx
mov eax, ecx
shr ecx, 2
mov word [edx], bx
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, 0x304
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0100dd00
leave
ret 0x10