Function at 0x401c30
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4091b8
push 0x403420
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
add esp, 0xfffffcb0
push ebx
push esi
push edi
mov dword [ebp - 0x18], esp
mov dword [ebp - 0x350], edx
mov dword [ebp - 0x34c], ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x40d2fc], eax
push 0x2346
push 0x68
mov eax, dword [0x40d2fc]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x318], eax
cmp dword [ebp - 0x318], 0
jne 0x401c9b
xor eax, eax
jmp 0x4021e7
mov ecx, dword [ebp - 0x318]
push ecx
mov edx, dword [0x40d2fc]
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x401cc5
xor eax, eax
jmp 0x4021e7
je 0x401cca
jne 0x401cca
jmp 0x401c56
mov eax, dword [ebp - 0x208]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [0x40d300], eax
cmp dword [0x40d300], 0
jne 0x401cec
xor eax, eax
jmp 0x4021e7
mov ecx, dword [ebp - 0x318]
push ecx
mov edx, dword [0x40d2fc]
push edx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
mov eax, dword [edx]
mov ecx, dword [0x40d300]
lea esi, [ecx + eax - 0x1c8]
mov ecx, 0x72
mov edi, dword [ebp - 0x34c]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x334], edx
mov esi, dword [ebp - 0x334]
mov al, byte [esi]
cmp al, 0xcc
je 0x401eb0
mov eax, dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x344], eax
mov esi, dword [ebp - 0x344]
mov al, byte [esi]
cmp al, 0xcc
je 0x401eb0
mov ecx, dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x33c], ecx
mov esi, dword [ebp - 0x33c]
mov al, byte [esi]
cmp al, 0xcc
je 0x401eb0
mov edx, dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x340], edx
mov esi, dword [ebp - 0x340]
mov al, byte [esi]
cmp al, 0xcc
je 0x401eb0
mov eax, dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x338], eax
mov esi, dword [ebp - 0x338]
mov al, byte [esi]
cmp al, 0xcc
je 0x401eb0
mov byte [ebp - 0x200], 4
mov byte [ebp - 0x1ff], 8
mov byte [ebp - 0x1fe], 0
mov byte [ebp - 0x1fd], 0
mov byte [ebp - 0x1fc], 0xc8
mov byte [ebp - 0x1fb], 0
mov byte [ebp - 0x1fa], 0
mov byte [ebp - 0x1f9], 0
mov byte [ebp - 0x1f8], 0x18
mov byte [ebp - 0x1f7], 0x61
mov byte [ebp - 0x1f6], 0xe
mov byte [ebp - 0x1f5], 0
mov byte [ebp - 0x1f4], 0x22
mov byte [ebp - 0x1f3], 0
mov byte [ebp - 0x1f2], 0
mov byte [ebp - 0x1f1], 0
mov byte [ebp - 0x1f0], 0x90
mov byte [ebp - 0x1ef], 0x66
mov byte [ebp - 0x1ee], 0xe
mov byte [ebp - 0x1ed], 0
mov byte [ebp - 0x1ec], 0xe8
mov byte [ebp - 0x1eb], 2
mov byte [ebp - 0x1ea], 0
mov byte [ebp - 0x1e9], 0
mov byte [ebp - 0x1e8], 0
mov byte [ebp - 0x1e7], 0
mov byte [ebp - 0x1e6], 0
mov byte [ebp - 0x1e5], 0
mov byte [ebp - 0x1e4], 0
mov byte [ebp - 0x1e3], 0
mov byte [ebp - 0x1e2], 0
mov byte [ebp - 0x1e1], 0
push 0x130
lea ecx, [ebp - 0x200]
push ecx
mov edx, 0x64
mov ecx, dword [ebp - 0x34c]
add ecx, 0x98
call fcn.00401ad0
mov dword [ebp - 0x204], 0
mov dword [ebp - 4], 0
mov ecx, 0x72
mov esi, dword [ebp - 0x34c]
lea edi, [ebp - 0x1e0]
rep movsd dword es:[edi], dword [esi]
mov edx, 1
test edx, edx
je 0x40213c
mov ecx, 0x72
lea esi, [ebp - 0x1e0]
mov edi, dword [ebp - 0x34c]
rep movsd dword es:[edi], dword [esi]
push 0xffffffffffffffff
mov eax, dword [0x40d0e4]
