Function at 0x404bc0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
push 0x465fba
mov eax, dword fs:[0]
push eax
sub esp, 0x6b0
mov eax, dword [0x4851d0]
xor eax, esp
mov dword [esp + 0x6ac], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4851d0]
xor eax, esp
push eax
lea eax, [esp + 0x6c4]
mov dword fs:[0], eax
mov dword [esp + 0x20], ecx
lea ecx, [esp + 0x60]
call fcn.00429a10
mov ecx, dword [0x4865c8]
push 0x46bc1c
xor ebx, ebx
push 0x83
mov dword [esp + 0x6d4], ebx
call fcn.00425d20
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
cmp esi, ebx
jne 0x404c6d
mov eax, dword [esp + 0x94]
cmp eax, 0x486678
mov dword [esp + 0x60], vtable.TiXmlDocument.0
mov dword [esp + 0x6cc], 0xffffffff
je 0x404c5d
push eax
call fcn.0042cbc2
add esp, 4
lea ecx, [esp + 0x60]
call fcn.004296a0
xor eax, eax
jmp 0x4050f4
mov ecx, dword [0x4865c8]
push esi
call fcn.00425d20
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ecx, dword [0x4865c8]
push esi
mov ebp, eax
call fcn.00425d20
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea edi, [esi + 1]
push edi
call fcn.0042cbc7
push edi
push ebx
push eax
mov dword [esp + 0x28], eax
call fcn.0044d9b0
push esi
mov esi, dword [esp + 0x2c]
push ebp
push esi
call fcn.0044dcb0
add esp, 0x1c
push ebx
push ebx
push esi
lea ecx, [esp + 0x6c]
call fcn.0042bce0
push str.TheConfigure
lea ecx, [esp + 0x64]
call fcn.00428fb0
mov edi, eax
cmp edi, ebx
mov dword [esp + 0x14], edi
jne 0x404cf4
push esi
call fcn.0042cbc2
add esp, 4
jmp 0x404c33
push 0x206
lea eax, [esp + 0x4be]
push ebx
push eax
mov word [esp + 0x4c4], bx
call fcn.0044d9b0
push 0x206
lea ecx, [esp + 0x2c2]
push ebx
push ecx
mov word [esp + 0x2c8], bx
call fcn.0044d9b0
push 0x206
lea edx, [esp + 0xc6]
push ebx
push edx
mov word [esp + 0xcc], bx
call fcn.0044d9b0
add esp, 0x24
push str.Application
mov ecx, edi
call fcn.00429080
cmp eax, ebx
je 0x404c33
mov ecx, eax
call fcn.00429050
mov ebp, eax
cmp ebp, ebx
je 0x404ecb
lea ecx, [ecx]
mov edi, dword [ebp + 0x20]
mov ecx, dword [ebp + 0x18]
add edi, 8
cmp ecx, ebx
jne 0x404d81
xor esi, esi
jmp 0x404d96
mov eax, dword [ecx]
mov edx, dword [eax + 0x30]
call edx
cmp eax, ebx
jne 0x404d90
xor esi, esi
jmp 0x404d96
mov esi, dword [eax + 0x20]
add esi, 8
mov ecx, dword [0x4865c8]
lea eax, [esp + 0x2b0]
push eax
push edi
call fcn.00415090
mov ecx, eax
call fcn.00413080
lea ecx, [esp + 0xa8]
push ecx
mov ecx, dword [0x4865c8]
push esi
call fcn.00415090
mov ecx, eax
call fcn.00413080
mov esi, 7
lea eax, [esp + 0xa8]
mov dword [esp + 0x5c], esi
mov dword [esp + 0x58], ebx
mov word [esp + 0x48], bx
lea edx, [eax + 2]
jmp 0x404df0
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x404df0
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0xac]
push edx
lea ecx, [esp + 0x4c]
call fcn.00401530
lea eax, [esp + 0x2b0]
mov byte [esp + 0x6cc], 1
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x404e30
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x2b4]
push eax
lea ecx, [esp + 0x30]
call fcn.00401530
mov ecx, dword [esp + 0x20]
mov ecx, dword [ecx + 0x1210]
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x44]
push eax
