Function at 0x408c30
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b998
mov eax, dword fs:[0]
push eax
sub esp, 0x850
mov eax, dword [0x491870]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x828], ecx
mov dword [ebp - 4], 0
push 0x442fa4
push 0x81
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
jne 0x408cad
mov dword [ebp - 0x82c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00407d50
mov eax, dword [ebp - 0x82c]
jmp 0x408e5f
mov eax, dword [ebp - 0x81c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x834], eax
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x85c], str.PWEgRItqgRGL8QmoVGN3iKYn8AxGXm7WzVwffg2dm3B11YSN0nBOerkGwYFmhVSNAh0xtcTtKaoCtWTKJib4SIEmKYLhTWKGT2IbXmIpFdtvvLK1
mov dword [ebp - 0x844], str.84wDJE1wSMUk0PSUfoSRFvNfEVvuyDb5VUTqKTjSCyi0LiSosyHHXwCTinIkmQsLfbOcHsFUbdItStOlzUoqAypLypWWnSukkGmS2VYj1iVH7GOY
mov dword [ebp - 0x820], 0x433a5a
push 0x44043c
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x824], 0
mov dword [ebp - 0x858], str.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
cmp dword [ebp - 0x818], 0
je 0x408d3a
push 0x4596e4
mov edx, dword [ebp - 0x818]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x824], 0
je 0x408d58
mov eax, dword [ebp - 0x81c]
push eax
push 0
call dword [ebp - 0x824]
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x818], 0
je 0x408d6e
mov ecx, dword [ebp - 0x818]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [ebp - 0x820], 0
jne 0x408d9b
mov dword [ebp - 0x83c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00407d50
mov eax, dword [ebp - 0x83c]
jmp 0x408e5f
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0
jne 0x408de5
mov dword [ebp - 0x840], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00407d50
mov eax, dword [ebp - 0x840]
jmp 0x408e5f
movzx eax, byte [ebp + 8]
test eax, eax
je 0x408e34
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x848], esp
lea edx, [ebp + 0xc]
push edx
call fcn.0040b310
mov dword [ebp - 0x84c], eax
mov eax, dword [ebp - 0x834]
push eax
push 0
mov ecx, dword [ebp - 0x814]
push ecx
mov ecx, dword [ebp - 0x828]
call fcn.00408af0
mov dword [ebp - 0x830], eax
mov edx, dword [ebp - 0x830]
mov dword [ebp - 0x814], edx
mov dword [ebp - 0x854], str.Cay4ujzjWipuMfYr6J0hqPHQF7PFpE76b7p9YjpDT3jhD5iKrhaeDBSHLrNb4eAjKxtoqa5IpF3oXwiADOnwi9zAqdAMPbL4OJB7ABxegUCKJqwuASD6uKIcE84QMHXDhXtpo3ip6VkBzNv1EXIJqtPPgkn2CarrnptdRCi8tnFwMUPPvuc
mov eax, dword [ebp - 0x814]
mov dword [ebp - 0x838], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00407d50
mov eax, dword [ebp - 0x838]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004136d5
mov esp, ebp
pop ebp
ret 0x1c