Function at 0x404eb1
Capabilities:
Extract resource via kernel32 functions
Read .ini file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4b6df5
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
sub esp, 0x130
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
movzx eax, byte [ebp + 0x40]
test eax, eax
je 0x404f86
lea eax, [ebp + 0x3c]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp + 0x44]
mov dword [ebp - 0x104], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x124], eax
mov eax, dword [ebp - 0xcc]
movzx eax, byte [eax]
test eax, eax
je 0x404f1e
push 0
push 0xd
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringW]
jmp 0x404f81
mov eax, dword [ebp - 0x124]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0xec]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
jmp 0x404f61
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
inc eax
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x20]
cmp dword [eax], 1
jge 0x404f81
mov eax, dword [ebp - 0x20]
push dword [eax]
mov ecx, dword [ebp - 0xbc]
call fcn.00420325
mov dword [eax], 1
jmp 0x404f56
jmp 0x405690
mov eax, dword [ebp + 0x28]
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp + 0x38]
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 0x34]
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp + 0x2c]
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp + 0x18]
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp + 0x24]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp + 0x30]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0x20]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x18], 0xffffffff
push 4
lea ecx, [ebp - 0xa4]
call fcn.00420237
mov dword [ebp - 0x114], 0x9e68
push 1
lea ecx, [ebp - 0x130]
call fcn.00420237
mov dword [ebp - 0x48], 0xfca44bab
mov dword [ebp - 0x134], 0x8a1b
mov dword [ebp - 0x14], 0
jmp 0x40503e
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 4
jge 0x40505a
push dword [ebp - 0x14]
lea ecx, [ebp - 0xa4]
call fcn.00420325
mov dword [eax], 0x42afa017
jmp 0x405037
mov dword [ebp - 0x90], 0x62b5
mov dword [ebp - 0x120], str.mbetksejk_jnjj_ehybsrku_bysr
cmp dword [ebp - 0x90], 0x637c
jle 0x405113
and dword [ebp - 0x24], 0
jmp 0x40508b
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x4546
jge 0x405113
and dword [ebp - 0x3c], 0
jmp 0x4050a1
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x3c0f
jge 0x40510e
and dword [ebp - 0x34], 0
jmp 0x4050b7
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x5b88
jge 0x40510c
and dword [ebp - 0x2c], 0
jmp 0x4050cd
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x6393
jge 0x40510a
mov eax, dword [ebp - 0x34]
cdq
idiv dword [ebp - 0x2c]
mov eax, dword [ebp - 0x3c]
sub eax, edx
xor eax, dword [ebp - 0x24]
cdq
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], edx
push dword [ebp - 0x10c]
push dword [ebp - 0x110]
mov ecx, 0xac67d8
call fcn.004200f3
jmp 0x4050c6
jmp 0x4050b0
jmp 0x40509a
jmp 0x405084
mov dword [ebp - 0x14], 0
jmp 0x405123
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x405139
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x108], 0xb4f5fdfd
jmp 0x40511c
and dword [ebp - 4], 0
cmp dword [ebp - 0x90], 0x6236
