Function at 0x54fd70
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x609ba0
mov eax, dword fs:[0]
push eax
sub esp, 0x9c
mov eax, dword [0x697bc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x60], ecx
push 0xf0
movzx eax, word [ebp + 8]
push eax
mov ecx, 0x69f4e0
call fcn.005568f0
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x88], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x40], 0
cmp dword [ebp - 0x78], 0
je 0x54fe08
mov ecx, dword [ebp - 0x78]
push ecx
mov ecx, 0x69f4e0
call fcn.005568f0
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0
je 0x54fe08
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x88], eax
push 5
movzx eax, word [ebp + 8]
push eax
mov ecx, 0x69f4e0
call fcn.005568f0
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0
je 0x5502ff
mov ecx, dword [ebp - 0x90]
push ecx
mov ecx, 0x69f4e0
call fcn.005568f0
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x50], 0
cmp dword [ebp - 0x7c], 0
je 0x5502f7
mov edx, dword [ebp - 0x7c]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0
je 0x5502ed
mov eax, dword [ebp - 0x50]
push eax
call fcn.00559240
add esp, 4
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x50]
push ecx
call fcn.00551890
add esp, 4
mov dx, word [eax]
mov word [ebp - 0x64], dx
mov eax, dword [ebp - 0x50]
push eax
call fcn.00554fb0
add esp, 4
mov dword [ebp - 0x34], eax
push 5
lea ecx, [ebp - 0xa8]
push ecx
mov ecx, dword [ebp - 0x60]
add ecx, 4
call fcn.00557560
mov ecx, eax
call fcn.0052d8b0
mov dword [ebp - 0x48], eax
xor edx, edx
mov word [ebp - 0x3c], dx
jmp 0x54fed9
mov ax, word [ebp - 0x3c]
add ax, 1
mov word [ebp - 0x3c], ax
movzx ecx, word [ebp - 0x3c]
movzx edx, word [ebp - 0x64]
cmp ecx, edx
jge 0x5502eb
cmp dword [ebp - 0x38], 0
je 0x54fefa
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x74], ecx
jmp 0x54ff04
mov edx, dword [ebp - 0x34]
movzx eax, word [edx + 0x10]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x94], ecx
mov edx, dword [ebp - 0x38]
push edx
mov eax, dword [ebp - 0x34]
push eax
call fcn.005591d0
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x5502bc
mov dword [ebp - 0x30], 0
lea edx, [ebp - 0x30]
push edx
mov eax, dword [ebp - 0x88]
push eax
mov ecx, dword [ebp - 0x94]
push ecx
call fcn.00554f20
add esp, 0xc
mov dword [ebp - 0x44], eax
push 4
lea ecx, [ebp - 0x14]
call fcn.00578440
lea ecx, [ebp - 0x14]
call fcn.005446d0
mov dword [ebp - 4], 0
cmp dword [ebp - 0x44], 0
je 0x55003e
mov edx, dword [ebp - 0x44]
push edx
push 0x42
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0
je 0x550023
mov eax, dword [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x5c]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push eax
call fcn.004f3840
add esp, 8
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0
jne 0x54ffca
call fcn.0051c0a0
mov dword [ebp - 0x40], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00548c90
jmp 0x5502eb
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x30]
push eax
call fcn.004f3840
add esp, 8
mov dword [ebp - 0x98], eax
xor ecx, ecx
jne 0x54ffe0
mov edx, dword [ebp - 0x44]
push edx
mov eax, dword [ebp - 0x98]
push eax
mov ecx, dword [ebp - 0x44]
push ecx
mov edx, dword [ebp - 0x8c]
push edx
call fcn.00579bc0
add esp, 0x10
mov eax, dword [ebp - 0x5c]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea ecx, [ebp - 0x14]
call fcn.0054b3f0
push eax
push 1
mov ecx, dword [ebp - 0x5c]
push ecx
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
jmp 0x55003e
mov dword [ebp - 0x40], 0x8007000e
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00548c90
jmp 0x5502eb
push 4
lea ecx, [ebp - 0x1c]
call fcn.004e2570
lea ecx, [ebp - 0x1c]
call fcn.004e2830
mov byte [ebp - 4], 1
lea edx, [ebp - 0x1c]
push edx
lea ecx, [ebp - 0x14]
call fcn.0052d8b0
push eax
call fcn.005687c0
add esp, 8
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x55029f
push 4
lea ecx, [ebp - 0x18]
call fcn.00578440
push 0
lea ecx, [ebp - 0x18]
call fcn.005442d0
cmp dword [ebp - 0x38], 0
je 0x55009e
