Function at 0x510a10
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x57cc20
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x5edd38]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x4c], edi
movzx esi, word [ebp + 8]
push 0xf0
push esi
push dword [0x5f4ac0]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
xor ecx, ecx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x30], ecx
test eax, eax
je 0x510a7d
push eax
push dword [0x5f4ac0]
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x510a7d
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x44], eax
push 5
push esi
push dword [0x5f4ac0]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x510f08
push eax
push dword [0x5f4ac0]
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x510efa
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edx, eax
test edx, edx
je 0x510efa
movzx ecx, word [edx + 2]
mov ebx, 0xffff
mov esi, ecx
movzx eax, si
mov dword [ebp - 0x58], eax
xor eax, eax
cmp cx, bx
mov dword [ebp - 0x40], esi
push edx
sete al
mov dword [ebp - 0x60], eax
xor eax, eax
cmp cx, bx
sete al
lea eax, [eax*8 + 8]
movzx eax, word [eax + edx]
mov dword [ebp - 0x54], eax
call fcn.00513ed0
add esp, 4
mov ebx, eax
mov dword [ebp - 0x50], ebx
push 5
push dword [edi + 4]
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x3c], ecx
cmp ax, word [ebp - 0x54]
jae 0x510f08
nop
mov edx, 0xffff
cmp si, dx
jne 0x510b2f
mov esi, dword [ebx + 0x14]
jmp 0x510b33
movzx esi, word [ebx + 0x10]
cmp word [ebp - 0x58], dx
mov eax, 0x18
mov edx, 0x12
cmovne eax, edx
cmp word [eax + ebx], 0x7b
jne 0x510e89
mov ecx, dword [ebp - 0x44]
mov eax, ecx
mov dword [ebp - 0x30], 0
test ecx, ecx
je 0x510b7a
nop
movzx ecx, word [eax]
add eax, 2
mov dword [ebp - 0x38], eax
movzx edi, word [eax]
mov edx, dword [eax + 2]
add eax, 6
cmp ecx, esi
je 0x510bc4
add eax, edx
jne 0x510b60
xor esi, esi
xor eax, eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 4], eax
test esi, esi
je 0x510c24
push esi
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
test edi, edi
je 0x510ec3
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
test eax, eax
je 0x510eab
mov ecx, dword [ebp - 0x30]
push esi
test ecx, ecx
je 0x510bd9
push ecx
push eax
call fcn.0053e840
add esp, 0xc
xor eax, eax
jmp 0x510bf9
mov eax, 0x378
cmp di, ax
je 0x510b7a
mov eax, dword [ebp - 0x38]
lea esi, [edx + 6]
mov dword [ebp - 0x30], eax
jmp 0x510b7c
push 0
push eax
call fcn.0053f340
add esp, 0xc
call fcn.004116f6
mov dword [eax], 0x16
call fcn.0054222b
mov eax, 0x16
push eax
call fcn.0047f1b0
add esp, 4
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea eax, [ebp - 0x14]
push eax
push 1
push edi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov dword [ebp - 0x30], eax
test eax, eax
mov eax, dword [ebp - 0x14]
js 0x510e9e
mov dword [ebp - 0x48], 0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 1
push ecx
push eax
call fcn.00517470
mov edi, dword [ebp - 0x48]
mov esi, eax
add esp, 8
mov dword [ebp - 0x30], esi
test esi, esi
js 0x510e37
call fcn.0051b310
mov esi, dword [ebp - 0x40]
mov ecx, 0xffff
cmp si, cx
mov eax, 0x18
mov edx, 0x12
cmovne eax, edx
add eax, ebx
mov dword [ebp - 0x38], eax
cmp si, cx
jne 0x510c87
movzx eax, word [ebx + 0xc]
movsx ecx, ax
movzx eax, word [ebx + 0xe]
movsx edx, ax
movzx eax, word [ebx + 0x10]
jmp 0x510c99
movzx eax, word [ebx + 8]
movsx ecx, ax
movzx eax, word [ebx + 0xa]
movsx edx, ax
movzx eax, word [ebx + 0xc]
cwde
add eax, ecx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x24], eax
mov eax, 0xffff
mov dword [ebp - 0x2c], ecx
cmp si, ax
jne 0x510cb5
movzx eax, word [ebx + 0x12]
jmp 0x510cb9
