Function at 0x10008207
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1001ab46
mov eax, dword fs:[0]
push eax
push ecx
sub esp, 0x4b0
mov eax, dword [0x1002005c]
xor eax, ebp
mov dword [ebp - 0x40], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x4b4], ecx
mov dword [ebp - 0x34], 3
and dword [ebp - 0x3c], 0
and dword [ebp - 4], 0
mov eax, dword [ebp - 0x4b4]
mov dword [ebp - 0x24], eax
and dword [ebp - 0x28], 0
and dword [ebp - 0x448], 0
mov byte [ebp - 4], 1
mov eax, dword [ebp + 8]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x1000827e
and dword [ebp - 0x4b8], 0
jmp 0x100083e6
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x46c], eax
push 2
pop eax
cdq
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x46c]
cdq
push esi
push ecx
push edx
push eax
call fcn.10013300
mov dword [ebp - 0x468], eax
mov dword [ebp - 0x464], edx
cmp dword [ebp - 0x464], 0
jg 0x100082e6
jl 0x100082cf
cmp dword [ebp - 0x468], 0x7fffffff
ja 0x100082e6
cmp dword [ebp - 0x464], 0xffffffff
jg 0x100082f2
jl 0x100082e6
cmp dword [ebp - 0x468], 0x80000000
jae 0x100082f2
mov dword [ebp - 0x470], 0x80070057
jmp 0x10008302
mov eax, dword [ebp - 0x468]
mov dword [ebp - 0x38], eax
and dword [ebp - 0x470], 0
cmp dword [ebp - 0x470], 0
jge 0x10008317
and dword [ebp - 0x4bc], 0
jmp 0x100083da
cmp dword [ebp - 0x38], 0x400
jg 0x1000834f
push dword [ebp - 0x38]
call fcn.100066a0
pop ecx
movzx eax, al
test eax, eax
je 0x1000834f
mov eax, dword [ebp - 0x38]
call fcn.10012fe0
mov dword [ebp - 0x4c0], esp
mov dword [ebp - 0x10], esp
mov eax, dword [ebp - 0x4c0]
mov dword [ebp - 0x488], eax
jmp 0x10008360
push dword [ebp - 0x38]
lea ecx, [ebp - 0x3c]
call fcn.100067a1
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x48c], eax
mov eax, dword [ebp - 0x490]
mov dword [ebp - 0x4bc], eax
cmp dword [ebp - 0x488], 0
je 0x10008384
cmp dword [ebp - 0x14], 0
jne 0x1000838d
and dword [ebp - 0x4bc], 0
jmp 0x100083da
mov eax, dword [ebp - 0x488]
mov byte [eax], 0
push 0
push 0
push dword [ebp - 0x48c]
push dword [ebp - 0x488]
push 0xffffffffffffffff
push dword [ebp - 0x14]
push 0
push dword [ebp - 0x34]
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov dword [ebp - 0x484], eax
cmp dword [ebp - 0x484], 0
jne 0x100083ce
and dword [ebp - 0x4bc], 0
jmp 0x100083da
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x4bc], eax
mov eax, dword [ebp - 0x4bc]
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4b8]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jne 0x10008450
mov dword [ebp - 0x458], 0x8007000e
mov byte [ebp - 4], 0
lea eax, [ebp - 0x444]
cmp dword [ebp - 0x448], eax
je 0x1000841c
lea ecx, [ebp - 0x448]
call fcn.100058c3
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x3c], 0
je 0x10008445
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x494], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x494]
call fcn.1000a04a
pop ecx
jmp 0x10008420
mov eax, dword [ebp - 0x458]
jmp 0x10008650
push 2
push 0
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x10008476
call fcn.10002443
mov dword [ebp - 0x450], eax
jmp 0x100085e9
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x44c], eax
cmp dword [ebp - 0x44c], 0
jne 0x100084a4
call fcn.10002443
mov dword [ebp - 0x450], eax
jmp 0x100085e9
push dword [ebp - 0x44c]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x454], eax
cmp dword [ebp - 0x454], 0
jne 0x100084d2
call fcn.10002443
mov dword [ebp - 0x450], eax
jmp 0x100085e9
push dword [ebp - 0x44c]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x454]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x2c]
inc eax
cmp eax, dword [ebp - 0x2c]
jae 0x10008551
mov dword [ebp - 0x45c], 0x8007000e
mov byte [ebp - 4], 0
lea eax, [ebp - 0x444]
cmp dword [ebp - 0x448], eax
je 0x1000851d
lea ecx, [ebp - 0x448]
call fcn.100058c3
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x3c], 0
je 0x10008546
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x498], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x498]
call fcn.1000a04a
pop ecx
jmp 0x10008521
mov eax, dword [ebp - 0x45c]
jmp 0x10008650
mov byte [ebp - 4], 2
mov eax, dword [ebp - 0x2c]
inc eax
push eax
lea ecx, [ebp - 0x448]
call fcn.100058fc
jmp 0x10008574
mov dword [ebp - 4], 1
cmp dword [ebp - 0x448], 0
jne 0x10008590
mov dword [ebp - 0x450], 0x8007000e
jmp 0x100085e9
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x4a8], eax
push dword [ebp - 0x2c]
push dword [ebp - 0x1c]
push dword [ebp - 0x2c]
push dword [ebp - 0x4a8]
call fcn.100099db
add esp, 0x10
push eax
call fcn.100022ab
pop ecx
mov eax, dword [ebp - 0x448]
add eax, dword [ebp - 0x2c]
mov byte [eax], 0
mov eax, dword [ebp - 0x448]
mov dword [ebp - 0x4ac], eax
push dword [ebp + 0x14]
push dword [ebp - 0x4ac]
lea ecx, [ebp - 0x28]
call fcn.10008067
mov dword [ebp - 0x450], eax
cmp dword [ebp - 0x20], 0
je 0x100085f8
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x450]
mov dword [ebp - 0x460], eax
mov byte [ebp - 4], 0
lea eax, [ebp - 0x444]
cmp dword [ebp - 0x448], eax
je 0x10008621
lea ecx, [ebp - 0x448]
call fcn.100058c3
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x3c], 0
je 0x1000864a
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4b0], eax
mov eax, dword [ebp - 0x3c]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x4b0]
call fcn.1000a04a
pop ecx
jmp 0x10008625
mov eax, dword [ebp - 0x460]
lea esp, [ebp - 0x4d0]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x40]
xor ecx, ebp
call fcn.10009868
leave
ret 0x10