Function at 0x435cfc
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x55a1c9
call fcn.00514868
sub esp, 0x194
push ebx
mov ebx, ecx
xor eax, eax
mov dword [ebp - 0x10], ebx
push esi
push edi
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], eax
mov dword [ebp - 4], eax
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], eax
mov byte [ebp - 4], 1
mov dword [ebx + 0x24], eax
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov byte [ebp - 4], 2
lea ecx, [ebx + 0x48]
call fcn.004958be
mov byte [ebp - 4], 3
lea eax, [ebp - 0x1a0]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_Ordinal_12403]
mov eax, dword [ebp + 8]
and dword [ebx + 0x50], 0
and dword [ebx + 4], 0
push 0x10
pop esi
push esi
mov dword [ebx], eax
call fcn.005145dd
pop ecx
mov dword [ebp + 8], eax
mov byte [ebp - 4], 4
test eax, eax
je 0x435d86
push ebx
mov ecx, eax
call fcn.00432e5e
jmp 0x435d88
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov dword [ebx + 0x30], eax
call fcn.005145dd
pop ecx
mov dword [ebp + 8], eax
mov byte [ebp - 4], 5
test eax, eax
je 0x435dab
push ebx
mov ecx, eax
call fcn.00432e5e
jmp 0x435dad
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov dword [ebx + 0x3c], eax
call fcn.005145dd
pop ecx
mov dword [ebp + 8], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x435dd0
push ebx
mov ecx, eax
call fcn.00432e5e
jmp 0x435dd2
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov dword [ebx + 0x34], eax
call fcn.005145dd
pop ecx
mov dword [ebp + 8], eax
mov byte [ebp - 4], 7
test eax, eax
je 0x435df5
push ebx
mov ecx, eax
call fcn.00432e5e
jmp 0x435df7
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov dword [ebx + 0x38], eax
call fcn.005145dd
pop ecx
mov dword [ebp + 8], eax
mov byte [ebp - 4], 8
test eax, eax
je 0x435e1a
push ebx
mov ecx, eax
call fcn.00432e5e
jmp 0x435e1c
xor eax, eax
mov byte [ebp - 4], 3
push esi
mov dword [ebx + 0x40], eax
call fcn.005145dd
pop ecx
mov dword [ebp + 8], eax
mov byte [ebp - 4], 9
test eax, eax
je 0x435e3f
push ebx
mov ecx, eax
call fcn.00432e5e
jmp 0x435e41
xor eax, eax
mov byte [ebp - 4], 3
mov ecx, ebx
push dword [ebx + 0x30]
mov dword [ebx + 0x44], eax
push 0x5d2170
call fcn.004362f3
push dword [ebx + 0x34]
mov ecx, ebx
push 0x5d1fa4
call fcn.004362f3
push dword [ebx + 0x38]
mov ecx, ebx
push 0x5d1f9c
call fcn.004362f3
push dword [ebx + 0x3c]
mov ecx, ebx
push 0x5d2178
call fcn.004362f3
push dword [ebx + 0x40]
mov ecx, ebx
push 0x5d2180
call fcn.004362f3
push dword [ebx + 0x44]
mov ecx, ebx
push 0x5d218c
call fcn.004362f3
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x5d2194
mov edi, eax
push 0xb5
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push esi
push edi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea ecx, [esi + 1]
push ecx
call fcn.0053d39c
mov edi, dword [ebp - 0x10]
pop ecx
push ebx
mov dword [edi + 8], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push esi
push eax
push dword [edi + 8]
call fcn.0052bf60
mov eax, dword [edi + 8]
add esp, 0xc
push ebx
mov byte [esi + eax], 0
call dword [sym.imp.KERNEL32.dll_FreeResource]
or dword [ebp - 4], 0xffffffff
mov eax, edi
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 4