Function at 0x433e86
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x10e8
call fcn.005482e0
mov eax, dword [0x5afee0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x10e0], eax
mov eax, dword [ebp + 0xc]
push ebx
push edi
mov dword [ebp - 0x10dc], eax
xor edi, edi
mov eax, 0x800c0011
mov dword [ebp - 0x10d8], ecx
mov dword [ebp - 0x10d0], edx
mov dword [ebp - 0x10d4], eax
cmp ecx, edi
je 0x43418d
cmp word [ecx], di
je 0x43418d
cmp edx, edi
je 0x43418d
cmp word [edx], di
je 0x43418d
xor eax, eax
push 0x7e
mov word [ebp - 0x84], ax
lea eax, [ebp - 0x82]
push edi
push eax
call fcn.00537010
mov ecx, dword [ebp - 0x10d0]
add esp, 0xc
push 0x40
lea ebx, [ebp - 0x84]
mov edi, str.x_flash_version
call fcn.0043419d
test eax, eax
je 0x433f2d
mov eax, 0x800c0011
jmp 0x43418d
push dword [ebp - 0x10d8]
call fcn.00461808
call fcn.00462029
test eax, eax
jne 0x433f23
push 0x1046
push eax
mov word [ebp - 0x10cc], ax
lea eax, [ebp - 0x10ca]
push eax
call fcn.00537010
mov ecx, dword [ebp - 0x10d0]
add esp, 0xc
push 0x824
lea ebx, [ebp - 0x10cc]
mov edi, str.Referer
call fcn.0043419d
xor ebx, ebx
cmp eax, ebx
je 0x433f23
call fcn.00461808
mov ecx, eax
mov eax, dword [ebp - 0x10d8]
call fcn.004621d4
test eax, eax
je 0x433fcb
mov eax, dword [esi]
push str.text_html
push 0xd
push esi
call dword [eax + 0x10]
mov eax, dword [esi]
push ebx
push ebx
push 0xd
push esi
call dword [eax + 0x14]
mov eax, dword [esi]
push ebx
push 0xc8
push ebx
push esi
call dword [eax + 0x18]
mov eax, dword [ebp - 0x10dc]
mov dword [eax], 1
xor eax, eax
jmp 0x43418d
mov dword [ebp - 0x10e8], ebx
call fcn.00461808
mov ecx, dword [ebp - 0x10d8]
call fcn.004622af
mov dword [ebp - 0x10e4], eax
call fcn.00413091
mov edi, eax
neg edi
sbb edi, edi
neg edi
je 0x4340ab
push 0x1048
call fcn.0052f69b
pop ecx
mov dword [ebp - 0x10d0], eax
cmp eax, ebx
je 0x4340ab
push 0x823
push eax
call fcn.00413091
call fcn.0043f96e
test eax, eax
je 0x43409f
mov eax, dword [ebp - 0x10d0]
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x434030
sub eax, edx
sar eax, 1
push eax
lea eax, [ebp - 0x10cc]
push eax
push dword [ebp - 0x10d0]
call fcn.005330a4
add esp, 0xc
test eax, eax
je 0x43409f
push 0x1048
lea eax, [ebp - 0x10cc]
push ebx
push eax
call fcn.00537010
mov eax, dword [ebp - 0x10d0]
add esp, 0xc
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x434076
sub eax, edx
sar eax, 1
push eax
push dword [ebp - 0x10d0]
lea eax, [ebp - 0x10cc]
push 0x823
push eax
call fcn.00531bbd
add esp, 0x10
push dword [ebp - 0x10d0]
call fcn.00530cbd
pop ecx
call fcn.00461808
mov ecx, dword [ebp - 0x10d8]
lea eax, [ebp - 0x10cc]
push eax
lea edx, [ebp - 0x10e8]
call fcn.00461a48
test eax, eax
je 0x434187
cmp edi, ebx
jne 0x4340e3
mov dword [ebp - 0x10d4], 1
jmp 0x43417b
cmp dword [ebp - 0x10e4], 2
jne 0x434151
push 0x580d98
push 0x202
push dword [0x5c0b4c]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
push eax
push dword [0x5c0b4c]
mov dword [ebp - 0x10d4], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x10d4]
mov edi, dword [ebp - 0x10e0]
push dword [0x5c0b4c]
mov dword [edi + 0x1c], eax
mov dword [edi + 0x18], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push str.image_png
push 0xd
mov dword [edi + 0x14], eax
mov eax, dword [esi]
push esi
call dword [eax + 0x10]
mov edi, dword [edi + 0x18]
push edi
push edi
jmp 0x434160
mov eax, dword [esi]
push str.text_plain
push 0xd
push esi
call dword [eax + 0x10]
push ebx
push ebx
mov eax, dword [esi]
push 0xd
push esi
call dword [eax + 0x14]
mov eax, dword [esi]
push ebx
push 0xc8
push ebx
push esi
call dword [eax + 0x18]
mov dword [ebp - 0x10d4], ebx
mov eax, dword [ebp - 0x10dc]
mov dword [eax], 1
mov eax, dword [ebp - 0x10d4]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop ebx
call fcn.0052f7d0
leave
ret 8