Function at 0x1009353
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x1c
push esi
push edi
mov esi, ecx
xor edi, edi
cmp dword [esi + 0x4b8], edi
jne 0x1009373
mov eax, 0x80004003
jmp 0x10098a2
cmp dword [esi + 0x4a8], edi
je 0x1009369
cmp dword [esi + 0x494], edi
je 0x1009369
push 0x1002f64
push 0xd2
push dword [0x1011360]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
cmp eax, edi
je 0x1009369
push eax
push dword [0x1011360]
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, edi
je 0x1009369
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x1c], eax
cmp eax, edi
je 0x1009369
push ebx
lea eax, [ebp - 4]
push eax
mov dword [ebp - 4], edi
call sub.WMVCore.DLL_WMCreateProfileManager
mov ebx, eax
cmp ebx, edi
push 0x42
pop eax
mov word [esi + 0xe], ax
jge 0x10093f5
push ebx
push edi
push edi
lea ecx, [esi + 4]
call fcn.01007ddc
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x10093ee
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, ebx
jmp 0x10098a1
push edi
push edi
lea ebx, [esi + 4]
push edi
mov ecx, ebx
call fcn.01007ddc
push 0x42
pop eax
mov word [esi + 0xe], ax
mov ecx, ebx
cmp dword [ebp - 4], edi
jne 0x1009423
mov esi, 0x80004003
push esi
push 6
push edi
call fcn.01007ddc
jmp 0x1009642
push edi
push 6
push 1
call fcn.01007ddc
mov eax, dword [ebp - 4]
lea edx, [ebp - 0xc]
push edx
push dword [ebp - 0x1c]
mov dword [ebp - 0xc], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
cmp eax, edi
push 0x43
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jge 0x100945d
push eax
push edi
push edi
call fcn.01007ddc
jmp 0x100970a
push edi
push edi
push edi
call fcn.01007ddc
push 0x43
pop eax
mov word [esi + 0xe], ax
mov ecx, ebx
cmp dword [ebp - 0xc], edi
jne 0x1009486
mov esi, 0x80004003
push esi
push 6
push edi
call fcn.01007ddc
jmp 0x1009635
push edi
push 6
push 1
call fcn.01007ddc
lea eax, [ebp - 8]
push eax
push 0x100344c
push 3
push edi
push 0x10033dc
mov dword [ebp - 8], edi
call dword [sym.imp.ole32.dll_CoCreateInstance]
cmp eax, edi
push 0x21
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jge 0x10094c7
push eax
push edi
push edi
call fcn.01007ddc
jmp 0x10096fd
push edi
push edi
push edi
call fcn.01007ddc
push 0x1f
pop eax
mov word [esi + 0xe], ax
mov ecx, ebx
cmp dword [ebp - 8], edi
jne 0x10094f0
mov esi, 0x80004003
push esi
push 6
push edi
call fcn.01007ddc
jmp 0x1009628
push edi
push 6
push 1
call fcn.01007ddc
mov eax, dword [ebp - 8]
mov edx, dword [eax]
lea ecx, [esi + 0x4b0]
push ecx
push 0x100343c
push eax
call dword [edx]
cmp eax, edi
push 0x44
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jl 0x10094ba
push edi
push edi
push edi
call fcn.01007ddc
push 0x44
pop eax
mov word [esi + 0xe], ax
mov ecx, ebx
cmp dword [esi + 0x4b0], edi
je 0x10094dd
push edi
push 6
push 1
call fcn.01007ddc
mov ecx, dword [esi + 0x4b0]
mov eax, dword [esi + 0x494]
mov edx, dword [eax]
push 0x1002f44
push ecx
push eax
call dword [edx + 0xc]
cmp eax, edi
push 0x2e
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jl 0x10094ba
push edi
push edi
push edi
call fcn.01007ddc
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
push 1
push eax
call dword [ecx + 0x14]
cmp eax, edi
push 0x46
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jl 0x10094ba
push edi
push edi
push edi
call fcn.01007ddc
mov eax, dword [esi + 0x40]
mov ecx, dword [ebp - 8]
mov edx, dword [ecx]
push edi
push eax
push ecx
call dword [edx + 0xc]
cmp eax, edi
push 0x47
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jl 0x10094ba
push edi
push edi
push edi
call fcn.01007ddc
mov eax, dword [ebp - 8]
lea edx, [ebp - 0x10]
push edx
push 0x1002f34
mov dword [ebp - 0x10], edi
mov ecx, dword [eax]
push eax
call dword [ecx]
cmp eax, edi
push 0x45
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jge 0x10095f7
push eax
push edi
push edi
