Function at 0x403af0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x14
push 0x10
push 1
push 0
mov dword [ebp - 0x10], ecx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x403d2c
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x403d2c
push ebx
push esi
push edi
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edx, eax
test edx, edx
je 0x403cc1
lea ecx, [edx + 6]
lea esi, [ecx + 2]
jmp 0x403b40
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403b40
movzx eax, word [edx + 2]
sub ecx, esi
sar ecx, 1
add eax, 3
and eax, 0xfffffffc
add eax, edx
lea edi, [ecx*2 + 0xb]
and edi, 0xfffffffc
add edi, eax
movzx eax, word [edx]
add eax, edx
mov dword [ebp - 4], edi
mov dword [ebp - 0xc], eax
cmp edi, eax
jae 0x403cc1
lea ebx, [ebx]
lea ecx, [edi + 6]
mov edx, 0x42edfc
mov eax, ecx
lea ebx, [ebx]
mov si, word [eax]
cmp si, word [edx]
jne 0x403bb6
test si, si
je 0x403bb2
mov si, word [eax + 2]
cmp si, word [edx + 2]
jne 0x403bb6
add eax, 4
add edx, 4
test si, si
jne 0x403b90
xor eax, eax
jmp 0x403bbb
sbb eax, eax
or eax, 1
test eax, eax
jne 0x403caa
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403bc6
movzx eax, word [edi]
sub ecx, edx
sar ecx, 1
add eax, edi
mov dword [ebp - 8], eax
lea ebx, [ecx*2 + 0xb]
and ebx, 0xfffffffc
add ebx, edi
cmp ebx, eax
jae 0x403caa
lea ecx, [ebx + 6]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x403bf7
movzx eax, word [ebx]
sub ecx, edx
sar ecx, 1
add eax, ebx
lea esi, [ecx*2 + 0xb]
and esi, 0xfffffffc
add esi, ebx
cmp esi, eax
jae 0x403c93
jmp 0x403c20
lea ecx, [esi + 6]
mov edx, ecx
lea edi, [edx + 2]
jmp 0x403c30
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x403c30
sub edx, edi
mov eax, 0x42ee1c
sar edx, 1
lea edi, [edx*2 + 0xb]
and edi, 0xfffffffc
add edi, esi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x403c76
test dx, dx
je 0x403c72
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x403c76
add ecx, 4
add eax, 4
test dx, dx
jne 0x403c50
xor eax, eax
jmp 0x403c7b
sbb eax, eax
or eax, 1
test eax, eax
je 0x403cd6
movzx eax, word [esi]
add eax, 3
and eax, 0xfffffffc
add esi, eax
movzx eax, word [ebx]
add eax, ebx
cmp esi, eax
jb 0x403c20
movzx eax, word [ebx]
add eax, 3
and eax, 0xfffffffc
add ebx, eax
cmp ebx, dword [ebp - 8]
jb 0x403bf1
mov edi, dword [ebp - 4]
movzx eax, word [edi]
add eax, 3
and eax, 0xfffffffc
add edi, eax
mov dword [ebp - 4], edi
cmp edi, dword [ebp - 0xc]
jb 0x403b80
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FreeResource]
pop edi
pop esi
mov eax, 0x8000004c
pop ebx
mov esp, ebp
pop ebp
ret
xor esi, esi
test edi, edi
je 0x403ced
mov eax, edi
cmp word [edi], si
je 0x403ced
lea eax, [eax + 2]
inc esi
cmp word [eax], 0
jne 0x403ce3
mov ebx, dword [ebp - 0x10]
mov ecx, dword [ebx + 4]
cmp esi, ecx
jbe 0x403d0a
push ecx
push 0
mov eax, esi
sub eax, ecx
mov ecx, ebx
push eax
push 0
call fcn.0040234a
jmp 0x403d0d
mov dword [ebx + 4], esi
add esi, esi
push esi
push edi
push dword [ebx]
call fcn.0040a280
mov eax, dword [ebx]
add esp, 0xc
xor ecx, ecx
pop edi
mov word [esi + eax], cx
xor eax, eax
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0x8000004c
mov esp, ebp
pop ebp
ret