Function at 0x401420
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
push 0x4227ab
mov eax, dword fs:[0]
push eax
mov eax, 0x4708
call fcn.00414c80
mov eax, dword [0x42cb30]
xor eax, esp
mov dword [esp + 0x4704], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x42cb30]
xor eax, esp
push eax
lea eax, [esp + 0x471c]
mov dword fs:[0], eax
mov ebx, ecx
call fcn.00404deb
mov eax, dword [ebx + 0x20]
push 0
push eax
call dword [sym.imp.USER32.dll_GetSystemMenu]
push eax
call fcn.00407cc5
mov edi, eax
test edi, edi
je 0x40151f
call fcn.00406ecb
xor ecx, ecx
test eax, eax
setne cl
test ecx, ecx
jne 0x40149c
push 0x80004005
call fcn.00402e60
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
lea esi, [eax + 0x10]
mov dword [esp + 0x14], esi
push 0x65
mov dword [esp + 0x4728], 0
call fcn.00406e9b
test eax, eax
je 0x4014d2
push 0x65
push eax
lea ecx, [esp + 0x1c]
call fcn.00402b80
mov esi, dword [esp + 0x14]
cmp dword [esi - 0xc], 0
je 0x4014f8
mov ecx, dword [edi + 4]
mov ebp, dword [sym.imp.USER32.dll_AppendMenuA]
push 0
push 0
push 0x800
push ecx
call ebp
mov edx, dword [edi + 4]
push esi
push 0x10
push 0
push edx
call ebp
lea eax, [esi - 0x10]
mov dword [esp + 0x4724], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40151f
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebx + 0x74]
mov edx, dword [ebx + 0x20]
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push ecx
push 1
push 0x80
push edx
call esi
mov eax, dword [ebx + 0x74]
mov ecx, dword [ebx + 0x20]
push eax
push 0
push 0x80
push ecx
call esi
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push 0x426d28
push 0x89
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
test esi, esi
je 0x401734
push esi
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x401734
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [esp + 0x18], eax
test eax, eax
je 0x401734
push esi
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebp, eax
lea edx, [ebp + 2]
push edx
call fcn.00403b4a
mov edi, eax
add esp, 4
lea esi, [esp + 0x20]
mov dword [esp + 0x1c], edi
call fcn.00403070
mov eax, dword [str.pinchuan]
mov dword [edi], eax
mov ecx, dword [0x426d30]
mov dword [edi + 4], ecx
mov dl, byte [0x426d34]
mov byte [edi + 8], dl
mov esi, edi
lea edi, [esp + 0x20]
call fcn.00403110
xor eax, eax
mov byte [esp + 0x470c], 0
mov dword [esp + 0x470d], eax
mov dword [esp + 0x4711], eax
mov dword [esp + 0x14], eax
cmp ebp, eax
jbe 0x401727
mov edi, dword [esp + 0x18]
mov eax, 8
add ebx, 0x88
sub eax, edi
mov esi, ebp
mov dword [esp + 0x18], eax
jmp 0x401624
mov eax, dword [esp + 0x18]
add eax, edi
cmp ebp, eax
jb 0x401689
mov ecx, dword [edi + 4]
mov eax, dword [edi]
lea edx, [esp + 0x20]
mov dword [esp + 0x4710], ecx
push edx
lea ecx, [esp + 0x4710]
mov dword [esp + 0x4710], eax
call fcn.004033d0
mov eax, dword [esp + 0x6a8]
mov ecx, dword [esp + 0x6ac]
mov dword [esp + 0x702], eax
lea eax, [esp + 0x702]
mov dword [esp + 0x706], ecx
mov byte [esp + 0x70a], 0
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x401680
jmp 0x4016fc
xor eax, eax
mov dword [esp + 0x470c], eax
mov dword [esp + 0x4710], eax
mov eax, ebp
sub eax, dword [esp + 0x14]
lea ecx, [esp + 0x470c]
push eax
push edi
push ecx
call fcn.00415c10
add esp, 0xc
lea edx, [esp + 0x20]
push edx
lea ecx, [esp + 0x4710]
call fcn.004033d0
push esi
lea eax, [esp + 0x6ac]
push eax
lea ecx, [esp + 0x70a]
push ecx
mov byte [esp + esi + 0x4718], 0
call fcn.00415c10
lea eax, [esp + 0x70e]
add esp, 0xc
mov byte [esp + esi + 0x702], 0
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4016f5
sub eax, edx
push eax
lea edx, [esp + 0x706]
push edx
mov ecx, ebx
call fcn.004027b0
mov eax, dword [esp + 0x14]
add eax, 8
add edi, 8
sub esi, 8
mov dword [esp + 0x14], eax
cmp eax, ebp
jb 0x401620
mov eax, dword [esp + 0x1c]
push eax
call fcn.00403b55
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x471c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x4704]
xor ecx, esp
call fcn.00411675
add esp, 0x4714
ret