Function at 0x414ff0
Capabilities:
Extract resource via kernel32 functions
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5e8
mov eax, dword [0x13413f8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
push eax
lea ecx, [ebp - 0x1c]
call fcn.004021b0
push 0x5a1100
lea ecx, [ebp - 0x1c]
push ecx
call fcn.00407340
add esp, 8
movzx edx, al
test edx, edx
je 0x415030
mov byte [0x1343c7c], 1
jmp 0x415037
mov byte [0x1343c7c], 0
push 0
lea eax, [ebp - 0x4c]
push eax
call fcn.00406e80
add esp, 8
push eax
mov ecx, 0x1343d2c
call fcn.00404a40
lea ecx, [ebp - 0x4c]
call fcn.00401cd0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov dword [ebp - 0x5c4], eax
cmp dword [ebp - 0x5c4], 0
jge 0x41508c
mov dword [ebp - 0x5c8], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5c8]
jmp 0x415346
mov ecx, dword [ebp + 8]
push ecx
call fcn.0047d180
add esp, 4
push 0x5a1104
push 0x65
call fcn.00476320
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 0
jne 0x4150d7
mov dword [ebp - 0x5cc], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5cc]
jmp 0x415346
mov dword [ebp - 0x5b4], 0
mov edx, dword [ebp - 0x5b0]
push edx
call fcn.00476320
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x5c0], eax
cmp dword [ebp - 0x5c0], 0
jne 0x41512d
mov eax, dword [ebp - 0x5b0]
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov dword [ebp - 0x5d0], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5d0]
jmp 0x415346
mov ecx, dword [ebp - 0x5b0]
push ecx
call fcn.00476320
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x5b4], eax
cmp dword [ebp - 0x5b4], 0
jne 0x41516c
mov dword [ebp - 0x5d4], 0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5d4]
jmp 0x415346
mov edx, dword [ebp - 0x5b4]
push edx
call fcn.004724c8
add esp, 4
mov dword [ebp - 0x5d8], eax
mov eax, dword [ebp - 0x5d8]
mov dword [ebp - 0x5bc], eax
cmp dword [ebp - 0x5bc], 0
je 0x4151ba
mov ecx, dword [ebp - 0x5b4]
push ecx
mov edx, dword [ebp - 0x5c0]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
mov eax, dword [ebp - 0x5bc]
push eax
call fcn.004f3650
add esp, 0xc
mov ecx, dword [ebp - 0x5b0]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0
mov edx, dword [ebp - 0x5b4]
push edx
mov eax, dword [ebp - 0x5bc]
push eax
call fcn.0047d6a0
add esp, 0xc
push 0x5a1114
lea ecx, [ebp - 0x34]
call fcn.004021b0
push 0x5a113c
lea ecx, [ebp - 0x34]
call fcn.00401f60
push 0x5a1148
lea ecx, [ebp - 0x34]
call fcn.00401f60
lea ecx, [ebp - 0x34]
push ecx
lea ecx, [ebp - 0x5e8]
call fcn.004040c0
lea ecx, [ebp - 0x5e8]
call fcn.00404140
test eax, eax
je 0x4152b8
push 0x5a1154
push 0x5a1168
call dword [sym.imp.USER32.dll_FindWindowW]
mov dword [ebp - 0x5b8], eax
cmp dword [ebp - 0x5b8], 0
je 0x4152b8
push 9
mov edx, dword [ebp - 0x5b8]
push edx
call dword [sym.imp.USER32.dll_ShowWindow]
push 3
push 0
push 0
push 0
push 0
push 0xffffffffffffffff
mov eax, dword [ebp - 0x5b8]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 3
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
mov ecx, dword [ebp - 0x5b8]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
mov dword [ebp - 0x5dc], 0
lea ecx, [ebp - 0x5e8]
call fcn.00404110
lea ecx, [ebp - 0x34]
call fcn.00401ff0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5dc]
jmp 0x415346
call fcn.00401640
mov edx, dword [ebp + 8]
push edx
lea ecx, [ebp - 0x5ac]
call fcn.00415430
push 0
push 0
push 0
push 0
push 0
push 0
push 0x16000000
push 0x5a117c
push 0
lea ecx, [ebp - 0x5ac]
call fcn.0047ec00
lea ecx, [ebp - 0x5ac]
call fcn.0047e9e0
lea ecx, [ebp - 0x5ac]
call fcn.0047f070
call fcn.00401670
call dword [sym.imp.ole32.dll_CoUninitialize]
mov dword [ebp - 0x5e0], 0
lea ecx, [ebp - 0x5ac]
call fcn.00415510
lea ecx, [ebp - 0x5e8]
call fcn.00404110
lea ecx, [ebp - 0x34]
call fcn.00401ff0
lea ecx, [ebp - 0x1c]
call fcn.00401ff0
mov eax, dword [ebp - 0x5e0]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00472272
mov esp, ebp
pop ebp
ret 0x10