Function at 0x40d280
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x98
mov dword [ebp - 0x40], 0x9edc
mov dword [ebp - 0x78], 0x30d4
mov dword [ebp - 0x94], 0xffc8
mov dword [ebp - 0x64], 0x111cf
mov dword [ebp - 4], 0x5d62
mov dword [ebp - 0x5c], 0x12273
mov dword [ebp - 0x68], 0x43d7
mov dword [ebp - 0x20], 0x16564
mov dword [ebp - 0x10], 0x16ad8
mov dword [ebp - 0x6c], 0xdeee
mov dword [ebp - 0x24], 0xb9c3
mov dword [ebp - 0x98], 0xd148
mov dword [ebp - 0x18], 0xef81
mov dword [ebp - 0x28], 0x128fb
mov dword [ebp - 0x90], 0x4b55
mov dword [ebp - 0x50], 0x1e81
mov dword [ebp - 0x8c], 0xf33f
mov dword [ebp - 0x2c], 0x253e
mov dword [ebp - 8], 0x1139b
mov dword [ebp - 0x14], 0x33f9
mov dword [ebp - 0x44], 0x8ded
mov dword [ebp - 0xc], 0x4f67
mov dword [ebp - 0x1c], 0x1c4c
mov eax, dword [ebp - 0x5c]
cmp eax, dword [ebp - 0x44]
jge 0x40d347
mov dword [ebp - 0x38], 1
jmp 0x40d34e
mov dword [ebp - 0x38], 0
mov ecx, dword [ebp - 8]
sub ecx, 1
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x20]
cmp edx, dword [ebp - 8]
jge 0x40d368
mov dword [ebp - 0x30], 1
jmp 0x40d36f
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x1c]
jge 0x40d380
mov dword [ebp - 0x34], 1
jmp 0x40d387
mov dword [ebp - 0x34], 0
mov ecx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x34]
or ecx, dword [ebp - 0x38]
je 0x40d555
mov edx, dword [ebp - 0x18]
cmp edx, dword [ebp - 0xc]
jne 0x40d555
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 0x10]
jne 0x40d555
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x7c], ecx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x80], edx
mov eax, dword [ebp - 0x14]
sub eax, 1
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x7c]
cmp ecx, dword [ebp - 0x80]
jge 0x40d555
mov edx, dword [ebp - 0x28]
cmp edx, dword [ebp - 8]
jne 0x40d555
mov eax, dword [ebp - 0x20]
cmp eax, dword [ebp - 0xc]
jne 0x40d555
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0xc]
jne 0x40d555
push 0xecda
push 0x1179d
push 0x12977
push 0xa5
push 0x4190
push 0x808d
push 0x10454
push 0x10d8d
call dword [sym.imp.KERNEL32.dll_LockResource]
add esp, 0x20
mov edx, dword [ebp - 0x50]
cmp edx, dword [ebp - 0x40]
jge 0x40d435
mov dword [ebp - 0x3c], 1
jmp 0x40d43c
mov dword [ebp - 0x3c], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x68]
and eax, dword [ebp - 0x3c]
je 0x40d53d
mov ecx, dword [ebp - 0x1c]
cmp ecx, dword [ebp - 0x40]
jge 0x40d45c
mov dword [ebp - 0x48], 1
jmp 0x40d463
mov dword [ebp - 0x48], 0
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x44]
cmp edx, dword [ebp - 0x78]
jge 0x40d477
mov dword [ebp - 0x4c], 1
jmp 0x40d47e
mov dword [ebp - 0x4c], 0
mov eax, dword [ebp - 0x48]
and eax, dword [ebp - 0x4c]
je 0x40d53d
mov ecx, dword [ebp - 4]
sub ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x18]
or edx, dword [ebp - 4]
cmp edx, dword [ebp - 0x24]
jge 0x40d4a7
mov dword [ebp - 0x54], 1
jmp 0x40d4ae
mov dword [ebp - 0x54], 0
mov eax, dword [ebp - 8]
cmp eax, dword [ebp - 0x50]
jge 0x40d4bf
mov dword [ebp - 0x58], 1
jmp 0x40d4c6
mov dword [ebp - 0x58], 0
mov ecx, dword [ebp - 0x54]
or ecx, dword [ebp - 0x58]
je 0x40d53d
mov edx, dword [ebp - 0x14]
and edx, dword [ebp - 0x5c]
je 0x40d53d
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x84], eax
mov ecx, dword [ebp - 4]
mov dword [ebp - 0x88], ecx
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x84]
cmp ecx, dword [ebp - 0x88]
jge 0x40d511
mov dword [ebp - 0x60], 1
jmp 0x40d518
mov dword [ebp - 0x60], 0
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
and eax, dword [ebp - 8]
and eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x20]
or eax, ecx
je 0x40d53d
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
push 0x6a12
push 0x1598b
push 0x10fff
call dword [sym.imp.KERNEL32.dll_LocateXStateFeature]
add esp, 0xc
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x8c]
jge 0x40d569
mov dword [ebp - 0x70], 1
jmp 0x40d570
mov dword [ebp - 0x70], 0
mov ecx, dword [ebp - 0x68]
cmp ecx, dword [ebp - 0x6c]
jge 0x40d581
mov dword [ebp - 0x74], 1
jmp 0x40d588
mov dword [ebp - 0x74], 0
mov edx, dword [ebp - 0x70]
or edx, dword [ebp - 0x74]
je 0x40d5f0
mov eax, dword [ebp - 0x24]
cmp eax, dword [ebp - 8]
jne 0x40d5f0
mov ecx, dword [ebp - 0x28]
cmp ecx, dword [ebp + 8]
jne 0x40d5f0
mov edx, dword [ebp - 0x78]
cmp edx, dword [ebp - 0x10]
jne 0x40d5f0
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 4]
jne 0x40d5f0
mov ecx, dword [ebp - 0x90]
cmp ecx, dword [ebp - 0x10]
jne 0x40d5f0
mov edx, dword [ebp - 0x18]
sub edx, 1
mov dword [ebp - 0x18], edx
push 0x1259f
push 0x4f51
push 0xd4e7
push 0x2fe6
push 0xe132
push 0x123b3
push 0xa7c0
call dword [sym.imp.KERNEL32.dll_SetProcessWorkingSetSize]
add esp, 0x1c
mov eax, dword [ebp - 4]
add eax, 0xc085
push eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x6650
push ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x15ac
push edx
call fcn.00408c80
add esp, 0xc
mov esp, ebp
pop ebp
ret