Function at 0x1000a1f0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x4c
mov eax, dword [0x10290680]
xor eax, ebp
mov dword [ebp - 0xc], eax
lea eax, [0x1025db7a]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
sub esp, 4
mov dword [ebp - 0x14], eax
mov edx, dword [ebp - 0x14]
lea ecx, str.CONFIG
lea eax, [0x1025e12a]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
sub esp, 0xc
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0x48be62e6
lea eax, [ebp - 0x10]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
sub eax, 0x92b1c8d1
je 0x1000aac8
jmp 0x1000a266
mov eax, dword [ebp - 0x40]
sub eax, 0x95825b10
je 0x1000a43b
jmp 0x1000a279
mov eax, dword [ebp - 0x40]
sub eax, 0x9e3d68fb
je 0x1000aaba
jmp 0x1000a28c
mov eax, dword [ebp - 0x40]
sub eax, 0xa75b446b
je 0x1000aad6
jmp 0x1000a29f
mov eax, dword [ebp - 0x40]
sub eax, 0xb8d14a55
je 0x1000a7d7
jmp 0x1000a2b2
mov eax, dword [ebp - 0x40]
sub eax, 0xc089766f
je 0x1000a4d5
jmp 0x1000a2c5
mov eax, dword [ebp - 0x40]
sub eax, 0xc873a783
je 0x1000aa01
jmp 0x1000a2d8
mov eax, dword [ebp - 0x40]
sub eax, 0xd14e7c13
je 0x1000a5e5
jmp 0x1000a2eb
mov eax, dword [ebp - 0x40]
sub eax, 0xd4adc3be
je 0x1000a77e
jmp 0x1000a2fe
mov eax, dword [ebp - 0x40]
sub eax, 0xfda4b61a
je 0x1000a8ec
jmp 0x1000a311
mov eax, dword [ebp - 0x40]
sub eax, 0x6c03757
je 0x1000a831
jmp 0x1000a324
mov eax, dword [ebp - 0x40]
sub eax, 0xf5f5a85
je 0x1000aa64
jmp 0x1000a337
mov eax, dword [ebp - 0x40]
sub eax, 0x1273ab6d
je 0x1000a5ca
jmp 0x1000a34a
mov eax, dword [ebp - 0x40]
sub eax, 0x2b4ace8a
je 0x1000a89c
jmp 0x1000a35d
mov eax, dword [ebp - 0x40]
sub eax, 0x35088e06
je 0x1000a673
jmp 0x1000a370
mov eax, dword [ebp - 0x40]
sub eax, 0x350b42de
je 0x1000a8fa
jmp 0x1000a383
mov eax, dword [ebp - 0x40]
sub eax, 0x3ec42497
je 0x1000a9f3
jmp 0x1000a396
mov eax, dword [ebp - 0x40]
sub eax, 0x48be62e6
je 0x1000a420
jmp 0x1000a3a9
mov eax, dword [ebp - 0x40]
sub eax, 0x5c968689
je 0x1000a74a
jmp 0x1000a3bc
mov eax, dword [ebp - 0x40]
sub eax, 0x71cf88e6
je 0x1000a823
jmp 0x1000a3cf
mov eax, dword [ebp - 0x40]
sub eax, 0x771bc4c6
je 0x1000a815
jmp 0x1000a3e2
mov eax, dword [ebp - 0x40]
sub eax, 0x7b918074
je 0x1000a765
jmp 0x1000a3f5
mov eax, dword [ebp - 0x40]
sub eax, 0x7de1fd55
je 0x1000a96c
jmp 0x1000a408
mov eax, dword [ebp - 0x40]
sub eax, 0x7e742533
je 0x1000aa12
jmp 0x1000a41b
jmp 0x1000aadf
mov ecx, 0x350b42de
mov eax, 0x95825b10
cmp dword [ebp - 0x2c], 0
cmovne ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov ecx, dword [str.0RZe]
mov edx, dword [0x1027f6a8]
mov eax, ecx
xor eax, 0xffffffff
mov esi, ecx
xor esi, 0xffffffff
or eax, esi
and eax, edx
xor eax, 0xffffffff
and edx, edx
xor edx, 0xffffffff
and ecx, edx
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xa5b13c35
mov ecx, 0xffffffff
xor ecx, 0xec427ea1
or eax, edx
or ecx, 0xec427ea1
xor eax, 0xffffffff
and eax, ecx
mov edx, eax
xor edx, 0xffffffff
xor eax, 0xffffffff
or edx, eax
mov eax, 0x52eaaa87
and eax, 0x52eaaa87
xor eax, 0xffffffff
and edx, eax
xor edx, 0xffffffff
mov eax, 0xffffffff
xor eax, 0x5c1377bb
add edx, eax
add edx, 1
mov ecx, 0xc089766f
mov eax, 0x7e742533
cmp edx, 0x2164c98
cmovb ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov ecx, dword [0x1027f6ac]
mov esi, dword [0x1027f6b0]
mov edx, esi
xor edx, 0xffffffff
mov eax, ecx
