Function at 0x433df6
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x14
mov eax, 0x4ab25c
call fcn.004a956e
mov dword [ebp - 0x1c], edx
mov esi, dword [0x4b70c8]
mov ebx, 0x4b70c8
cmp esi, ebx
je 0x433e3e
test byte [esi + 0x1c], 1
je 0x433e3e
cmp byte [esi + 0x19], 5
jb 0x433e3e
push 0x5dd
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x13
pop ecx
call fcn.0041610f
mov esi, dword [0x4b70c8]
mov eax, dword [0x4ba5cc]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x433e67
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, dword [0x4b70c8]
mov edi, eax
test edi, edi
jle 0x433e69
movzx edi, di
or edi, 0x80070000
jmp 0x433e69
xor edi, edi
cmp esi, ebx
je 0x433e93
test byte [esi + 0x1c], 2
je 0x433e93
cmp byte [esi + 0x19], 4
jb 0x433e93
push edi
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x14
pop ecx
call fcn.0041610f
mov esi, dword [0x4b70c8]
mov eax, dword [ebp - 0x10]
xor ebx, ebx
test eax, eax
je 0x433f03
push 0x3f9
push 0x5dd
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov ebx, eax
test ebx, ebx
jne 0x433eca
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jle 0x433ecc
movzx edi, di
or edi, 0x80070000
jmp 0x433ecc
xor edi, edi
mov esi, dword [0x4b70c8]
cmp esi, 0x4b70c8
je 0x433f00
test byte [esi + 0x1c], 2
je 0x433f00
cmp byte [esi + 0x19], 4
jb 0x433f00
push edi
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x15
pop ecx
call fcn.0041610f
mov esi, dword [0x4b70c8]
mov eax, dword [ebp - 0x10]
and dword [ebp - 0x14], 0
test ebx, ebx
je 0x433f67
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x433f31
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jle 0x433f33
movzx edi, di
or edi, 0x80070000
jmp 0x433f33
xor edi, edi
mov esi, dword [0x4b70c8]
cmp esi, 0x4b70c8
je 0x433f67
test byte [esi + 0x1c], 2
je 0x433f67
cmp byte [esi + 0x19], 4
jb 0x433f67
push edi
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x16
pop ecx
call fcn.0041610f
mov esi, dword [0x4b70c8]
xor eax, eax
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x4340cd
mov eax, dword [ebp - 0x10]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
mov dword [ebp - 0x18], ebx
test ebx, ebx
jne 0x433fa2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jle 0x433fa4
movzx edi, di
or edi, 0x80070000
jmp 0x433fa4
xor edi, edi
mov esi, dword [0x4b70c8]
cmp esi, 0x4b70c8
je 0x433fd8
test byte [esi + 0x1c], 2
je 0x433fd8
cmp byte [esi + 0x19], 4
jb 0x433fd8
push edi
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x17
pop ecx
call fcn.0041610f
mov esi, dword [0x4b70c8]
mov eax, dword [ebp - 0x14]
test ebx, ebx
je 0x434090
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
mov edi, ebx
neg edi
sbb edi, edi
and edi, 0x7fffbffb
add edi, 0x80004005
mov esi, dword [0x4b70c8]
cmp esi, 0x4b70c8
je 0x434032
test byte [esi + 0x1c], 2
je 0x434032
cmp byte [esi + 0x19], 4
jb 0x434032
push edi
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x18
pop ecx
call fcn.0041610f
mov esi, dword [0x4b70c8]
test ebx, ebx
je 0x434090
cmp esi, 0x4b70c8
je 0x43405d
test byte [esi + 0x1c], 2
je 0x43405d
cmp byte [esi + 0x19], 4
jb 0x43405d
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x19
pop ecx
call fcn.00416054
lea ecx, [ebp - 0x14]
call fcn.00435ac1
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x14]
and dword [ebp - 4], 0
push eax
push ebx
call fcn.00435be4
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x1c]
push esi
call fcn.00435b87
lea ecx, [esi - 0x10]
call fcn.004174b0
mov esi, dword [0x4b70c8]
cmp esi, 0x4b70c8
je 0x4340c5
test byte [esi + 0x1c], 1
je 0x4340c5
movzx eax, byte [esi + 0x19]
mov ecx, edi
sar ecx, 0x1f
and ecx, 0xfffffffd
add ecx, 5
cmp eax, ecx
jl 0x4340c5
push edi
push dword [esi + 0x14]
mov edx, 0x4073e0
push dword [esi + 0x10]
push 0x1a
pop ecx
call fcn.0041610f
mov eax, edi
call fcn.004a953c
ret
mov ebx, dword [ebp - 0x18]
jmp 0x433fdb