Function at 0x401730
Capabilities:
Check for software breakpoints
Extract resource via kernel32 functions
Terminate process

Disassembly:
invalid
push ebp
mov ebp, esp
add esp, 0xfffffcdc
push ebx
push esi
push edi
lea edi, [ebp - 0x324]
mov ebx, dword [ebp + 0xc]
push 0x2349
push 0x68
mov eax, dword [ebp + 8]
push eax
call sub.KERNEL32.DLL_FindResourceA
mov esi, eax
test esi, esi
jne 0x401770
mov eax, dword [ebp + 0x14]
push eax
call fcn.00401430
pop ecx
test eax, eax
jne 0x4017bc
xor eax, eax
jmp 0x401a1b
push esi
mov edx, dword [ebp + 8]
push edx
call sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x40178a
xor eax, eax
jmp 0x401a1b
je 0x40178f
jne 0x40178f
jmp 0x40171b
mov edx, dword [ebp - 4]
push edx
call sub.KERNEL32.DLL_LockResource
mov dword [0x46816c], eax
cmp dword [0x46816c], 0
jne 0x4017ad
xor eax, eax
jmp 0x401a1b
push esi
mov edx, dword [ebp + 8]
push edx
call sub.KERNEL32.DLL_SizeofResource
mov ecx, dword [ebp + 0x14]
mov dword [ecx], eax
push 0x1cc
mov eax, dword [ebp + 0x14]
mov edx, dword [eax]
sub edx, 0x1cc
add edx, dword [0x46816c]
push edx
push ebx
call fcn.00405b24
add esp, 0xc
mov ecx, sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 8], ecx
mov esi, dword [ebp - 8]
mov al, byte [esi]
cmp al, 0xcc
je 0x401862
mov eax, 0x4189bc
mov dword [ebp - 0xc], eax
mov esi, dword [ebp - 0xc]
mov al, byte [esi]
cmp al, 0xcc
je 0x401862
mov edx, sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x10], edx
mov esi, dword [ebp - 0x10]
mov al, byte [esi]
cmp al, 0xcc
je 0x401862
mov ecx, sub.KERNEL32.DLL_FindResourceA
mov dword [ebp - 0x14], ecx
mov esi, dword [ebp - 0x14]
mov al, byte [esi]
cmp al, 0xcc
je 0x401862
mov eax, sub.KERNEL32.DLL_LoadResource
mov dword [ebp - 0x18], eax
mov esi, dword [ebp - 0x18]
mov al, byte [esi]
cmp al, 0xcc
je 0x401862
push edi
lea edi, [ebp - 0x220]
mov esi, 0x468180
mov ecx, 8
rep movsd dword es:[edi], dword [esi]
pop edi
lea eax, [ebp - 0x220]
push 0x124
push eax
lea edx, [ebx + 0xa8]
push 0x64
push edx
call fcn.00403cb4
add esp, 0x10
xor esi, esi
push 0x1cc
push ebx
lea eax, [ebp - 0x200]
push eax
call fcn.00405b24
add esp, 0xc
push 0x1cc
lea edx, [ebp - 0x200]
push edx
push ebx
call fcn.00405b24
add esp, 0xc
push edi
mov ecx, dword [ebx + 0x1c4]
push ecx
mov eax, dword [ebx + 0x1c8]
push eax
push esi
call fcn.0040da08
test eax, eax
je 0x4018ec
mov edx, dword [ebx + 0x1c0]
push edx
lea ecx, [ebx + 0xa8]
push ecx
add ebx, 0xbc
push ebx
push 0
call fcn.0040169c
add esp, 0x10
call sub.KERNEL32.DLL_GetCurrentProcessId
push eax
push 0
push 1
call sub.KERNEL32.DLL_OpenProcess
mov ebx, eax
push 0
push ebx
call sub.KERNEL32.DLL_TerminateProcess
push ebx
call sub.KERNEL32.DLL_CloseHandle
xor eax, eax
jmp 0x401a1b
push edi
push 0xc
lea edx, [ebx + 0x9c]
push edx
call fcn.00403c38
add esp, 0xc
test eax, eax
jne 0x401909
xor eax, eax
jmp 0x401a1b
push edi
push 0x9c
push ebx
call fcn.00403c38
add esp, 0xc
test eax, eax
jne 0x401923
xor eax, eax
jmp 0x401a1b
push ebx
push ebx
call fcn.00403dd8
add esp, 8
mov edx, dword [ebx + 0x9c]
push edx
push 0x468393
lea ecx, [ebp - 0x24]
push ecx
call sub.USER32.DLL_wsprintfA
add esp, 0xc
mov eax, dword [ebx + 0xa0]
push eax
push 0x468396
lea edx, [ebp - 0x30]
push edx
call sub.USER32.DLL_wsprintfA
add esp, 0xc
lea ecx, [ebp - 0x30]
lea eax, [ebp - 0x24]
xor edx, edx
push edi
push 0
push ecx
push eax
mov dl, byte [ebx + 0xa5]
xor ecx, ecx
push edx
xor eax, eax
mov cl, byte [ebx + 0xa6]
push ecx
mov al, byte [ebx + 1]
push eax
call fcn.00403018
add esp, 0x1c
test eax, eax
jne 0x401992
inc esi
jmp 0x401879
cmp byte [ebx + 0xd], 0
je 0x4019ac
push edi
push ebx
call fcn.004013a4
add esp, 8
test eax, eax
jne 0x4019ac
inc esi
jmp 0x401879
push edi
lea edx, [ebp - 0x30]
push edx
lea ecx, [ebp - 0x24]
push ecx
push 0
lea eax, [ebp - 0x31]
push eax
call fcn.0040d950
test eax, eax
jne 0x4019d5
push edi
mov edx, dword [ebp + 0x10]
push edx
call sub.KERNEL32.DLL_lstrcpyA
mov eax, 1
jmp 0x401a1b
inc esi
jmp 0x401879
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret