Function at 0x401250
Capabilities:
Extract resource via kernel32 functions

Disassembly:
jne 0x40122a
xor eax, eax
jmp 0x40124b
call fcn.004014a0
test eax, eax
je 0x401237
xor eax, eax
jmp 0x40124b
nop
nop
nop
nop
nop
nop
nop
nop
ret
pop edi
pop ebx
pop ebp
ret
push ebp
mov ebp, esp
add esp, 0xfffffd00
push ebx
push esi
push edi
mov ebx, dword [ebp + 0xc]
mov edi, dword [ebp + 8]
push 0x2349
push 0x68
push edi
call sub.KERNEL32.DLL_FindResourceA
mov esi, eax
test esi, esi
jne 0x40127c
xor eax, eax
jmp 0x40147b
push esi
push edi
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x401293
xor eax, eax
jmp 0x40147b
je 0x401298
jne 0x401298
jmp 0x401224
mov edx, dword [ebp - 4]
push edx
call sub.KERNEL32.DLL_LockResource
mov dword [0x44d378], eax
cmp dword [0x44d378], 0
jne 0x4012b6
xor eax, eax
jmp 0x40147b
push esi
push edi
call sub.KERNEL32.DLL_SizeofResource
mov edx, dword [ebp + 0x14]
mov dword [edx], eax
push 0x1c4
mov ecx, dword [ebp + 0x14]
mov eax, dword [ecx]
sub eax, 0x1c4
add eax, dword [0x44d378]
push eax
push ebx
call fcn.00405028
add esp, 0xc
mov edx, sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 8], edx
mov esi, dword [ebp - 8]
mov al, byte [esi]
cmp al, 0xcc
je 0x401365
mov ecx, 0x40cd58
mov dword [ebp - 0xc], ecx
mov esi, dword [ebp - 0xc]
mov al, byte [esi]
cmp al, 0xcc
je 0x401365
mov eax, sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x10], eax
mov esi, dword [ebp - 0x10]
mov al, byte [esi]
cmp al, 0xcc
je 0x401365
mov edx, sub.KERNEL32.DLL_FindResourceA
mov dword [ebp - 0x14], edx
mov esi, dword [ebp - 0x14]
mov al, byte [esi]
cmp al, 0xcc
je 0x401365
mov ecx, sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 0x18], ecx
mov esi, dword [ebp - 0x18]
mov al, byte [esi]
cmp al, 0xcc
je 0x401365
lea edi, [ebp - 0x1fc]
mov esi, 0x44d37c
mov ecx, 8
lea eax, [ebp - 0x1fc]
rep movsd dword es:[edi], dword [esi]
push 0x120
push eax
lea edx, [ebx + 0xa4]
push 0x64
push edx
call fcn.00403348
add esp, 0x10
push 0xffffffffffffffff
mov ecx, dword [0x450b14]
push ecx
call sub.KERNEL32.DLL_WaitForSingleObject
lea eax, [ebp - 0x300]
push eax
mov edx, dword [ebx + 0x1bc]
push edx
mov ecx, dword [ebx + 0x1c0]
push ecx
push 0
call fcn.0040be0c
test eax, eax
je 0x4013df
push 0
push 1
mov eax, dword [0x450b14]
push eax
call sub.KERNEL32.DLL_ReleaseSemaphore
push 0x10
lea edx, [ebx + 0xa4]
push edx
add ebx, 0xb8
push ebx
push 0
call sub.USER32.DLL_MessageBoxA
call sub.KERNEL32.DLL_GetCurrentProcessId
push eax
push 0
push 1
call sub.KERNEL32.DLL_OpenProcess
mov ebx, eax
push 0
push ebx
call sub.KERNEL32.DLL_TerminateProcess
push ebx
call sub.KERNEL32.DLL_CloseHandle
xor eax, eax
jmp 0x40147b
push 0
push 1
mov edx, dword [0x450b14]
push edx
call sub.KERNEL32.DLL_ReleaseSemaphore
lea ecx, [ebp - 0x300]
lea eax, [ebx + 0x98]
push ecx
push 0xc
push eax
call fcn.00403290
add esp, 0xc
test eax, eax
jne 0x40140f
xor eax, eax
jmp 0x40147b
lea edx, [ebp - 0x300]
push edx
mov ecx, dword [ebp + 0x10]
push ecx
call sub.KERNEL32.DLL_lstrcpyA
lea eax, [ebp - 0x300]
push eax
push 0x98
push ebx
call fcn.00403290
add esp, 0xc
test eax, eax
jne 0x40143c
xor eax, eax
jmp 0x40147b
mov eax, 1
jmp 0x40147b
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret