Function at 0x1000a530
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x44
mov eax, dword [0x1027a6e4]
xor edx, edx
div dword [0x1027a6e8]
mov ecx, eax
and ecx, 0x64ec2743
mov eax, ecx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x3f98cfc
or eax, edx
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x3f98cfc
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov esi, 0xffffffff
xor esi, 0x8cc21e85
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x8cc21e85
or eax, 0x8cc21e85
imul eax, edx
add eax, ecx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x34], 0x9dc3e3c7
lea eax, [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
sub eax, 0x94610135
je 0x1000aaba
jmp 0x1000a5c5
mov eax, dword [ebp - 0x3c]
sub eax, 0x9dc3e3c7
je 0x1000a7b8
jmp 0x1000a5d8
mov eax, dword [ebp - 0x3c]
sub eax, 0xa62a5396
je 0x1000ad05
jmp 0x1000a5eb
mov eax, dword [ebp - 0x3c]
sub eax, 0xaadd67b6
je 0x1000a925
jmp 0x1000a5fe
mov eax, dword [ebp - 0x3c]
sub eax, 0xc27e6ff4
je 0x1000aec5
jmp 0x1000a611
mov eax, dword [ebp - 0x3c]
sub eax, 0xc88defe5
je 0x1000a893
jmp 0x1000a624
mov eax, dword [ebp - 0x3c]
sub eax, 0xca9ff2b4
je 0x1000aba3
jmp 0x1000a637
mov eax, dword [ebp - 0x3c]
sub eax, 0xd21ccb17
je 0x1000aa9b
jmp 0x1000a64a
mov eax, dword [ebp - 0x3c]
sub eax, 0xd31a8649
je 0x1000ac93
jmp 0x1000a65d
mov eax, dword [ebp - 0x3c]
sub eax, 0xddc36ccc
je 0x1000af3f
jmp 0x1000a670
mov eax, dword [ebp - 0x3c]
sub eax, 0xddecfd8b
je 0x1000aa80
jmp 0x1000a683
mov eax, dword [ebp - 0x3c]
sub eax, 0xe120284a
je 0x1000ae62
jmp 0x1000a696
mov eax, dword [ebp - 0x3c]
sub eax, 0xe28c9aba
je 0x1000a7d6
jmp 0x1000a6a9
mov eax, dword [ebp - 0x3c]
sub eax, 0xe9c60390
je 0x1000ac0b
jmp 0x1000a6bc
mov eax, dword [ebp - 0x3c]
sub eax, 0xf0fdd61a
je 0x1000ab13
jmp 0x1000a6cf
mov eax, dword [ebp - 0x3c]
sub eax, 0xf6513125
je 0x1000af69
jmp 0x1000a6e2
mov eax, dword [ebp - 0x3c]
sub eax, 0x40fc44a
je 0x1000ad59
jmp 0x1000a6f5
mov eax, dword [ebp - 0x3c]
sub eax, 0x19975570
je 0x1000af5b
jmp 0x1000a708
mov eax, dword [ebp - 0x3c]
sub eax, 0x1a2923bf
je 0x1000ab95
jmp 0x1000a71b
mov eax, dword [ebp - 0x3c]
sub eax, 0x1b4f93ed
je 0x1000a8ae
jmp 0x1000a72e
mov eax, dword [ebp - 0x3c]
sub eax, 0x1c48fb76
je 0x1000a991
jmp 0x1000a741
mov eax, dword [ebp - 0x3c]
sub eax, 0x2636d621
je 0x1000af4d
jmp 0x1000a754
mov eax, dword [ebp - 0x3c]
sub eax, 0x2e62897a
je 0x1000ad4b
jmp 0x1000a767
mov eax, dword [ebp - 0x3c]
sub eax, 0x500559f8
je 0x1000ae69
jmp 0x1000a77a
mov eax, dword [ebp - 0x3c]
sub eax, 0x5bd70d73
je 0x1000ac85
jmp 0x1000a78d
mov eax, dword [ebp - 0x3c]
sub eax, 0x6325fe14
je 0x1000adce
jmp 0x1000a7a0
mov eax, dword [ebp - 0x3c]
sub eax, 0x6e04318b
je 0x1000ae54
jmp 0x1000a7b3
jmp 0x1000af72
mov ecx, 0x500559f8
mov eax, 0xe28c9aba
cmp dword [ebp - 0xc], 0x7ac338e3
cmovb ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [0x1027a6ec]
mov ecx, dword [0x1027a6f0]
and eax, ecx
add eax, 0xa794a484
mov ecx, 0x4539a677
mul ecx
mov eax, edx
shr eax, 0x1c
add eax, 0x623c2645
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
lea eax, [0x10258b8a]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x10]
mov dword [eax], ecx
mov eax, dword [ebp - 0x10]
mov edx, dword [eax]
lea ecx, str.CONFIG
lea eax, [0x1025913a]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edx, dword [ebp - 0x40]
mov ecx, eax
mov eax, dword [ebp - 0x14]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
cmp dword [eax], 0
setne al
and al, 1
mov byte [ebp - 0x25], al
mov ecx, 0x500559f8
mov eax, 0xc88defe5
cmp edx, 0x6f1234e9
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov ecx, 0x40fc44a
mov eax, 0x1b4f93ed
test byte [ebp - 0x25], 1
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [eax], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
mov edx, dword [ebp - 0x20]
mov ecx, 0xca9ff2b4
mov eax, 0xaadd67b6
cmp dword [edx], 0
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [0x1027a6f4]
xor edx, edx
div dword [0x1027a6f8]
mov esi, eax
mov eax, esi
xor eax, 0xffffffff
and eax, 0x56c4d32f
mov edx, 0xffffffff
xor edx, 0x56c4d32f
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x68e04269
and ecx, 0x56c4d32f
and edx, 0x68e04269
or eax, esi
or ecx, edx
xor eax, ecx
imul edx, eax, 0xf336dcb6
sub edx, 0x3fd89df3
mov ecx, 0x1c48fb76
mov eax, 0xc27e6ff4
cmp edx, 0xd47df9e7
cmovae ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [0x1027a6fc]
mov esi, dword [0x1027a700]
mov edi, esi
xor edi, 0xffffffff
mov edx, eax
and edx, edi
mov ecx, eax
or ecx, edi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, esi
or eax, esi
imul eax, edx
add eax, ecx
mov ecx, 0xffffffff
xor ecx, 0x4f08b53e
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
sub eax, 0xd190aa79
mov ecx, 0x276bfe68
xor edx, edx
div ecx
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
sub eax, 0xa3a4c30
add eax, 1
add eax, 0xa3a4c30
sub esp, 4
mov dword [esp], eax
call fcn.100b1454
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x24]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.101f00f0
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10008610
mov edx, dword [ebp - 0x44]
add esp, 4
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
sete al
and al, 1
mov byte [ebp - 0x2d], al
mov ecx, 0xc27e6ff4
mov eax, 0xddecfd8b
cmp edx, 0xcc4bff8a
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov ecx, 0xd21ccb17
mov eax, 0x94610135
test byte [ebp - 0x2d], 1
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [ebp - 0x2c]
sub esp, 4
mov dword [esp], eax
call fcn.100b145d
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [eax], 0x94610135
jmp 0x1000af72
mov edx, dword [0x1027a704]
mov ecx, dword [0x1027a708]
mov esi, edx
xor esi, ecx
xor esi, 0xffffffff
mov eax, ecx
and eax, esi
shl eax, 1
sub eax, ecx
sub edx, eax
sub edx, 0xa8fd72e3
mov eax, 0xffffffff
xor eax, 0x49713795
xor ecx, ecx
sub ecx, 1
sub eax, ecx
sub edx, eax
and edx, 0x30dc329
mov ecx, 0xf0fdd61a
mov eax, 0xddc36ccc
cmp edx, 0xda4d50c5
cmovae ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov edx, dword [0x1027a70c]
mov eax, dword [0x1027a710]
sub edx, 0x3e9ce180
add edx, eax
add edx, 0x3e9ce180
mov eax, 0xffffffff
xor eax, 0xc91e8e77
xor ecx, ecx
sub ecx, 1
sub eax, ecx
sub edx, eax
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0x770e5e14
mov esi, 0xffffffff
xor esi, 0x770e5e14
mov eax, edx
and eax, esi
imul eax, ecx
mov ecx, edx
and ecx, 0x770e5e14
or edx, 0x770e5e14
imul edx, ecx
add edx, eax
xor eax, eax
sub eax, 0xc3916d63
sub edx, eax
mov ecx, 0x1a2923bf
mov eax, 0xddc36ccc
cmp edx, 0xd70ddf87
cmovae ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xd31a8649
jmp 0x1000af72
mov eax, dword [0x1027a714]
xor edx, edx
div dword [str._r_U]
mov edx, eax
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0xdf94d074
mov esi, 0xffffffff
xor esi, 0xdf94d074
mov eax, edx
and eax, esi
imul eax, ecx
mov ecx, edx
and ecx, 0xdf94d074
or edx, 0xdf94d074
imul edx, ecx
add edx, eax
and edx, 0x11d6a344
add edx, 0xd6479fdc
mov ecx, 0xe9c60390
mov eax, 0x2636d621
cmp edx, 0xc0c80d48
cmovb ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [0x1027a71c]
xor edx, edx
div dword [str._vsx]
mov edx, eax
xor edx, 0xffffffff
and edx, 0x8abaea23
mov ecx, 0xffffffff
