Function at 0x76b14833
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x208
mov eax, dword [0x76b30340]
push ebx
mov ebx, dword [ebp + 0x10]
test ebx, 0xffe8df20
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push edi
mov edi, dword [ebp + 8]
mov dword [ebp - 0x208], eax
jne 0x76b15c1e
test bl, 4
jne 0x76b14885
mov eax, edi
shr eax, 0x10
test ax, ax
je 0x76b14885
push 0x100
push edi
call fcn.76b147bf
test eax, eax
je 0x76b15c1e
test bl, 0x10
jne 0x76b15c11
cmp dword [0x76b300b0], 0
push esi
mov esi, 0x110000
jne 0x76b1c2c3
and ebx, 1
je 0x76b148b3
call fcn.76b14a1f
test eax, eax
je 0x76b1c2e7
cmp dword [0x76b300b0], 0
jne 0x76b1c2fc
test byte [ebp + 0x10], 4
jne 0x76b1c408
test edi, edi
je 0x76b1c408
push 0x200
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov ebx, eax
test ebx, ebx
je 0x76b1aabf
mov eax, dword [ebp + 0x10]
and eax, esi
cmp eax, esi
je 0x76b1aa70
cmp word [edi], 0
je 0x76b14918
push dword [ebp + 0x10]
push ebx
push edi
call fcn.76b1493c
test eax, eax
jne 0x76b15b38
test byte [ebp + 0x10], 2
je 0x76b15b38
push ebx
call dword [sym.imp.KERNEL32.dll_LocalFree]
xor eax, eax
inc eax
pop esi
mov ecx, dword [ebp - 4]
pop edi
pop ebx
call fcn.76b128c0
leave
ret 0xc
push ebx
mov edi, ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
or byte [ebp + 0x13], 0x80
test byte [ebp + 0x10], 1
je 0x76b1aa98
push edi
push dword [ebp + 0x10]
push 0x3cc
push dword [0x76b30100]
call dword [sym.imp.USER32.dll_PostMessageW]
jmp 0x76b14922
cmp dword [0x76b3010c], 0
je 0x76b1488e
xor eax, eax
jmp 0x76b14923
push 0x100
push ebx
push edi
call fcn.76b1a9e6
push eax
push dword [0x76b300c0]
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
je 0x76b1aabf
and byte [ebp + 0x12], 0xef
mov edi, ebx
jmp 0x76b148f6
mov eax, dword [0x76b30100]
test eax, eax
je 0x76b1aab1
push 0
push 0
push 0x3cd
push eax
call dword [sym.imp.USER32.dll_PostMessageW]
push dword [ebp + 0x10]
push edi
call fcn.76b15600
jmp 0x76b14922
xor eax, eax
jmp 0x76b14922
cmp dword [0x76b30108], 0
jne 0x76b148a1
mov eax, ebx
and eax, esi
cmp eax, esi
jne 0x76b148a1
or ebx, 1
mov dword [ebp + 0x10], ebx
jmp 0x76b148a1
and dword [ebp + 0x10], 0xfffffffe
cmp dword [0x76b300b0], eax
jne 0x76b1aabf
jmp 0x76b148c0
test ebx, ebx
je 0x76b148c0
mov eax, dword [ebp + 0x10]
and eax, esi
cmp eax, esi
mov ebx, 0x10000
push edi
jne 0x76b1c34e
call fcn.76b1a9e6
push 0x100
lea ecx, [ebp - 0x204]
push ecx
push eax
push dword [0x76b300c0]
mov dword [ebp - 0x208], eax
call dword [sym.imp.USER32.dll_LoadStringW]
test eax, eax
je 0x76b1aabf
mov eax, dword [ebp + 0x10]
and eax, 0xffefffff
or eax, ebx
mov dword [ebp + 0x10], eax
jmp 0x76b1c35b
lea eax, [ebp - 0x204]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov eax, dword [0x76b31a6c]
push ebx
add eax, 0xc
push eax
lea eax, [ebp - 0x204]
push eax
call fcn.76b1493c
test eax, eax
jne 0x76b1c37f
test byte [ebp + 0x10], 2
jne 0x76b1aabf
cmp dword [0x76b3010c], 0
je 0x76b1c38f
push 0
call fcn.76b15c67
mov esi, 0x76b302a0
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x76b31a6c]
mov dword [eax], 0x3cc
mov eax, dword [ebp + 0x10]
mov ecx, dword [0x76b31a6c]
or eax, 0x20000
mov dword [ecx + 4], eax
mov eax, dword [0x76b31a6c]
and byte [eax + 6], 0xee
test byte [ebp + 0x10], 2
mov eax, dword [0x76b31a6c]
mov dword [eax + 8], edi
jne 0x76b1c3f0
cmp dword [ebp - 0x208], 0xbbf
je 0x76b1c3f0
mov eax, dword [0x76b31a6c]
push ebx
add eax, 0x214
push eax
push 0x76b3136c
call fcn.76b1493c
push dword [0x76b31a68]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x76b1491f
mov ecx, dword [ebp + 0x10]
mov eax, 0x40004
and ecx, eax
cmp ecx, eax
jne 0x76b15b45
mov esi, dword [sym.imp.KERNEL32.dll_FindResourceW]
push 0x76b1c47c
push edi
push dword [ebp - 0x208]
call esi
test eax, eax
jne 0x76b1c448
push 0x76b1c470
push edi
push dword [ebp - 0x208]
call esi
test eax, eax
je 0x76b1aabf
push eax
push dword [ebp - 0x208]
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x76b1aabf
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
and byte [ebp + 0x12], 0xfb
mov edi, eax
jmp 0x76b15b45