Function at 0x4082b0
Capabilities:
Extract resource via kernel32 functions
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x166c
call fcn.004c4990
mov eax, dword [0x4f1040]
xor eax, ebp
mov dword [ebp - 4], eax
push 0
lea eax, [ebp - 0x10c4]
push eax
call fcn.00405450
add esp, 8
push eax
mov ecx, 0x4f3dc0
call fcn.00401c00
lea ecx, [ebp - 0x10c4]
call fcn.00401be0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x165c], eax
cmp dword [ebp - 0x165c], 0
jge 0x40830c
xor eax, eax
jmp 0x408834
mov ecx, dword [ebp + 8]
push ecx
call fcn.00415e30
add esp, 4
push 0x4e584c
push 0x6d
call fcn.0040f090
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x1614], eax
cmp dword [ebp - 0x1614], 0
jne 0x408341
xor eax, eax
jmp 0x408834
mov dword [ebp - 0x1618], 0
mov edx, dword [ebp - 0x1614]
push edx
call fcn.0040f090
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x1630], eax
cmp dword [ebp - 0x1630], 0
jne 0x408381
mov eax, dword [ebp - 0x1614]
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
xor eax, eax
jmp 0x408834
mov ecx, dword [ebp - 0x1614]
push ecx
call fcn.0040f090
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x1618], eax
cmp dword [ebp - 0x1618], 0
jne 0x4083aa
xor eax, eax
jmp 0x408834
mov edx, dword [ebp - 0x1618]
push edx
call fcn.0040b9b9
add esp, 4
mov dword [ebp - 0x1658], eax
mov eax, dword [ebp - 0x1658]
mov dword [ebp - 0x162c], eax
cmp dword [ebp - 0x162c], 0
je 0x4083f8
mov ecx, dword [ebp - 0x1618]
push ecx
mov edx, dword [ebp - 0x1630]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
mov eax, dword [ebp - 0x162c]
push eax
call fcn.004a02a0
add esp, 0xc
mov ecx, dword [ebp - 0x1614]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0
mov edx, dword [ebp - 0x1618]
push edx
mov eax, dword [ebp - 0x162c]
push eax
call fcn.00416340
add esp, 0xc
lea ecx, [ebp - 0x101c]
call fcn.00401eb0
lea ecx, [ebp - 0x104c]
call fcn.00401eb0
mov dword [ebp - 0x1654], 1
push 0x4e585c
lea ecx, [ebp - 0x107c]
call fcn.00401d30
push 0x4e5880
lea ecx, [ebp - 0x1094]
call fcn.00401d30
lea ecx, [ebp - 0x101c]
push ecx
lea edx, [ebp - 0x1654]
push edx
lea eax, [ebp - 0x107c]
push eax
lea ecx, [ebp - 0x1094]
push ecx
push reloc.OLEAUT32.dll_SysReAllocString
call fcn.00405180
add esp, 0x14
mov byte [ebp - 0x160e], al
lea ecx, [ebp - 0x1094]
call fcn.00401be0
lea ecx, [ebp - 0x107c]
call fcn.00401be0
movzx edx, byte [ebp - 0x160e]
test edx, edx
je 0x40862d
lea ecx, [ebp - 0x166c]
call fcn.00408e70
push 0x4e58f8
lea ecx, [ebp - 0x1064]
call fcn.00401d30
lea eax, [ebp - 0x1064]
push eax
lea ecx, [ebp - 0x166c]
push ecx
lea edx, [ebp - 0x101c]
push edx
call fcn.004018c0
add esp, 0xc
lea ecx, [ebp - 0x1064]
call fcn.00401be0
lea ecx, [ebp - 0x166c]
call fcn.00408e20
sub eax, 1
push eax
lea ecx, [ebp - 0x166c]
call fcn.00408de0
push eax
lea ecx, [ebp - 0x10ac]
call fcn.00401e20
push 0x800
push 0
lea eax, [ebp - 0x1004]
push eax
call fcn.004a0100
add esp, 0xc
lea ecx, [ebp - 0x101c]
call fcn.00401b60
mov dword [ebp - 0x161c], eax
mov ecx, dword [ebp - 0x161c]
add ecx, 2