call fcn.01007ddc
jmp 0x10096f0
push edi
push edi
push edi
call fcn.01007ddc
push 0x45
pop eax
mov word [esi + 0xe], ax
mov ecx, ebx
cmp dword [ebp - 0x10], edi
jne 0x1009656
mov esi, 0x80004003
push esi
push 6
push edi
call fcn.01007ddc
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x1009628
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x1009635
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x1009642
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x100964f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, esi
jmp 0x10098a1
push edi
push 6
push 1
call fcn.01007ddc
mov eax, dword [ebp - 0x10]
push dword [ebp - 0xc]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
cmp eax, edi
push 0x48
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jl 0x10095ea
push edi
push edi
push edi
call fcn.01007ddc
mov eax, dword [esi + 0x4b8]
lea ecx, [ebp - 0x14]
push ecx
push edi
push 1
push eax
mov ecx, esi
mov dword [ebp - 0x14], edi
call fcn.01008baa
cmp eax, edi
mov dword [ebp - 0x1c], eax
jge 0x10096b7
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x100980e
jmp 0x1009808
cmp dword [ebp - 0x14], edi
je 0x1009770
mov eax, dword [esi + 0x494]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
cmp eax, edi
push 0x30
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x18], eax
mov ecx, ebx
jge 0x100972c
push eax
push edi
push edi
call fcn.01007ddc
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x10096fd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x100970a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x1009717
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x1009724
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x18]
jmp 0x10098a1
push edi
push edi
push edi
call fcn.01007ddc
mov eax, dword [esi + 0x4b0]
lea ecx, [ebp - 0x18]
push ecx
push edi
push edi
push eax
mov ecx, esi
mov dword [ebp - 0x18], edi
call fcn.01008baa
cmp eax, edi
mov dword [ebp - 0x1c], eax
jge 0x1009762
mov eax, dword [ebp - 0x18]
cmp eax, edi
je 0x1009805
jmp 0x10097ff
cmp dword [ebp - 0x18], edi
jne 0x10097ae
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x100977d
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x100978a
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x1009797
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x10097a4
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, 0x80004003
jmp 0x10098a1
push dword [ebp - 0x18]
mov eax, dword [esi + 0x494]
push dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
cmp eax, edi
push 0x2f
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x1c], eax
mov ecx, ebx
jl 0x10097f4
push edi
push edi
push edi
call fcn.01007ddc
mov eax, dword [esi + 0x49c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
cmp eax, edi
push 0x4a
pop ecx
mov word [esi + 0xe], cx
mov dword [ebp - 0x1c], eax
mov ecx, ebx
jge 0x1009847
push eax
push edi
push edi
call fcn.01007ddc
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x100981b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x1009828
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x1009835
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x1009842
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x1c]
jmp 0x10098a1
push edi
push edi
push edi
call fcn.01007ddc
mov eax, dword [ebp - 0x18]
mov dword [esi + 0xd0], 1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x14]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x10]
cmp eax, edi
je 0x1009878
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 8]
cmp eax, edi
je 0x1009885
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xc]
cmp eax, edi
je 0x1009892
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 4]
cmp eax, edi
je 0x100989f
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
xor eax, eax
pop ebx
pop edi
pop esi
leave
ret