Function at 0x4010a0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2c
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
push edi
mov edi, dword [ebp + 8]
push 0x64
push 0x423300
push 0x67
push edi
call esi
push 0x64
push 0x423298
push 0x68
push edi
call esi
mov eax, edi
call fcn.00401310
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0xa
mov esi, eax
push 0x9a
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov ebx, eax
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push ebx
push esi
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0x14
mov ebx, eax
call fcn.00407cbe
mov esi, eax
add esp, 4
test esi, esi
je 0x40112b
mov eax, dword [esp + 0x14]
push eax
mov eax, ebx
call fcn.00404960
mov esi, eax
jmp 0x40112d
xor esi, esi
lea ecx, [esp + 0xc]
push ecx
lea ebx, [esp + 0x18]
mov eax, esi
call fcn.00404a80
test esi, esi
je 0x40114b
mov edx, dword [esi]
mov eax, dword [edx]
push 1
mov ecx, esi
call eax
mov ecx, dword [ebp + 0x14]
mov esi, dword [esp + 0xc]
push ecx
mov ecx, dword [esp + 0x18]
mov eax, esi
mov edx, edi
call fcn.004013a0
add esp, 4
test eax, eax
jne 0x401170
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [0x4232fc]
push 0x68
push edi
mov dword [0x42336c], edx
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
push 0
mov dword [esp + 0x1c], eax
call dword [sym.imp.ole32.dll_OleInitialize]
push str.flash.ocx
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov ebx, eax
test ebx, ebx
je 0x4011f5
push str.DllGetClassObject
push ebx
mov dword [esp + 0x14], 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
lea ecx, [esp + 0xc]
push ecx
push 0x41bf08
push 0x41da0c
call eax
mov eax, dword [esp + 0xc]
mov edx, dword [eax]
mov edx, dword [edx + 0xc]
lea ecx, [esp + 0x10]
push ecx
push 0x41bf68
push 0
push eax
call edx
mov eax, dword [esp + 0xc]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
jmp 0x40120e
lea eax, [esp + 0x10]
push eax
push 0x41bf68
push 1
push 0
push 0x41da0c
call dword [sym.imp.ole32.dll_CoCreateInstance]
push 0xc8
call fcn.00407cbe
add esp, 4
test eax, eax
je 0x40122e
mov ecx, dword [esp + 0x14]
push esi
push ecx
mov esi, eax
call fcn.00402490
jmp 0x401230
xor eax, eax
mov dword [0x423370], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push eax
push 0
push 0x401020
push 7
call dword [sym.imp.USER32.dll_SetWindowsHookExA]
mov ecx, dword [0x423370]
mov edx, dword [ecx]
mov edx, dword [edx + 4]
mov edi, eax
mov eax, dword [0x42336c]
push eax
mov eax, dword [0x423368]
push eax
mov eax, dword [esp + 0x18]
push 0x54000000
push 0
push eax
call edx
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
push 0
push 0
push 0
lea eax, [esp + 0x28]
push eax
call esi
test eax, eax
je 0x4012d0
lea esp, [esp]
mov edx, dword [esp + 0x18]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x1c]
push ecx
push edx
push eax
call dword [sym.imp.USER32.dll_TranslateAcceleratorA]
test eax, eax
jne 0x4012bf
lea ecx, [esp + 0x1c]
push ecx
call dword [sym.imp.USER32.dll_TranslateMessage]
lea edx, [esp + 0x1c]
push edx
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 0
push 0
push 0
lea eax, [esp + 0x28]
push eax
call esi
test eax, eax
jne 0x401290
push edi
call dword [sym.imp.USER32.dll_UnhookWindowsHookEx]
mov ecx, dword [0x423370]
test ecx, ecx
je 0x4012e9
mov edx, dword [ecx]
mov eax, dword [edx]
push 1
call eax
test ebx, ebx
je 0x4012f4
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
call dword [sym.imp.ole32.dll_OleUninitialize]
mov eax, dword [esp + 0x24]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10