mov eax, dword [ebp - 0x34]
add eax, 0x18
mov dword [ebp - 0x84], eax
jmp 0x5500aa
mov ecx, dword [ebp - 0x34]
add ecx, 0x12
mov dword [ebp - 0x84], ecx
mov edx, dword [ebp - 0x84]
mov dword [ebp - 0x9c], edx
cmp dword [ebp - 0x38], 0
je 0x5500c9
mov eax, dword [ebp - 0x34]
mov cx, word [eax + 0xc]
mov word [ebp - 0x56], cx
jmp 0x5500d4
mov edx, dword [ebp - 0x34]
mov ax, word [edx + 8]
mov word [ebp - 0x56], ax
movsx ecx, word [ebp - 0x56]
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x38], 0
je 0x5500ee
mov edx, dword [ebp - 0x34]
mov ax, word [edx + 0xe]
mov word [ebp - 0x54], ax
jmp 0x5500f9
mov ecx, dword [ebp - 0x34]
mov dx, word [ecx + 0xa]
mov word [ebp - 0x54], dx
movsx eax, word [ebp - 0x54]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x38], 0
je 0x550113
mov ecx, dword [ebp - 0x34]
mov dx, word [ecx + 0x10]
mov word [ebp - 0x52], dx
jmp 0x55011e
mov eax, dword [ebp - 0x34]
mov cx, word [eax + 0xc]
mov word [ebp - 0x52], cx
movsx edx, word [ebp - 0x52]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x38], 0
je 0x55013b
mov eax, dword [ebp - 0x34]
mov cx, word [eax + 0x12]
mov word [ebp - 0x4a], cx
jmp 0x550146
mov edx, dword [ebp - 0x34]
mov ax, word [edx + 0xe]
mov word [ebp - 0x4a], ax
movsx ecx, word [ebp - 0x4a]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
lea edx, [ebp - 0x2c]
push edx
mov ecx, dword [ebp - 0x60]
call fcn.0055b2c0
cmp dword [ebp - 0x38], 0
je 0x55016d
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 0x14]
mov dword [ebp - 0x6c], ecx
jmp 0x550177
mov edx, dword [ebp - 0x34]
movzx eax, word [edx + 0x10]
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x38], 0
je 0x550188
mov ecx, dword [ebp - 0x34]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x80], edx
jmp 0x55018f
mov dword [ebp - 0x80], 0
cmp dword [ebp - 0x38], 0
je 0x5501a0
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax + 8]
mov dword [ebp - 0x70], ecx
jmp 0x5501a8
mov edx, dword [ebp - 0x34]
mov eax, dword [edx]
mov dword [ebp - 0x70], eax
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xa0], esp
mov edx, dword [ebp - 0x6c]
push edx
call fcn.00532270
mov eax, dword [ebp - 0x80]
push eax
mov ecx, dword [ebp - 0x70]
or ecx, 0x10000
push ecx
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xa4], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.00532270
mov eax, dword [ebp - 0x60]
mov ecx, dword [eax + 4]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0054f920
lea ecx, [ebp - 0x18]
call fcn.0052d8b0
test eax, eax
je 0x550297
cmp dword [ebp - 0x38], 0
je 0x550219
mov edx, dword [ebp - 0x34]
cmp dword [edx], 0
je 0x550219
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0056fa50
lea ecx, [ebp - 0x1c]
call fcn.0052d8b0
push eax
push 0
lea ecx, [ebp - 0x14]
call fcn.0052d8b0
push eax
mov edx, dword [ebp - 0x9c]
push edx
lea ecx, [ebp - 0x18]
call fcn.005503c0
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jge 0x550265
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.004e2880
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00548c90
jmp 0x5502eb
movzx eax, word [ebp - 0x3c]
test eax, eax
jne 0x550274
mov dword [ebp - 0x48], 0
push 0x13
push 0
push 0
push 0
push 0
mov ecx, dword [ebp - 0x48]
push ecx
lea ecx, [ebp - 0x18]
call fcn.0056faa0
lea ecx, [ebp - 0x18]
call fcn.0052d8b0
mov dword [ebp - 0x48], eax
jmp 0x55029f
call fcn.0051c0a0
mov dword [ebp - 0x40], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c]
call fcn.004e2880
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00548c90
jmp 0x5502d3
movzx edx, word [ebp - 0x3c]
test edx, edx
je 0x5502d3
push 2
mov eax, dword [ebp - 0x48]
push eax
call dword [sym.imp.USER32.dll_GetWindow]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x38]
push ecx
mov edx, dword [ebp - 0x34]
push edx
call fcn.00555120
add esp, 8
mov dword [ebp - 0x34], eax
jmp 0x54fecd
jmp 0x5502f5
call fcn.0051c0a0
mov dword [ebp - 0x40], eax
jmp 0x5502ff
call fcn.0051c0a0
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c6c09
mov esp, ebp
pop ebp
ret 4