jge 0x405159
mov edx, dword [ebp - 0x120]
mov ecx, 0xac67d8
call fcn.00421ea9
jmp 0x405175
or dword [ebp - 4], 0xffffffff
jmp 0x40517f
mov dword [ebp - 0x14], 0
jmp 0x40518f
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 1
jge 0x4051a8
push dword [ebp - 0x14]
lea ecx, [ebp - 0x130]
call fcn.00420325
and dword [eax], 0
jmp 0x405188
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], eax
jne 0x4051bc
mov dword [ebp - 0xc4], 1
jmp 0x4051c3
and dword [ebp - 0xc4], 0
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x84], eax
push 3
lea ecx, [ebp - 0xa4]
call fcn.00420325
mov ecx, dword [ebp - 0x84]
mov dword [eax], ecx
imul eax, dword [ebp - 0x84], 0xfffffff8
test eax, eax
je 0x4051fb
cmp dword [ebp - 0x18], 0
je 0x4051fb
mov dword [ebp - 0x68], 1
jmp 0x4051ff
and dword [ebp - 0x68], 0
cmp dword [ebp - 0x68], 0x1320f2d6
jg 0x405211
mov dword [ebp - 0x80], 1
jmp 0x405215
and dword [ebp - 0x80], 0
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x80], eax
jne 0x405226
mov dword [ebp - 0x70], 1
jmp 0x40522a
and dword [ebp - 0x70], 0
cmp dword [ebp - 0x70], 0xc629
jne 0x40523f
mov dword [ebp - 0x100], 1
jmp 0x405246
and dword [ebp - 0x100], 0
cmp dword [ebp - 0x18], 0xffffffff
je 0x405258
mov dword [ebp - 0x94], 1
jmp 0x40525f
and dword [ebp - 0x94], 0
mov eax, dword [ebp - 0x94]
sub eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x18]
test eax, eax
jne 0x40527f
mov eax, 0x17c7
test eax, eax
jne 0x40527f
and dword [ebp - 0x78], 0
jmp 0x405286
mov dword [ebp - 0x78], 1
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x78]
je 0x40529a
mov dword [ebp - 0x8c], 1
jmp 0x4052a1
and dword [ebp - 0x8c], 0
cmp dword [ebp - 0x8c], 0xc7a00f47
jbe 0x4052b6
mov dword [ebp - 0x60], 1
jmp 0x4052ba
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x60]
test eax, eax
jne 0x4052ef
push 3
lea ecx, [ebp - 0xa4]
call fcn.00420325
cmp dword [eax], 0
jne 0x4052ef
push 1
lea ecx, [ebp - 0xa4]
call fcn.00420325
cmp dword [eax], 0
jne 0x4052ef
and dword [ebp - 0x64], 0
jmp 0x4052f6
mov dword [ebp - 0x64], 1
mov eax, dword [ebp - 0x64]
neg eax
add eax, dword [ebp - 0x18]
je 0x4055ec
mov dword [ebp - 0x54], 1
mov dword [ebp - 0x88], 0x4e2b7835
mov dword [ebp - 0x138], 0
push 3
lea ecx, [ebp - 0xf8]
call fcn.00420237
mov dword [ebp - 0x6c], 0x59bb
mov dword [ebp - 0xa8], str.fvlqjcysg_jrbqkn_pvw
cmp dword [ebp - 0x6c], 0x5d9b
jle 0x4053e5
and dword [ebp - 0x28], 0
jmp 0x405357
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x815
jge 0x4053e5
and dword [ebp - 0x38], 0
jmp 0x405371
mov eax, dword [ebp - 0x38]
inc eax
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x257e
jge 0x4053e0
and dword [ebp - 0x44], 0
jmp 0x405387
mov eax, dword [ebp - 0x44]
inc eax
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x1665
jge 0x4053de
and dword [ebp - 0x40], 0
jmp 0x40539d
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0x2739
jge 0x4053dc
mov eax, dword [ebp - 0x44]
cdq
idiv dword [ebp - 0x40]
mov eax, dword [ebp - 0x38]
mov ecx, edx
sar eax, cl
or eax, dword [ebp - 0x28]
cdq
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x118], edx
push dword [ebp - 0x118]
push dword [ebp - 0x11c]
mov ecx, 0xac67d8
call fcn.004200f3
