Function at 0x1002ee93
Capabilities:
Extract resource via kernel32 functions
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10054a09
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xa8
cmp byte [ebp + 0x1c], 0
push ebx
push esi
push edi
mov edi, edx
mov ebx, ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0x28], ebx
je 0x1002f41b
cmp byte [ebp + 0x18], 0
je 0x1002efb6
mov dword [esp + 0xc], 0x3ff5
cmp dword [esp + 0xc], 0x4198
jle 0x1002ef88
xor esi, esi
mov dword [esp + 0x18], esi
mov edi, esi
mov dword [esp + 0x14], esi
mov ebx, esi
mov dword [esp + 0x10], esi
lea eax, [ebx + edi]
mov dword [esp + 0x30], 0xbee
mov edi, dword [esp + 0x18]
mov ebx, eax
mov dword [esp + 0x2c], eax
mov eax, ebx
lea ecx, [esp + 0x80]
and eax, edi
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002ef31
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push esi
push 1
lea ecx, [esp + 0x88]
call fcn.1000c586
dec ebx
dec dword [esp + 0x30]
jne 0x1002ef14
mov ebx, dword [esp + 0x10]
mov edi, dword [esp + 0x14]
inc ebx
mov dword [esp + 0x10], ebx
cmp ebx, 0x7f5c
jl 0x1002eeff
inc edi
mov dword [esp + 0x14], edi
cmp edi, 0x20de
jl 0x1002eef9
mov eax, dword [esp + 0x18]
inc eax
mov dword [esp + 0x18], eax
cmp eax, 0x7436
jl 0x1002eef3
mov ebx, dword [esp + 0x28]
cmp dword [esp + 0xc], 0x3fe6
jge 0x1002ef9d
push str.amxvkob_ltuuzwpgf_ehizhkab_fczaddyfz_lbxrvrd_eaamlv_vgfiggi_jjmjlpr_ytnpeu_lvn_cwyxlufgz_snzlas_swghyjkhl
call fcn.1003de4c
pop ecx
cmp byte [ebx], 0
je 0x1002f485
push 0xee6
call dword [sym.imp.USER32.dll_DestroyWindow]
jmp 0x1002f485
mov esi, dword [ebp + 0x20]
mov dword [esp + 0x18], edi
mov dword [esp + 0x30], esi
mov dword [esp + 0x28], 0x76cf
cmp dword [esp + 0x28], 0x79aa
push 0
pop ebx
jle 0x1002f038
push ebx
push ebx
call dword [sym.imp.GDI32.dll_GetNearestPaletteIndex]
mov esi, ebx
mov dword [esp + 0x10], ebx
mov edi, ebx
mov ecx, edi
mov dword [esp + 0x28], esi
mov dword [esp + 0x2c], ebx
shl esi, cl
mov eax, esi
mov ecx, 0x1006de98
and eax, ebx
cdq
push edx
push eax
call fcn.1000bb28
inc ebx
cmp ebx, 0x33cc
jl 0x1002eff2
mov esi, dword [esp + 0x10]
inc edi
push 0
pop ebx
cmp edi, 0x7982
jl 0x1002efe6
inc esi
mov dword [esp + 0x10], esi
cmp esi, 0x3517
jl 0x1002efe4
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov esi, dword [ebp + 0x20]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x1c], 0xffffffff
mov dword [esp + 0x24], 0xa421e0be
mov dword [esp + 0x10], 0xf4d39d98
mov dword [esp + 0x40], 1
mov dword [esp + 0x38], 0xd52276c1
mov dword [esp + 0x1c], ebx
jmp 0x1002f16b
push 2
lea ecx, [esp + 0x74]
call fcn.10001b7c
push ecx
lea eax, [esp + 0x74]
mov dword [esp + 0xc0], 2
mov dword [esp + 0x58], 0xfffffffd
lea edx, [esp + 0x80]
push eax
mov cl, 1
call fcn.1002e947
mov edx, dword [esp + 0x78]
pop ecx
pop ecx
xor ecx, ecx
