Function at 0x4bf12d
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58305c
mov eax, dword fs:[0]
push eax
mov eax, 0x40d0
call fcn.004fc580
mov eax, dword [0x602c60]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x40bc], ecx
push 0x5caa8b
lea ecx, [ebp - 0x2c]
call fcn.0040f0f0
xor ebx, ebx
mov dword [ebp - 4], ebx
push 0x5a9c48
push str.IDR_SOFTINFO
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
cmp edi, ebx
je 0x4bf1e1
mov ecx, dword [0x607870]
mov eax, dword [ecx]
push edi
call dword [eax + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
je 0x4bf1da
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ecx, dword [0x607870]
mov esi, eax
mov eax, dword [ecx]
push edi
call dword [eax + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
cmp esi, ebx
je 0x4bf1da
cmp eax, ebx
jbe 0x4bf1da
push esi
call fcn.004fba80
pop ecx
push eax
push esi
lea ecx, [ebp - 0x2c]
call fcn.00410120
push edi
call dword [sym.imp.KERNEL32.dll_FreeResource]
sub esp, 0x1c
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x40c4], esp
push eax
call fcn.0040f0a0
mov byte [ebp - 4], 1
mov ecx, dword [0x60642c]
mov byte [ebp - 4], bl
call fcn.00435859
mov ecx, dword [0x60642c]
lea eax, [ebp - 0x40b4]
push eax
call fcn.00431434
test al, al
je 0x4bf39e
push ecx
lea eax, [ebp - 0x34b4]
mov ecx, esp
mov dword [ebp - 0x40c0], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 2
push ecx
mov ecx, esp
mov dword [ebp - 0x40b8], esp
push str.softname
call fcn.0043479c
mov byte [ebp - 4], 3
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x40bc]
call fcn.004a85ae
push ecx
lea eax, [ebp - 0x34b4]
mov ecx, esp
mov dword [ebp - 0x40b8], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x40c0], esp
push str.info_softname
call fcn.0043479c
mov byte [ebp - 4], 5
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x40bc]
call fcn.004a85ae
push ecx
lea eax, [ebp - 0x3eb4]
mov ecx, esp
mov dword [ebp - 0x40b8], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x40c0], esp
push str.item_check
call fcn.0043479c
mov byte [ebp - 4], 7
mov byte [ebp - 4], bl
mov ecx, dword [ebp - 0x40bc]
call fcn.004a85ae
lea ecx, [ebp - 0x40dc]
call fcn.00432a3a
mov byte [ebp - 4], 9
push ecx
lea eax, [ebp - 0x834]
mov ecx, esp
mov dword [ebp - 0x40b8], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0xa
push ecx
mov eax, esp
mov dword [ebp - 0x40c0], esp
push eax
lea ecx, [ebp - 0x40dc]
call fcn.004baf0b
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x40c4]
push eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x40dc]
call fcn.0049be74
mov byte [ebp - 4], 0xc
push dword [ebp - 0x40c4]
mov ecx, dword [0x606424]
lea eax, [ebp - 0x1834]
push eax
lea eax, [ebp - 0x40b4]
push eax
push ebx
call fcn.0049cab7
push ecx
lea eax, [ebp - 0x40b4]
mov ecx, esp
mov dword [ebp - 0x40b8], esp
push eax
call fcn.0043479c
mov byte [ebp - 4], 0xd
mov ecx, dword [0x606434]
mov byte [ebp - 4], 0xc
call fcn.004e79ff
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x40c4]
add ecx, 0xfffffff0
call fcn.004310e3
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x40dc]
call fcn.00432a92
push ecx
mov ecx, esp
mov dword [ebp - 0x40b8], esp
push str.http:__apisoft.hao123.com_data_ad.xml
call fcn.0043479c
mov byte [ebp - 4], 0x10
mov ecx, dword [0x606434]
push 1
mov byte [ebp - 4], bl
call fcn.004e792b
push ecx
mov ecx, esp
mov dword [ebp - 0x40b8], esp
push str._postdata
call fcn.0043479c
mov byte [ebp - 4], 0x11
mov ecx, dword [0x606434]
mov byte [ebp - 4], bl
call fcn.004e6a25
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x2c]
call fcn.0040ff10
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004fb958
leave
ret