Function at 0x1323cdf4
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff4
push ebx
push esi
xor edx, edx
mov dword [ebp - 0xc], edx
mov esi, eax
xor eax, eax
push ebp
push 0x1323d229
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, dword [0x132ac9d0]
cmp dword [eax], 0
je 0x1323d1ee
mov eax, dword [0x132ac9d0]
mov eax, dword [eax]
cmp byte [eax + 0x14], 0
je 0x1323d1c8
cmp dword [0x132c6130], 0
jne 0x1323ce4c
xor ecx, ecx
mov dl, 1
mov eax, dword [0x1323c958]
call fcn.131a8a10
mov dword [0x132c6130], eax
mov eax, esi
call fcn.131a9798
mov edx, eax
mov eax, dword [esi + 0x48]
sar eax, 1
jns 0x1323ce5f
adc eax, 0
mov ecx, dword [0x132c6130]
mov ecx, dword [ecx + 0x48]
sar ecx, 1
jns 0x1323ce6f
adc ecx, 0
sub eax, ecx
add edx, eax
mov eax, dword [0x132c6130]
call fcn.131aef68
mov eax, esi
call fcn.131a97b8
mov edx, eax
mov eax, dword [esi + 0x4c]
sar eax, 1
jns 0x1323ce90
adc eax, 0
mov ecx, dword [0x132c6130]
mov ecx, dword [ecx + 0x4c]
sar ecx, 1
jns 0x1323cea0
adc ecx, 0
sub eax, ecx
add edx, eax
mov eax, dword [0x132c6130]
call fcn.131aefa4
push 0x1323d238
push 0x1323d23c
mov eax, dword [0x132af7f8]
push eax
call sub.kernel32.dll_FindResourceA
mov ebx, eax
test ebx, ebx
je 0x1323d08c
push ebx
mov eax, dword [0x132af7f8]
push eax
call sub.kernel32.dll_SizeofResource
mov esi, eax
test esi, esi
je 0x1323d08c
push ebx
mov eax, dword [0x132af7f8]
push eax
call sub.kernel32.dll_LoadResource
test eax, eax
je 0x1323d08c
push eax
call sub.kernel32.dll_LockResource
mov ebx, eax
test ebx, ebx
je 0x1323d08c
mov dl, 1
mov eax, dword [0x13159060]
call fcn.13143cd8
mov dword [ebp - 8], eax
xor eax, eax
push ebp
push 0x1323d085
push dword fs:[eax]
mov dword fs:[eax], esp
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.1315dd98
mov edx, esi
mov eax, dword [ebp - 8]
mov ecx, dword [eax]
call dword [ecx + 4]
mov eax, dword [ebp - 8]
mov edx, dword [eax + 4]
mov eax, ebx
mov ecx, esi
call fcn.13143104
push 0
push 0
mov eax, dword [ebp - 8]
call fcn.1315dd98
mov dl, 1
mov eax, dword [0x131fa4e8]
call fcn.131ff160
mov dword [ebp - 4], eax
or edx, 0xffffffff
mov eax, dword [ebp - 8]
call fcn.13143cd8
mov edx, eax
mov eax, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 0x54]
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x20]
mov edx, eax
mov eax, dword [0x132c6130]
call fcn.131a9bd4
mov eax, dword [ebp - 4]
mov edx, dword [eax]
call dword [edx + 0x2c]
mov edx, eax
mov eax, dword [0x132c6130]
call fcn.131a9ba0
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x360]
mov eax, dword [eax + 0x198]
mov edx, dword [ebp - 4]
mov ecx, dword [eax]
call dword [ecx + 8]
push 0xfffffffffffffff0
mov eax, dword [0x132c6130]
call fcn.1319b500
push eax
call sub.user32.dll_GetWindowLongA
mov ebx, eax
and ebx, 0xff3fffff
push ebx
push 0xfffffffffffffff0
mov eax, dword [0x132c6130]
call fcn.1319b500
push eax
call sub.user32.dll_SetWindowLongA
xor edx, edx
mov eax, dword [0x132c6130]
call fcn.131aaa4c
mov ebx, 0x808080
mov edx, ebx
mov eax, dword [0x132c6130]
call fcn.131935a0
mov edx, ebx
mov eax, dword [0x132c6130]
call fcn.131aeee8
mov dl, 1
mov eax, dword [0x132c6130]
call fcn.131aeefc
push 1
push 0xff
push ebx
mov eax, dword [0x132c6130]
call fcn.1319b500
push eax
mov eax, dword [0x132ac990]
mov eax, dword [eax]
call eax
push 0xfffffffffffffff0
mov eax, dword [0x132c6130]
call fcn.1319b500
push eax
call sub.user32.dll_GetWindowLongA
or eax, 0x80000
or eax, 0x20000
push eax
push 0xfffffffffffffff0
mov eax, dword [0x132c6130]
call fcn.1319b500
push eax
call sub.user32.dll_SetWindowLongA
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1323d08c
mov eax, dword [ebp - 8]
call fcn.13143d08
mov eax, dword [ebp - 4]
call fcn.13143d08
ret
push 0x1323d254
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x39c]
mov ecx, 0x1323d260
mov edx, dword [0x132af7f8]
call fcn.13202800
push 0x1323d254
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x3a0]
mov ecx, 0x1323d26c
mov edx, dword [0x132af7f8]
call fcn.13202800
mov edx, dword [0x132acbbc]
mov edx, dword [edx]
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x364]
call fcn.13193430
mov edx, dword [0x132acbbc]
mov edx, dword [edx]
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x368]
call fcn.13193430
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x374]
mov edx, 0x1323d27c
call fcn.13193430
mov edx, dword [0x132acbbc]
mov edx, dword [edx]
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x378]
call fcn.13193430
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x36c]
mov edx, 0x1323d294
call fcn.13193430
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x370]
mov edx, 0x1323d2ac
call fcn.13193430
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x39c]
mov dl, 1
mov ecx, dword [eax]
call dword [ecx + 0x68]
lea edx, [ebp - 0xc]
mov eax, dword [0x132ac7b4]
mov eax, dword [eax]
mov eax, dword [eax + 0x374]
call fcn.13193400
mov edx, dword [ebp - 0xc]
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x398]
call fcn.13193430
mov eax, dword [0x132ac7b4]
mov eax, dword [eax]
mov eax, dword [eax + 0x374]
mov eax, dword [eax + 0x68]
mov edx, dword [eax + 0x18]
mov eax, dword [0x132c6130]
mov eax, dword [eax + 0x398]
mov eax, dword [eax + 0x68]
call fcn.1316c50c
mov eax, dword [0x132c6130]
mov edx, dword [eax]
call dword [edx + 0xfc]
cmp eax, 6
sete bl
jmp 0x1323d213
push 0x1323d2c4
push 0x1323d2d4
push 1
push 0
mov eax, dword [0x132ac7b4]
mov eax, dword [eax]
mov ecx, 0x1323d2f4
mov edx, 0x1323d304
call fcn.1323227c
jmp 0x1323d213
push 0x1323d2c4
push 0x1323d318
push 1
push 0
push 0x1323d304
mov ecx, 0x1323d2f4
mov eax, dword [0x132ac7b4]
mov eax, dword [eax]
pop edx
call fcn.1323227c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x1323d230
lea eax, [ebp - 0xc]
call fcn.13144c28
ret