Function at 0x4017c6
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebx
push edi
mov edx, 0xc
sub esp, 4
mov dword [esp], 0
dec edx
jne 0x4017cd
mov edx, 0x41f00d
lea ecx, [esp]
call fcn.00403008
call sub.KERNEL32.dll_IsDebuggerPresent
mov ebx, eax
cmp ebx, 1
jne 0x4017f8
jmp 0x40145e
push dword [0x420f00]
call sub.KERNEL32.dll_LoadLibraryA
mov dword [esp + 4], eax
cmp dword [esp + 4], 0
je 0x401afb
push 0xa
push 4
push dword [esp + 0xc]
call sub.KERNEL32.dll_FindResourceA
mov dword [esp + 8], eax
cmp dword [esp + 8], 0
je 0x401af2
push dword [esp + 8]
push dword [esp + 8]
call sub.KERNEL32.dll_LoadResource
mov dword [esp + 0xc], eax
push dword [esp + 8]
push dword [esp + 8]
call sub.KERNEL32.dll_SizeofResource
mov dword [esp + 0x10], eax
cmp dword [esp + 0xc], 0
je 0x40186c
mov ebx, dword [esp + 0x10]
and ebx, ebx
jle 0x40186c
mov eax, 1
jmp 0x40186e
xor eax, eax
and eax, eax
je 0x401af2
push dword [esp + 0xc]
call sub.KERNEL32.dll_LockResource
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
je 0x401af2
push dword [esp + 0x10]
call fcn.0040e2a0
mov dword [esp + 0x18], eax
cmp dword [esp + 0x18], 0
je 0x401af2
push dword [esp + 0x10]
push dword [esp + 0x1c]
push dword [esp + 0x1c]
call fcn.0040e2c0
mov ebx, dword [esp + 0x18]
add ebx, 2
mov eax, ebx
call fcn.0040e2f0
mov dword [esp + 0x1c], eax
mov ebx, dword [esp + 0x10]
add ebx, 0xfffffffc
mov dword [esp + 0x10], ebx
push dword [esp + 0x10]
mov eax, dword [esp + 0x1c]
call fcn.0041332f
mov dword [esp + 0x20], eax
mov ebx, dword [esp + 0x18]
add ebx, dword [esp + 0x10]
mov eax, ebx
call fcn.0040e2f0
mov ebx, eax
cmp ebx, dword [esp + 0x20]
jne 0x401ae9
mov ebx, dword [esp + 0x1c]
and ebx, ebx
jle 0x40191b
mov ebx, dword [esp + 0x1c]
cmp ebx, 0xf4240
jge 0x40191b
mov eax, 1
jmp 0x40191d
xor eax, eax
and eax, eax
je 0x401ae9
mov ebx, dword [esp + 0x1c]
add ebx, 0xa
push ebx
call fcn.0040e2a0
mov dword [esp + 0x24], eax
cmp dword [esp + 0x24], 0
je 0x401ae9
push dword [esp + 0x24]
push dword [esp + 0x1c]
call fcn.0040de89
mov dword [esp + 0x28], eax
mov ebx, dword [esp + 0x28]
cmp ebx, dword [esp + 0x1c]
jne 0x401ae0
push dword [0x421328]
push str.Temp
call fcn.00402770
lea eax, [esp + 0x30]
push eax
call fcn.00416c30
push dword [esp + 0x2c]
mov edx, 0x41f00d
pop ecx
call fcn.00416d10
jne 0x401ae0
push dword [esp + 0x2c]
push 2
call fcn.004127c0
and eax, eax
je 0x401ae0
push dword [esp + 4]
call sub.KERNEL32.dll_FreeLibrary
push dword [esp + 0x28]
push dword [esp + 0x28]
push 2
call fcn.00412940
push 2
call fcn.00412610
push 2
push dword [esp + 0x30]
call fcn.00412133
push 0x64
call main
push dword [0x421328]
mov edx, 0x41f011
call fcn.00416cb0
mov edx, dword [0x420efc]
call fcn.00416cb0
mov edx, 0x41f011
call fcn.00416cb0
lea eax, [esp + 4]
push eax
call fcn.00416c30
mov edx, dword [esp]
push dword [0x421328]
call fcn.00416cb0
mov edx, 0x41f00e
call fcn.00416cb0
mov edx, dword [0x420f00]
call fcn.00416cb0
mov edx, 0x41f011
call fcn.00416cb0
lea eax, [esp + 4]
push eax
call fcn.00416c30
mov edx, dword [esp]
push dword [0x421328]
call fcn.00416cb0
mov edx, 0x41f00e
call fcn.00416cb0
mov edx, dword [0x420f0c]
call fcn.00416cb0
mov edx, 0x41f011
call fcn.00416cb0
lea eax, [esp + 4]
push eax
call fcn.00416c30
push dword [0x420f08]
mov edx, 0x41f00d
pop ecx
call fcn.00416d10
jne 0x401ac9
mov edx, dword [esp]
push dword [0x421328]
call fcn.00416cb0
mov edx, 0x41f00e
call fcn.00416cb0
mov edx, dword [0x420f08]
call fcn.00416cb0
mov edx, 0x41f011
call fcn.00416cb0
lea eax, [esp + 4]
push eax
call fcn.00416c30
push 0x41f00d
push dword [esp + 4]
push dword [esp + 0x34]
call fcn.0040ddfa
jmp 0x40145e
push dword [esp + 0x24]
call fcn.0040e300
push dword [esp + 0x18]
call fcn.0040e300
push dword [esp + 4]
call sub.KERNEL32.dll_FreeLibrary
push dword [0x420efc]
call fcn.00411be8
push edx
push eax
pop ebx
pop edi
cmp ebx, 0xfffffffe
jne 0x401b14
cmp edi, 0xffffffff
je 0x401b18
xor eax, eax
jmp 0x401b1d
mov eax, 1
or eax, eax
je 0x401b40
push 0x3e8
call main
push 3
push 0x41f081
push dword [0x420efc]
call fcn.00411d03
xor eax, eax
push dword [esp]
call fcn.00416d40
push dword [esp + 0x2c]
call fcn.00416d40
add esp, 0x30
pop edi
pop ebx
ret