Function at 0x40ff54
Capabilities:
Check os version
Extract resource via kernel32 functions

Disassembly:
sub esp, 0xd4
mov eax, dword [0x455834]
xor eax, esp
mov dword [esp + 0xd0], eax
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0xf0]
xor ebp, ebp
push ebp
push ebp
call dword [sym.imp.ole32.dll_CoInitializeEx]
push 0xa
push 0x2710
push ebp
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
push esi
push ebp
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push esi
push ebp
call dword [sym.imp.KERNEL32.dll_SizeofResource]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], ebp
push eax
push 0x4447d0
push 1
push ebp
push 0x445a20
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ebx, eax
mov dword [esp + 0x24], ebp
test ebx, ebx
js 0x40fff3
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x24]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov ebx, eax
test ebx, ebx
js 0x40fff3
mov eax, dword [esp + 0x24]
push dword [esp + 0xf4]
push edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x40]
mov ebx, eax
mov dword [esp + 0x34], ebp
test ebx, ebx
js 0x410013
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x34]
push edx
push 1
push ebp
push dword [esp + 0x30]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov ebx, eax
mov dword [esp + 0x14], ebp
test ebx, ebx
js 0x41002d
mov ecx, dword [esp + 0x34]
lea edx, [esp + 0x14]
push edx
push ebp
push ecx
mov eax, dword [ecx]
call dword [eax + 0x34]
mov ebx, eax
mov dword [esp + 0x1c], ebp
test ebx, ebx
js 0x410046
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x1c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov ebx, eax
mov dword [esp + 0x30], ebp
mov dword [esp + 0x2c], ebp
test ebx, ebx
js 0x410068
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x2c]
push edx
lea edx, [esp + 0x34]
push edx
mov eax, dword [ecx]
push ecx
call dword [eax + 0xc]
mov ebx, eax
lea edi, [esp + 0x3c]
mov esi, 0x445a40
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
test ebx, ebx
js 0x4101aa
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0x3c]
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ebx, eax
test ebx, ebx
js 0x4101aa
mov esi, 0x94
lea eax, [esp + 0x4c]
push esi
push ebp
push eax
call fcn.00415560
add esp, 0xc
mov dword [esp + 0x4c], esi
lea eax, [esp + 0x4c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
cmp dword [esp + 0x50], 0xa
push 3
pop ebp
mov esi, dword [esp + 0x1c]
push 4
pop eax
cmovae ebp, eax
mov eax, dword [esp + 0x2c]
mov edi, dword [esi]
push ebp
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444b60]
mulsd xmm0, qword [esp + 0xec]
call fcn.00413e30
push eax
mov eax, dword [esp + 0x38]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444b60]
mulsd xmm0, qword [esp + 0xf0]
call fcn.00413e30
push eax
push dword [esp + 0x20]
push esi
call dword [edi + 0x20]
mov ebx, eax
test ebx, ebx
jns 0x410191
cmp ebp, 4
jne 0x410191
mov eax, dword [esp + 0x2c]
mov esi, dword [esp + 0x1c]
push 3
pop ebp
movd xmm0, eax
mov edi, dword [esi]
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
push ebp
addsd xmm0, qword [eax*8 + 0x444b60]
mulsd xmm0, qword [esp + 0xec]
call fcn.00413e30
push eax
mov eax, dword [esp + 0x38]
movd xmm0, eax
cvtdq2pd xmm0, xmm0
shr eax, 0x1f
addsd xmm0, qword [eax*8 + 0x444b60]
mulsd xmm0, qword [esp + 0xf0]
call fcn.00413e30
push eax
push dword [esp + 0x20]
push esi
call dword [edi + 0x20]
mov ebx, eax
push ebx
push dword [esp + 0x58]
push dword [esp + 0x58]
push ebp
push str.interpolation_mode__d__d__d__p
call fcn.0040f3f5
add esp, 0x14
xor ebp, ebp
mov dword [esp + 0x38], ebp
test ebx, ebx
js 0x4101c2
lea eax, [esp + 0x38]
push eax
push 1
push ebp
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
mov ebx, eax
mov dword [esp + 0x28], ebp
test ebx, ebx
js 0x4101ef
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x28]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov ebx, eax
test ebx, ebx
js 0x4101ef
mov eax, dword [esp + 0x28]
push dword [esp + 0x38]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x38]
mov ebx, eax
mov dword [esp + 0x20], ebp
test ebx, ebx
js 0x410224
mov eax, dword [esp + 0x10]
lea edx, [esp + 0x20]
push edx
push ebp
push 0x445a30
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov ebx, eax
test ebx, ebx
js 0x410224
mov eax, dword [esp + 0x20]
push 2
push dword [esp + 0x2c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
mov ebx, eax
mov dword [esp + 0x18], ebp
test ebx, ebx
js 0x41028d
mov ecx, dword [esp + 0x20]
lea edx, [esp + 0x18]
push ebp
push edx
push ecx
mov eax, dword [ecx]
call dword [eax + 0x28]
test eax, eax
js 0x41028d
mov eax, dword [esp + 0x18]
push ebp
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
test eax, eax
js 0x41028d
mov eax, dword [esp + 0x18]
lea edx, [esp + 0x3c]
push edx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x18]
test eax, eax
js 0x41028d
mov eax, dword [esp + 0x18]
push ebp
push dword [esp + 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
test eax, eax
js 0x41028d
mov eax, dword [esp + 0x18]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x30]
test eax, eax
js 0x41028d
mov eax, dword [esp + 0x20]
push eax
mov ecx, dword [eax]
call dword [ecx + 0x2c]
mov ecx, dword [esp + 0x10]
pop edi
pop esi
pop ebp
pop ebx
test ecx, ecx
je 0x41029f
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0x14]
test ecx, ecx
je 0x4102ad
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x4102bb
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4102c9
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0xc]
test ecx, ecx
je 0x4102d7
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x4102e5
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4102f3
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x410301
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
call dword [sym.imp.ole32.dll_CoUninitialize]
mov ecx, dword [esp + 0xd0]
mov eax, dword [esp + 0x28]
xor ecx, esp
call fcn.00413c4b
add esp, 0xd4
ret