Function at 0x10035e22
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x4d0
mov eax, 0x101dd0ad
call fcn.1005dbe7
mov dword [ebp - 0x450], ecx
and dword [ebp - 4], 0
lea ecx, [ebp - 0x4dc]
mov esi, dword [0x10296350]
call fcn.10059770
cmp dword [ebp + 0x1c], 8
lea eax, [ebp + 8]
push 0x101e893c
cmovae eax, dword [ebp + 8]
push eax
push esi
mov byte [ebp - 4], 1
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
test edi, edi
je 0x100365ca
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
lea esi, [edi + 1]
push esi
call fcn.1005dc8d
push esi
push 0
push eax
mov dword [ebp - 0x444], eax
call fcn.10079700
push edi
push ebx
mov ebx, dword [ebp - 0x444]
push ebx
call fcn.1008e630
add esp, 0x1c
lea ecx, [ebp - 0x4dc]
push 0
push 0
push ebx
call fcn.1005c400
push 0x101eb0ac
lea ecx, [ebp - 0x4dc]
call fcn.1005a3b0
test eax, eax
je 0x100365c3
mov ecx, eax
call fcn.1005a450
mov esi, eax
mov dword [ebp - 0x444], esi
jmp 0x100365bb
push 0x208
lea eax, [ebp - 0x420]
push 0
push eax
call fcn.10079700
add esp, 0xc
mov ecx, esi
push 0x101eafb4
call fcn.10059cc0
lea ecx, [ebp - 0x420]
push ecx
push eax
call fcn.1007441e
pop ecx
pop ecx
mov ecx, esi
call fcn.1005a450
push 0xc
mov edi, eax
call fcn.1005d806
pop ecx
xor ecx, ecx
test eax, eax
je 0x10035f44
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
jmp 0x10035f46
mov eax, ecx
mov dword [ebp - 0x44c], ecx
mov dword [ebp - 0x448], ecx
lea ecx, [ebp - 0x44c]
push eax
call fcn.10034021
mov byte [ebp - 4], 2
test edi, edi
je 0x1003650b
push 8
call fcn.1005d806
mov esi, eax
pop ecx
mov dword [ebp - 0x454], esi
mov byte [ebp - 4], 3
test esi, esi
je 0x10035f94
and dword [esi], 0
mov ecx, esi
and dword [esi + 4], 0
call fcn.1002beef
mov dword [esi], eax
jmp 0x10035f96
xor esi, esi
and dword [ebp - 0x440], 0
lea ecx, [ebp - 0x440]
and dword [ebp - 0x43c], 0
push esi
mov byte [ebp - 4], 2
call fcn.100295ce
push 0x208
lea eax, [ebp - 0x218]
mov byte [ebp - 4], 4
push 0
push eax
call fcn.10079700
add esp, 0xc
mov ecx, edi
push 0x101eb594
call fcn.10059cc0
test eax, eax
je 0x100365e9
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, str.text
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x45c]
mov byte [ebp - 4], 5
push eax
call fcn.1002985e
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x45c]
jne 0x10036055
xor eax, eax
jmp 0x10036062
lea eax, [ebp - 0x218]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eafb4
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x1003613c
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101e56a8
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x464]
mov byte [ebp - 4], 6
push eax
call fcn.1002985e
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x464]
jne 0x1003610c
xor eax, eax
jmp 0x10036119
lea eax, [ebp - 0x218]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5a8
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x100361f3
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101eb5ac
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x46c]
mov byte [ebp - 4], 7
push eax
call fcn.1002985e
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x46c]
jne 0x100361c3
xor eax, eax
jmp 0x100361d0
lea eax, [ebp - 0x218]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push str.page
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x100362aa
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101eafec
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x474]
mov byte [ebp - 4], 8
push eax
call fcn.1002985e
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x474]
jne 0x1003627a
xor eax, eax
jmp 0x10036287
lea eax, [ebp - 0x218]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5b4
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x10036361
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, str.type
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x47c]
mov byte [ebp - 4], 9
push eax
call fcn.1002985e
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x47c]
jne 0x10036331
xor eax, eax
jmp 0x1003633e
lea eax, [ebp - 0x218]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5c8
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x10036418
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, str.code
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x484]
mov byte [ebp - 4], 0xa
push eax
call fcn.1002985e
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x484]
jne 0x100363e8
xor eax, eax
jmp 0x100363f5
lea eax, [ebp - 0x218]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5dc
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x100364cf
lea ecx, [ebp - 0x218]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x428], 0
xor eax, eax
mov esi, 0x101eb5e0
mov dword [ebp - 0x424], 7
push esi
mov word [ebp - 0x438], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x438]
push eax
push esi
call fcn.10002750
mov ecx, dword [ebp - 0x440]
lea eax, [ebp - 0x438]
push eax
lea eax, [ebp - 0x48c]
mov byte [ebp - 4], 0xb
push eax
call fcn.1002985e
cmp word [ebp - 0x218], 0
mov esi, dword [ebp - 0x48c]
jne 0x1003649f
xor eax, eax
jmp 0x100364ac
lea eax, [ebp - 0x218]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x218]
push eax
lea ecx, [esi + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 4
call fcn.10002690
mov ecx, dword [ebp - 0x44c]
lea eax, [ebp - 0x440]
push eax
call fcn.10033f74
mov ecx, edi
call fcn.1005a880
mov ecx, dword [ebp - 0x43c]
mov edi, eax
mov byte [ebp - 4], 2
test ecx, ecx
je 0x100364fd
call fcn.10021ea6
test edi, edi
jne 0x10035f6a
mov esi, dword [ebp - 0x444]
and dword [ebp - 0x428], 0
xor eax, eax
mov dword [ebp - 0x424], 7
mov word [ebp - 0x438], ax
cmp word [ebp - 0x420], ax
je 0x1003653b
lea eax, [ebp - 0x420]
push eax
call fcn.100812ef
pop ecx
push eax
lea eax, [ebp - 0x420]
push eax
lea ecx, [ebp - 0x438]
call fcn.10002750
lea eax, [ebp - 0x438]
mov byte [ebp - 4], 0xc
push eax
lea eax, [ebp - 0x494]
push eax
mov eax, dword [ebp - 0x450]
mov ecx, dword [eax + 0x334]
call fcn.1003408e
mov ecx, dword [ebp - 0x494]
lea eax, [ebp - 0x44c]
push eax
add ecx, 0x28
call fcn.10029c19
push 0
push 1
lea ecx, [ebp - 0x438]
mov byte [ebp - 4], 2
call fcn.10002690
mov ecx, esi
call fcn.1005a880
mov ecx, dword [ebp - 0x448]
mov esi, eax
mov dword [ebp - 0x444], esi
mov byte [ebp - 4], 1
test ecx, ecx
je 0x100365bb
call fcn.10021ea6
test esi, esi
jne 0x10035ef2
push ebx
call fcn.1005d847
pop ecx
lea ecx, [ebp - 0x4dc]
call fcn.10029bf6
push 0
push 1
lea ecx, [ebp + 8]
call fcn.10002690
call fcn.1005dba2
ret 0x18
mov ecx, dword [ebp - 0x43c]
test ecx, ecx
je 0x100365f8
call fcn.10021ea6
mov ecx, dword [ebp - 0x448]
test ecx, ecx
je 0x100365ca
call fcn.10021ea6
jmp 0x100365ca