Function at 0x40e9a0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
push 0x482867
mov eax, dword fs:[0]
push eax
sub esp, 0x638
mov eax, dword [0x49b470]
xor eax, esp
mov dword [esp + 0x630], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x49b470]
xor eax, esp
push eax
lea eax, [esp + 0x64c]
mov dword fs:[0], eax
lea eax, [esp + 0x19c]
push eax
call fcn.00403eb0
xor edi, edi
mov dword [esp + 0x654], edi
xor eax, eax
mov ecx, vtable.CBuffer.0
mov ebx, 0x20
xor edx, edx
mov dword [esp + 0x13c], ecx
mov dword [esp + 0x140], edi
mov dword [esp + 0x144], edi
mov dword [esp + 0x148], edi
mov dword [esp + 0x14c], edi
mov dword [esp + 0x150], edi
mov dword [esp + 0x154], ebx
mov dword [esp + 0x158], edi
mov dword [esp + 0x15c], edi
mov dword [esp + 0x160], eax
mov dword [esp + 0x164], eax
mov dword [esp + 0x168], eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x170], eax
mov dword [esp + 0x174], eax
mov dword [esp + 0x178], eax
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], eax
mov dword [esp + 0x184], eax
mov dword [esp + 0x188], edi
mov word [esp + 0x18c], dx
mov dword [esp + 0x190], edi
mov dword [esp + 0x194], edi
mov dword [esp + 0x198], edi
mov dword [esp + 0xdc], ecx
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], edi
mov dword [esp + 0xe8], edi
mov dword [esp + 0xec], edi
mov dword [esp + 0xf0], edi
mov dword [esp + 0xf4], ebx
mov dword [esp + 0xf8], edi
mov dword [esp + 0xfc], edi
mov dword [esp + 0x100], eax
mov dword [esp + 0x104], eax
mov dword [esp + 0x108], eax
mov dword [esp + 0x10c], eax
mov dword [esp + 0x110], eax
mov dword [esp + 0x114], eax
mov dword [esp + 0x118], eax
mov dword [esp + 0x11c], eax
mov dword [esp + 0x120], eax
mov dword [esp + 0x124], eax
mov dword [esp + 0x128], edi
mov word [esp + 0x12c], ax
mov dword [esp + 0x130], edi
mov dword [esp + 0x134], edi
mov dword [esp + 0x138], edi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x30], edi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], eax
mov dword [esp + 0x58], eax
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], edi
mov word [esp + 0x6c], dx
mov dword [esp + 0x70], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], ecx
mov dword [esp + 0x80], edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], edi
mov dword [esp + 0x8c], edi
mov dword [esp + 0x90], edi
mov dword [esp + 0x94], ebx
mov dword [esp + 0x98], edi
mov dword [esp + 0x9c], edi
mov dword [esp + 0xa0], eax
mov dword [esp + 0xa4], eax
mov dword [esp + 0xa8], eax
mov dword [esp + 0xac], eax
mov dword [esp + 0xb0], eax
mov dword [esp + 0xb4], eax
mov dword [esp + 0xb8], eax
mov dword [esp + 0xbc], eax
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], edi
mov word [esp + 0xcc], ax
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd4], edi
mov dword [esp + 0xd8], edi
mov ecx, dword [esp + 0x65c]
mov byte [esp + 0x654], 4
movsx eax, byte [ecx + 1]
sub eax, 0x30
push 6
lea ecx, [esp + 0x1a0]
je 0x40ec85
sub eax, 1
jne 0x40ec85
push 0x492d30
jmp 0x40ec8a
push 0x492d28
call fcn.00402b90
lea esi, [esp + 0x19c]
call fcn.00404430
cmp dword [esp + 0x204], edi
jne 0x40eca9
call fcn.00404430
cmp dword [esp + 0x208], 0x10
mov ecx, dword [esp + 0x1f4]
jae 0x40ecc1
lea ecx, [esp + 0x1f4]
mov eax, dword [0x4b5a84]
push 2
push ecx
push eax
mov esi, eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
cmp eax, edi
je 0x40efef
mov ecx, eax