movzx eax, word [ebx + 0xe]
cwde
add eax, edx
mov dword [ebp - 0x20], eax
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x4c]
push dword [eax + 4]
call dword [sym.imp.USER32.dll_MapDialogRect]
mov edx, 0xffff
cmp si, dx
jne 0x510ce4
mov eax, dword [ebx + 4]
mov ecx, dword [ebx + 0x14]
mov dword [ebp - 0x30], eax
jmp 0x510cef
movzx ecx, word [ebx + 0x10]
mov dword [ebp - 0x30], 0
mov edx, dword [ebp - 0x28]
lea eax, [ebx + 8]
cmovne eax, ebx
push 0
push dword [0x5f4abc]
mov esi, dword [eax]
mov eax, dword [ebp - 0x4c]
or esi, 0x10000
push ecx
mov ecx, dword [ebp - 0x2c]
push dword [eax + 4]
mov eax, dword [ebp - 0x20]
sub eax, edx
push eax
mov eax, dword [ebp - 0x24]
sub eax, ecx
push eax
push edx
push ecx
push esi
push 0
push 0x5b94ec
push dword [ebp - 0x30]
call fcn.004171a0
mov esi, eax
mov dword [ebp - 0x30], esi
test esi, esi
je 0x510e2f
mov eax, 0xffff
cmp word [ebp - 0x40], ax
jne 0x510d56
mov eax, dword [ebx]
test eax, eax
je 0x510d56
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowContextHelpId]
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x18], 0
lea eax, [ebp - 0x18]
mov byte [ebp - 4], 2
push eax
push 0x5b8d24
lea ecx, [ebp - 0x30]
call fcn.005181a0
test eax, eax
jns 0x510d97
push edi
push 0
push 0x58f000
push 0
push 0
push ebx
push esi
push dword [ebp - 0x38]
call fcn.0051b190
mov dword [ebp - 0x30], eax
jmp 0x510de6
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x1c]
push edi
push 0
push 0x58f000
mov ebx, dword [eax]
push ecx
push dword [ebp - 0x5c]
mov byte [ebp - 4], 3
mov ebx, dword [ebx + 0x28]
mov ecx, ebx
push esi
push dword [ebp - 0x38]
push eax
call dword [0x5817c0]
call ebx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x1c]
mov byte [ebp - 4], 2
test eax, eax
je 0x510de6
mov ecx, dword [eax]
push eax
mov ebx, dword [ecx + 8]
mov ecx, ebx
call dword [0x5817c0]
call ebx
mov eax, dword [ebp - 0x18]
mov byte [ebp - 4], 1
test eax, eax
je 0x510e01
mov ecx, dword [eax]
push eax
mov ebx, dword [ecx + 8]
mov ecx, ebx
call dword [0x5817c0]
call ebx
cmp dword [ebp - 0x30], 0
jl 0x510eed
push 0x13
push 0
push 0
xor eax, eax
cmp word [ebp - 0x3c], ax
push 0
cmovne eax, dword [ebp - 0x34]
push 0
push eax
push esi
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ebx, dword [ebp - 0x50]
mov dword [ebp - 0x34], esi
jmp 0x510e37
call fcn.0047f260
mov dword [ebp - 0x30], eax
push edi
mov byte [ebp - 4], 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x510e60
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5817c0]
call esi
mov edi, dword [ebp - 0x34]
push dword [ebp - 0x60]
push ebx
call fcn.00513f70
mov ecx, dword [ebp - 0x3c]
add esp, 8
inc ecx
mov ebx, eax
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x3c], ecx
cmp cx, word [ebp - 0x54]
jae 0x510ee8
mov esi, dword [ebp - 0x40]
jmp 0x510b20
test cx, cx
je 0x510e63
push 2
push edi
call dword [sym.imp.USER32.dll_GetWindow]
mov edi, eax
mov dword [ebp - 0x34], edi
jmp 0x510e63
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x510ee8
jmp 0x510ed8
call fcn.0047f260
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x510ee8
jmp 0x510ed8
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0x8007000e
mov dword [ebp - 4], 0xffffffff
test eax, eax
je 0x510f01
mov ecx, dword [eax]
push eax
mov esi, dword [ecx + 8]
mov ecx, esi
call dword [0x5817c0]
call esi
mov eax, dword [ebp - 0x30]
jmp 0x510f0a
push edi
mov byte [ebp - 4], 0
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
jmp 0x510eb3
call fcn.0047f260
jmp 0x510f0a
mov eax, 0x8007000e
jmp 0x510f0a
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00401682
mov esp, ebp
pop ebp
ret 4