Function at 0x403420
Capabilities:
Extract resource via kernel32 functions
Write file on windows

Disassembly:
sub esp, 0x10
push ebx
push ebp
push esi
push edi
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
push 0x40a3a8
push 0x83
push esi
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
push esi
mov dword [esp + 0x1c], eax
call ebx
mov ebp, dword [sym.imp.KERNEL32.dll_LockResource]
push eax
call ebp
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
push 0x80
push 4
push 0
push 0
push 0xc0000000
push str.c:VedioPackmbox2w.exe
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
mov dword [esp + 0x30], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40a3a8
push 0x94
push esi
call edi
push eax
push esi
mov dword [esp + 0x1c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
push 0x80
push 4
push 0
push 0
push 0xc0000000
push str.c:VedioPackmbox2_bootupdbgltdemo
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, dword [esp + 0x20]
push edx
mov dword [esp + 0x28], eax
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40a3a8
push 0x95
push esi
call edi
push eax
push esi
mov dword [esp + 0x1c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
push 0x80
push 4
push 0
push 0
push 0xc0000000
push str.c:VedioPackmbox2_bootupltdemo
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
mov dword [esp + 0x30], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40a3a8
push 0x86
push esi
call edi
push eax
push esi
mov dword [esp + 0x1c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
push 0x80
push 4
push 0
push 0
push 0xc0000000
push str.c:VedioPackmbox2c.exe
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
mov dword [esp + 0x30], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40a3a8
push 0x87
push esi
call edi
push eax
push esi
mov dword [esp + 0x1c], eax
call ebx
push eax
call ebp
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
push 0x80
push 4
push 0
push 0
push 0xc0000000
push str.c:VedioPackmskincore.dll
mov dword [esp + 0x30], eax
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0x10]
push 0
push ecx
mov ecx, dword [esp + 0x20]
push edx
push ecx
push eax
mov dword [esp + 0x30], eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [esp + 0x1c]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40a3a8
push 0x88
push esi
call edi
mov edi, eax
push edi
push esi
call ebx
push eax
call ebp
push edi
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
push 0x80
push 4
push 0
push 0
push 0xc0000000
push str.c:VedioPackmsvcp60.dll
mov edi, eax
mov dword [esp + 0x2c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
lea eax, [esp + 0x10]
push 0
push eax
push edi
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x10
ret