Function at 0x401140
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
pushal
cmp dword [ebp + 0xc], 1
jne 0x40142c
push 0x4e4941
push 0x4d5f3031
push 0x46434d4d
push 0
lea edx, [esp + 4]
push edx
call dword [sym.imp.USER32.DLL_FindWindowA]
add esp, 0xc
cmp eax, 0
je 0x40142c
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, 0
je 0x40142c
mov ebx, eax
cmp dword [ebx + 4], 0x2710
jne 0x40142c
mov eax, dword [ebp + 8]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x134], 0x401436
mov dword [ebp - 0x130], fcn.004016ac
mov dword [ebp - 0x12c], 0x4018bb
push 0x3731
push 0x43444520
push 0x4f535546
push 0x20696873
push 0x69627573
push 0x74694d20
push 0x29353030
push 0x28313820
push 0x24454c55
push 0x444f4d24
push esp
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0x28
push 0x118
lea edx, [ebp - 0x13c]
push edx
lea edx, [ebx + 0x84]
push edx
call fcn.00408621
push 0x6968
push 0x73696275
push 0x7374694d
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0x9c]
push edx
call fcn.00401f6b
add esp, 0xc
mov dword [ebp - 0x1c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4012a4
mov dword [ebp - 0x24], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40129b
mov dword [ebp - 0x20], eax
push 0x1554
lea edx, [eax + 0x1f]
push edx
push 0x40c542
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x7473
push 0x65745f6e
push 0x61635f37
push 0x31636465
push 0x5f6f7375
push 0x665f6968
push 0x73696275
push 0x7374696d
mov dword [ebp - 0x14], esp
push 0x3130
push 0x302e3031
mov dword [ebp - 0x10], esp
push 0x4e
push 0x4143205d
push 0x6b363930
push 0x345b3235
push 0x50433731
push 0x43444529
push 0x54534554
push 0x2824315f
push 0x30387573
push 0x74696d24
push esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0x1554
push 0x40c542
push 0x400000
push 0x83
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea edx, [ebx + 0x9c]
push edx
call fcn.00401f6b
add esp, 0x28
add esp, 8
add esp, 0x20
mov dword [ebp - 0x18], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40138c
mov dword [ebp - 0x24], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401383
mov dword [ebp - 0x20], eax
push 0x1554
lea edx, [eax + 0x1f]
push edx
push 0x40c542
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x7473
push 0x65745f6e
push 0x61635f37
push 0x31636465
push 0x5f6f7375
push 0x665f6968
push 0x73696275
push 0x7374696d
mov dword [ebp - 8], esp
push 0x3130
push 0x302e3031
mov dword [ebp - 4], esp
push 0x65
push 0x6e696c2d
push 0x4b205d6b
push 0x32373431
push 0x5b344337
push 0x43444529
push 0x54534554
push 0x2824325f
push 0x30387573
push 0x74696d24
push esp
push dword [ebp - 4]
push dword [ebp - 8]
push 0x1554
push 0x40c542
push 0x170000
push 0x83
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea edx, [ebx + 0x9c]
push edx
call fcn.00401f6b
add esp, 0x28
add esp, 8
add esp, 0x20
mov dword [ebp - 0xc], eax
popal
mov eax, 1
leave
ret 0xc