Function at 0x40e0c0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x434728
mov eax, dword fs:[0]
push eax
sub esp, 0x854
mov eax, dword [0x48e868]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x82c], ecx
mov dword [ebp - 4], 0
push 0x4610fc
push 0x84
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x820], 0
jne 0x40e147
mov dword [ebp - 0x834], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401a90
mov eax, dword [ebp - 0x834]
jmp 0x40e31a
mov eax, dword [ebp - 0x820]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x828], eax
push 0x400
lea ecx, [ebp - 0x810]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
mov dword [ebp - 0x824], 0x45a0de
push 0x461104
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0x818], eax
mov dword [ebp - 0x81c], 0
mov dword [ebp - 0x860], str.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
mov dword [ebp - 0x844], str.nbe5dRBHgI2IWDlrg2PIxfVhmDIBpbIK7r2HVnVfEfs7npqkP46H3bo0RQgeGhO5aM7tfKNErd6u5BCAl3cQbJD38P1Y0w38QjDEtQsAKxmigS6w3z9Fvf9eSNYnGLA5QH0xYW6rwgowNOvDvVdJHom5K7VnAL3laiMseISovA0H6PVKD2OBwjFT9jgvaatC65LJJbWohPJP8hTVHrBTMsoMl26NstpQjFYI8Ml9iuOttlqxekrcoKQyo3iO38MfMmAL6n58MaaFhbV98yl8ksiPekoBaq4kO10hp99zOAsY
cmp dword [ebp - 0x818], 0
je 0x40e1ca
push 0x4726e4
mov edx, dword [ebp - 0x818]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x81c], eax
cmp dword [ebp - 0x81c], 0
je 0x40e1e8
mov eax, dword [ebp - 0x820]
push eax
push 0
call dword [ebp - 0x81c]
mov dword [ebp - 0x824], eax
cmp dword [ebp - 0x818], 0
je 0x40e208
mov ecx, dword [ebp - 0x818]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [ebp - 0x85c], str.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
cmp dword [ebp - 0x824], 0
jne 0x40e235
mov dword [ebp - 0x83c], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401a90
mov eax, dword [ebp - 0x83c]
jmp 0x40e31a
mov edx, dword [ebp - 0x824]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x814], eax
cmp dword [ebp - 0x814], 0
jne 0x40e275
mov dword [ebp - 0x840], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401a90
mov eax, dword [ebp - 0x840]
jmp 0x40e31a
movzx eax, byte [ebp + 8]
test eax, eax
je 0x40e2d0
push 2
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x854], esp
lea edx, [ebp + 0xc]
push edx
call fcn.00401870
mov dword [ebp - 0x848], eax
mov eax, dword [ebp - 0x828]
push eax
push 0
mov ecx, dword [ebp - 0x814]
push ecx
mov ecx, dword [ebp - 0x82c]
call fcn.00410520
mov dword [ebp - 0x830], eax
mov edx, dword [ebp - 0x830]
mov dword [ebp - 0x814], edx
mov dword [ebp - 0x850], str.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
mov eax, dword [ebp - 0x828]
push eax
mov ecx, dword [ebp - 0x814]
push ecx
mov ecx, dword [ebp - 0x82c]
call fcn.0040d170
mov dword [ebp - 0x814], eax
mov dword [ebp - 0x858], str.DT9nAnopavMeabYayxKURIfeq97Sxi56N9WI2JSyssIYt2zrHpJthMXIPOABqrTS9VLgClGFq8jXPIt74tmdndJMN24gFvIxQ6ibuBaqM4zdNYRV
mov edx, dword [ebp - 0x814]
mov dword [ebp - 0x838], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0xc]
call fcn.00401a90
mov eax, dword [ebp - 0x838]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041e8f2
mov esp, ebp
pop ebp
ret 0x1c