xor ecx, 0x8abaea23
and eax, ecx
or edx, eax
xor edx, 0xb434775b
mov ecx, edx
xor ecx, 0xffffffff
and ecx, 0xee471bc4
mov esi, 0xffffffff
xor esi, 0xee471bc4
mov eax, edx
and eax, esi
imul eax, ecx
mov ecx, edx
and ecx, 0xee471bc4
or edx, 0xee471bc4
imul edx, ecx
add edx, eax
mov ecx, 0x2636d621
mov eax, 0x5bd70d73
cmp edx, 0xa3d95c4d
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xd31a8649
jmp 0x1000af72
mov edx, dword [0x1027a724]
or edx, dword [0x1027a728]
and edx, edx
xor edx, 0xffffffff
mov eax, 0x66debd80
and eax, 0x66debd80
xor eax, 0xffffffff
and edx, eax
xor edx, 0xffffffff
xor edx, 0x96c328d9
mov esi, 0xffffffff
xor esi, 0xe7294b5d
mov ecx, edx
and ecx, esi
mov eax, edx
or eax, esi
xor eax, 0xffffffff
imul eax, ecx
mov ecx, edx
and ecx, 0xe7294b5d
or edx, 0xe7294b5d
imul edx, ecx
add edx, eax
mov ecx, 0x19975570
mov eax, 0xa62a5396
cmp edx, 0x7acd29c
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov edx, dword [0x1027a72c]
and edx, dword [0x1027a730]
mov eax, edx
and eax, 0xe181a75
shl eax, 1
xor edx, 0xe181a75
add edx, eax
xor edx, 0x7dc2ba07
and edx, 0xd580259a
mov ecx, 0x2e62897a
mov eax, 0xa62a5396
cmp edx, 0x871da523
cmovae ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xe120284a
jmp 0x1000af72
mov ecx, dword [0x1027a734]
mov edx, dword [0x1027a738]
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, edx
xor ecx, 0xffffffff
xor edx, 0xffffffff
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov edx, eax
xor edx, 0xffffffff
xor eax, 0xffffffff
or edx, eax
mov eax, 0x5377c951
and eax, 0x5377c951
xor eax, 0xffffffff
and edx, eax
xor edx, 0xffffffff
xor edx, 0x381c0d0c
mov eax, edx
and eax, 0x8da1512c
shl eax, 1
add edx, 0x8da1512c
sub edx, eax
mov ecx, 0xf6513125
mov eax, 0x6325fe14
cmp edx, 0x5a398e63
cmovne ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [0x1027a73c]
and eax, dword [0x1027a740]
mov edx, eax
xor edx, 0xffffffff
and edx, 0x647f389d
mov esi, 0xffffffff
xor esi, 0x647f389d
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x647f389d
or eax, 0x647f389d
imul eax, edx
add eax, ecx
mov ecx, 0x42ec9d4f
xor edx, edx
div ecx
mov edx, eax
xor edx, 0xffffffff
xor eax, 0xffffffff
or edx, eax
mov eax, 0xffffffff
xor eax, 0xc9c90b90
mov ecx, 0xffffffff
xor ecx, 0xc9c90b90
or eax, ecx
and edx, eax
xor edx, 0xffffffff
mov ecx, 0x6e04318b
mov eax, 0xf6513125
cmp edx, 0xc089a3b0
cmove ecx, eax
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xe120284a
jmp 0x1000af72
lea esp, [ebp - 8]
pop esi
pop edi
pop ebp
ret
push eax
mov eax, esp
mov dword [ebp - 0x4c], eax
push eax
mov eax, esp
mov dword [ebp - 0x48], eax
lea eax, [0x10258b8a]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
mov edx, dword [eax]
lea ecx, str.CONFIG
lea eax, [0x1025913a]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xe28c9aba
jmp 0x1000af72
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov ecx, eax
and ecx, 1
shl ecx, 1
xor eax, 1
add eax, ecx
sub esp, 4
mov dword [esp], eax
call fcn.100b1454
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x24]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.101f00f0
add esp, 0xc
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov byte [eax + ecx], 0
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call fcn.10008610
add esp, 4
mov eax, dword [ebp - 0x38]
mov dword [eax], 0x1c48fb76
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xf0fdd61a
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xe9c60390
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0xa62a5396
jmp 0x1000af72
mov eax, dword [ebp - 0x38]
mov dword [eax], 0x6325fe14
jmp 0x1000a5af