Function at 0x10002830
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
push 8
call fcn.1000d806
add esp, 4
mov dword [ebp - 0x10], eax
mov edi, eax
mov esi, 0x1003bea8
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
mov dword [ebp - 0x14], esp
push 0xa
push 0x3e9
push dword [ebp + 8]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
nop
nop
cmp dword [ebp - 0x14], esp
je 0x1000289f
push 0x84
push 0x4018434
push 6
call fcn.1000d812
add esp, 0xc
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x10002b70
mov dword [ebp - 0x14], esp
push dword [ebp - 4]
push dword [ebp + 8]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
nop
nop
cmp dword [ebp - 0x14], esp
je 0x100028db
push 0x100
push 0x4018434
push 6
call fcn.1000d812
add esp, 0xc
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x10002b70
mov dword [ebp - 0x14], esp
push dword [ebp - 4]
push dword [ebp + 8]
xor eax, eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
nop
nop
cmp dword [ebp - 0x14], esp
je 0x10002917
push 0x171
push 0x4018434
push 6
call fcn.1000d812
add esp, 0xc
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0
je 0x10002b70
push 0x80000301
push 0
push dword [ebp - 8]
push 0x80000301
push 0
push dword [ebp - 0xc]
push 2
mov ebx, 0x910
call fcn.1000e670
add esp, 0x1c
mov dword [ebp - 0x14], eax
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x10002960
mov eax, 0x1003bea8
push eax
push 1
mov ebx, 0x168
call fcn.1000e730
add esp, 0x10
mov dword [ebp - 0x18], eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x10002986
push ebx
call fcn.1000d81e
add esp, 4
lea eax, [ebp - 0x18]
push eax
call fcn.10002bbb
mov dword [ebp - 0x1c], eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x100029a2
push ebx
call fcn.1000d81e
add esp, 4
mov dword [ebp - 0x20], 0
push 0
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.10002e1e
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x1c]
test ebx, ebx
je 0x100029cb
push ebx
call fcn.1000d81e
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x100029db
push ebx
call fcn.1000d81e
add esp, 4
push reloc.WS2_32.dll_getpeername
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x100029ee
mov eax, 0x1003bea8
push eax
push 1
mov ebx, 0x168
call fcn.1000e730
add esp, 0x10
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10002a14
push ebx
call fcn.1000d81e
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [0x1003c49e]
test ebx, ebx
je 0x10002a2b
push ebx
call fcn.1000d81e
add esp, 4
pop eax
mov dword [0x1003c49e], eax
mov eax, dword [0x1003c49e]
test eax, eax
je 0x10002a4f
push eax
mov ebx, eax
call fcn.100027ac
inc eax
push eax
call fcn.1000d806
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x1003c4a2]
test ebx, ebx
je 0x10002a63
push ebx
call fcn.1000d81e
add esp, 4
pop eax
mov dword [0x1003c4a2], eax
push 0
push 0
push 0
push reloc.WS2_32.dll_connect
push 0
push 0x1003bef6
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [0x1003c49e]
test eax, eax
jne 0x10002a90
mov eax, 0x1003bef8
push eax
push 3
mov ebx, 0x190
call fcn.1000e9e0
add esp, 0x28
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
push eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10002ac8
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10002ac4
imul eax, dword [ebx]
jmp 0x10002ab9
mov ecx, eax
test ecx, ecx
je 0x10002ae7
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x10002ae0
push ebx
push eax
call fcn.1000d81e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x10002ace
call fcn.1000d81e
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov ebx, dword [ebp - 0x10]
call fcn.10002817
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], 0
jle 0x10002b70
mov ebx, dword [ebp - 0x10]
call fcn.100022fc
mov eax, 0
cmp eax, ecx
jl 0x10002b30
push 0x31f
push 0x4018434
push 1
call fcn.1000d812
add esp, 0xc
shl eax, 2
add ebx, eax
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x14]
mov eax, dword [ebx]
test eax, eax
je 0x10002b56
push eax
mov ebx, eax
call fcn.100027ac
inc eax
push eax
call fcn.1000d806
pop ecx
pop esi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
push eax
mov ebx, dword [0x1003c4a6]
test ebx, ebx
je 0x10002b6a
push ebx
call fcn.1000d81e
add esp, 4
pop eax
mov dword [0x1003c4a6], eax
mov ebx, dword [ebp - 0x10]
push ebx
mov ecx, dword [ebx]
add ebx, 4
test ecx, ecx
je 0x10002b8e
mov eax, dword [ebx]
add ebx, 4
dec ecx
je 0x10002b8a
imul eax, dword [ebx]
jmp 0x10002b7f
mov ecx, eax
test ecx, ecx
je 0x10002bad
push ecx
mov eax, dword [ebx]
test eax, eax
je 0x10002ba6
push ebx
push eax
call fcn.1000d81e
add esp, 4
pop ebx
add ebx, 4
pop ecx
dec ecx
jne 0x10002b94
call fcn.1000d81e
add esp, 4
mov esp, ebp
pop ebp
ret 4