Function at 0x416160
Capabilities:
Extract resource via kernel32 functions
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x1c
mov eax, dword [0x441874]
push ebx
mov ebx, ecx
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 0x28]
push esi
xor esi, esi
cmp eax, esi
je 0x41618c
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x18]
call fcn.004251f6
add esp, 0x1c
ret 8
cmp dword [ebx + 0xb4], 5
jne 0x4161a9
mov dword [ebx + 0xb4], 1
nop
cmp dword [ebx + 0xb4], 2
jne 0x4161a0
mov eax, dword [ebx + 0xa0]
cmp eax, esi
je 0x4161bc
push eax
call fcn.004258ee
add esp, 4
mov eax, dword [ebx + 0xa8]
cmp eax, esi
je 0x4161cf
push eax
call fcn.004258ee
add esp, 4
mov eax, dword [ebx + 0xb8]
cmp eax, esi
je 0x4161e6
push eax
call dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [ebx + 0xb8], esi
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x28]
push ebp
push edi
push eax
mov dword [ebx + 0xa8], esi
mov dword [ebx + 0xa0], esi
mov dword [ebx + 0x8c], esi
mov dword [ebx + 0x78], esi
mov dword [ebx + 0x6c], esi
mov esi, dword [0x443338]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov ebp, eax
push ebp
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push ebp
mov edi, eax
push esi
mov dword [esp + 0x3c], edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test ebp, ebp
mov esi, eax
mov dword [esp + 0x10], esi
je 0x4163d4
test edi, edi
je 0x4163d4
test esi, esi
je 0x4163d4
push esi
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push 2
mov ebp, eax
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edx, ebp
mov ecx, dword [edx]
mov dword [esp + 0x18], ecx
mov ecx, dword [edx + 4]
mov dword [esp + 0x1c], ecx
mov ecx, dword [edx + 8]
mov dl, byte [edx + 0xc]
mov dword [esp + 0x20], ecx
cmp byte [esp + 0x18], 0x47
mov dword [esp + 0x14], eax
mov byte [esp + 0x24], dl
jne 0x4163b3
mov ecx, dword [esp + 0x18]
shr ecx, 8
cmp cl, 0x49
jne 0x4163b3
mov ecx, dword [esp + 0x18]
shr ecx, 0x10
cmp cl, 0x46
jne 0x4163b3
mov ecx, dword [esp + 0x18]
shr ecx, 0x18
cmp cl, 0x38
jne 0x4163b3
mov cl, byte [esp + 0x1c]
cmp cl, 0x37
je 0x4162cd
cmp cl, 0x39
jne 0x4163b3
mov ecx, dword [esp + 0x1c]
shr ecx, 8
cmp cl, 0x61
jne 0x4163b3
movzx ecx, word [esp + 0x20]
mov eax, dword [esp + 0x1c]
movzx edx, byte [esp + 0x23]
mov dword [ebx + 0xc0], ecx
xor ecx, ecx
mov cl, byte [esp + 0x22]
shr eax, 0x10
test cl, cl
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0x68], edx
jns 0x416344
and ecx, 7
inc ecx
mov eax, 1
shl eax, cl
mov dword [ebx + 0x78], eax
lea eax, [eax + eax*2]
push eax
call fcn.0042550e
mov ecx, dword [ebx + 0x78]
lea ecx, [ecx + ecx*2]
mov edx, ecx
shr ecx, 2
mov dword [ebx + 0xa0], eax
lea esi, [ebp + 0xd]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
add esp, 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [esp + 0x34]
mov eax, dword [ebx + 0x78]
add eax, 4
lea ecx, [eax + eax*2]
mov eax, edi
sub eax, ecx
push eax
mov dword [ebx + 0x6c], eax
call fcn.0042550e
mov ecx, dword [ebx + 0x6c]
mov dword [ebx + 0xa8], eax
mov dword [ebx + 0xac], eax
mov ebx, dword [ebx + 0x78]
mov edi, eax
mov eax, ecx
shr ecx, 2
lea edx, [ebp + ebx*2]
lea esi, [ebx + edx + 0xd]
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, dword [esp + 0x18]
mov esi, dword [sym.imp.KERNEL32.dll_FreeResource]
add esp, 4
push ecx
call esi
mov edx, dword [esp + 0x10]
push edx
call esi
pop edi
pop ebp
pop esi
mov eax, 1
pop ebx
mov ecx, dword [esp + 0x18]
call fcn.004251f6
add esp, 0x1c
ret 8
mov edi, dword [sym.imp.KERNEL32.dll_FreeResource]
push eax
call edi
push esi
call edi
pop edi
pop ebp
pop esi
xor eax, eax
pop ebx
mov ecx, dword [esp + 0x18]
call fcn.004251f6
add esp, 0x1c
ret 8
push esi
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov ecx, dword [esp + 0x28]
pop edi
pop ebp
pop esi
xor eax, eax
pop ebx
call fcn.004251f6
add esp, 0x1c
ret 8