Function at 0x405380
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415c83
mov eax, dword fs:[0]
push eax
sub esp, 0x848
mov eax, dword [0x4473c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x820], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x840], str.EFRehgkLqheAerk9ffLdSLgq65hBBnN3SWM6MRlIgSq3DDo3BDNGJnph1vWYY1nBmLN7hWNtoclUyvjzW6d4FRRGdpS3s7rnXntYOJnq4m1kSpcaL1ndf50wiPILaky1mPwbY6GoOO7yxKxblEODzm86aaIihlD9T4OPTscDpmY8r3eWH4e
push 0x41e954
push 0x66
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x854], str.KMtqT4SQWHlRhkPAXjDXGMVUMDUmQjuhGXCulDhEw7hBVDB8M2Y4WvJIvkfujcz26T2glKGhHCeFBPD3I5pEecDrRnQ0pixXa4Udn03LKXGVudjFuj4NPHSBkFU3WWPDzbPx52nBTE0otCCheQoggWK7mPpYqXsusgG0juMDkThd9m81y5c
mov dword [ebp - 0x848], str.vOQYOA6euc51BdzMAv5qUph1TyMyWzTvdcp5ufl9PUqEs3u8tBiJP8sVyd5sQfUwVKIqxl7wDVmOuJHpjngl7RqSBqCi0yye9piNHQdIFv8YVxsawkgeM2eprLfxyV01IHM0ManUy5C7vCqaSzSrTrQLnYrcnKUwMS7NF1kYHauGx2JrsUO4Fkd0tUsKNgqGSKk2iAJCcdxpWODbUm3XpEPKkUp8QhroFb5A8qXhTsLCPY2o80wy9WCRhujtT3Mq7fFP3RuLDPWioxYcCkBrE3f8G41INYYNv3qnK0IVoPpnmIpBd2pzIh7XBlPJLnkgsbcOeWaIMOU8RlqBQ80HX4mkFSuEj9gAGDMyf03zY4H4iUney3qnO0LG7adPePvz2LVJpyitLJqXqyNxFGYPL6jcyV7Cvxvp4qtzo6O0A7Ww8SDzhgGx8114gHDUfwx7w4htddeLgzg7u9CpPXfIKdI8lUGo0cdizyMS6VBuMvszX6sKN3jtjQM9PONNXpiBLumEDdU65fzbs5jaiXxUR8lGXk7udwMYiHqIPUYjbQfQKTyv5nzgQ8j776doKiYJXcp46SiGg3A1wPSYx98M6UlGpCvTacy6FpIDxpiGQBvmfMuj2hQFdbkonqq5XvJOpDsp70lrch6KKCRiBNrv7VeHCv738908PxhgbAESQhmTKrdCPSkLlMvF4lnDgX08EGo6CifReCO9gYIfHp7yUusG90S8ea14DIpL24dRiUOfulfhghRWxGxSO8ei9eXqxli3MHP8ulDqXYi3vw1YKOk5yWRkp1pTOrhbbcyGcF166Ru6Gjr5uRGdCWarieFfUfVXsFkfxEwBn3vrzaKNf4VUfgOdbLA5HRVbapbvBfsFM75px93KQOBMhUnJJ5pUJD1Iy7pATsDRcOUNrMGabO48fM8GbEBsAJFAB1YwpxgrHWKN3kRkMjha40DnX4IPL1hWYNodz2NhzisY5MBKV0N0bYPLIPnzJ9174KItdg2tcbxiIViyElHvw0oMIWS7dBtdni15t5qPWOVFFEBOE7FrV2qQKv1ySJbTfBWtLeLjbFlRnVD5oEvVf1KCWcYWJWrH7njapWDNPhO39dTDMmAKEVza6Fo0La9PsPJe3ss3XRWXbm77oPjJNIVp4gj3RIpOoqSMISkBNoO0AHjunS5PFfz4T2kWPsDyFPq4TmaTHu32C5NKebwSfcA1eNUUmHlvX251NhLYtlmV1TVIrYw6MEG2UaPrjT6TfV5bwcxBkrjQQAArdVve8CPu0bVsVSrt3zn6bYvGvFdp6fhS7qevoY9onSgGR6sb1vISixaXJ0SYubevlIUqXbXM4IQFy7YulekVFsbgON4JGLnhDXfMBnOHatHGfGxnR4PSvUrmDQty5ziGmenBlcYKeDVzj1NqurszHtOUFQ9s4jTx6qn1HAtKSw3JVeXWmRLD3hgHR02mCY6dgvxvzJI7UbvrENtAjL6dBNuQ7MSXN9oLYXkwt6d2JxsqwPatdss7QeAIEioyml1eIV2bj0byShC0rS70AtPdCCqwSgLYTDsVAOSClNBy5Ja3hVKXDxgu93EhiaHFYtszica9iLfH91O2J1J2fCUbPh5T3UFYxbLDUVlmEXdjbuIRfpXCnGEa4e3aDVVDp9VKmq6YgrsTklTTE6xfVrFNquF0TjwJjFbHdah8gasJngfM9oQ71GRSKBpeM0834ntJz8JrSJ2m06aVKJW1g8zreHYGhmo9n1uBadMRImdn1c3ziGDdUkAPiCgbq8SlJuCAgbdCDVhmgddDsYouNL9B3lt74Fn8czcziIbw1E3fIoLGKeblUV4xyMQWG2FebazEEGtiXtEn8M6ybCXfl16oxkbpWBYOgQ16Tq7Md8gBwHktsyzn2mnFdl6biQkcVkVjTCxrQxnSz0FSK50aRPjG6Ou0azCtutrc6RB0lhIc5Wi0YmVxkgJ32prAaWLt2ekcwFCprzfxSckOYFOVvkWBeocHUACO
cmp dword [ebp - 0x818], 0
jne 0x405418
mov dword [ebp - 0x824], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401540
mov eax, dword [ebp - 0x824]
jmp 0x405551
mov dword [ebp - 0x850], str.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
mov eax, dword [ebp - 0x818]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x830], eax
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [ebp - 0x818]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
jne 0x40548d
mov dword [ebp - 0x828], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401540
mov eax, dword [ebp - 0x828]
jmp 0x405551
mov eax, dword [ebp - 0x81c]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0
jne 0x4054cd
mov dword [ebp - 0x83c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401540
mov eax, dword [ebp - 0x83c]
jmp 0x405551
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x405530
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x844], esp
lea edx, [ebp + 0xc]
push edx
call fcn.00402eb0
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x84c], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x830]
push ecx
push 0
mov edx, dword [ebp - 0x814]
push edx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x820]
call fcn.004062f0
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x834], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401540
mov eax, dword [ebp - 0x834]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040a33b
mov esp, ebp
pop ebp
ret 0x1c