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x6d4], 2
call edx
mov edi, 8
cmp dword [esp + 0x40], edi
jb 0x404e8b
mov eax, dword [esp + 0x2c]
push eax
call fcn.0042cbc2
add esp, 4
cmp dword [esp + 0x5c], edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
mov byte [esp + 0x6cc], bl
jb 0x404eb2
mov ecx, dword [esp + 0x48]
push ecx
call fcn.0042cbc2
add esp, 4
mov ecx, ebp
call fcn.004290c0
mov ebp, eax
cmp ebp, ebx
jne 0x404d70
mov esi, dword [esp + 0x18]
mov edi, dword [esp + 0x14]
push str.UpdateSoft
mov ecx, edi
call fcn.00429080
cmp eax, ebx
jne 0x404ef6
lea ecx, [esp + 0x60]
mov dword [esp + 0x6cc], 0xffffffff
call fcn.00404040
xor eax, eax
jmp 0x4050f4
mov ecx, eax
call fcn.00429050
mov ebp, eax
cmp ebp, ebx
mov dword [esp + 0x1c], ebp
je 0x4050d2
jmp 0x404f14
mov ebp, dword [esp + 0x1c]
push 4
call fcn.0042cb97
add esp, 4
mov dword [esp + 0x24], eax
cmp eax, ebx
mov byte [esp + 0x6cc], 3
je 0x404f37
mov ecx, eax
call fcn.004259b0
jmp 0x404f39
xor eax, eax
mov ecx, eax
mov byte [esp + 0x6cc], bl
mov dword [esp + 0x14], eax
call fcn.00426610
mov edi, dword [ebp + 0x20]
add edi, 8
mov ecx, ebp
mov dword [esp + 0x24], edi
call fcn.00429050
mov esi, eax
cmp esi, ebx
je 0x405015
mov ecx, dword [esi + 0x18]
mov edx, dword [ecx]
mov edi, dword [esi + 0x20]
mov eax, dword [edx + 0x30]
add edi, 8
call eax
cmp eax, ebx
jne 0x404f7e
xor ebp, ebp
jmp 0x404f84
mov ebp, dword [eax + 0x20]
add ebp, 8
push 0x208
lea ecx, [esp + 0x2b4]
push ebx
push ecx
call fcn.0044d9b0
push 0x208
lea edx, [esp + 0xb8]
push ebx
push edx
call fcn.0044d9b0
mov ecx, dword [0x4865c8]
add esp, 0x18
lea eax, [esp + 0x2b0]
push eax
push edi
call fcn.00415090
mov ecx, eax
call fcn.00413080
lea ecx, [esp + 0xa8]
push ecx
mov ecx, dword [0x4865c8]
push ebp
call fcn.00415090
mov ecx, eax
call fcn.00413080
mov ecx, dword [esp + 0x14]
lea edx, [esp + 0xa8]
push edx
lea eax, [esp + 0x2b4]
push eax
call fcn.00426410
mov ecx, esi
call fcn.004290c0
mov esi, eax
cmp esi, ebx
jne 0x404f66
mov ebp, dword [esp + 0x1c]
mov edi, dword [esp + 0x24]
lea ecx, [esp + 0x4b8]
push ecx
mov ecx, dword [0x4865c8]
push edi
call fcn.00415090
mov ecx, eax
call fcn.00413080
mov esi, 7
lea eax, [esp + 0x4b8]
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x405050
sub eax, edx
sar eax, 1
push eax
lea edx, [esp + 0x4bc]
push edx
lea ecx, [esp + 0x30]
call fcn.00401530
mov eax, dword [esp + 0x20]
mov ecx, dword [eax + 0x121c]
mov edx, dword [ecx]
mov edx, dword [edx]
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x2c]
push eax
mov byte [esp + 0x6d4], 4
call edx
cmp dword [esp + 0x40], 8
mov byte [esp + 0x6cc], bl
jb 0x4050ae
mov eax, dword [esp + 0x2c]
push eax
call fcn.0042cbc2
add esp, 4
mov ecx, ebp
mov dword [esp + 0x40], esi
mov dword [esp + 0x3c], ebx
mov word [esp + 0x2c], bx
call fcn.004290c0
cmp eax, ebx
mov dword [esp + 0x1c], eax
jne 0x404f10
mov esi, dword [esp + 0x18]
push esi
call fcn.0042cbc2
add esp, 4
lea ecx, [esp + 0x60]
mov dword [esp + 0x6cc], 0xffffffff
call fcn.00404040
mov eax, 1
mov ecx, dword [esp + 0x6c4]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x6ac]
xor ecx, esp
call fcn.0044d5bb
add esp, 0x6bc
ret