Function at 0x401000
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1cc
pushal
cmp dword [ebp + 0xc], 1
jne 0x401d81
push 0x4e4941
push 0x4d5f3031
push 0x46434d4d
push 0
lea edx, [esp + 4]
push edx
call dword [sym.imp.USER32.DLL_FindWindowA]
add esp, 0xc
cmp eax, 0
je 0x401d81
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, 0
je 0x401d81
mov ebx, eax
cmp dword [ebx + 4], 0x2710
jne 0x401d81
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1cc], eax
mov dword [ebp - 0x1c8], 1
mov dword [ebp - 0x1c4], 0x401d8b
mov dword [ebp - 0x1c0], fcn.004020d5
mov dword [ebp - 0x1bc], 0x4023c1
push 0
push 0x20293434
push 0x30283220
push 0x24454c55
push 0x444f4d24
push esp
lea edx, [ebp - 0x1b8]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0x14
push 0x118
lea edx, [ebp - 0x1cc]
push edx
lea edx, [ebx + 0x8c]
push edx
call fcn.0040b5e8
push 0x6968
push 0x73696275
push 0x7374694d
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0xc
mov dword [ebp - 0xac], eax
push 0xa
push 0x3ee
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401154
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401148
mov dword [ebp - 0xb0], eax
push 0x3d72
lea edx, [eax + 0x13]
push edx
push 0x44b2ec
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b363532
push 0x5f663230
push 0x3035686d
mov dword [ebp - 0xa4], esp
push 0x3130
push 0x302e3031
mov dword [ebp - 0xa0], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b363532
push 0x5b463230
push 0x3035484d
push 0x24323030
push 0x35686d24
push esp
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push 0x3d72
push 0x44b2ec
push 0x40000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0xa8], eax
push 0xa
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40123e
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401232
mov dword [ebp - 0xb0], eax
push 0x3d72
lea edx, [eax + 0x13]
push edx
push 0x439178
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b323135
push 0x5f663230
push 0x3338686d
mov dword [ebp - 0x98], esp
push 0x3931
push 0x302e3031
mov dword [ebp - 0x94], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b323135
push 0x5b463230
push 0x3138484d
push 0x24323031
push 0x38686d24
push esp
push dword [ebp - 0x94]
push dword [ebp - 0x98]
push 0x3d72
push 0x439178
push 0x80000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x9c], eax
push 0xa
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401328
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40131c
mov dword [ebp - 0xb0], eax
push 0x3d72
lea edx, [eax + 0x13]
push edx
push 0x439178
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b323135
push 0x5f663230
push 0x3338686d
mov dword [ebp - 0x8c], esp
push 0x3931
push 0x302e3031
mov dword [ebp - 0x88], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b323135
push 0x5b463130
push 0x3238484d
push 0x24313032
push 0x38686d24
push esp
push dword [ebp - 0x88]
push dword [ebp - 0x8c]
push 0x3d72
push 0x439178
push 0x80000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x90], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401412
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401406
mov dword [ebp - 0xb0], eax
push 0x3df4
lea edx, [eax + 0x13]
push edx
push 0x435384
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b323135
push 0x5f663230
push 0x3238686d
mov dword [ebp - 0x80], esp
push 0x3331
push 0x302e3031
mov dword [ebp - 0x7c], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b323135
push 0x5b463230
push 0x3238484d
push 0x24323032
push 0x38686d24
push esp
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
push 0x3df4
push 0x435384
push 0x80000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x84], eax
push 0xa
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4014f0
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4014e4
mov dword [ebp - 0xb0], eax
push 0x3d72
lea edx, [eax + 0x13]
push edx
push 0x439178
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b323135
push 0x5f663230
push 0x3338686d
mov dword [ebp - 0x74], esp
push 0x3931
push 0x302e3031
mov dword [ebp - 0x70], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b323135
push 0x5b463130
push 0x3338484d
push 0x24313033
push 0x38686d24
push esp
push dword [ebp - 0x70]
push dword [ebp - 0x74]
push 0x3d72
push 0x439178
push 0x80000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x78], eax
push 0xa
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4015cb
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x4015bf
mov dword [ebp - 0xb0], eax
push 0x3d72
lea edx, [eax + 0x13]
push edx
push 0x439178
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b323135
push 0x5f663230
push 0x3338686d
mov dword [ebp - 0x68], esp
push 0x3931
push 0x302e3031
mov dword [ebp - 0x64], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b323135
push 0x5b463230
push 0x3338484d
push 0x24323033
push 0x38686d24
push esp
push dword [ebp - 0x64]
push dword [ebp - 0x68]
push 0x3d72
push 0x439178
push 0x80000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x6c], eax
push 0xa
push 0x3ea
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x4016a6
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40169a
mov dword [ebp - 0xb0], eax
push 0x3df4
lea edx, [eax + 0x13]
push edx
push 0x43ceea
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b383637
push 0x5f663330
push 0x3338686d
mov dword [ebp - 0x5c], esp
push 0x3531
push 0x302e3031
mov dword [ebp - 0x58], esp
push 0
push 0x656e696c
push 0x2d4b205d
push 0x6b383637
push 0x5b463330
push 0x3338484d
push 0x24333033
push 0x38686d24
push esp
push dword [ebp - 0x58]
push dword [ebp - 0x5c]
push 0x3df4
push 0x43ceea
push 0xc0000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x60], eax
