Function at 0x4056c0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415073
mov eax, dword fs:[0]
push eax
sub esp, 0x84c
mov eax, dword [0x44a1d8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x824], ecx
mov dword [ebp - 4], 0
push 0x4213d4
push 0x66
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0
jne 0x40573a
mov dword [ebp - 0x82c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401550
mov eax, dword [ebp - 0x82c]
jmp 0x40589b
mov dword [ebp - 0x840], str.oOqD3tQyd9iQsCmdDeAqilssbtuLgF8QzgKVLON99ddFJ1dKxnvzXskjb5JM0MlNcMgOGxNJUBzMboEQ0G9Uyaq10otpXIzrDm1xoxFfwfmaViPnurluE4dGtqf61unvY68oSDWr8L9l0Ifq99VoaIRdzV5URCA5VlHNxD1T1vXpkbzvIvMPrEomokxy92kxMFQf9hX2Dvn4GzPqDoM5clvHdKHck8VAyOHhQgE6wuryPgfiVVOswcJDo48FPM5jPJqxefK8qUMKj6mBirNqWCkpvMVmWhD4SBaJdPD3cUv4ClW83oDtmVl4ccJdPnMxBK8F8AvzNmdu8K309xja2pzujeFLzjXNwLvcJ1gfpN4C7v0DeMJbCjzqLwn96HQbPpwh8ADsitHAHflP
mov eax, dword [ebp - 0x818]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x830], eax
mov dword [ebp - 0x858], str.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
mov dword [ebp - 0x854], str.tT6ne8uf227kmExINYDaz5obKxg0wd8IOOz9eXhm0MHuCKrP4UK1TwcDPptVgVTlYnSNeVFksJXdFwlKn2uCa5BRCVOA9z3zPGQjqHlr6eUqsAyT9gUbXBrM73iSkIKeP2iFmQJMKh5BOXE0rK73iWfasornOmtr6U43XY5gpDuPt9s7VQdBwToAXghayXVHq12AyBkDaIHL256DX7imscXs4JoWlt7Pcg4zSbftgFLB0aUjwgwPezR2jxRXSggWtJ4m29jb7kjbMfz9ci3HpDHlr7h5L9UvUKVnvSNYggpQEEWxhk3DV2SjhBJHsoQjROB7cIKXlGFAN7ebDKFt9iBFQSSPSQGOsfTF8L0VMdXqn0QVwKeoBWJs2FSXx9cIgrOkhDuj5ewzyp52TWUXEqlga3fKGBesd2c3DA88OXPaNlEY8EMgUqvunHpeLjyG0k5XpkLnn3qSTrkt79MPE0PUY1yem4rFb7MzmId7t4EfH7oNEe8AJoTqEiEqckFdfFUGWRkwgzAyirEOn5hLE3jWtOqj7jyIyEjsh60Og560PcpXRoYTzCIuUNmd8RVanf6l3S6io0NxDRufzieRjWLaPrIhoC66P1E8CVwmWL52cFfgOmiUh768tPvubQVDX2DX2bdsCJ766txbRCHzympEv5wFTyNxINXiTH59wcMd6UJLNygGS9m5Veksarz3TiNTxP537pOF4gIkF72tAaGMbediCTE2dVCTQ5bPgBDC2xULmGlrGf6h44iva4XXfy7JqbmkeWs1areBE6NtNuk7NCobLJVQvugas3ClFzhDMo7QgFfIfb9WYI9ixquinxkgNOXPBwP6kwvbJ9OHULjuzcUCLl7t7TMuWOrNuQEQnCSNyIUhnWByYLRLRpM9SgrA3y3k8w0aFeew53bzOBQ1WbTbmgXEJKkCQOSBJuU75y2Gxgx67PPPC5H6XdGTCXK0Mu1RUCeFBykh5TcGIUo1A4HBujsnmVhtSLwqFLvypPDOJYAtLmoHGBAj5MpKcU1xXtkhrhq03J86wlmM7X6cAcr5P6TSjy4pyuglrvDM5PdUmqlOyDWeIdtlpPbafYr5lM8zrRb7oB0Upfe13J5AQijTqWn5WMwnAtM5qg53JEVeDtA7GLqJJaUBgdJRR8zuLXJcrHLACrCDwiTjSzwmbBFa3fGrYNK7G25sxh4KkfLG2xviijBlXwljHtMrN78nmIDAKacsS8fBFzE9QtvLUQ6HUaGaj0CR7sLybBJA935jtkurJSGWRDsW8phE3V5DwYztTVH0DKqqVm3cpHimFYoBx8tD2Ye9pmIH1wssJOyj8KeSzo6Ha6de84qzQOFnSXxMESNJxFTXB6xnLxtmJ4x20BKzLBHaPlBgE1cHJjc09Emo4OQTX97Dyq3SJUarbglTfqYvjDXcVYBh8plJQ0i7tOnBLS0vPRvwIzzkQpEpHqPeUyW2WVw0hSfBdHS4j6wCAjfWecYEwtmYYk2bdTrQAa8ygEbmFIj1GbvckWEHdJ7NsKtQQuRe9xpSUcY9zraJbl2Sb4i9rXNq2HA0sWRHHksN2S3IiQS9xBIPOeuiK5Na0X9OV9FT9dAfgsSQCpIMzoEVrCMfr7bMcdmNuzIpog6W7MFQXunxrNa3fJGQGgJD5YSEGqGQt
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [ebp - 0x818]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
jne 0x4057c3
mov dword [ebp - 0x828], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401550
mov eax, dword [ebp - 0x828]
jmp 0x40589b
mov eax, dword [ebp - 0x81c]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x84c], str.xjE0j7bRTc2TL392IgOurcgXRCUo4Qoyef0Em187wHSGDVMYo5vYF4QUtosNte1mr4XofaOpgYFkijLHoDIp7276aJyzs08843grt2YjfArMW86aX6GPyRfgcPyif9WOfLaeAcJjnQlJkSHOCWjyMoN9CJWfyczOn8Do9fCTjYEzFEoxb35
mov dword [ebp - 0x844], str.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
cmp dword [ebp - 0x814], 0
jne 0x405817
mov dword [ebp - 0x83c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401550
mov eax, dword [ebp - 0x83c]
jmp 0x40589b
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x40587a
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x848], esp
lea edx, [ebp + 0xc]
push edx
call fcn.00403010
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x850], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x830]
push ecx
push 0
mov edx, dword [ebp - 0x814]
push edx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x824]
call fcn.004068b0
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x834], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401550
mov eax, dword [ebp - 0x834]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040a32c
mov esp, ebp
pop ebp
ret 0x1c