Function at 0x7d716860
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
mov eax, dword [0x7d7348f4]
movzx ecx, byte [eax]
and ecx, 8
je 0x7d7168e2
mov edx, 1
imul edx, edx, 0
movsx eax, byte [edx + str.D:DevelopOne_CoreOne_Core_Apiwrappers_basekernelbase_wrapper_string.c]
cmp eax, 0x2e
jne 0x7d716892
mov dword [ebp - 0xc], 0x12
jmp 0x7d716899
mov dword [ebp - 0xc], 0x21
push 0x7d7242c0
push 0x20
push 0x7d7348f8
mov ecx, dword [ebp - 0xc]
add ecx, str.D:DevelopOne_CoreOne_Core_Apiwrappers_basekernelbase_wrapper_string.c
push ecx
mov edx, dword [0x7d7348f4]
push edx
push 3
call fcn.7d71f8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d7168e2
mov eax, dword [ebp + 0x14]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp + 0xc]
push edx
mov eax, dword [ebp + 8]
push eax
push str.instance___p__id___04x__buffer___p__length___d_n
call fcn.7d71f960
add esp, 0x14
cmp dword [ebp + 0x10], 0
jne 0x7d7168ef
xor eax, eax
jmp 0x7d716afd
push 6
mov ecx, dword [ebp + 0xc]
and ecx, 0xffff
movzx edx, cx
sar edx, 4
add edx, 1
and edx, 0xffff
movzx eax, dx
push eax
mov ecx, dword [ebp + 8]
push ecx
call sym.kernelbase.dll_FindResourceW
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x7d716926
xor eax, eax
jmp 0x7d716afd
mov edx, dword [ebp - 0x10]
push edx
mov eax, dword [ebp + 8]
push eax
call sym.kernelbase.dll_LoadResource
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x7d716943
xor eax, eax
jmp 0x7d716afd
mov ecx, dword [ebp - 0x14]
push ecx
call sym.kernelbase.dll_LockResource
mov dword [ebp - 4], eax
mov edx, dword [ebp + 0xc]
and edx, 0xf
mov dword [ebp - 0x24], edx
mov dword [ebp - 8], 0
jmp 0x7d71696a
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
cmp ecx, dword [ebp - 0x24]
jge 0x7d716984
mov edx, dword [ebp - 4]
movzx eax, word [edx]
mov ecx, dword [ebp - 4]
lea edx, [ecx + eax*2 + 2]
mov dword [ebp - 4], edx
jmp 0x7d716961
mov eax, dword [0x7d7348f4]
movzx ecx, byte [eax]
and ecx, 8
je 0x7d7169f5
mov edx, 1
imul edx, edx, 0
movsx eax, byte [edx + str.D:DevelopOne_CoreOne_Core_Apiwrappers_basekernelbase_wrapper_string.c]
cmp eax, 0x2e
jne 0x7d7169ae
mov dword [ebp - 0x18], 0x12
jmp 0x7d7169b5
mov dword [ebp - 0x18], 0x21
push 0x7d7242c0
push 0x30
push 0x7d7348f8
mov ecx, dword [ebp - 0x18]
add ecx, str.D:DevelopOne_CoreOne_Core_Apiwrappers_basekernelbase_wrapper_string.c
push ecx
mov edx, dword [0x7d7348f4]
push edx
push 3
call fcn.7d71f8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d7169f5
mov eax, dword [ebp - 4]
movzx ecx, word [eax]
push ecx
push str.strlen___d_n
call fcn.7d71f960
add esp, 8
cmp dword [ebp + 0x14], 0
jne 0x7d716a11
mov edx, dword [ebp - 4]
add edx, 2
mov eax, dword [ebp + 0x10]
mov dword [eax], edx
mov ecx, dword [ebp - 4]
movzx eax, word [ecx]
jmp 0x7d716afd
mov edx, dword [ebp + 0x14]
sub edx, 1
mov eax, dword [ebp - 4]
movzx ecx, word [eax]
cmp edx, ecx
jge 0x7d716a2c
mov edx, dword [ebp + 0x14]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x7d716a35
mov eax, dword [ebp - 4]
movzx ecx, word [eax]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0
jle 0x7d716a68
mov eax, dword [ebp - 8]
shl eax, 1
push eax
mov ecx, dword [ebp - 4]
add ecx, 2
push ecx
mov edx, dword [ebp + 0x10]
push edx
call sub.ntext.dll_memcpy
add esp, 0xc
xor eax, eax
mov ecx, dword [ebp - 8]
mov edx, dword [ebp + 0x10]
mov word [edx + ecx*2], ax
jmp 0x7d716a83
cmp dword [ebp + 0x14], 1
jle 0x7d716a83
mov eax, 2
imul eax, eax, 0
xor ecx, ecx
mov edx, dword [ebp + 0x10]
mov word [edx + eax], cx
xor eax, eax
jmp 0x7d716afd
mov eax, dword [0x7d7348f4]
movzx ecx, byte [eax]
and ecx, 8
je 0x7d716afa
mov edx, 1
imul edx, edx, 0
movsx eax, byte [edx + str.D:DevelopOne_CoreOne_Core_Apiwrappers_basekernelbase_wrapper_string.c]
cmp eax, 0x2e
jne 0x7d716aad
mov dword [ebp - 0x20], 0x12
jmp 0x7d716ab4
mov dword [ebp - 0x20], 0x21
push 0x7d7242c0
push 0x49
push 0x7d7348f8
mov ecx, dword [ebp - 0x20]
add ecx, str.D:DevelopOne_CoreOne_Core_Apiwrappers_basekernelbase_wrapper_string.c
push ecx
mov edx, dword [0x7d7348f4]
push edx
push 3
call fcn.7d71f8f0
add esp, 0x18
cmp eax, 0xffffffff
je 0x7d716afa
mov eax, dword [ebp + 0x10]
push eax
call fcn.7d701950
add esp, 4
push eax
push str.returning__s_n
call fcn.7d71f960
add esp, 8
mov eax, dword [ebp - 8]
mov esp, ebp
pop ebp
ret 0x10