Function at 0x404670
Capabilities:
Extract resource via kernel32 functions
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2d4
mov eax, dword [0x43a15c]
push ebx
push esi
mov esi, dword [ebp + 0x14]
xor eax, ebp
push edi
mov edi, ecx
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x2dc], eax
mov eax, dword [ebp + 0xc]
mov dword [esp + 0x18], ecx
mov ecx, edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], eax
call fcn.004043e0
test eax, eax
jne 0x4046cf
mov edx, dword [edi + 0xc3510]
push 0x10
push 0x42e218
push 0x42e194
push edx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00410bd6
movzx eax, word [ebp + 8]
push str.RT_INFO
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
jne 0x404704
mov ecx, dword [edi + 0xc3510]
push 0x10
push 0x42e218
push 0x42e194
push ecx
call dword [sym.imp.USER32.dll_MessageBoxW]
push 0
call fcn.00410bd6
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x4048b5
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0x100
mov esi, eax
call fcn.00423943
push 0x10d
mov ebx, eax
call fcn.00423943
mov edx, eax
xor eax, eax
mov word [esp + 0x30], 0
mov ecx, 0x27
lea edi, [esp + 0x32]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
xor eax, eax
mov dword [esp + 0x24], eax
mov dword [esp + 0x28], eax
add esp, 8
mov byte [esp + 0x24], al
mov eax, dword [esp + 0x14]
mov edi, edx
mov ecx, 0x43
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [eax + 4]
push ecx
mov ecx, dword [eax + 0xc3508]
push 0x100
push ebx
push 0x10c
push edx
call fcn.00402590
mov edx, dword [ebx]
mov eax, dword [ebx + 4]
lea esi, [ebx + 0xc]
mov ecx, 0x14
lea edi, [esp + 0x28]
rep movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcmpW]
lea ecx, [esp + 0x28]
push ecx
push str.1160D9BF_0573_4361_8D7C_A7FB4D5A457C
mov dword [esp + 0x24], edx
mov dword [esp + 0x28], eax
call esi
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4047bf
mov dword [eax], 1
mov edx, dword [ebp + 8]
dec edx
movzx eax, dx
push str.RT_PACKETTYPE
push eax
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x404839
push eax
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x404843
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
lea ecx, [esp + 0xc8]
push ecx
push 0x42e4b0
push eax
call fcn.00410e37
add esp, 0xc
push str.C658BF40_4C53_499f_BB36_5B2C0EDC7000
lea edx, [esp + 0xcc]
push edx
call esi
test eax, eax
jne 0x40482d
lea eax, [esp + 0x28]
push eax
push str.C658BF40_4C53_499f_BB36_5B2C0EDC7000
call esi
mov ecx, dword [esp + 0x10]
mov dword [ecx], 1
jmp 0x404843
mov edx, dword [esp + 0x10]
mov dword [edx], 0
jmp 0x404843
mov eax, dword [esp + 0x10]
mov dword [eax], 0
mov edi, str.WATERBOX
lea esi, [esp + 0x1c]
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x404881
mov eax, dword [esp + 0x14]
mov dword [eax + 0xc350c], 1
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2d0]
xor ecx, ebp
call fcn.004100eb
mov esp, ebp
pop ebp
ret 0x10
mov edi, str.COASTLIN
lea esi, [esp + 0x1c]
mov ecx, 9
xor edx, edx
repe cmpsb byte [esi], byte es:[edi]
jne 0x4048b5
mov ecx, dword [esp + 0x14]
push edx
lea eax, [esp + 0x2c]
push eax
mov dword [ecx + 0xc350c], edx
call fcn.00404480
test al, 1
jne 0x404865
push 0
call fcn.00410bd6
mov ecx, dword [esp + 0x2dc]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.004100eb
mov esp, ebp
pop ebp
ret 0x10