mov eax, dword [edx + 4]
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x10]
cmp dword [edx + 4], eax
mov eax, dword [esp + 0x1c]
setne cl
cmp ecx, 0x9b504dbf
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setl cl
cmp ecx, 0x11aa
jl 0x1002f0f5
mov dword [esp + 0x24], 0xfffffffc
jmp 0x1002f0ec
cmp dword [esp + 0x24], ebx
jne 0x1002f156
push ecx
call fcn.100301b0
inc dword [esp + 0x28]
pop ecx
cmp dword [esp + 0x24], 0x22
jle 0x1002f0db
jmp 0x1002f156
push 0x7476
lea eax, [esp + 0x38]
mov dword [esp + 0x38], 0xffffffff
push 1
push eax
mov ecx, 0x39c1
mov dword [esp + 0x48], ebx
call fcn.1002d3ee
add esp, 0xc
lea eax, [esp + 0x3c]
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x24]
push 1
push eax
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x7c]
push eax
push ebx
push ebx
push 0x7f91
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x54]
push eax
lea eax, [esp + 0x5c]
push eax
push 0x55bb
call fcn.10030277
add esp, 0x2c
or dword [esp + 0xbc], 0xffffffff
lea ecx, [esp + 0x70]
call fcn.10001bd9
dec dword [esp + 0x1c]
cmp dword [esp + 0x1c], 0xffffffe3
jle 0x1002f069
xor eax, eax
mov dword [esp + 0x6c], 7
mov dword [esp + 0x68], ebx
mov word [esp + 0x58], ax
mov dword [esp + 0xbc], 3
cmp esi, edi
ja 0x1002f1bd
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x58]
cmp ecx, eax
je 0x1002f1ac
push 0xffffffffffffffff
push ebx
push eax
call fcn.1000c77c
push ebx
push 1
lea ecx, [esp + 0x60]
call fcn.1000c8be
jmp 0x1002f485
push ecx
push ecx
mov dword [esp + 0x30], 6
lea ecx, [esp + 0x2b]
mov dl, 1
mov byte [esp + 0x2b], bl
call fcn.1002d3c4
pop ecx
pop ecx
call fcn.1002f9c0
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x1c]
push eax
push ecx
push ecx
lea edx, [esp + 0x40]
xor cl, cl
call fcn.10030482
mov eax, dword [esp + 0x28]
add esp, 0x10
cmp eax, dword [esp + 0x30]
jae 0x1002f198
mov dword [esp + 0xc], 0xb743d837
mov dword [esp + 0x14], 0x8b922806
mov dword [esp + 0xc], 0xc3c
cmp dword [esp + 0xc], 0xda6
jle 0x1002f287
mov esi, ebx
mov edi, ebx
mov ecx, ebx
mov dword [esp + 0x10], ebx
mov eax, edi
cdq
idiv ecx
lea ecx, [esp + 0x98]
lea eax, [esi + edx]
cdq
push edx
push eax
call fcn.10002543
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1002f24e
mov eax, dword [eax]
push eax
call fcn.1003de4c
pop ecx
push ebx
push 1
lea ecx, [esp + 0xa0]
call fcn.1000c586
mov ecx, dword [esp + 0x10]
inc ecx
mov dword [esp + 0x10], ecx
cmp ecx, 0x525b
jl 0x1002f22d
inc edi
cmp edi, 0x4ba6
jl 0x1002f227
inc esi
cmp esi, 0x698c
jl 0x1002f225
mov dword [esp + 0x2c], 0xffffffff
cmp dword [esp + 0xc], 0x933
jge 0x1002f2a4
push str.esmoa_euapwhoq_pqhiokdq_hicwvr_tqj_qdq_roa_nzm_yajkx_athimrkza
call fcn.1003de4c
pop ecx
push 3
pop edi
mov dword [esp + 0xbc], edi
mov dword [esp + 0x10], 0x184e
mov dword [esp + 0xc], ebx
jmp 0x1002f2cc
