Function at 0x401800
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
pushal
cmp dword [ebp + 0xc], 1
jne 0x402a38
push 0x4e4941
push 0x4d5f3031
push 0x46434d4d
push 0
lea edx, [esp + 4]
push edx
call dword [sym.imp.USER32.DLL_FindWindowA]
add esp, 0xc
cmp eax, 0
je 0x4029f0
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, 0
je 0x4029f0
mov ebx, eax
cmp dword [ebx + 4], 0x2710
jne 0x4029f0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], 1
mov dword [ebp - 0x200], 0x402a42
mov dword [ebp - 0x1fc], fcn.00402e33
mov dword [ebp - 0x1f8], 0x403909
push 0x20
push 0x29353830
push 0x28393620
push 0x24454c55
push 0x444f4d24
push esp
lea edx, [ebp - 0x1f4]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0x14
push 0x118
lea edx, [ebp - 0x208]
push edx
lea edx, [ebx + 0x8c]
push edx
call fcn.004125d1
push 0x326e
push 0x6547206f
push 0x736e6544
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0xc
mov dword [ebp - 0xe8], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401954
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401948
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0xe0], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0xdc], esp
push 0x4e4143
push 0x205d6b30
push 0x3832315b
push 0x31333532
push 0x37485320
push 0x75737461
push 0x68696144
push 0x2431305f
push 0x39366d24
push esp
push dword [ebp - 0xdc]
push dword [ebp - 0xe0]
push 0x134c
push 0x4177c9
push 0x140000
push 0x181
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0xe4], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401a41
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401a35
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0xd4], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0xd0], esp
push 0x4e4143
push 0x205d6b38
push 0x3430325b
push 0x33343532
push 0x37485320
push 0x6f6e6948
push 0x2432305f
push 0x39366d24
push esp
push dword [ebp - 0xd0]
push dword [ebp - 0xd4]
push 0x134c
push 0x4177c9
push 0x200000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x20
add esp, 8
add esp, 0x10
mov dword [ebp - 0xd8], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401b29
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401b1d
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0xc8], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0xc4], esp
push 0x4e41
push 0x43205d6b
push 0x30343833
push 0x5b363435
push 0x32374853
push 0x20696164
push 0x6e757948
push 0x2433305f
push 0x39366d24
push esp
push dword [ebp - 0xc4]
push dword [ebp - 0xc8]
push 0x134c
push 0x4177c9
push 0x3c0000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0xcc], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401c16
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401c0a
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0xbc], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0xb8], esp
push 0
push 0x4e414320
push 0x5d6b3034
push 0x38335b36
push 0x34353237
push 0x48532075
push 0x7a757349
push 0x2434305f
push 0x39366d24
push esp
push dword [ebp - 0xb8]
push dword [ebp - 0xbc]
push 0x134c
push 0x4177c9
push 0x3c0000
push 0x101
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0xc0], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401d00
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401cf4
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0xb0], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0xac], esp
push 0x4e
push 0x4143205d
push 0x6b383430
push 0x325b3334
push 0x35323748
push 0x53206174
push 0x6f62754b
push 0x2435305f
push 0x39366d24
push esp
push dword [ebp - 0xac]
push dword [ebp - 0xb0]
push 0x134c
push 0x4177c9
push 0x200000
push 0x101
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0xb4], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401dea
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401dde
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0xa4], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0xa0], esp
push 0x4e
push 0x4143205d
push 0x6b303832
push 0x315b3133
push 0x35323748
push 0x53204d43
push 0x41206174
push 0x6f62754b
push 0x2436305f
push 0x39366d24
push esp
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push 0x134c
push 0x4177c9
push 0x140000
push 0x101
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x28
add esp, 8
add esp, 0x10
mov dword [ebp - 0xa8], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401ed9
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401ecd
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x98], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x94], esp
push 0x4e
push 0x4143205d
push 0x6b303832
push 0x315b3133
push 0x35323748
push 0x53204179
push 0x6b732061
push 0x647a614d
push 0x2437305f
push 0x39366d24
push esp
push dword [ebp - 0x94]
push dword [ebp - 0x98]
push 0x134c
push 0x4177c9
push 0x140000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x28
add esp, 8
add esp, 0x10
mov dword [ebp - 0x9c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401fc8
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401fbc
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x8c], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x88], esp
push 0x4e
push 0x4143205d
push 0x6b383430
push 0x325b3334
push 0x35323748
push 0x53204179
push 0x6b732061
push 0x647a614d
push 0x2438305f
push 0x39366d24
push esp
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
push 0x134c
push 0x4177c9
push 0x200000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x28
add esp, 8
add esp, 0x10
mov dword [ebp - 0x90], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4020b7
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4020ab
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x80], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x7c], esp
push 0x4e
push 0x4143205d
push 0x6b383430
push 0x325b3334
push 0x35323748
push 0x53204479
push 0x6b732061
push 0x647a614d
push 0x2439305f
push 0x39366d24
push esp
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
push 0x134c
push 0x4177c9
push 0x200000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x28
add esp, 8
add esp, 0x10
mov dword [ebp - 0x84], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40219a
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40218e
