Function at 0x405000
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x140
pushal
cmp dword [ebp + 0xc], 1
jne 0x4052f6
push 0x4e4941
push 0x4d5f3031
push 0x46434d4d
push 0
lea edx, [esp + 4]
push edx
call dword [sym.imp.USER32.DLL_FindWindowA]
add esp, 0xc
cmp eax, 0
je 0x4052f6
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, 0
je 0x4052f6
mov ebx, eax
cmp dword [ebx + 4], 0x2710
jne 0x4052f6
mov eax, dword [ebp + 8]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], 1
mov dword [ebp - 0x138], 0x405300
mov dword [ebp - 0x134], fcn.00405678
mov dword [ebp - 0x130], 0x40589b
push 0x20
push 0x29323130
push 0x28393720
push 0x24454c55
push 0x444f4d24
push esp
lea edx, [ebp - 0x12c]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0x14
push 0x118
lea edx, [ebp - 0x140]
push edx
lea edx, [ebx + 0x8c]
push edx
call fcn.00407277
push 0x6168
push 0x616d6159
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0xa4]
push edx
call fcn.0040603a
add esp, 8
mov dword [ebp - 0x20], eax
push 0
push 0x696b6173
push 0x6177614b
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0xa4]
push edx
call fcn.0040603a
add esp, 0xc
mov dword [ebp - 0x1c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x405173
mov dword [ebp - 0x28], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40516a
mov dword [ebp - 0x24], eax
push 0x30c0
lea edx, [eax + 0x1a]
push edx
push 0x409344
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x65
push 0x6e696c6b
push 0x5f6b3438
push 0x335f7878
push 0x35323768
push 0x735f6168
push 0x616d6179
mov dword [ebp - 0x14], esp
push 0x3230
push 0x302e3031
mov dword [ebp - 0x10], esp
push 0x656e
push 0x696c2d4b
push 0x205d6b34
push 0x38335b78
push 0x78353237
push 0x48532431
push 0x5f787835
push 0x32376873
push 0x5f616861
push 0x6d617924
push esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0x30c0
push 0x409344
push 0x60000
push 0x203
push dword [ebp + 8]
push dword [ebp - 0x20]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040603a
add esp, 0x28
add esp, 8
add esp, 0x1c
mov dword [ebp - 0x18], eax
push 0xa
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x405256
mov dword [ebp - 0x28], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40524d
mov dword [ebp - 0x24], eax
push 0x30c0
lea edx, [eax + 0x1c]
push edx
push 0x40c404
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e69
push 0x6c6b5f6b
push 0x3438335f
push 0x78783532
push 0x3768735f
push 0x696b6173
push 0x6177616b
mov dword [ebp - 8], esp
push 0x3330
push 0x302e3031
mov dword [ebp - 4], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b343833
push 0x5b787835
push 0x32374853
push 0x24315f78
push 0x78353237
push 0x68735f69
push 0x6b617361
push 0x77616b24
push esp
push dword [ebp - 4]
push dword [ebp - 8]
push 0x30c0
push 0x40c404
push 0x60000
push 0x203
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040603a
add esp, 0x2c
add esp, 8
add esp, 0x1c
mov dword [ebp - 0xc], eax
popal
mov eax, 1
leave
ret 0xc