Function at 0x465640
Capabilities:
Allocate or change rwx memory
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x200b0
call fcn.004ebaf0
mov eax, dword [0x526b24]
xor eax, esp
mov dword [esp + 0x200ac], eax
mov eax, dword [esp + 0x200b4]
push ebx
mov ebx, dword [esp + 0x200bc]
mov dword [esp + 0x14], eax
push ebp
mov ebp, ecx
mov dword [esp + 8], ebp
push esi
mov esi, dword [esp + 0x200d0]
mov dword [esp + 0x28], esi
push edi
test ebx, ebx
je 0x465f80
cmp word [ebx], 0
je 0x465f80
mov eax, dword [0x62271c]
mov edx, dword fs:[0x2c]
lea edi, [eax*4]
mov eax, dword [edi + edx]
cmp byte [eax + 0x2198], 0
jne 0x4656bc
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
cmp byte [eax + 0x2198], 0
jne 0x4656d4
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov ecx, dword [edi + edx]
mov eax, dword [ecx + 0x944]
cmp eax, dword [ecx + 0x99c]
jl 0x46581a
cmp byte [ecx + 0x2198], 0
jne 0x4656fe
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
cmp dword [eax + 0x944], 0xffff
jl 0x465723
push 0x4f5b70
push str.Too_many_includes.
mov ecx, ebp
call fcn.0046cf30
jmp 0x465f82
cmp byte [eax + 0x2198], 0
jne 0x465738
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
cmp dword [eax + 0x99c], 0
je 0x465773
cmp byte [eax + 0x2198], 0
jne 0x465759
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
mov esi, dword [eax + 0x99c]
add esi, esi
cmp esi, 0xffff
jle 0x465778
mov esi, 0xffff
jmp 0x465778
mov esi, 0x64
cmp byte [eax + 0x2198], 0
lea ecx, [esi*4]
jne 0x46579b
call fcn.004ebad3
mov edx, dword fs:[0x2c]
lea ecx, [esi*4]
mov eax, dword [edi + edx]
push ecx
push dword [eax + 0x938]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_realloc]
add esp, 8
mov dword [esp + 0x1c], eax
test eax, eax
jne 0x4657cc
push 0x4f5b70
push str.Out_of_memory.
mov ecx, ebp
call fcn.0046cf30
jmp 0x465f82
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
cmp byte [eax + 0x2198], 0
jne 0x4657eb
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
mov ecx, dword [esp + 0x1c]
cmp byte [eax + 0x2198], 0
mov dword [eax + 0x938], ecx
jne 0x46580d
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov ecx, dword [edi + edx]
mov dword [ecx + 0x99c], esi
mov esi, dword [esp + 0x2c]
cmp byte [ecx + 0x2198], 0
jne 0x46582f
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
mov ebp, dword [eax + 0x944]
test esi, esi
je 0x465994
test ebp, ebp
jne 0x465869
cmp byte [eax + 0x2198], 0
jne 0x465859
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
mov eax, dword [eax + 0x938]
mov dword [eax], ebx
jmp 0x4658fe
cmp word [esi], 0
je 0x4658b9
cmp byte [eax + 0x2198], 0
jne 0x465884
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
push 0xffffffffffffffff
push esi
mov ecx, dword [eax + 0x260]
call fcn.004df790
mov esi, eax
mov eax, dword fs:[0x2c]
mov ecx, dword [edi + eax]
cmp byte [ecx + 0x2198], 0
jne 0x4658b4
call fcn.004ebad3
mov eax, dword fs:[0x2c]
mov eax, dword [edi + eax]
jmp 0x4658f5
cmp byte [eax + 0x2198], 0
jne 0x4658ce
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov ecx, dword [edi + edx]
cmp byte [ecx + 0x2198], 0
mov eax, dword [ecx + 0x298]
mov esi, dword [eax + 0x6c4]
jne 0x4658f2
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
mov eax, dword [eax + 0x938]
mov dword [eax + ebp*4], esi
mov byte [esp + 0x38], 0
lea ecx, [ebx + 2]
mov dword [esp + 0x30], ebx
nop word [eax + eax]
mov ax, word [ebx]
add ebx, 2
test ax, ax
jne 0x465910
sub ebx, ecx
sar ebx, 1
lea eax, [ebx + ebx]
mov ebx, dword [esp + 0x20]
mov dword [esp + 0x34], eax
mov eax, dword [ebx]
test eax, eax
jne 0x46594f
push 0x44
call fcn.004ebb43
add esp, 4
mov dword [esp + 0x1c], eax
test eax, eax
je 0x46594b
mov ecx, eax
call fcn.0044ef10
jmp 0x46594d
xor eax, eax
mov dword [ebx], eax
push 0x4b0
push 0xc
lea ecx, [esp + 0x38]
push ecx
mov ecx, eax
call fcn.004e1370
mov ecx, dword fs:[0x2c]
mov eax, dword [edi + ecx]
cmp byte [eax + 0x2198], 0
jne 0x465981
call fcn.004ebad3
mov ecx, dword fs:[0x2c]
mov eax, dword [edi + ecx]
inc dword [eax + 0x944]
mov eax, 3
jmp 0x465f82
movzx ecx, word [ebx]
test ebp, ebp
jne 0x4659cf
cmp ecx, 0x2a
je 0x4659d4
cmp byte [eax + 0x2198], 0
mov ecx, dword [esp + 0x10]
mov esi, dword [ecx + 0x6b4]
jne 0x4659bf
call fcn.004ebad3
mov edx, dword fs:[0x2c]
mov eax, dword [edi + edx]
mov eax, dword [eax + 0x938]
mov dword [eax], esi
jmp 0x465a92
cmp ecx, 0x2a
jne 0x4659f4
push 0x8000
lea eax, [esp + 0x40]
push ebx
push eax
call fcn.004e6a80
add esp, 0xc
lea eax, [esp + 0x3c]
push eax
call dword [sym.imp.USER32.dll_CharUpperW]
jmp 0x465a0a
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x40]
push eax
push 0x8000
push ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
cmp byte [esp + 0x200cc], 0
jne 0x465a63
xor esi, esi
test ebp, ebp
jle 0x465a63
nop word [eax + eax]
mov ecx, dword fs:[0x2c]
mov eax, dword [edi + ecx]
cmp byte [eax + 0x2198], 0
jne 0x465a3f
call fcn.004ebad3
mov ecx, dword fs:[0x2c]
lea eax, [esp + 0x3c]
push eax
mov eax, dword [edi + ecx]
mov eax, dword [eax + 0x938]
push dword [eax + esi*4]
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x465f36
inc esi
cmp esi, ebp
jl 0x465a20
mov ecx, dword fs:[0x2c]
mov eax, dword [edi + ecx]
cmp byte [eax + 0x2198], 0
jne 0x465a82
call fcn.004ebad3
mov ecx, dword fs:[0x2c]
add byte [eax], al