Function at 0x407e04
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xad0
mov dword [ebp - 0xad0], 0
push 0xa
push 4
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
jne 0x407e6b
push 0xa0d
push 0x39232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0xad0], 1
jmp 0x40884f
mov dword [ebp - 0xacc], eax
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0xac8], eax
push dword [ebp - 0xacc]
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
jne 0x407ed7
push 0xa0d30
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0xad0], 1
jmp 0x40884f
mov dword [ebp - 0xac4], eax
cmp byte [eax + 3], 8
je 0x407f26
push 0xa0d31
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0xad0], 1
jmp 0x40884f
mov ecx, dword [ebp - 0xac8]
mov eax, dword [ecx + eax - 4]
mov dword [ebp - 0xac0], eax
push eax
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0xabc], eax
push dword [ebp - 0xac0]
push eax
push dword [ebp - 0xac8]
push dword [ebp - 0xac4]
call dword [ebx + 0x4c]
test eax, eax
jne 0x407fa2
push 0xa0d32
push 0x31232024
push 0x524f5252
push 0x455f4c41
push 0x4e524554
push 0x4e495f52
push 0x4f525245
push 0x24202445
push 0x4d495424
push esp
call dword [ebx + 0x30]
add esp, 0x24
mov dword [ebp - 0xad0], 1
jmp 0x408843
push dword [ebp + 8]
lea edx, [ebp - 0x79a]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov dword [ebp - 0xab8], 0
mov ecx, dword [ebp - 0xab8]
cmp ecx, dword [ebp - 0xac0]
jae 0x408112
mov edx, dword [ebp - 0xabc]
cmp ecx, dword [ebp - 0xac0]
jae 0x407fe5
cmp byte [edx + ecx], 0xd
je 0x407fe5
inc ecx
jmp 0x407fd4
inc ecx
cmp ecx, dword [ebp - 0xac0]
jae 0x407ff5
cmp byte [edx + ecx], 0xa
jne 0x407ff5
inc ecx
mov dword [ebp - 0xab4], ecx
sub ecx, dword [ebp - 0xab8]
cmp ecx, 0x104
jbe 0x40800e
mov ecx, 0x104
mov dword [ebp - 0xab0], ecx
add edx, dword [ebp - 0xab8]
push ecx
push edx
lea edx, [ebp - 0xaac]
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
xor ecx, ecx
lea edx, [ebp - 0x9a6]
cmp ecx, dword [ebp - 0xab0]
jae 0x408067
cmp byte [ebp + ecx - 0xaac], 0xd
je 0x408067
cmp byte [ebp + ecx - 0xaac], 0xa
je 0x408067
cmp byte [ebp + ecx - 0xaac], 0x3b
je 0x408067
mov al, byte [ebp + ecx - 0xaac]
mov byte [edx], al
inc ecx
inc edx
jmp 0x408034
mov byte [edx], 0
cmp ecx, dword [ebp - 0xab0]
jae 0x40809d
cmp byte [ebp + ecx - 0xaac], 0xd
je 0x40809d
cmp byte [ebp + ecx - 0xaac], 0xa
je 0x40809d
cmp byte [ebp + ecx - 0xaac], 0x3b
je 0x40809a
cmp byte [ebp + ecx - 0xaac], 0x20
jne 0x40809d
inc ecx
jmp 0x40806a
lea edx, [ebp - 0x8a0]
cmp ecx, dword [ebp - 0xab0]
jae 0x4080d6
cmp byte [ebp + ecx - 0xaac], 0xd
je 0x4080d6
cmp byte [ebp + ecx - 0xaac], 0xa
je 0x4080d6
cmp byte [ebp + ecx - 0xaac], 0x3b
je 0x4080d6
mov al, byte [ebp + ecx - 0xaac]
mov byte [edx], al
inc ecx
inc edx
jmp 0x4080a3
mov byte [edx], 0
push dword [ebp + 8]
lea edx, [ebp - 0x9a6]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcmpiA]
test eax, eax
je 0x4080fe
mov ecx, dword [ebp - 0xab4]
mov dword [ebp - 0xab8], ecx
jmp 0x407fbc
lea edx, [ebp - 0x8a0]
push edx
lea edx, [ebp - 0x79a]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea edx, [ebp - 0x79a]
push edx
lea edx, [esi + 0x6c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
mov dword [ebp - 0x644], 0
mov dword [ebp - 0x640], 0
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0x6e006f
push 0x690074
push 0x610063
push 0x69006c
push 0x700070
push 0x41002e
push 0x720065
push 0x72006f
push 0x6c0070
push 0x780045
push 0x740065
push 0x6e0072
push 0x650074
push 0x6e0049
lea edx, [ebp - 0x694]
push edx
lea edx, [esp + 4]
push edx
call dword [sym.imp.ole32.dll_CLSIDFromProgID]
add esp, 0x3c
push 0x6ee2c94f
push 0xc0003e8a
push 0x11d0cdaf
push 0xd30c1661
mov dword [ebp - 0xc], esp
mov dword [ebp - 0x684], 0
lea edx, [ebp - 0x684]