jmp 0x405396
jmp 0x405380
jmp 0x40536a
jmp 0x405350
mov dword [ebp - 0x30], 0
jmp 0x4053f5
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 3
jge 0x405411
push dword [ebp - 0x30]
lea ecx, [ebp - 0xf8]
call fcn.00420325
mov dword [eax], 0xaf53c8cb
jmp 0x4053ee
mov dword [ebp - 4], 2
cmp dword [ebp - 0x6c], 0x58d0
jge 0x405431
mov edx, dword [ebp - 0xa8]
mov ecx, 0xac67d8
call fcn.00421ea9
jmp 0x40544d
or dword [ebp - 4], 0xffffffff
jmp 0x405457
mov byte [ebp - 0x1a], 0
movzx eax, byte [ebp - 0x1a]
test eax, eax
je 0x40546b
push 0
call dword [sym.imp.USER32.dll_IsRectEmpty]
push 3
lea ecx, [ebp - 0xa4]
call fcn.00420325
cmp dword [eax], 0
je 0x4055c3
cmp dword [ebp - 0x114], 0xa81d
jl 0x405496
mov dword [ebp - 0x58], 1
jmp 0x40549a
and dword [ebp - 0x58], 0
cmp dword [ebp - 0x54], 0
jne 0x405509
push 0
lea ecx, [ebp - 0xf8]
call fcn.00420325
mov ecx, dword [ebp - 0x88]
cmp dword [eax], ecx
jle 0x4054c3
mov dword [ebp - 0xd4], 1
jmp 0x4054ca
and dword [ebp - 0xd4], 0
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x140], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x54]
sub eax, 0x18cc
je 0x4054fa
push 0
lea ecx, [ebp - 0xf8]
call fcn.00420325
mov eax, 0xfb6c
test eax, eax
jne 0x405509
and dword [ebp - 0x74], 0
jmp 0x405510
mov dword [ebp - 0x74], 1
cmp dword [ebp - 0x74], 0x146
jg 0x405522
mov dword [ebp - 0x7c], 1
jmp 0x405526
and dword [ebp - 0x7c], 0
push 0
lea ecx, [ebp - 0x130]
call fcn.00420325
mov ecx, dword [ebp - 0x7c]
add ecx, dword [eax]
cmp ecx, 8
je 0x405546
mov dword [ebp - 0x4c], 1
jmp 0x40554a
and dword [ebp - 0x4c], 0
push 0
lea ecx, [ebp - 0xf8]
call fcn.00420325
mov ecx, dword [ebp - 0x4c]
mov dword [eax], ecx
cmp dword [ebp - 0x4c], 0
jne 0x405571
cmp dword [ebp - 0x88], 0
jne 0x405571
and dword [ebp - 0x50], 0
jmp 0x405578
mov dword [ebp - 0x50], 1
push 4
pop eax
imul eax, eax, 0
mov ecx, dword [ebp - 0x50]
mov dword [ebp + eax - 0x108], ecx
cmp dword [ebp - 0x50], 6
jge 0x405597
mov dword [ebp - 0x5c], 1
jmp 0x40559b
and dword [ebp - 0x5c], 0
push 0
lea ecx, [ebp - 0xa4]
call fcn.00420325
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov eax, dword [ebp - 0x58]
neg eax
cmp eax, dword [ebp - 0x5c]
jne 0x4055c3
mov dword [ebp - 0x98], 1
jmp 0x4055ca
and dword [ebp - 0x98], 0
push 0
lea ecx, [ebp - 0x130]
call fcn.00420325
mov ecx, dword [ebp - 0x98]
mov dword [eax], ecx
lea ecx, [ebp - 0xf8]
call fcn.00420309
jmp 0x405614
mov byte [ebp - 0x1b], 0
movzx eax, byte [ebp - 0x1b]
test eax, eax
je 0x405614
push 0x67f
push 0
push 0x201a
push 0x2a2
push 0xc28
call dword [sym.imp.GDI32.dll_ExtFloodFill]
mov byte [ebp - 0x19], 0
movzx eax, byte [ebp - 0x19]
test eax, eax
je 0x405628
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
lea ecx, [ebp - 0x130]
call fcn.00420309
lea ecx, [ebp - 0xa4]
call fcn.00420309
push dword [ebp - 0xdc]
push dword [ebp - 0xe8]
push dword [ebp - 0xe4]
push dword [ebp - 0xfc]
push dword [ebp - 0xac]
push 0
push dword [ebp - 0xb0]
push dword [ebp - 0xb8]
push dword [ebp - 0xc0]
push dword [ebp - 0xc8]
push dword [ebp - 0xd0]
push dword [ebp - 0xd8]
push dword [ebp - 0xe0]
call fcn.004065c9
add esp, 0x34
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret