Function at 0x10007310
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
lea ebp, [esp - 0x408]
sub esp, 0x408
push 0xffffffffffffffff
push 0x10161970
mov eax, dword fs:[0]
push eax
sub esp, 0x20
mov eax, dword [0x101b734c]
xor eax, ebp
mov dword [ebp + 0x404], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, dword [ebp + 0x410]
mov eax, dword [ebp + 0x414]
mov dword [ebp - 0x1c], eax
mov edx, dword [ebp + 0x418]
mov dword [ebp - 0x18], edx
xor esi, esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], esi
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], esi
mov dword [ebp], esi
mov byte [ebp - 4], 1
cmp ebx, esi
je 0x100073e3
push ebx
call dword [sym.imp.KERNEL32.DLL_lstrlenW]
add eax, 1
cdq
push esi
push 2
push edx
push eax
call fcn.10100b90
mov edi, eax
add eax, 0x80000000
adc edx, esi
test edx, edx
ja 0x100073e3
jb 0x100073a6
cmp eax, 0xffffffff
ja 0x100073e3
cmp edi, 0x400
jg 0x100073c9
push edi
call fcn.10001230
add esp, 4
test al, al
je 0x100073c9
mov eax, edi
call fcn.10100aa0
mov dword [ebp - 0x10], esp
mov eax, esp
jmp 0x100073d5
push edi
lea ecx, [ebp - 0x14]
call fcn.100012f0
mov esi, dword [ebp - 0x14]
push 0
push edi
push ebx
push eax
call fcn.10001100
test eax, eax
jne 0x10007420
mov byte [ebp - 4], 0
lea eax, [ebp + 4]
cmp dword [ebp], eax
je 0x100073f7
lea ecx, [ebp]
call fcn.10002720
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x10007416
mov eax, esi
mov esi, dword [esi]
mov dword [ebp - 0x14], esi
push eax
call fcn.100ffef8
add esp, 4
test esi, esi
jne 0x10007402
mov eax, 0x8007000e
jmp 0x10007566
push 2
push 0
push eax
call dword [sym.imp.KERNEL32.DLL_LoadLibraryExA]
mov ebx, eax
mov dword [ebp - 0x20], ebx
test ebx, ebx
jne 0x10007440
call fcn.100015e0
mov edi, eax
jmp 0x1000752d
mov ecx, dword [ebp - 0x18]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
push ebx
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
mov edi, eax
test edi, edi
jne 0x1000745f
call fcn.100015e0
jmp 0x10007524
push edi
push ebx
call dword [sym.imp.KERNEL32.DLL_LoadResource]
mov dword [ebp - 0x18], eax
test eax, eax
jne 0x10007478
call fcn.100015e0
jmp 0x10007524
push edi
push ebx
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov edi, eax
mov dword [ebp - 0x1c], edi
lea eax, [edi + 1]
cmp eax, edi
jae 0x100074b9
mov byte [ebp - 4], 0
lea eax, [ebp + 4]
cmp dword [ebp], eax
je 0x100074a0
lea ecx, [ebp]
call fcn.10002720
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.100011c0
mov eax, 0x8007000e
jmp 0x10007566
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp]
call fcn.10004aa0
mov dword [ebp - 4], 1
jmp 0x100074ed
mov eax, dword [ebp]
test eax, eax
jne 0x100074fb
mov edi, 0x8007000e
jmp 0x10007526
push edi
mov ecx, dword [ebp - 0x18]
push ecx
push edi
push eax
call fcn.10001480
add esp, 0x10
mov edx, dword [ebp]
mov byte [edx + edi], 0
mov eax, dword [ebp + 0x41c]
push eax
mov ecx, dword [ebp]
push ecx
lea ecx, [ebp - 0x28]
call fcn.10006260
mov edi, eax
push ebx
call dword [sym.imp.KERNEL32.DLL_FreeLibrary]
mov byte [ebp - 4], 0
lea edx, [ebp + 4]
cmp dword [ebp], edx
je 0x10007541
lea ecx, [ebp]
call fcn.10002720
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x10007564
lea esp, [esp]
mov eax, esi
mov esi, dword [esi]
mov dword [ebp - 0x14], esi
push eax
call fcn.100ffef8
add esp, 4
test esi, esi
jne 0x10007550
mov eax, edi
lea esp, [ebp - 0x3c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x404]
xor ecx, ebp
call fcn.101003d3
add ebp, 0x408
mov esp, ebp
pop ebp
ret 0x10