Function at 0x4010f0
Capabilities:
Extract resource via kernel32 functions
Terminate process

Disassembly:
sub esp, 0x490
lea eax, [esp]
push ebx
push ebp
push esi
push edi
push eax
mov esi, edx
mov ebx, ecx
call dword [sym.imp.SHELL32.dll_SHGetMalloc]
test eax, eax
jns 0x401129
push 0
push str.SA_Self_Decrypting_Archive
push dword [0x456890]
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 6
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
mov edi, dword [esp + 0x4a4]
lea eax, [esp + 0x298]
mov dword [esp + 0x34], eax
and ebx, 1
lea eax, [esp + 0x7c]
mov dword [esp + 0x7c], 0x1f
mov dword [esp + 0x44], eax
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x84], edi
mov dword [esp + 0x88], ebx
mov dword [0x465694], ebx
mov byte [esi], 0
mov dword [esp + 0x30], 0
mov dword [esp + 0x34], 0
mov dword [esp + 0x3c], str.Select_output_folder:
mov dword [esp + 0x40], 0x51
mov dword [esp + 0x44], 0x401050
mov dword [esp + 0x4c], 0
call dword [sym.imp.SHELL32.dll_SHBrowseForFolderW]
mov ebx, eax
test ebx, ebx
jne 0x4011ae
push 9
call dword [sym.imp.KERNEL32.DLL_ExitProcess]
lea eax, [esp + 0x90]
push eax
push ebx
call dword [sym.imp.SHELL32.dll_SHGetPathFromIDListW]
mov ebp, eax
lea ecx, [esp + 0x70]
push 0
lea eax, [esp + 0x94]
push eax
push 0x20a
call fcn.0040372b
push 0
lea eax, [esp + 0x74]
push eax
lea eax, [esp + 0x6c]
push eax
call fcn.00403fb6
add esp, 0xc
lea ecx, [esp + 0x64]
call fcn.004039c2
sub esi, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [esi + eax - 1], cl
test cl, cl
jne 0x4011f6
cmp ebp, 1
je 0x401212
mov esi, 1
jmp 0x40132c
mov eax, dword [esp + 0x10]
push ebx
push eax
mov ecx, dword [eax]
call dword [ecx + 0x14]
mov eax, dword [esp + 0x10]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0
mov dword [esp + 0x18], 0x4568bc
call dword [sym.imp.KERNEL32.DLL_GetModuleHandleW]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], 0
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 5
push 0x68
push dword [esp + 0x20]
mov dword [esp + 0x30], str.SA_6_Self_Decrypting_Archive
mov dword [esp + 0x34], 0x456800
call dword [sym.imp.KERNEL32.DLL_FindResourceW]
push eax
push dword [esp + 0x1c]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
lea ecx, [esp + 0x14]
push ecx
push 0x401870
push dword [esp + 0x24]
push eax
push dword [esp + 0x28]
call dword [sym.imp.USER32.dll_DialogBoxIndirectParamW]
cmp eax, 1
jne 0x401306
mov edx, dword [esp + 0x20]
mov ecx, edx
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x4012a1
sub ecx, esi
sar ecx, 1
push 0
push edx
lea eax, [ecx*2 + 2]
push eax
lea ecx, [esp + 0x64]
call fcn.0040372b
push 0
lea eax, [esp + 0x5c]
push eax
lea eax, [esp + 0x54]
push eax
call fcn.00403fb6
add esp, 0xc
lea ecx, [esp + 0x4c]
call fcn.004039c2
sub edi, eax
mov cl, byte [eax]
lea eax, [eax + 1]
mov byte [edi + eax - 1], cl
test cl, cl
jne 0x4012e3
lea ecx, [esp + 0x4c]
call fcn.0040377f
lea ecx, [esp + 0x58]
call fcn.0040377f
xor esi, esi
jmp 0x40130b
mov esi, 1
mov eax, dword [esp + 0x20]
mov dword [esp + 0x14], 0x4568bc
test eax, eax
je 0x401324
push eax
call fcn.00427b9d
add esp, 4
mov dword [esp + 0x20], 0
lea ecx, [esp + 0x64]
call fcn.0040377f
lea ecx, [esp + 0x70]
call fcn.0040377f
pop edi
mov eax, esi
pop esi
pop ebp
pop ebx
add esp, 0x490
ret