lea eax, [esp + 0x13c]
call fcn.0040e3c0
push 0x40000
call fcn.0045fd36
push 0x40000
mov ebp, eax
push edi
push ebp
call fcn.00463f50
mov esi, 0x100
mov edx, 1
mov eax, 4
push 0x40000
mov dword [esp + 0x54], 0x28
mov dword [esp + 0x58], esi
mov dword [esp + 0x5c], esi
mov word [esp + 0x60], dx
mov word [esp + 0x62], bx
mov dword [esp + 0x64], edi
mov dword [esp + 0x68], 0xfffc0000
mov dword [esp + 0x6c], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x78], edi
mov dword [esp + 0x7c], 0x400
mov word [esp + 0x80], ax
mov dword [esp + 0x40], ebp
call fcn.0045fd36
push 0x40000
mov ebx, eax
push edi
push ebx
mov dword [esp + 0x38], ebx
call fcn.00463f50
mov eax, 0x28
mov dword [esp + 0xc0], eax
mov dword [esp + 0x120], eax
mov edx, 0x20
mov word [esp + 0xce], dx
mov eax, 0x18
mov word [esp + 0x12e], ax
mov eax, 0x4b5adc
mov edx, 1
mov word [esp + 0x12c], dx
mov edx, dword [0x4b5b0c]
mov dword [esp + 0x1b0], eax
mov dword [esp + 0x90], eax
mov dword [esp + 0xf0], eax
mov dword [esp + 0x150], eax
mov eax, dword [esp + 0x188]
mov ecx, 1
mov dword [esp + 0x10c], edx
cdq
mov word [esp + 0xcc], cx
mov dword [esp + 0xac], ebx
mov ecx, 4
mov ebx, eax
mov word [esp + 0xec], cx
mov ecx, 3
xor ebx, edx
mov dword [esp + 0xc4], esi
mov dword [esp + 0xc8], esi
mov dword [esp + 0xd0], edi
mov dword [esp + 0xd4], 0xfffc0000
mov dword [esp + 0xd8], edi
mov dword [esp + 0xdc], edi
mov dword [esp + 0xe0], edi
mov dword [esp + 0xe4], edi
mov dword [esp + 0xe8], 0x400
mov dword [esp + 0x124], esi
mov dword [esp + 0x128], 0xffffff00
mov dword [esp + 0x130], edi
mov dword [esp + 0x134], 0x30000
mov dword [esp + 0x138], edi
mov dword [esp + 0x13c], edi
mov dword [esp + 0x140], edi
mov dword [esp + 0x144], edi
mov dword [esp + 0x148], 0x300
mov word [esp + 0x14c], cx
sub ebx, edx
fld dword [0x495ee8]
mov eax, esi
cdq
fstp dword [esp + 0x1c]
add esp, 0x1c
mov esi, eax
mov eax, dword [esp + 0x168]
push ebx
push eax
lea ecx, [esp + 0x148]
push ecx
mov ecx, dword [0x4b5b18]
xor esi, edx
sub esi, edx
push ecx
mov eax, esi
push ecx
sub eax, ecx
lea ecx, [esp + 0x34]
call fcn.004107e0
push edi
push 2
lea edx, [esp + 0x24]
push edx
push esi
push 0xfe
push edi
xor eax, eax
lea ecx, [esp + 0x94]
call fcn.0040a1b0
push edi
push edi
lea eax, [esp + 0x24]
push eax
lea ecx, [esi - 2]
push ecx
push 0x100
push 2
xor eax, eax
lea ecx, [esp + 0x94]
call fcn.0040a1b0
fld1
mov edx, dword [esp + 0x164]
push ecx
mov ecx, dword [0x4b5b18]
fstp dword [esp]
push ebx
push edx
lea eax, [esp + 0x148]
push eax
push ecx
mov eax, esi
push ecx
sub eax, ecx
lea ecx, [esp + 0x34]
call fcn.004107e0
push edi
push edi
lea ecx, [esp + 0x24]
push ecx
push esi
push 0x100
push edi
xor eax, eax
lea ecx, [esp + 0x94]
call fcn.0040a1b0
mov eax, 0xffffff00
cdq
mov ecx, eax
xor ecx, edx
sub ecx, edx
lea edx, [esp + 0xdc]
push edx
lea eax, [esp + 0x80]
mov edx, 0x100
call fcn.0040e470
cmp dword [esp + 0x204], edi
jne 0x40efb5
lea esi, [esp + 0x19c]
call fcn.00404430
cmp dword [esp + 0x208], 0x10
mov eax, dword [esp + 0x1f4]
jae 0x40efcd
lea eax, [esp + 0x1f4]
push eax
lea eax, [esp + 0x248]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebp
call fcn.0045fc59
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0045fc59
add esp, 8
lea esi, [esp + 0x19c]
call fcn.00403f80
mov ecx, dword [esp + 0x64c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x630]
xor ecx, esp
call fcn.0045f0aa
add esp, 0x644
ret 4