mov dword [ebp - 0x1650], ecx
mov edx, dword [ebp - 0x161c]
mov ax, word [edx]
mov word [ebp - 0x1626], ax
add dword [ebp - 0x161c], 2
cmp word [ebp - 0x1626], 0
jne 0x408550
mov ecx, dword [ebp - 0x161c]
sub ecx, dword [ebp - 0x1650]
sar ecx, 1
mov dword [ebp - 0x1648], ecx
lea ecx, [ebp - 0x10ac]
call fcn.00401b60
mov dword [ebp - 0x1620], eax
mov edx, dword [ebp - 0x1620]
add edx, 2
mov dword [ebp - 0x164c], edx
mov eax, dword [ebp - 0x1620]
mov cx, word [eax]
mov word [ebp - 0x1628], cx
add dword [ebp - 0x1620], 2
cmp word [ebp - 0x1628], 0
jne 0x4085a5
mov edx, dword [ebp - 0x1620]
sub edx, dword [ebp - 0x164c]
sar edx, 1
mov dword [ebp - 0x1660], edx
mov eax, dword [ebp - 0x1648]
sub eax, dword [ebp - 0x1660]
sub eax, 1
push eax
lea ecx, [ebp - 0x101c]
call fcn.00401b60
push eax
lea ecx, [ebp - 0x1004]
push ecx
call fcn.004ad08d
add esp, 0xc
lea edx, [ebp - 0x1004]
push edx
lea ecx, [ebp - 0x104c]
call fcn.004059e0
lea ecx, [ebp - 0x10ac]
call fcn.00401be0
lea ecx, [ebp - 0x166c]
call fcn.00408e50
push 0x800
push 0
lea eax, [ebp - 0x804]
push eax
call fcn.004a0100
add esp, 0xc
push 0x3ff
lea ecx, [ebp - 0x804]
push ecx
call fcn.00408850
add esp, 8
mov byte [ebp - 0x160d], al
movzx edx, byte [ebp - 0x160d]
test edx, edx
jne 0x4086a9
push 0
push 0x4e58fc
lea eax, [ebp - 0x804]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
mov dword [ebp - 0x1634], 0
lea ecx, [ebp - 0x104c]
call fcn.00401be0
lea ecx, [ebp - 0x101c]
call fcn.00401be0
mov eax, dword [ebp - 0x1634]
jmp 0x408834
push str.Global_ONCE_RUN_
lea ecx, [ebp - 0x1034]
call fcn.00402180
push 0x4e5920
lea ecx, [ebp - 0x1034]
call fcn.00402010
push str.uninstall_
lea ecx, [ebp - 0x1034]
call fcn.00402010
lea ecx, [ebp - 0x1034]
push ecx
lea ecx, [ebp - 0x1644]
call fcn.004011f0
lea ecx, [ebp - 0x1644]
call fcn.00401270
test eax, eax
je 0x4087a3
push 0x4e593c
push 0x4e594c
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
je 0x4087a3
push 9
mov edx, dword [ebp - 0x1624]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x1624]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov ecx, dword [ebp - 0x1624]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [ebp - 0x1638], 0
lea ecx, [ebp - 0x1644]
call fcn.00401240
lea ecx, [ebp - 0x1034]
call fcn.00402030
lea ecx, [ebp - 0x104c]
call fcn.00401be0
lea ecx, [ebp - 0x101c]
call fcn.00401be0
mov eax, dword [ebp - 0x1638]
jmp 0x408834
lea ecx, [ebp - 0x160c]
call fcn.004090a0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x16000000
push 0x4e5960
push 0
lea ecx, [ebp - 0x160c]
call fcn.004178c0
lea ecx, [ebp - 0x160c]
call fcn.004176a0
lea ecx, [ebp - 0x160c]
call fcn.00417d30
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [ebp - 0x163c], 0
lea ecx, [ebp - 0x160c]
call fcn.00409150
lea ecx, [ebp - 0x1644]
call fcn.00401240
lea ecx, [ebp - 0x1034]
call fcn.00402030
lea ecx, [ebp - 0x104c]
call fcn.00401be0
lea ecx, [ebp - 0x101c]
call fcn.00401be0
mov eax, dword [ebp - 0x163c]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0040b76b
mov esp, ebp
pop ebp
ret 0x10