Function at 0x405f00
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x416203
mov eax, dword fs:[0]
push eax
sub esp, 0x83c
mov eax, dword [0x478010]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x83c], ecx
mov dword [ebp - 4], 0
push 0x465a9c
push 0x66
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x818], eax
cmp dword [ebp - 0x818], 0
jne 0x405f7a
mov dword [ebp - 0x834], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401770
mov eax, dword [ebp - 0x834]
jmp 0x4060b3
mov eax, dword [ebp - 0x818]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x820], eax
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov edx, dword [ebp - 0x818]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
jne 0x405fef
mov dword [ebp - 0x840], str.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
mov dword [ebp - 0x838], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401770
mov eax, dword [ebp - 0x838]
jmp 0x4060b3
mov eax, dword [ebp - 0x81c]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0
jne 0x40602f
mov dword [ebp - 0x830], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401770
mov eax, dword [ebp - 0x830]
jmp 0x4060b3
movzx ecx, byte [ebp + 8]
test ecx, ecx
je 0x406092
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x848], esp
lea edx, [ebp + 0xc]
push edx
call fcn.00403900
mov dword [ebp - 0x82c], eax
mov eax, dword [ebp - 0x82c]
mov dword [ebp - 0x844], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x820]
push ecx
push 0
mov edx, dword [ebp - 0x814]
push edx
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0x83c]
call fcn.00407070
mov dword [ebp - 0x824], eax
mov eax, dword [ebp - 0x824]
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
mov dword [ebp - 0x828], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401770
mov eax, dword [ebp - 0x828]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0040a5ce
mov esp, ebp
pop ebp
ret 0x1c