and eax, edx
mov edx, ecx
xor edx, esi
add ecx, edx
sub ecx, eax
mov esi, 0xffffffff
xor esi, 0x80fa19e0
mov edx, ecx
and edx, esi
mov eax, ecx
or eax, esi
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, 0x80fa19e0
or ecx, 0x80fa19e0
imul ecx, edx
add ecx, eax
mov eax, ecx
and eax, eax
xor eax, 0xffffffff
and eax, 0x205da142
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x205da142
mov esi, 0xffffffff
xor esi, 0x205da142
or edx, esi
and ecx, edx
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
add eax, 0xe18f50bc
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
sub esp, 8
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
sub esp, 8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
sub esp, 4
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
setne al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, 0xc089766f
mov eax, 0x1273ab6d
cmp edx, 0x98a5de86
cmovb ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov ecx, 0x71cf88e6
mov eax, 0xd14e7c13
test byte [ebp - 0x2d], 1
cmovne ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [0x1027f6b4]
xor edx, edx
div dword [0x1027f6b8]
mov edx, eax
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0x9eeeb0b0
mov esi, 0xffffffff
xor esi, 0x9eeeb0b0
mov eax, edx
and eax, esi
imul eax, ecx
mov ecx, edx
and ecx, 0x9eeeb0b0
or edx, 0x9eeeb0b0
imul edx, ecx
add edx, eax
add edx, 0xa9eebf11
mov esi, 0xffffffff
xor esi, 0x89dd5c61
mov ecx, edx
and ecx, esi
mov eax, edx
or eax, esi
xor eax, 0xffffffff
imul eax, ecx
mov ecx, edx
and ecx, 0x89dd5c61
or edx, 0x89dd5c61
imul edx, ecx
add edx, eax
mov ecx, 0x35088e06
mov eax, 0xf5f5a85
cmp edx, 0x43ca0e62
cmove ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [0x1027f6bc]
mov edx, dword [0x1027f6c0]
mov ecx, eax
or ecx, ecx
xor ecx, 0xffffffff
mov esi, edx
xor esi, 0xffffffff
mov edi, edx
xor edi, 0xffffffff
and esi, edi
or ecx, esi
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor edx, 0xffffffff
and eax, edx
or ecx, eax
xor ecx, 0xffffffff
or ecx, 0xa5159302
add ecx, 0xb8f4f2c0
sub ecx, 0x6c5c1cb6
sub ecx, 0xb8f4f2c0
mov edx, 0xffffffff
xor edx, 0x458b6462
mov eax, ecx
xor eax, edx
and eax, ecx
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x20]
sub eax, 0x5f22d426
add eax, 1
add eax, 0x5f22d426
mov dword [esp], eax
call fcn.100b5a74
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.101f4710
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call fcn.10008440
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
sete al
and al, 1
mov byte [ebp - 0x35], al
mov ecx, 0xf5f5a85
mov eax, 0x5c968689
cmp edx, 0x12be92a3
cmova ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov ecx, 0x7b918074
mov eax, 0xd4adc3be
test byte [ebp - 0x35], 1
cmovne ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [ebp - 0x34]
mov dword [esp], eax
call fcn.100b5a7d
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0xd4adc3be
jmp 0x1000aadf
mov edx, dword [0x1027f6c4]
xor edx, dword [0x1027f6c8]
xor edx, 0x6385ec87
xor edx, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xa1b987d2
mov eax, 0xffffffff
xor eax, 0xda58cdad
or edx, ecx
or eax, 0xda58cdad
xor edx, 0xffffffff
and edx, eax
sub edx, 0xa3fe2e5d
mov ecx, 0x9e3d68fb
mov eax, 0xb8d14a55
cmp edx, 0x338089d3
cmovae ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [0x1027f6cc]
imul eax, dword [0x1027f6d0]
and eax, 0x76194ec8
xor eax, 0xfcb3142d
mov ecx, 0xe6c02f02
xor edx, edx
div ecx
mov edx, eax
mov ecx, 0x9e3d68fb
mov eax, 0x771bc4c6
cmp edx, 0x63ece05a
cmovne ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x6c03757
jmp 0x1000aadf
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x6c03757
jmp 0x1000aadf
mov eax, dword [0x1027f6d4]
xor edx, edx
div dword [0x1027f6d8]
mov ecx, 0x4ddc5d8b
xor edx, edx
div ecx
mov edx, eax
xor edx, 0xd931d1f
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0x9c743bb4
mov esi, 0xffffffff
xor esi, 0x9c743bb4
mov eax, edx
and eax, esi
imul eax, ecx
mov ecx, edx
and ecx, 0x9c743bb4
or edx, 0x9c743bb4
imul edx, ecx
add edx, eax
mov ecx, 0x2b4ace8a
mov eax, 0x92b1c8d1
cmp edx, 0x677af965
cmovb ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [0x1027f6dc]
xor edx, edx
div dword [0x1027f6e0]
mov edx, eax
and edx, 0x1f065c49
mov eax, edx
xor eax, 0xb4c76e70
xor eax, 0xffffffff
and eax, 0xb4c76e70
shl eax, 1
sub eax, 0xb4c76e70
sub edx, eax
add edx, 0x7934bc8d
mov ecx, 0xfda4b61a
mov eax, 0x2b4ace8a
cmp edx, 0xf98d0b59
cmova ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0xc873a783
jmp 0x1000aadf
mov eax, dword [0x1027f6e4]
xor eax, dword [0x1027f6e8]
mov ecx, 0xa8f69524
xor edx, edx
div ecx
mov esi, eax
mov eax, esi
xor eax, 0xffffffff
and eax, 0xf5826972
mov edx, 0xffffffff
xor edx, 0xf5826972
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x50cbfb57
and ecx, 0xf5826972
and edx, 0x50cbfb57
or eax, esi
or ecx, edx
xor eax, ecx
mov ecx, 0x23023fc6
xor edx, edx
div ecx
mov edx, eax
mov ecx, 0xa75b446b
mov eax, 0x7de1fd55
cmp edx, 0xf8a35733
cmovb ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [0x1027f6ec]
mov esi, dword [0x1027f6f0]
mov ecx, eax
xor ecx, 0xffffffff
mov edx, esi
and edx, ecx
mov edi, esi
xor edi, 0xffffffff
mov ecx, eax
and ecx, edi
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
or eax, 0xd925993c
mov esi, 0xffffffff
xor esi, 0xb210ae2f
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xb210ae2f
or eax, 0xb210ae2f
imul eax, edx
add eax, ecx
mov edx, eax
and edx, 0xe15c8a6
xor eax, 0xe15c8a6
or edx, eax
mov ecx, 0x7de1fd55
mov eax, 0x3ec42497
cmp edx, 0x4e3487ce
cmova ecx, eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], ecx
jmp 0x1000aadf
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0xc873a783
jmp 0x1000aadf
mov ecx, dword [ebp - 0xc]
xor ecx, ebp
call fcn.100b5a82
add esp, 0x4c
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
sub esp, 8
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
sub esp, 8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
sub esp, 4
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0xc089766f
jmp 0x1000aadf
mov eax, dword [ebp - 0x20]
mov ecx, eax
and ecx, 1
shl ecx, 1
xor eax, 1
add eax, ecx
mov dword [esp], eax
call fcn.100b5a74
mov dword [ebp - 0x28], eax
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.101f4710
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call fcn.10008440
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x35088e06
jmp 0x1000aadf
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0xb8d14a55
jmp 0x1000aadf
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x2b4ace8a
jmp 0x1000aadf
mov eax, dword [ebp - 0x3c]
mov dword [eax], 0x7de1fd55
jmp 0x1000a250