push 0xa
push 0x3e9
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401781
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401775
mov dword [ebp - 0xb0], eax
push 0x3d72
lea edx, [eax + 0x13]
push edx
push 0x439178
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b323135
push 0x5f663230
push 0x3338686d
mov dword [ebp - 0x50], esp
push 0x3931
push 0x302e3031
mov dword [ebp - 0x4c], esp
push 0x656e
push 0x696c2d4b
push 0x205d6b32
push 0x31355b46
push 0x34303338
push 0x484d2431
push 0x5f343033
push 0x38686d24
push esp
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
push 0x3d72
push 0x439178
push 0x80000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x54], eax
push 0xa
push 0x3ea
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40185f
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401853
mov dword [ebp - 0xb0], eax
push 0x3df4
lea edx, [eax + 0x13]
push edx
push 0x43ceea
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e
push 0x696c6b5f
push 0x6b383637
push 0x5f663330
push 0x3338686d
mov dword [ebp - 0x44], esp
push 0x3531
push 0x302e3031
mov dword [ebp - 0x40], esp
push 0x656e
push 0x696c2d4b
push 0x205d6b38
push 0x36375b46
push 0x34303338
push 0x484d2432
push 0x5f343033
push 0x38686d24
push esp
push dword [ebp - 0x40]
push dword [ebp - 0x44]
push 0x3df4
push 0x43ceea
push 0xc0000
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x20
add esp, 8
add esp, 0x14
mov dword [ebp - 0x48], eax
push 0xa
push 0x3eb
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40193d
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401931
mov dword [ebp - 0xb0], eax
push 0x36d8
lea edx, [eax + 0x11]
push edx
push 0x440cde
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x6e61635f
push 0x6b323135
push 0x5f663430
push 0x3338686d
mov dword [ebp - 0x38], esp
push 0x3130
push 0x302e3031
mov dword [ebp - 0x34], esp
push 0x4e4143
push 0x20544d20
push 0x746c6f43
push 0x205d6b32
push 0x31355b46
push 0x34303338
push 0x484d2433
push 0x5f343033
push 0x38686d24
push esp
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0x36d8
push 0x440cde
push 0x80000
push 0x83
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x24
add esp, 8
add esp, 0x14
mov dword [ebp - 0x3c], eax
push 0xa
push 0x3ec
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401a1d
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401a11
mov dword [ebp - 0xb0], eax
push 0x36d8
lea edx, [eax + 0x11]
push edx
push 0x4443b6
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x6e61635f
push 0x6b363837
push 0x5f663430
push 0x3338686d
mov dword [ebp - 0x2c], esp
push 0x3130
push 0x302e3031
mov dword [ebp - 0x28], esp
push 0x4e4143
push 0x20544120
push 0x746c6f43
push 0x205d6b38
push 0x36375b46
push 0x34303338
push 0x484d2434
push 0x5f343033
push 0x38686d24
push esp
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
push 0x36d8
push 0x4443b6
push 0xc0000
push 0x83
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x24
add esp, 8
add esp, 0x14
mov dword [ebp - 0x30], eax
push 0xa
push 0x3ef
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401afd
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401af1
mov dword [ebp - 0xb0], eax
push 0x385e
lea edx, [eax + 0x18]
push edx
push 0x44f05e
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e6163
push 0x5f6f7265
push 0x6a61705f
push 0x6b323135
push 0x5f663430
push 0x3338686d
mov dword [ebp - 0x20], esp
push 0x3130
push 0x302e3031
mov dword [ebp - 0x1c], esp
push 0x4e41
push 0x43206f72
push 0x656a6150
push 0x205d6b32
push 0x31355b46
push 0x34303338
push 0x484d2436
push 0x5f343033
push 0x38686d24
push esp
push dword [ebp - 0x1c]
push dword [ebp - 0x20]
push 0x385e
push 0x44f05e
push 0x80000
push 0x87
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x24
add esp, 8
add esp, 0x18
mov dword [ebp - 0x24], eax
push 0xa
push 0x3ed
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401be5
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401bd9
mov dword [ebp - 0xb0], eax
push 0x385e
lea edx, [eax + 0x18]
push edx
push 0x447a8e
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x6e6163
push 0x5f6f7265
push 0x6a61705f
push 0x6b363837
push 0x5f663430
push 0x3338686d
mov dword [ebp - 0x14], esp
push 0x3230
push 0x302e3031
mov dword [ebp - 0x10], esp
push 0x4e41
push 0x43206f72
push 0x656a6150
push 0x205d6b38
push 0x36375b46
push 0x34303338
push 0x484d2437
push 0x5f343033
push 0x38686d24
push esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0x385e
push 0x447a8e
push 0xc0000
push 0x87
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x24
add esp, 8
add esp, 0x18
mov dword [ebp - 0x18], eax
push 0xa
push 0x3f0
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401ccd
mov dword [ebp - 0xb4], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401cc1
mov dword [ebp - 0xb0], eax
push 0x924
lea edx, [eax + 0x18]
push edx
push 0x4528bc
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0xb4]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x656e69
push 0x6c6b5f6c
push 0x61737265
push 0x76696e75
push 0x5f32656c
push 0x75646f6d
mov dword [ebp - 8], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 4], esp
push 0
push 0x656e696c
push 0x2d4b2034
push 0x3033382a
push 0x2c333033
push 0x382a2c32
push 0x3033382a
push 0x2c313033
push 0x382a2c32
push 0x3032382a
push 0x2c313032
push 0x382a2c32
push 0x3031382a
push 0x2c323030
push 0x35484d24
push 0x6b753224
push esp
push dword [ebp - 4]
push dword [ebp - 8]
push 0x924
push 0x4528bc
push 0
push 0x287
push dword [ebp + 8]
push dword [ebp - 0xac]
lea edx, [ebx + 0xa4]
push edx
call fcn.00402d65
add esp, 0x40
add esp, 8
add esp, 0x18
mov dword [ebp - 0xc], eax
popal
mov eax, 1
leave
ret 0xc