push edx
lea edx, [esp + 4]
push edx
push 4
push 0
lea edx, [ebp - 0x694]
push edx
call dword [sym.imp.ole32.dll_CoCreateInstance]
add esp, 0x10
test eax, eax
je 0x4081f6
mov dword [ebp - 0x644], 3
mov dword [ebp - 0x640], eax
jmp 0x4087d1
push 0x53
push 0x440049
push 0x3d0074
push 0x630075
push 0x64006f
push 0x720070
push 0x770073
push 0x3f0070
push 0x730061
push 0x2e006d
push 0x610072
push 0x67006f
push 0x720070
push 0x650052
push 0x4d0043
push 0x50005f
push 0x4d0046
push 0x530044
push 0x2f006d
push 0x610072
push 0x67006f
push 0x720070
push 0x650052
push 0x4d0043
push 0x50002f
push 0x730064
push 0x77002f
push 0x730072
push 0x690064
push 0x76002f
push 0x6d006f
push 0x63002e
push 0x6e006f
push 0x690074
push 0x630065
push 0x6e006e
push 0x6f0063
push 0x720065
push 0x6c0061
push 0x650064
push 0x2e0065
push 0x630069
push 0x760072
push 0x650073
push 0x680063
push 0x650074
push 0x640072
push 0x6f0066
push 0x2e0077
push 0x770077
push 0x2f002f
push 0x3a0073
push 0x700074
push 0x740068
lea edx, [ebp - 0x664]
push edx
call dword [sym.imp.oleaut32.dll_VariantInit]
mov word [ebp - 0x664], 8
push esp
call dword [sym.imp.oleaut32.dll_SysAllocString]
mov dword [ebp - 0x65c], eax
add esp, 0xd8
push 0
push 0
push 0
push 0
lea edx, [ebp - 0x664]
push edx
mov eax, dword [ebp - 0x684]
push eax
mov eax, dword [eax]
call dword [eax + 0xd0]
test eax, eax
je 0x408361
mov dword [ebp - 0x644], 4
mov dword [ebp - 0x640], eax
jmp 0x4087b9
lea edx, [ebp - 0x63c]
push edx
mov eax, dword [ebp - 0x684]
push eax
mov eax, dword [eax]
call dword [eax + 0x7c]
test eax, eax
je 0x40838d
mov dword [ebp - 0x644], 5
mov dword [ebp - 0x640], eax
jmp 0x4087b9
cmp word [ebp - 0x63c], 0
je 0x4083a1
push 0xa
call dword [sym.imp.KERNEL32.DLL_Sleep]
jmp 0x408361
lea edx, [ebp - 0x680]
push edx
mov eax, dword [ebp - 0x684]
push eax
mov eax, dword [eax]
call dword [eax + 0x48]
test eax, eax
je 0x4083cd
mov dword [ebp - 0x644], 6
mov dword [ebp - 0x640], eax
jmp 0x4087b9
push 0x1901d94f
push 0xc00083b4
push 0x11d026cb
push 0x332c4425
mov dword [ebp - 8], esp
lea edx, [ebp - 0x67c]
push edx
push dword [ebp - 8]
mov eax, dword [ebp - 0x680]
push eax
mov eax, dword [eax]
call dword [eax]
add esp, 0x10
test eax, eax
je 0x408415
mov dword [ebp - 0x644], 7
mov dword [ebp - 0x640], eax
jmp 0x4087ad
lea edx, [ebp - 0x674]
push edx
mov eax, dword [ebp - 0x67c]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
test eax, eax
je 0x408441
mov dword [ebp - 0x644], 8
mov dword [ebp - 0x640], eax
jmp 0x4087a1
lea edx, [ebp - 0x638]
push edx
mov eax, dword [ebp - 0x674]
push eax
mov eax, dword [eax]
call dword [eax + 0x24]
test eax, eax
je 0x40846d
mov dword [ebp - 0x644], 9
mov dword [ebp - 0x640], eax
jmp 0x408795
push 0
push 0x65006d
push 0x61006e
push esp
call dword [sym.imp.oleaut32.dll_SysAllocString]
mov dword [ebp - 0x630], eax
add esp, 0xc
mov dword [ebp - 0x66c], 0
mov dword [ebp - 0x668], 0
mov dword [ebp - 0x634], 0
mov ecx, dword [ebp - 0x634]
cmp ecx, dword [ebp - 0x638]
jae 0x408630
lea edx, [ebp - 0x670]
push edx
push 0
push ecx
push 0
push 3
push 0
push ecx
push 0
push 3
mov eax, dword [ebp - 0x674]
push eax
mov eax, dword [eax]
call dword [eax + 0x2c]
test eax, eax
je 0x4084f3
mov dword [ebp - 0x644], 0xa
mov dword [ebp - 0x640], eax
jmp 0x408630
push 0xbcebd00
push 0xaa0082bb
push 0x11cf98b5
push 0x3050f1ff
mov dword [ebp - 4], esp
lea edx, [ebp - 0x678]
push edx
push dword [ebp - 4]
mov eax, dword [ebp - 0x670]
push eax
mov eax, dword [eax]
call dword [eax]
add esp, 0x10
test eax, eax
je 0x40853b
mov dword [ebp - 0x644], 0xb
mov dword [ebp - 0x640], eax
jmp 0x408610
lea edx, [ebp - 0x654]
push edx
push 0
push dword [ebp - 0x630]
mov eax, dword [ebp - 0x678]
push eax
mov eax, dword [eax]
call dword [eax + 0x20]
