Function at 0x414ff0
Capabilities:
Extract resource via kernel32 functions
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5e4
mov eax, dword [0x13413f8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004021b0
push 0x5a11b8
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00407340
add esp, 8
movzx edx, al
test edx, edx
je 0x415030
mov byte [0x1343c4c], 1
jmp 0x415037
mov byte [0x1343c4c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.00406e80
add esp, 8
push eax
mov ecx, 0x1343cfc
call fcn.00404a40
lea ecx, [ebp - 0x4c]
call fcn.00401cd0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 0
jge 0x41508c
mov dword [ebp - 0x5c4], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5c4]
jmp 0x415346
mov ecx, dword [ebp + 8]
push ecx
call fcn.0047d170
add esp, 4
push 0x5a11bc
push 0x65
call fcn.004763e0
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x5ac], eax
cmp dword [ebp - 0x5ac], 0
jne 0x4150d7
mov dword [ebp - 0x5c8], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5c8]
jmp 0x415346
mov dword [ebp - 0x5b0], 0
mov edx, dword [ebp - 0x5ac]
push edx
call fcn.004763e0
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0
jne 0x41512d
mov eax, dword [ebp - 0x5ac]
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov dword [ebp - 0x5cc], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5cc]
jmp 0x415346
mov ecx, dword [ebp - 0x5ac]
push ecx
call fcn.004763e0
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 0
jne 0x41516c
mov dword [ebp - 0x5d0], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5d0]
jmp 0x415346
mov edx, dword [ebp - 0x5b0]
push edx
call fcn.00472577
add esp, 4
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
je 0x4151ba
mov ecx, dword [ebp - 0x5b0]
push ecx
mov edx, dword [ebp - 0x5bc]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
mov eax, dword [ebp - 0x5b8]
push eax
call fcn.004f37d0
add esp, 0xc
mov ecx, dword [ebp - 0x5ac]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0
mov edx, dword [ebp - 0x5b0]
push edx
mov eax, dword [ebp - 0x5b8]
push eax
call fcn.0047d680
add esp, 0xc
push 0x5a11cc
lea ecx, [ebp - 0x34]
call fcn.004021b0
push 0x5a11f4
lea ecx, [ebp - 0x34]
call fcn.00401f60
push 0x5a1200
lea ecx, [ebp - 0x34]
call fcn.00401f60
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x5e4]
call fcn.004040c0
lea ecx, [ebp - 0x5e4]
call fcn.00404140
test eax, eax
je 0x4152b8
push 0x5a120c
push 0x5a1220
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 0
je 0x4152b8
push 9
mov edx, dword [ebp - 0x5b4]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x5b4]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov ecx, dword [ebp - 0x5b4]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [ebp - 0x5d8], 0
lea ecx, [ebp - 0x5e4]
call fcn.00404110
lea ecx, [ebp - 0x34]
call fcn.00401ff0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5d8]
jmp 0x415346
call fcn.00401640
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x5a8]
call fcn.004154c0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x16000000
push 0x5a1234
push 0
lea ecx, [ebp - 0x5a8]
call fcn.0047ebe0
lea ecx, [ebp - 0x5a8]
call fcn.0047e9c0
lea ecx, [ebp - 0x5a8]
call fcn.0047f060
call fcn.00401670
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [ebp - 0x5dc], 0
lea ecx, [ebp - 0x5a8]
call fcn.00415580
lea ecx, [ebp - 0x5e4]
call fcn.00404110
lea ecx, [ebp - 0x34]
call fcn.00401ff0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5dc]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00472312
mov esp, ebp
pop ebp
ret 0x10