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea ecx, [ebp - 0x314]
push ecx
mov edx, dword [ebp - 0x34c]
mov eax, dword [edx + 0x1bc]
push eax
mov ecx, dword [ebp - 0x34c]
mov edx, dword [ecx + 0x1c0]
push edx
mov eax, dword [ebp - 0x204]
push eax
call fcn.004079e0
test eax, eax
je 0x401fc1
push 0
push 1
mov ecx, dword [0x40d0e4]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push 0x10
mov edx, dword [ebp - 0x34c]
add edx, 0x98
push edx
mov eax, dword [ebp - 0x34c]
add eax, 0xac
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [0x40c9d4]
push ecx
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x348], eax
push 0
mov edx, dword [ebp - 0x348]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x348]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xffffffffffffffff
mov dword [ebp - 0x354], 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0040336a
add esp, 8
mov eax, dword [ebp - 0x354]
jmp 0x4021e7
push 0
push 1
mov edx, dword [0x40d0e4]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
lea eax, [ebp - 0x314]
push eax
mov edx, 0xc
mov ecx, dword [ebp - 0x34c]
add ecx, 0x8c
call fcn.00402300
test eax, eax
jne 0x402016
push 0xffffffffffffffff
mov dword [ebp - 0x358], 0
lea ecx, [ebp - 0x10]
push ecx
call fcn.0040336a
add esp, 8
mov eax, dword [ebp - 0x358]
jmp 0x4021e7
mov edx, dword [ebp - 0x34c]
mov eax, dword [edx + 0x8c]
push eax
push 0x40b854
lea ecx, [ebp - 0x324]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov edx, dword [ebp - 0x34c]
mov eax, dword [edx + 0x90]
push eax
push 0x40b854
lea ecx, [ebp - 0x330]
push ecx
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x314]
push edx
push 0
lea eax, [ebp - 0x330]
push eax
lea ecx, [ebp - 0x324]
push ecx
mov edx, dword [ebp - 0x34c]
xor eax, eax
mov al, byte [edx + 0x96]
mov edx, eax
mov ecx, dword [ebp - 0x34c]
xor eax, eax
mov al, byte [ecx + 0x97]
mov ecx, eax
call fcn.00401360
test eax, eax
jne 0x4020ae
mov ecx, dword [ebp - 0x204]
add ecx, 1
mov dword [ebp - 0x204], ecx
jmp 0x401ed4
push 0xffffffffffffffff
mov edx, dword [0x40d0e4]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x314]
push eax
lea ecx, [ebp - 0x330]
push ecx
lea edx, [ebp - 0x324]
push edx
push 0
lea eax, [ebp - 0x20c]
push eax
call fcn.00407920
test eax, eax
jne 0x402118
push 0
push 1
mov ecx, dword [0x40d0e4]
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
push 0xffffffffffffffff
mov dword [ebp - 0x35c], 1
lea edx, [ebp - 0x10]
push edx
call fcn.0040336a
add esp, 8
mov eax, dword [ebp - 0x35c]
jmp 0x4021e7
push 0
push 1
mov eax, dword [0x40d0e4]
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov ecx, dword [ebp - 0x204]
add ecx, 1
mov dword [ebp - 0x204], ecx
jmp 0x401ed4
mov dword [ebp - 4], 0xffffffff
call fcn.0040214a
jmp 0x40218f
push 0x10
mov edx, dword [ebp - 0x34c]
add edx, 0x98
push edx
mov eax, dword [ebp - 0x34c]
add eax, 0xac
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [0x40c9d4]
push ecx
push 0
push 1
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x210], eax
push 0
mov edx, dword [ebp - 0x210]
push edx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
mov eax, dword [ebp - 0x210]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax