Function at 0x405420
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415d53
mov eax, dword fs:[0]
push eax
sub esp, 0x850
mov eax, dword [0x4593c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x824], ecx
mov dword [ebp - 4], 0
push 0x420314
push 0x66
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x85c], str.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
cmp dword [ebp - 0x818], 0
jne 0x4054c2
mov dword [ebp - 0x840], str.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
mov dword [ebp - 0x82c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401520
mov eax, dword [ebp - 0x82c]
jmp 0x405605
mov eax, dword [ebp - 0x818]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x830], eax
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [ebp - 0x818]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
jne 0x40552d
mov dword [ebp - 0x828], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401520
mov eax, dword [ebp - 0x828]
jmp 0x405605
mov eax, dword [ebp - 0x81c]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x850], str.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
cmp dword [ebp - 0x814], 0
jne 0x405577
mov dword [ebp - 0x83c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401520
mov eax, dword [ebp - 0x83c]
jmp 0x405605
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x4055e4
mov dword [ebp - 0x844], str.R7Pv8dkAeGlWbUTNHeSvAmFwvh4Eyz2EQ2HlQcl6upAK3Q1GinCGGG8zmb8H9SagaFDtol6esLT2vmRYSO8n1k8RyeNH4Agbl4tfriKa0y8zgkSh62LzGlJbQwfRfLqiAExT4YNLcCgxYrleh3qfj2lWc6INydAAQvPAQA5vmLjth9jGroCeVWIeI4wuRvveK7PkOyIvYRojIEICk5of2WTGLw6lX0KvDyH2rDcwKKHnNVj9mGpTx8iFSBS6ALKQwn6xCNl0zkvp3IGuGgTGSRC9PqsVrIJQaEhwJigVytauPwd5apE2TMUKz9rqbtLc0Y6zDDq30759yB9rie4dTMyJgWzuorLKbsYbzCDDp9Lfz2wenk5nD3gYf0CuENqwxJVIji0HvxO68zghkQfDkY326vt8tsjCEWvs1XXPdfRltO4xOqGUCii5AG5xk9OlLJSwldjiDeG5O6s7df54EXFVGKsfBk86QhMYnR9W7u3JjuQeyXIQYcd4zXH6HdirxgwLF5Sla1Sa1TpgBMrRDufyBA1rWNb5eS0GeciDvO9B0UcJQrGE7Cs9oTEUBSsQYSEuuRsE5XTFhX2ks7rDiBQeHbWBTYGIytzJn0NQ1ufoNcCNhAj5BIJPwJk01mbPrplXeL4jEsqatxt7U6rdSwMC2UhT778qNXbxSCjLyWHNaGWmDqB6oR0RD2mAg4yTwUSKAfWAr5rtG7bKqQ5HSNEyWsgGwMgOdyML4CHNgV5MO1bDXcNTyIqfJyGdRDVP7HPDuYD3bE9FhoMxEKds3cga1IsAgL3NgFxjvQ7DwnevK1E5zno1t9tbYlrBB2UFjk0DaWRvSh14Pnf4wqX5oHGO4PBuK7HxG1Tm0mVe0wfr9MRq0K97OjQcRE1NwpnEtBs50lF0PjKddiGcdKHqbCg8cfLxE7JpuvwjCuNHzPshwIDA4j2dqAv15353SbpkeBvsICjPyklXvDyY9Q4ATqxWIzc6SkQ5TlnOFOAxn2tWyp1OMijwqBCDzivPf2msqDGAgthANcYm39uL05STiTmqeJrOzx2qpWBOKbqoO56FfIhyuctvdiEjyquWoRP5bgOuOQm2BY8JrLr8H6k0n4LTySfyaMwCK2EsDDJcxcrQOJWwJLgUqKiutHonlRHrQhYtOXxee2vExMyVpJIIpa80LrFtioN2Uveaqw77rPQdIQQFi2GITnvX4GSnns454Lr4Xg6ubW6WrDgezaI9SJ0Ad3XVSSzl8zeAppsBDJTHGD1ddcX7NPuHg8Rr3igKF1M3bswmfz5Ft5dnQIaEyxcLsAFz53PpTFRDa8UjzQruHYJBONBCvYFVg5um8jTvLBNsFtBEq0V9g6lWb3cOrzMVlgyhjWOpVsxuuLRcPqx3XYyyEznVCYKbxO98EFQBKlzBRykp0ynWDUMLH1bvL87GVrEadS1JfUXyuDWqmSz3XYg2vve22dH9NRvYUNczdio1t7XWuRmTG20WSJIP3HJSANeCHo724c4vrk2pgY5rqCTfqRr9SjHQY0rsrnja1LNsqR3OFJ73L9DOoBI733tERePiXg8bSJ1eUEgQWEWriJKEJ9uKwbdwjg8i1jMqgkD0TMiOxh6JuhBV8ehYKdpmBTd3nximqffTKG2F49esOrnXW69ABWUFfVXvGLuBlLWUl3J1nP2wGE5aiuKgqqRCScp2Ax4VGDrVYMY3vUhds6y8THmB00L1swBlHbvfQa2Js7EGH0QerJszivM4zeqi3MHByMbAU8y0WuYqpGGDVjknCeq2PYXxWPVkDdd7EPrgaGwphBNU8hrvNFfKVnSuEzBpo5Cbz7J0dEarapiVdVY9paNntNXvTT7cfMceRk1xFH7Y8LkUkgVyKzfUvSlByITlxuBSqjr6AmV4qkbxw55aPggjyzspLYxWA5kRPsLPqosrwNaNRU5xk79oz16eOCDvDhD6qElI8TTs5SG9l7pnFxMRYGoYgBRSUwGyci3G5cN8YjfnSIkxorMGLVH4SKS5L6vx7PI5N1wVITWx4GL41pBOi5kj4L19eg6aWv7F8Vnm3zyplcN0k8aWSDYsOx50aQxY1EqGH5UlsxxOYmA0iqMLfMTmWUPkwhpCNAHfAwWB3Y9E0h0grFJng2T7hRsNXPookgSV5FP5Q8WPfT2IKM9j8au1Crt3UAjl69OMJfFV0iWcgWQ0Ll3CkmLz0WVi9KCJsfbIDhjfMDKg2qSaBlGbdXfQVj5c4dRVvJfoOaVCMycHlQDMXXrRdBYtF870CwJYrKoO0WQB9SfeBVXK8LsGKPwSaF2X14VIhLSzaHdiigLESiRlimBBlK4oQo81Dcdm02NqUXLI8y0upzndH5EFgUmeB33F7kqvwx1iCPNK2RtNFqFqt696qqKrJFI8eQubJ5iakUdcLD6ojwUqJjvguTb34wte0dpKsacfKkrHCv2Dbxr3xoVCNr8TMbTqDQh1u75QnHxRiqQAlbBwTKuQqHGLBrXOzcg8zYbqlb79WzoT69QsLC3H6QvjEnVapKzFnCxzvrnRdqQTSbIR5Wl6jxN4xlqQX0xAzB31rD5h9HJzn2NaHuS7bXpsjWlUiqyeJknEouAwhoTutsM7sH2UCPHOs5W2Ay6kqU4uldPBALwTfeqU8T1QamFnVRQvjWH0aftHXvjqvl6HY9y8r4Nq6hPeaIWh481MnYMyBC6OTVro918J42ieoOlmYjvWIFJzuz1wnkSs7yJ9sF64Fk82JMRFHA4LjaDERc0b3TTUWzsLMVzROiPJurIV7KyA4cBJPOpe57WGExpGfFFh41JnLzKPqhbVsoySE9KyGhs8SkK17JDOTn0akunUiTvW7mxAxHl9JdouP3VsU3MpMXBnF3DCRBprSKBGFHk9PghU55Momuvm7bow0z7jHF7QQfYqbdHQggisF6oOkXfmfbXbcVYcQDafguStaYhF3A7190foWryttSQ6St0qMiplAcFPDzGbQ73qrX6nxP4e6Yj9l8tYrI4ut4IWAjo57gWoXs5JB8rriUuozhkMeeDINOxDYhGeUUhvCaC1RjvpfUlXjQ2CXp0DEcH5GkHB6x2hG5vqhm5L5WEcWhEcX9jxiWPSz4ok83P4XsNPVi7yRL3wCvP3Yy7ldPF2pSvFhUQ9FMWIb8BcCSXw72MFd2dC5F0T0UG4r7RGuPGdxVEvlAGWYOkpjeLyLeIg04m1e8bIyG75KJqJXUhErmNwn4j0plLg63MgYYHdrBCKLDarmFGEpGb80KDqfObsUg2AJcXYcbWgIHcDnrG7xk0hbITYNx5N0W41dN1LjfakX4TIOzPi8jlSnGzpLlDAS5ABQmuaJUFg2ONqpaxEgeUJxFt8389y2ncEMVDGSxa3H7qXR54KD9Yx1TIbJKWNRmiwR7fIzLHjT6pQPXsjIEnUESNf9bsQLi7LE0Gz8vEiNWt4VeCcEQxjIqtEMhcA6dI3mdWoiTKTLPqUH3hnhor7XySnn2Ii6UYcWSzgjo0FmY69ElYYaoGAyCt1OoHC20C96ED9OFKLlztShO7kyvpRaa0OfjSE5Ld09HRSVIJ3HQzCXVSNqUn2Q3AHYM5Ppl519GwefKVVA3uf6VkYqjQYbnEaxOa26ysySOtMKgIxpsp51OjxUTLyaxWnEr9sc5m8NO75W1JBIlBMXlvkXnzteaAagG3JIhEp6SuxL20vjYpqc3tkm0jkiaXYuA0TBk2cCLasAAPhaHeuSdwEzvBCIIPTFedlN9YpXKi1ehTzuOzNbTRzLbFKjggGnGYQ8rQaozDk1ScHEF0BaWtuPLh0mvEGk3EEqFOETxwkEw1ChBbySVdVmANvypIUsrGit3SfasOTmx0S81PFkeIADsam6dx3W0zKXyRsAD1NLx9JfhLmsWuiDHRvzqun9QVoBYpUgVbF0qI2NMSpaXQ04a2L6NgOA9qX0O1qXFU3BlnifX74jXVNkbkTboVX46OBKmYScJslAH3F9fwRHmIXvEYuOtP2vRWQoFsmbvAUpc2Uk5fN6j1QpYP6sCHR6EHCoxo5NSFVXKVvPVrgeMr1y3h5XFw0dI5edAAoFgEvEBGtQhqYKvt79hkLGIFwqh9n
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x84c], esp
lea edx, [ebp + 0xc]
push edx
call fcn.00402e90
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x854], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x830]
push ecx
push 0
mov edx, dword [ebp - 0x814]
push edx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x824]
call fcn.004063e0
mov dword [ebp - 0x820], eax
mov eax, dword [ebp - 0x820]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x834], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401520
mov eax, dword [ebp - 0x834]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040a40b
mov esp, ebp
pop ebp
ret 0x1c