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x74], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x70], esp
push 0x4e
push 0x4143205d
push 0x6b303438
push 0x335b3634
push 0x35323748
push 0x53204479
push 0x6b732061
push 0x647a614d
push 0x2430315f
push 0x39366d24
push esp
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x134c
push 0x4177c9
push 0x3c0000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x28
add esp, 8
add esp, 0x10
mov dword [ebp - 0x78], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40227a
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40226e
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x68], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x64], esp
push 0x4e
push 0x4143205d
push 0x6b383430
push 0x325b3334
push 0x35323748
push 0x53206968
push 0x73696275
push 0x7374694d
push 0x2431315f
push 0x39366d24
push esp
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push 0x134c
push 0x4177c9
push 0x200000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x28
add esp, 8
add esp, 0x10
mov dword [ebp - 0x6c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40235a
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40234e
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x5c], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x58], esp
push 0x4e
push 0x4143205d
push 0x6b303832
push 0x315b3133
push 0x35323748
push 0x53206e61
push 0x7373694e
push 0x2432315f
push 0x39366d24
push esp
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push 0x134c
push 0x4177c9
push 0x140000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0x60], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x402435
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x402429
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x50], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x4c], esp
push 0x4e
push 0x4143205d
push 0x6b303832
push 0x315b3033
push 0x35323748
push 0x53206e61
push 0x7373694e
push 0x2433315f
push 0x39366d24
push esp
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push 0x134c
push 0x4177c9
push 0x140000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0x54], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x402510
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x402504
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x44], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x40], esp
push 0x4e
push 0x4143205d
push 0x6b303832
push 0x315b3133
push 0x35323748
push 0x53207572
push 0x61627553
push 0x2434315f
push 0x39366d24
push esp
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push 0x134c
push 0x4177c9
push 0x140000
push 0x103
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0x48], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4025eb
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4025df
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x38], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x34], esp
push 0
push 0x4e414320
push 0x5d6b3834
push 0x30325b33
push 0x34353237
push 0x4853206c
push 0x65736569
push 0x44207572
push 0x61627553
push 0x2435315f
push 0x39366d24
push esp
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0x134c
push 0x4177c9
push 0x200000
push 0x103
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x2c
add esp, 8
add esp, 0x10
mov dword [ebp - 0x3c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4026d0
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4026c4
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x2c], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x28], esp
push 0x4e
push 0x4143205d
push 0x6b303832
push 0x315b3033
push 0x35323748
push 0x5320696b
push 0x757a7553
push 0x2436315f
push 0x39366d24
push esp
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 0x134c
push 0x4177c9
push 0x140000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0x30], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4027ab
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40279f
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x20], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x1c], esp
push 0
push 0x4e414320
push 0x5d6b3834
push 0x30325b33
push 0x34353237
push 0x4853206f
push 0x766c6f56
push 0x2437315f
push 0x39366d24
push esp
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push 0x134c
push 0x4177c9
push 0x200000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x402886
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40287a
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 0x14], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x10], esp
push 0
push 0x4e414320
push 0x5d6b3034
push 0x38335b36
push 0x34353237
push 0x4853206f
push 0x766c6f56
push 0x2438315f
push 0x39366d24
push esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0x134c
push 0x4177c9
push 0x3c0000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x24
add esp, 8
add esp, 0x10
mov dword [ebp - 0x18], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x402961
mov dword [ebp - 0xf0], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x402955
mov dword [ebp - 0xec], eax
push 0x134c
lea edx, [eax + 0xf]
push edx
push 0x4177c9
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xf0]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e61
push 0x635f326e
push 0x65675f6f
push 0x736e6564
mov dword [ebp - 8], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 4], esp
push 0
push 0x4e414320
push 0x5d6b3038
push 0x32315b31
push 0x33353237
push 0x4853204d
push 0x43542061
push 0x647a614d
push 0x2439315f
push 0x39366d24
push esp
push dword [ebp - 4]
push dword [ebp - 8]
push 0x134c
push 0x4177c9
push 0x140000
push 0x183
push dword [ebp + 8]
push dword [ebp - 0xe8]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040541f
add esp, 0x28
add esp, 8
add esp, 0x10
mov dword [ebp - 0xc], eax
push 0
push 0x10
push 0x10
push 1
push 1
push dword [ebp + 8]
call dword [sym.imp.USER32.DLL_LoadImageA]
mov dword [0x4177bd], eax
push 0
push 0x10
push 0x10
push 1
push 2
push dword [ebp + 8]
call dword [sym.imp.USER32.DLL_LoadImageA]
mov dword [0x4177c1], eax
push 0
push 0x10
push 0x10
push 1
push 3
push dword [ebp + 8]
call dword [sym.imp.USER32.DLL_LoadImageA]
mov dword [0x4177c5], eax
popal
mov eax, 1
leave
ret 0xc