Function at 0x10038679
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
push esi
mov esi, ecx
cmp dword [esi], 0
je 0x10038903
push ebx
push dword [esi]
xor ebx, ebx
push ebx
push dword [esi + 4]
call fcn.1004f25a
add esp, 0xc
push 5
pop eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x14], ebx
jmp 0x100386c1
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x4c], 0x67120dd9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x100386b3
push edi
push 3
mov dword [ebp - 0xc], ebx
pop edi
jmp 0x100387d8
mov dword [ebp - 0x14], ebx
jmp 0x100386e6
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 8], 0x8c66f5a9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x100386d8
mov dword [ebp - 8], edi
cmp dword [ebp - 8], ebx
jl 0x100387d2
mov dword [ebp - 0x10], 0xfffffffd
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], 1
mov dword [ebp - 0x10], ebx
jmp 0x100387c0
mov dword [ebp - 0x14], 0x7b844a75
mov dword [ebp - 0x14], ebx
jmp 0x100387a2
mov dword [ebp - 0x18], 1
xor ebx, ebx
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x44]
add ecx, 0x9ac5b813
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setg bl
xor edx, edx
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp ecx, eax
mov eax, dword [ebp - 0x10]
setle dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x3c]
cmp ebx, eax
setle cl
xor eax, eax
cmp edx, ecx
setge al
xor ebx, ebx
add eax, 0x193f
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x14], ebx
je 0x10038781
mov eax, dword [ebp - 0x10]
cmp dword [ebp + eax*4 - 0x3c], ebx
je 0x10038781
xor edi, edi
inc edi
jmp 0x10038783
mov edi, ebx
mov ecx, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp - 0x38]
cmp ecx, eax
push 3
setg dl
xor eax, eax
cmp edx, edi
pop edi
setge al
neg eax
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x10038720
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jle 0x10038711
dec dword [ebp - 8]
jns 0x100386f8
mov eax, dword [ebp - 8]
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], edi
jle 0x100386d3
mov dword [ebp - 0xc], 0xffffffe5
jmp 0x1003881d
mov dword [ebp - 0x14], 0xf0790389
mov dword [ebp - 0x14], ebx
jmp 0x10038815
mov eax, dword [ebp - 0x14]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x1003881a
mov byte [ebp - 1], bl
cmp byte [ebp - 1], 0
je 0x10038812
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_EnumResourceNamesW]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x100387f6
inc dword [ebp - 0xc]
cmp dword [ebp - 0xc], 0xb
je 0x100387ea
push dword [esi + 4]
call fcn.10064f0d
pop ecx
push 4
lea ecx, [ebp - 0x2c]
mov dword [esi + 4], ebx
call fcn.1000a8a0
mov dword [ebp - 0x10], 1
mov dword [ebp - 0x14], ebx
jmp 0x10038855
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x2c]
mov dword [eax + ecx*4], 7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10038845
mov dword [ebp - 0x10], edi
pop edi
cmp dword [ebp - 0x10], ebx
jl 0x100388f8
mov dword [ebp - 0x14], ebx
jmp 0x1003887b
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x20], 0x7928fbc7
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 2
jl 0x1003886d
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x10]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setne dl
xor ecx, ecx
cmp edx, dword [eax]
mov edx, 0xffff9e41
mov eax, dword [ebp - 0x10]
setge cl
xor ebx, ebx
sub edx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setne bl
xor ecx, ecx
cmp eax, 0x6efba1a4
setle cl
cmp ecx, ebx
jne 0x100388db
xor ebx, ebx
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100388ef
push 1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_EnableWindow]
jmp 0x100388ef
xor ebx, ebx
mov byte [ebp - 1], bl
cmp byte [ebp - 1], bl
je 0x100388ec
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov eax, dword [ebp - 0x10]
dec dword [ebp - 0x10]
jns 0x10038868
lea ecx, [ebp - 0x2c]
call fcn.1000a989
mov dword [esi], ebx
pop ebx
pop esi
mov esp, ebp
pop ebp
ret