Function at 0x1000ea28
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x10058d1b
call fcn.100582b8
sub esp, 0x6c
mov dword [ebp - 0x30], ecx
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
test dl, dl
je 0x1000ece1
mov dword [ebp - 0x2c], 0x193e
cmp dword [ebp - 0x2c], 0x9ca
jge 0x1000ebdc
lea eax, [ebp - 0x18]
push eax
push 0x10062590
call fcn.10040302
mov eax, dword [ebp - 0x18]
pop ecx
pop ecx
inc eax
lea ecx, [ebp - 0x60]
push eax
call fcn.100116be
xor ebx, ebx
mov dword [ebp - 4], ebx
mov edi, ebx
cmp dword [ebp - 0x18], ebx
jle 0x1000eaa3
mov esi, dword [ebp - 0x60]
push esi
push 0x10062590
call fcn.10040302
cmp dword [esi], edi
pop ecx
cmovg edi, dword [esi]
inc ebx
add esi, 4
pop ecx
cmp ebx, dword [ebp - 0x18]
jl 0x1000ea86
xor ebx, ebx
lea eax, [ebp - 0x34]
mov dword [ebp - 0x34], ebx
push eax
lea esi, [edi + 1]
mov dword [ebp - 0x54], ebx
push esi
lea ecx, [ebp - 0x54]
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
call fcn.10011b85
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 1
push eax
push esi
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
call fcn.10011b85
mov esi, dword [ebp - 0x54]
push 2
pop eax
cmp edi, eax
jl 0x1000eaff
cmp dword [esi + eax*4], ebx
jne 0x1000eafa
mov ecx, eax
cmp eax, edi
jg 0x1000eafa
mov dword [esi + ecx*4], eax
add ecx, eax
cmp ecx, edi
jle 0x1000eaf1
inc eax
cmp eax, edi
jle 0x1000eae6
mov edi, dword [ebp - 0x48]
xor edx, edx
inc edx
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x18], 0
mov ecx, ebx
mov dword [ebp - 0x24], edx
jle 0x1000eb8a
mov eax, dword [ebp - 0x60]
mov eax, dword [eax + ecx*4]
mov ecx, ebx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], ecx
cmp eax, 1
jle 0x1000eb48
mov edx, dword [esi + eax*4]
mov dword [ebp - 0x20], edx
mov edx, dword [edi + edx*4]
cmp ecx, edx
jg 0x1000eb36
lea ecx, [edx + 1]
cdq
idiv dword [ebp - 0x20]
cmp eax, 1
jg 0x1000eb26
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
cmp ecx, edx
cmovg edx, ecx
mov dword [ebp - 0x24], edx
cmp eax, 1
jle 0x1000eb7e
mov edx, eax
shl edx, 2
mov dword [ebp - 0x1c], edx
cmp dword [edx + edi], ecx
jge 0x1000eb6d
mov ecx, dword [edx + esi]
mov edx, dword [ebp - 0x20]
mov dword [edi + ecx*4], edx
mov ecx, edx
mov ebx, dword [ebp - 0x1c]
cdq
idiv dword [ebx + esi]
cmp eax, 1
jg 0x1000eb55
mov edx, dword [ebp - 0x24]
xor ebx, ebx
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, dword [ebp - 0x18]
jl 0x1000eb13
push edx
push str._ld_n
call fcn.100400a6
pop ecx
pop ecx
test edi, edi
je 0x1000ebab
push edi
call fcn.10040217
pop ecx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
test esi, esi
je 0x1000ebbf
push esi
call fcn.10040217
pop ecx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], ebx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x1000ebde
push eax
call fcn.10040217
pop ecx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
jmp 0x1000ebde
xor ebx, ebx
mov dword [ebp - 0x2c], 0x52d7
cmp dword [ebp - 0x2c], 0x5316
jle 0x1000ec37
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
mov ecx, 0x10072ab8
cdq
push edx
push eax
call fcn.10001ac8
inc edi
cmp edi, 0x7360
jl 0x1000ebfa
inc esi
cmp esi, 0x345e
jl 0x1000ebf8
push 0x1208
push ebx
push 0x2417
push ebx
push 0x4c7
push ebx
call dword [sym.imp.KERNEL32.dll_CompareStringW]
cmp byte [ebp + 0x24], 0
je 0x1000ec6a
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar eax, 2
mov dword [esi], eax
jmp 0x1000ec61
lea eax, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
push eax
mov ecx, edi
call fcn.100114ba
inc dword [esi]
mov eax, dword [esi]
mov ecx, dword [ebp - 0x30]
cmp eax, dword [ecx]
jl 0x1000ec4f
jmp 0x1000eca3
mov esi, dword [ebp + 0x1c]
push 0x18
pop ecx
mov dword [ebp - 0x28], ebx
mov eax, dword [esi + 4]
sub eax, dword [esi]
cdq
idiv ecx
mov edi, eax
test edi, edi
je 0x1000eca3
push ecx
push ecx
push ebx
push dword [ebp + 0x18]
mov edx, 0x7e85
lea ecx, [ebp - 0x28]
push esi
call fcn.1000dfe6
mov eax, dword [ebp - 0x28]
add esp, 0x14
inc eax
mov dword [ebp - 0x28], eax
cmp eax, edi
jb 0x1000ec81
mov dword [ebp - 4], 2
cmp dword [ebp - 0x2c], 0x4f3e
jge 0x1000ecc2
mov edx, str.xdrax_zhzazj_vbb
mov ecx, 0x10072ab8
call fcn.1000350a
jmp 0x1000edb0
xor ebx, ebx
cmp byte [ebp + 0x14], bl
je 0x1000ed0f
mov esi, dword [ebp + 8]
mov dword [esi], ebx
jmp 0x1000ed06
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], bl
je 0x1000ed04
push ebx
push ebx
push 0x37c
call dword [sym.imp.KERNEL32.dll_GetModuleHandleExW]
dec dword [esi]
cmp dword [esi], ebx
jge 0x1000ecef
jmp 0x1000edb0
mov dword [ebp - 0x24], 0x1b6f
cmp dword [ebp - 0x24], 0x1ed3
jle 0x1000ed79
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x30], 0x5378
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x78]
or eax, edi
cdq
push edx
push eax
call fcn.10001a11
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000ed49
mov eax, dword [eax]
push eax
call fcn.100400a6
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x78]
call fcn.10001eb4
inc edi
cmp edi, 0x638f
jl 0x1000ed30
dec esi
dec dword [ebp - 0x30]
jne 0x1000ed2e
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x24e6
jl 0x1000ed24
cmp dword [ebp - 0x24], 0x1ae6
jge 0x1000ed8d
push str.dgx_rggrzaamy_dwffj_wqplmezoh_mjuahet_ojjeemk_axq_kmxay_tnvica_ctdlejj_lybznqb
call fcn.100400a6
pop ecx
mov eax, dword [ebp + 0x20]
cmp byte [eax], 0
je 0x1000edb0
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
push ebx
push 0x1d98
call dword [sym.imp.GDI32.dll_SetWinMetaFileBits]
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret