Function at 0x10007320
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
lea ebp, [esp - 0x408]
sub esp, 0x408
push 0xffffffffffffffff
push 0x10161040
mov eax, dword fs:[0]
push eax
sub esp, 0x20
mov eax, dword [0x101b7324]
xor eax, ebp
mov dword [ebp + 0x404], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, dword [ebp + 0x410]
mov eax, dword [ebp + 0x414]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp + 0x418]
mov dword [ebp - 0x18], edx
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], esi
mov dword [ebp], esi
mov byte [ebp - 4], 1
cmp ebx, esi
je 0x100073f3
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
add eax, 1
cdq
push esi
push 2
push edx
push eax
call fcn.10100230
mov edi, eax
add eax, 0x80000000
adc edx, esi
test edx, edx
ja 0x100073f3
jb 0x100073b6
cmp eax, 0xffffffff
ja 0x100073f3
cmp edi, 0x400
jg 0x100073d9
push edi
call fcn.10001260
add esp, 4
test al, al
je 0x100073d9
mov eax, edi
call fcn.10100140
mov dword [ebp - 0x10], esp
mov eax, esp
jmp 0x100073e5
push edi
lea ecx, [ebp - 0x14]
call fcn.10001320
mov esi, dword [ebp - 0x14]
push 0
push edi
push ebx
push eax
call fcn.10001100
test eax, eax
jne 0x10007430
mov byte [ebp - 4], 0
lea eax, [ebp + 4]
cmp dword [ebp], eax
je 0x10007407
lea ecx, [ebp]
call fcn.10002750
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x10007426
mov eax, esi
mov esi, dword [esi]
mov dword [ebp - 0x14], esi
push eax
call fcn.100ff58b
add esp, 4
test esi, esi
jne 0x10007412
mov eax, 0x8007000e
jmp 0x10007576
push 2
push 0
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryExA]
mov ebx, eax
mov dword [ebp - 0x20], ebx
test ebx, ebx
jne 0x10007450
call fcn.10001600
mov edi, eax
jmp 0x1000753d
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
push ebx
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
mov edi, eax
test edi, edi
jne 0x1000746f
call fcn.10001600
jmp 0x10007534
push edi
push ebx
call dword [sym.imp.KERNEL32.DLL_LoadResource]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x10007488
call fcn.10001600
jmp 0x10007534
push edi
push ebx
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov edi, eax
mov dword [ebp - 0x1c], edi
lea eax, [edi + 1]
cmp eax, edi
jae 0x100074c9
mov byte [ebp - 4], 0
lea eax, [ebp + 4]
cmp dword [ebp], eax
je 0x100074b0
lea ecx, [ebp]
call fcn.10002750
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.100011c0
mov eax, 0x8007000e
jmp 0x10007576
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp]
call fcn.10004ab0
mov dword [ebp - 4], 1
jmp 0x100074fd
mov eax, dword [ebp]
test eax, eax
jne 0x1000750b
mov edi, 0x8007000e
jmp 0x10007536
push edi
mov ecx, dword [ebp - 0x18]
push ecx
push edi
push eax
call fcn.100014a0
add esp, 0x10
mov edx, dword [ebp]
mov byte [edx + edi], 0
mov eax, dword [ebp + 0x41c]
push eax
mov ecx, dword [ebp]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10006270
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov byte [ebp - 4], 0
lea edx, [ebp + 4]
cmp dword [ebp], edx
je 0x10007551
lea ecx, [ebp]
call fcn.10002750
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x10007574
lea esp, [esp]
mov eax, esi
mov esi, dword [esi]
mov dword [ebp - 0x14], esi
push eax
call fcn.100ff58b
add esp, 4
test esi, esi
jne 0x10007560
mov eax, edi
lea esp, [ebp - 0x3c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x404]
xor ecx, ebp
call fcn.100ffa66
add ebp, 0x408
mov esp, ebp
pop ebp
ret 0x10