test eax, eax
je 0x40856f
mov dword [ebp - 0x644], 0xc
mov dword [ebp - 0x640], eax
jmp 0x408610
cmp word [ebp - 0x654], 8
jne 0x408604
cmp dword [ebp - 0x64c], 0
je 0x408604
push 0
push 0x65006d
push 0x61006e
push 0x65006c
push 0x690066
push esp
push dword [ebp - 0x64c]
call dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
add esp, 0x14
test eax, eax
jne 0x4085be
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x66c], eax
jmp 0x408602
push 0x74
push 0x69006d
push 0x620075
push 0x53006e
push 0x740062
push esp
push dword [ebp - 0x64c]
call dword [sym.imp.KERNEL32.DLL_lstrcmpiW]
add esp, 0x14
test eax, eax
jne 0x4085f6
mov eax, dword [ebp - 0x678]
mov dword [ebp - 0x668], eax
jmp 0x408602
mov eax, dword [ebp - 0x678]
push eax
mov eax, dword [eax]
call dword [eax + 8]
jmp 0x408610
mov eax, dword [ebp - 0x678]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0x670]
push eax
mov eax, dword [eax]
call dword [eax + 8]
cmp dword [ebp - 0x644], 0
jne 0x408630
inc dword [ebp - 0x634]
jmp 0x4084a7
push dword [ebp - 0x630]
call dword [sym.imp.oleaut32.dll_SysFreeString]
cmp dword [ebp - 0x66c], 0
je 0x40864e
cmp dword [ebp - 0x668], 0
jne 0x408695
cmp dword [ebp - 0x644], 0
jne 0x40866b
mov dword [ebp - 0x644], 0xd
mov dword [ebp - 0x640], 0
cmp dword [ebp - 0x66c], 0
je 0x408680
mov eax, dword [ebp - 0x66c]
push eax
mov eax, dword [eax]
call dword [eax + 8]
cmp dword [ebp - 0x668], 0
je 0x408695
mov eax, dword [ebp - 0x668]
push eax
mov eax, dword [eax]
call dword [eax + 8]
cmp dword [ebp - 0x644], 0
jne 0x408795
push 0
push 0
push 0xffffffffffffffff
lea edx, [ebp - 0x79a]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
push eax
lea edx, [ebp - 0x624]
push edx
push 0xffffffffffffffff
lea edx, [ebp - 0x79a]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.DLL_MultiByteToWideChar]
lea edx, [ebp - 0x624]
push edx
call dword [sym.imp.oleaut32.dll_SysAllocString]
mov dword [ebp - 0x628], eax
push 0x65
push 0x75006c
push 0x610076
push esp
call dword [sym.imp.oleaut32.dll_SysAllocString]
mov dword [ebp - 0x62c], eax
add esp, 0xc
push 0
push 0
push dword [ebp - 0x628]
push 0
push 8
push dword [ebp - 0x62c]
mov eax, dword [ebp - 0x66c]
push eax
mov eax, dword [eax]
call dword [eax + 0x1c]
mov eax, dword [ebp - 0x668]
push eax
mov eax, dword [eax]
call dword [eax + 0x114]
push dword [ebp - 0x62c]
call dword [sym.imp.oleaut32.dll_SysFreeString]
push dword [ebp - 0x628]
call dword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, dword [ebp - 0x66c]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0x668]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov word [ebp - 0x63a], 0xffff
lea edx, [ebp - 0x63a]
push edx
mov eax, dword [ebp - 0x684]
push eax
mov eax, dword [eax]
call dword [eax + 0xa4]
test eax, eax
je 0x408795
mov dword [ebp - 0x644], 0xe
mov dword [ebp - 0x640], eax
mov eax, dword [ebp - 0x674]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0x67c]
push eax
mov eax, dword [eax]
call dword [eax + 8]
mov eax, dword [ebp - 0x680]
push eax
mov eax, dword [eax]
call dword [eax + 8]
push dword [ebp - 0x65c]
call dword [sym.imp.oleaut32.dll_SysFreeString]
mov eax, dword [ebp - 0x684]
push eax
mov eax, dword [eax]
call dword [eax + 8]
cmp dword [ebp - 0x644], 0
je 0x408843
push 0xa
push 0xd58382e
push 0x2564342e
push 0x25203a24
push 0x45444f43
push 0x5f524f52
push 0x52452420
push 0x2c24524f
push 0x5252455f
push 0x4c414e52
push 0x45544e49
push 0x24202445
push 0x4d495424
push dword [ebp - 0x640]
push dword [ebp - 0x644]
lea eax, [esp + 8]
push eax
lea edx, [ebp - 0x214]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x44
lea edx, [ebp - 0x214]
push edx
call dword [ebx + 0x30]
push dword [ebp - 0xabc]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
leave
ret 4