Function at 0x445908
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffac
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
mov dword [ebp - 0xc], eax
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp + 0x18]
xor eax, eax
push ebp
push 0x445bd3
push dword fs:[eax]
mov dword fs:[eax], esp
lea eax, [ebp - 8]
mov edx, dword [0x40b74c]
call fcn.00407ff0
push 0xffffffffffffffeb
mov eax, dword [ebp + 0x14]
push eax
call fcn.0040a110
mov edx, dword [eax*4 + 0x580cb8]
lea eax, [ebp - 0x54]
mov ecx, 0
call fcn.00405b5c
mov ecx, dword [ebp - 0x54]
lea eax, [ebp - 4]
mov edx, 0x445bf4
call fcn.00405cec
mov byte [ebp - 0x15], 0
push 2
mov eax, dword [ebp - 4]
call fcn.00405f64
push eax
push edi
call fcn.004095ec
mov ebx, eax
test ebx, ebx
je 0x445ba7
push ebx
push edi
call fcn.00409a28
mov edx, esi
imul edx, esi
add edx, edx
add edx, edx
add edx, 0x28
cmp eax, edx
jne 0x445ba7
push ebx
push edi
call fcn.00409920
mov ebx, eax
test ebx, ebx
je 0x445ba7
mov eax, esi
imul esi
push eax
lea eax, [ebp - 8]
mov ecx, 1
mov edx, dword [0x40b74c]
call fcn.00407ed0
add esp, 4
push ebx
call fcn.00409940
mov edi, eax
lea edx, [ebp - 0x50]
mov eax, edi
mov ecx, 0x28
call fcn.004032cc
add edi, 0x28
mov eax, esi
imul esi
mov ecx, eax
add ecx, ecx
add ecx, ecx
mov edx, dword [ebp - 8]
mov eax, edi
call fcn.004032cc
mov eax, ebx
call fcn.0040a448
push ebx
call fcn.00409654
mov eax, dword [ebp + 0x10]
and eax, 0xff
shl eax, 0x10
mov edx, dword [ebp + 0x10]
and edx, 0xff00
add eax, edx
mov edx, dword [ebp + 0x10]
and edx, 0xff0000
shr edx, 0x10
add eax, edx
mov dword [ebp + 0x10], eax
cmp dword [ebp + 8], 0
je 0x445a5b
mov edx, dword [ebp - 0xc]
mov edx, dword [edx + 0x1c]
mov eax, dword [ebp - 0x14]
imul edx, eax
add edx, eax
mov eax, edx
add eax, eax
add eax, eax
add dword [ebp + 8], eax
mov eax, esi
imul esi
dec eax
test eax, eax
jb 0x445b11
inc eax
mov dword [ebp - 0x24], eax
xor ecx, ecx
mov eax, dword [ebp - 8]
mov ebx, dword [eax + ecx*4]
shr ebx, 0x18
inc ebx
cmp dword [ebp + 8], 0
je 0x445aa7
test ecx, ecx
jbe 0x445a9b
mov eax, ecx
xor edx, edx
div esi
test edx, edx
jne 0x445a9b
mov eax, dword [ebp - 0xc]
mov eax, dword [eax + 0x1c]
sub eax, esi
add eax, eax
add eax, eax
add dword [ebp + 8], eax
mov eax, dword [ebp + 8]
mov eax, dword [eax]
mov dword [ebp + 0x10], eax
add dword [ebp + 8], 4
mov eax, pe_nt_image_headers32
sub eax, ebx
mov edx, dword [ebp + 0x10]
and edx, 0xff00ff
imul edx
mov edx, dword [ebp - 8]
mov edx, dword [edx + ecx*4]
and edx, 0xff00ff
imul edx, ebx
add eax, edx
shr eax, 8
and eax, 0xff00ff
mov edx, pe_nt_image_headers32
sub edx, ebx
mov edi, dword [ebp + 0x10]
and edi, 0xff00
imul edx, edi
mov edi, dword [ebp - 8]
mov edi, dword [edi + ecx*4]
and edi, 0xff00
imul edi, ebx
add edx, edi
shr edx, 8
and edx, 0xff00
add eax, edx
mov edx, dword [ebp - 8]
mov dword [edx + ecx*4], eax
inc ecx
dec dword [ebp - 0x24]
jne 0x445a6e
push 0
call fcn.00409b50
mov ebx, eax
test ebx, ebx
je 0x445ba7
xor eax, eax
mov dword [ebp - 0x20], eax
push 0
push 0
lea eax, [ebp - 0x20]
push eax
push 0
lea eax, [ebp - 0x50]
push eax
push ebx
call fcn.00409b60
mov edi, eax
test edi, edi
je 0x445ba1
cmp dword [ebp - 0x20], 0
je 0x445ba1
call fcn.00409c00
mov eax, esi
imul esi
mov ecx, eax
add ecx, ecx
add ecx, ecx
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
call fcn.004032cc
call fcn.00409c00
push edi
push ebx
call fcn.00409d48
mov dword [ebp - 0x1c], eax
push 0xcc0020
push 0
push 0
push ebx
push esi
push esi
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x14]
push eax
mov eax, dword [ebp - 0x10]
push eax
call fcn.00409b18
mov eax, dword [ebp - 0x1c]
push eax
push ebx
call fcn.00409d48
push edi
call fcn.00409bd8
mov byte [ebp - 0x15], 1
push ebx
call fcn.00409bc8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x445bda
lea eax, [ebp - 0x54]
call fcn.004058a8
lea eax, [ebp - 8]
mov edx, dword [0x40b74c]
call fcn.00407ff0
lea eax, [ebp - 4]
call fcn.004058a8
ret