Function at 0x4163f8
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x16c
pushal
cmp dword [ebp + 0xc], 1
jne 0x416993
push 0x4e4941
push 0x4d5f3031
push 0x46434d4d
push 0
lea edx, [esp + 4]
push edx
call dword [sym.imp.USER32.DLL_FindWindowA]
add esp, 0xc
cmp eax, 0
je 0x416993
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, 0
je 0x416993
mov ebx, eax
cmp dword [ebx + 4], 0x2710
jne 0x416993
mov eax, dword [ebp + 8]
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], 1
mov dword [ebp - 0x164], 0x41699d
mov dword [ebp - 0x160], fcn.00416c85
mov dword [ebp - 0x15c], 0x416f08
push 0x20
push 0x29353031
push 0x28303320
push 0x24454c55
push 0x444f4d24
push esp
lea edx, [ebp - 0x158]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0x14
push 0x118
lea edx, [ebp - 0x16c]
push edx
lea edx, [ebx + 0x8c]
push edx
call fcn.0041b450
push 0x61
push 0x646e6f48
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0xa4]
push edx
call fcn.00417942
add esp, 8
mov dword [ebp - 0x4c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x416538
mov dword [ebp - 0x54], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x41652f
mov dword [ebp - 0x50], eax
push 0x30c0
lea edx, [eax + 0x11]
push edx
push 0x44a57e
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x656e696c
push 0x6b5f6b38
push 0x32315f61
push 0x646e6f68
mov dword [ebp - 0x44], esp
push 0x3033
push 0x302e3031
mov dword [ebp - 0x40], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b383231
push 0x5b61646e
push 0x6f482431
push 0x5f303324
push esp
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push 0x30c0
push 0x44a57e
push 0x20000
push 0x283
push dword [ebp + 8]
push dword [ebp - 0x4c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00417942
add esp, 0x1c
add esp, 8
add esp, 0x14
mov dword [ebp - 0x48], eax
push 0xa
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4165ff
mov dword [ebp - 0x54], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4165f6
mov dword [ebp - 0x50], eax
push 0x30c0
lea edx, [eax + 0x11]
push edx
push 0x44d63e
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x656e696c
push 0x6b5f6b32
push 0x39315f61
push 0x646e6f68
mov dword [ebp - 0x38], esp
push 0x3033
push 0x302e3031
mov dword [ebp - 0x34], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b323931
push 0x5b61646e
push 0x6f482432
push 0x5f303324
push esp
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0x30c0
push 0x44d63e
push 0x30000
push 0x283
push dword [ebp + 8]
push dword [ebp - 0x4c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00417942
add esp, 0x1c
add esp, 8
add esp, 0x14
mov dword [ebp - 0x3c], eax
push 0xa
push 0x3ea
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4166c6
mov dword [ebp - 0x54], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4166bd
mov dword [ebp - 0x50], eax
push 0x3246
lea edx, [eax + 0x11]
push edx
push 0x4506fe
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x656e696c
push 0x6b5f6b34
push 0x38335f61
push 0x646e6f68
mov dword [ebp - 0x2c], esp
push 0x3033
push 0x302e3031
mov dword [ebp - 0x28], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b343833
push 0x5b61646e
push 0x6f482433
push 0x5f303324
push esp
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 0x3246
push 0x4506fe
push 0x60000
push 0x283
push dword [ebp + 8]
push dword [ebp - 0x4c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00417942
add esp, 0x1c
add esp, 8
add esp, 0x14
mov dword [ebp - 0x30], eax
push 0xa
push 0x3eb
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x41678d
mov dword [ebp - 0x54], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x416784
mov dword [ebp - 0x50], eax
push 0x30c0
lea edx, [eax + 0x11]
push edx
push 0x453944
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x656e696c
push 0x6b5f6b32
push 0x31355f61
push 0x646e6f68
mov dword [ebp - 0x20], esp
push 0x3033
push 0x302e3031
mov dword [ebp - 0x1c], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b323135
push 0x5b61646e
push 0x6f482434
push 0x5f303324
push esp
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push 0x30c0
push 0x453944
push 0x80000
push 0x283
push dword [ebp + 8]
push dword [ebp - 0x4c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00417942
add esp, 0x1c
add esp, 8
add esp, 0x14
mov dword [ebp - 0x24], eax
push 0xa
push 0x3ed
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x416854
mov dword [ebp - 0x54], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x41684b
mov dword [ebp - 0x50], eax
push 0x30c0
lea edx, [eax + 0x12]
push edx
push 0x459ac4
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x65
push 0x6e696c6b
push 0x5f6b3432
push 0x30315f61
push 0x646e6f68
mov dword [ebp - 0x14], esp
push 0x3033
push 0x302e3031
mov dword [ebp - 0x10], esp
push 0x65
push 0x6e696c2d
push 0x4b205d6b
push 0x34323031
push 0x5b61646e
push 0x6f482435
push 0x5f303324
push esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0x30c0
push 0x459ac4
push 0x100000
push 0x283
push dword [ebp + 8]
push dword [ebp - 0x4c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00417942
add esp, 0x1c
add esp, 8
add esp, 0x14
mov dword [ebp - 0x18], eax
push 0xa
push 0x3ee
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x41691b
mov dword [ebp - 0x54], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x416912
mov dword [ebp - 0x50], eax
push 0xe38
lea edx, [eax + 0x10]
push edx
push 0x45cb84
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x54]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e69
push 0x6c6b5f69
push 0x6b6f5f61
push 0x646e6f68
mov dword [ebp - 8], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 4], esp
push 0x656e
push 0x696c2d4b
push 0x20494b4f
push 0x2061646e
push 0x6f482436
push 0x5f303324
push esp
push dword [ebp - 4]
push dword [ebp - 8]
push 0xe38
push 0x45cb84
push 0
push 0x283
push dword [ebp + 8]
push dword [ebp - 0x4c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00417942
add esp, 0x18
add esp, 8
add esp, 0x10
mov dword [ebp - 0xc], eax
popal
mov eax, 1
leave
ret 0xc