Function at 0x411d70
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x615fa8
push eax
mov dword fs:[0], esp
sub esp, 0x3c
push esi
push 0x627b24
push 0x7f
xor esi, esi
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
cmp eax, esi
je 0x412062
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, esi
je 0x412062
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp eax, esi
je 0x412062
cmp byte [eax], 0xd
push ebx
mov ecx, eax
lea ebx, [esi + 1]
je 0x411de0
jmp 0x411dd0
add ecx, ebx
cmp byte [ecx], 0xd
jne 0x411dd0
jmp 0x411dea
mov al, byte [ecx]
cmp al, 0xd
je 0x411dea
cmp al, 0xa
jne 0x411df8
mov al, byte [ecx]
xor al, 7
add ecx, ebx
cmp byte [ecx], al
jne 0x411de0
add ecx, ebx
jmp 0x411de0
push ebp
mov dword [esp + 0x38], esi
mov dword [esp + 0x3c], esi
mov dword [esp + 0x44], esi
mov ebp, 0x6575c8
mov dword [esp + 0x50], esi
mov dword [esp + 0x20], ebp
mov dword [esp + 0x24], ebp
mov dword [esp + 0x28], ebp
mov al, byte [ecx]
test al, al
mov byte [esp + 0x50], bl
mov byte [esp + 0xf], 0
je 0x412060
push edi
mov edi, edi
cmp al, 0x20
je 0x411e4b
cmp al, 0xd
je 0x411e4b
cmp al, 0xa
je 0x411e4b
cmp byte [esp + 0x13], 0
jne 0x41203d
mov byte [esp + 0x13], bl
test al, al
mov esi, ecx
je 0x411e62
cmp al, 0xd
je 0x411e62
cmp al, 0xa
je 0x411e62
mov al, byte [esi + ebx]
add esi, ebx
test al, al
jne 0x411e51
mov eax, dword [esp + 0x3c]
push 0
push esi
push ecx
lea ecx, [esp + 0x48]
push ecx
mov dword [esp + 0x50], eax
call fcn.00411670
mov al, byte [esi]
add esp, 0x10
cmp al, 0xd
mov dword [esp + 0x18], esi
je 0x411e89
cmp al, 0xa
jne 0x411ea0
mov dl, byte [esi]
xor dl, byte [esi + 1]
add esi, 1
cmp dl, 7
mov dword [esp + 0x18], esi
jne 0x411ea0
add esi, ebx
mov dword [esp + 0x18], esi
mov eax, dword [esp + 0x40]
cmp eax, dword [esp + 0x48]
jne 0x411eb3
lea ecx, [esp + 0x3c]
call fcn.004115a0
mov ecx, dword [esp + 0x40]
mov byte [ecx], 0
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
add dword [esp + 0x40], ebx
cmp edi, ebp
mov esi, dword [esp + 0x3c]
mov dword [esp + 0x20], 0x4e
je 0x411ee6
mov dword [esp + 0x28], ebp
mov byte [ebp], 0
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
mov al, byte [esi]
xor ecx, ecx
test al, al
mov dword [esp + 0x1c], esi
mov dword [esp + 0x14], ecx
je 0x411f04
cmp al, 0x20
je 0x411f04
mov al, byte [esi + 1]
add esi, 1
test al, al
jne 0x411ef6
mov al, byte [esi]
test al, al
mov edx, esi
je 0x411f1e
lea esp, [esp]
cmp al, 0x20
jne 0x411f1e
mov al, byte [esi + 1]
add esi, 1
test al, al
jne 0x411f10
mov eax, dword [esp + 0x20]
mov ebx, edx
sub ebx, dword [esp + 0x1c]
cmp ebx, eax
jg 0x411f3a
mov al, byte [esi]
test al, al
mov ecx, edx
mov dword [esp + 0x14], esi
jne 0x411ef6
jmp 0x411f45
test ecx, ecx
jne 0x411f45
lea ecx, [edx + eax]
mov dword [esp + 0x14], ecx
mov ebx, dword [esp + 0x1c]
cmp ebx, ecx
je 0x411f93
mov eax, dword [esp + 0x2c]
sub eax, ebp
sub edi, ebp
sub ecx, ebx
mov edx, eax
mov esi, ecx
sub edx, edi
cmp edx, esi
jae 0x411f71
push eax
push edi
push esi
lea ecx, [esp + 0x30]
call fcn.00518cb5
mov ebp, dword [esp + 0x24]
push esi
push ebx
add edi, ebp
push edi
call fcn.005f7b00
mov eax, dword [esp + 0x34]
add esp, 0xc
add eax, esi
mov dword [esp + 0x28], eax
mov byte [eax], 0
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
sub edi, ebp
mov eax, edi
push eax
lea eax, [esp + 0x34]
push ebp
push eax
call fcn.0051b593
push eax
push 0
mov byte [esp + 0x68], 2
call fcn.00520d92
mov eax, dword [esp + 0x44]
add esp, 0x14
cmp eax, 0x6575cc
mov ebx, 1
mov byte [esp + 0x54], bl
je 0x411fd0
push eax
call fcn.005f7371
add esp, 4
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
cmp edi, ebp
mov esi, dword [esp + 0x14]
je 0x411ff0
mov dword [esp + 0x28], ebp
mov byte [ebp], 0
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x24]
mov eax, edi
sub eax, ebp
cmp eax, 5
jbe 0x412006
add ebp, 5
mov dword [esp + 0x28], ebp
mov byte [ebp], 0
jmp 0x412016
jae 0x41201e
push 0x20
push eax
push 5
lea ecx, [esp + 0x30]
call fcn.00518e15
mov ebp, dword [esp + 0x24]
mov edi, dword [esp + 0x28]
cmp byte [esi], 0
mov dword [esp + 0x20], 0x49
jne 0x411ee6
mov ecx, dword [esp + 0x18]
mov al, byte [ecx]
test al, al
jne 0x411e30
cmp ebp, 0x6575c8
pop edi
je 0x41204f
push ebp
call fcn.005f7371
add esp, 4
mov eax, dword [esp + 0x38]
test eax, eax
je 0x412060
push eax
call fcn.005f7a6f
add esp, 4
pop ebp
pop ebx
mov ecx, dword [esp + 0x40]
pop esi
mov dword fs:[0], ecx
add esp, 0x48
ret