Function at 0x1001f230
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ecx
mov eax, ecx
mov dword [ebp - 4], eax
cmp byte [eax], 0
jne 0x1001f99b
push ebx
push esi
push edi
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f293
mov edx, str.MsgBox
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001c8c0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f2e1
mov edx, 0x100bc144
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001c960
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f32f
mov edx, 0x100bc154
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001caf0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f37d
mov edx, 0x100bc168
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001cd20
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f3cb
mov edx, 0x100bc194
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001cee0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f419
mov edx, 0x100bc1a4
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001d0f0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f467
mov edx, 0x100bc1b4
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001d200
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f4b5
mov edx, 0x100bc1c0
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001d320
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f503
mov edx, 0x100bc230
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001d870
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f551
mov edx, 0x100bc1c8
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001d4b0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f59f
mov edx, 0x100bc1d8
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001d5e0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f5ed
mov edx, 0x100bc1e8
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001d710
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f63b
mov edx, 0x100bc270
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001de60
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f689
mov edx, 0x100bc27c
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001df00
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f6d7
mov edx, 0x100bc288
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001e090
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f725
mov edx, 0x100bc294
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001e220
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f773
mov edx, str.GetGID
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001dab0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f7c1
mov edx, 0x100bc24c
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001db50
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f80f
mov edx, 0x100bc258
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001dbf0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f85d
mov edx, 0x100bc264
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001dc80
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f8ab
mov edx, 0x100bc2a4
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001e2c0
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f8f9
mov edx, 0x100bc2bc
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001e320
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov esi, eax
mov ecx, dword [esi]
test ecx, ecx
je 0x1001f947
mov edx, 0x100bc26c
call fcn.1001fe30
mov ecx, dword [esi]
mov edx, 0x1001dd60
push 0
call fcn.1001fed0
mov esi, dword [esi]
mov edx, 0xffffd8ee
mov ecx, esi
call fcn.1001f9b0
mov edx, dword [esi + 8]
lea ecx, [edx - 0x10]
push ecx
lea ecx, [edx - 0x20]
mov edx, eax
push ecx
mov ecx, esi
call fcn.100230f0
add esp, 0xc
add dword [esi + 8], 0xffffffe0
call fcn.10010030
mov dword [eax + 0x1c], 0x1001f200
call fcn.1000f3f0
push 0x100bc3ec
mov ebx, eax
push 0x65
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov edi, eax
push edi
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push ebx
mov esi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push ecx
push eax
push esi
call fcn.10010030
mov ecx, eax
call fcn.1001f100
mov eax, dword [ebp - 4]
pop edi
pop esi
pop ebx
mov byte [eax], 1
mov al, 1
mov esp, ebp
pop ebp
ret