Function at 0x405350
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x415d33
mov eax, dword fs:[0]
push eax
sub esp, 0x848
mov eax, dword [0x4543c8]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x820], ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x840], str.aEEA3tDaoNopzdN9UcbR654KwX7yeTbDFTLMuIAL73oS0WNKpFH9rJ9RAyfxWxa7Vyko8gyTFyuM6qKFQAyJDSTdjpfikGBVvlklQk1NFolihmGaQIXwqaRq3pKJmdnttyFXLt4UMF1xDjQatoYPQxfhfrJKOQxKr594izuUGDWF7HAjmxBsbjQNixBagbgxxnqU5OGF3yYInIoYADICX59dEM9KXzPgnu5e5KEeyNlIPsTdQN410NgTMjvh1gK661y9te7SWPEBILSKgFiMpJVvaohqfhASpbeiJrn4WbTj
mov dword [ebp - 0x854], str.cbhtt7smkygLCRI86LX6jqYqlx55vcp60LO5nfrh0JntcOXxCjt2QuCgzKNPKk9nsxLgvJMiUP5zY8ImhPAu3sEqO10mRzmNvXQuDflBrllN4dyf
push 0x420634
push 0x66
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0
jne 0x4053de
mov dword [ebp - 0x824], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004015c0
mov eax, dword [ebp - 0x824]
jmp 0x405521
mov eax, dword [ebp - 0x818]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x830], eax
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [ebp - 0x818]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
jne 0x405449
mov dword [ebp - 0x828], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004015c0
mov eax, dword [ebp - 0x828]
jmp 0x405521
mov eax, dword [ebp - 0x81c]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x848], str.TcAXXaUAXnl4AvjQAv3QDjo7UPeA7iIMfnj6vGCbYskPXzO4mj7r7lvLXRHQK8DO8o55pjDg1kbozbhlEcnbTv0XJv0l9jvyaLtdTCDxtxv77lyq7yMrB7lnoURd7lJqrjompam8LpIv2x9VL6Gb0v4342SNbgkKv768AwEvd05dsQ2q9KJ252MoMAvAzBPLmu8Fhkoy89E1dMQheLSf43cgA2WceqqAr3oPxbyzJtoRPpMPrCsKkV3RtCjlNiNdDF66CJddgm0PAjBiC466u6dOkmtXBiixjtNAYCvwPV49oADJ98JrlUA831b4I2KmhRn2gwDWz5X7TQN8K4HDUQcbt70PSCFlLw1Rk8TlwvWhtcCnIrA8qk7KnYizwG44vmh6g8FUIC3g9iad
mov dword [ebp - 0x850], str.AvKfpyvVNglACyNashINxYqtrCJOtBJzG6vMUf2ye2pXQCDAlFRDtLSBh5X6aUO52ANJM3PQDUL8i215EHCiH8kdYHcPhiDT2ydl7Vwgc1HJYbTU
cmp dword [ebp - 0x814], 0
jne 0x40549d
mov dword [ebp - 0x83c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004015c0
mov eax, dword [ebp - 0x83c]
jmp 0x405521
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x405500
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x844], esp
lea edx, [ebp + 0xc]
push edx
call fcn.00402e70
mov dword [ebp - 0x838], eax
mov eax, dword [ebp - 0x838]
mov dword [ebp - 0x84c], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x830]
push ecx
push 0
mov edx, dword [ebp - 0x814]
push edx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x820]
call fcn.00406390
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x834], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004015c0
mov eax, dword [ebp - 0x834]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040a3eb
mov esp, ebp
pop ebp
ret 0x1c