mov eax, dword [esp + 0xc]
mov dword [esp + eax*4 + 0x44], 0x82062403
inc dword [esp + 0xc]
cmp dword [esp + 0xc], 4
jl 0x1002f2bc
mov dword [esp + 0xc], ebx
jmp 0x1002f35e
mov dword [esp + 0x14], 0x7b6fe6d3
mov esi, dword [esp + 0x44]
mov eax, dword [esp + 0xc]
neg esi
sbb esi, esi
xor ecx, ecx
inc esi
mov edx, dword [esp + eax*4 + 0x44]
mov eax, dword [esp + 0xc]
cmp eax, esi
setle cl
imul edx, ecx
test edx, edx
je 0x1002f30b
mov eax, dword [esp + 0xc]
mov eax, dword [esp + 0x48]
xor edx, edx
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0xc]
push 0x597d
push 0x5e93
push 1
mov ecx, dword [esp + eax*4 + 0x50]
mov eax, dword [esp + 0x20]
imul eax, dword [esp + 0x20]
cmp eax, ecx
mov eax, dword [esp + 0x18]
setne dl
xor ecx, ecx
mov eax, dword [esp + eax*4 + 0x50]
cmp eax, edx
mov dl, 1
setne cl
mov dword [esp + 0x20], ecx
xor cl, cl
call fcn.1002e6e5
add esp, 0xc
inc dword [esp + 0xc]
cmp dword [esp + 0xc], edi
jle 0x1002f2dc
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x2c]
neg ecx
push 1
sbb ecx, ecx
xor edx, edx
neg ecx
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [esp + 0x14]
mov eax, dword [esp + 0x18]
cmp edx, eax
setne cl
xor edx, edx
cmp ecx, 0x51c8
setg dl
xor ebx, ebx
add edx, dword [esp + 0x14]
mov eax, dword [esp + 0x30]
cmp edx, eax
setne bl
sub ebx, 0x4a3b31f0
sub ebx, dword [esp + 0x18]
mov eax, dword [esp + 0x10]
neg ebx
sbb ebx, ebx
xor ecx, ecx
inc ebx
cmp eax, ebx
mov eax, dword [esp + 0x4c]
setl cl
xor edx, edx
cmp ecx, eax
mov eax, dword [esp + 0x18]
setg dl
xor ecx, ecx
cmp eax, edx
lea eax, [esp + 0x5c]
push eax
setl cl
sub ecx, dword [esp + 0x18]
neg ecx
sbb ecx, ecx
inc ecx
sub ecx, dword [esp + 0x18]
neg ecx
sbb ecx, ecx
inc ecx
mov dword [esp + 0x1c], ecx
push ecx
lea ecx, [esp + 0x24]
call fcn.1002dd1c
mov eax, dword [esp + 0x24]
add esp, 0xc
push 0
pop ebx
cmp eax, dword [esp + 0x30]
jb 0x1002f201
jmp 0x1002f198
cmp byte [ebp + 0x28], 0
je 0x1002f42c
mov eax, dword [ebp + 0x38]
mov dword [eax], 5
jmp 0x1002f485
mov edx, dword [ebp + 0x34]
xor esi, esi
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 0x24]
mov eax, dword [edx]
mov ecx, dword [ebx]
mov eax, dword [ebp + 0x14]
sub ecx, dword [edx]
mov dword [eax], ecx
mov eax, dword [eax]
mov dword [edi], eax
cmp dword [edi], esi
je 0x1002f462
mov ecx, dword [ebp + 0x30]
mov eax, dword [ecx]
mov eax, dword [edi]
mov eax, dword [ebx]
imul eax, eax, 0x6b17
cmp eax, dword [ecx]
je 0x1002f462
xor ecx, ecx
inc ecx
jmp 0x1002f464
mov ecx, esi
mov eax, dword [ebp + 0x2c]
mov dword [eax], ecx
lea eax, [ecx - 0x7cce3a79]
imul eax, dword [edx]
cmp eax, 0xdd77
jge 0x1002f47d
cmp dword [edx], esi
je 0x1002f480
xor esi, esi
inc esi
mov eax, dword [ebp + 0x10]
mov dword [eax], esi
mov ecx, dword [esp + 0xb4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret