Function at 0x401120
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
pushal
cmp dword [ebp + 0xc], 1
jne 0x4013fc
push 0x4e4941
push 0x4d5f3031
push 0x46434d4d
push 0
lea edx, [esp + 4]
push edx
call dword [sym.imp.USER32.DLL_FindWindowA]
add esp, 0xc
cmp eax, 0
je 0x4013fc
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, 0
je 0x4013fc
mov ebx, eax
cmp dword [ebx + 4], 0x2710
jne 0x4013fc
mov eax, dword [ebp + 8]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x134], 0x401406
mov dword [ebp - 0x130], fcn.0040169f
mov dword [ebp - 0x12c], 0x401a47
push 0x20
push 0x29303130
push 0x28373820
push 0x24454c55
push 0x444f4d24
push esp
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0x14
push 0x118
lea edx, [ebp - 0x13c]
push edx
lea edx, [ebx + 0x8c]
push edx
call fcn.00405ef1
push 0
push 0x64726f46
push 0x204d4354
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0xa4]
push edx
call fcn.0040231d
add esp, 0xc
mov dword [ebp - 0x1c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401265
mov dword [ebp - 0x24], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40125c
mov dword [ebp - 0x20], eax
push 0x16da
lea edx, [eax + 0x1e]
push edx
push 0x409686
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x74
push 0x7365745f
push 0x6e61635f
push 0x656b6f72
push 0x74737265
push 0x776f705f
push 0x6d63745f
push 0x64726f66
mov dword [ebp - 0x14], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 0x10], esp
push 0x6e61
push 0x43205d6b
push 0x34303531
push 0x5b656b6f
push 0x72745372
push 0x65776f50
push 0x29545345
push 0x54282431
push 0x5f37386d
push 0x315f3738
push 0x64726f66
push 0x6d637424
push esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0x16da
push 0x409686
push esp
push 0xc83
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040231d
add esp, 0x30
add esp, 8
add esp, 0x20
mov dword [ebp - 0x18], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401357
mov dword [ebp - 0x24], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40134e
mov dword [ebp - 0x20], eax
push 0x16da
lea edx, [eax + 0x1e]
push edx
push 0x409686
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0x74
push 0x7365745f
push 0x6e61635f
push 0x656b6f72
push 0x74737265
push 0x776f705f
push 0x6d63745f
push 0x64726f66
mov dword [ebp - 8], esp
push 0x3030
push 0x302e3031
mov dword [ebp - 4], esp
push 0x6e61
push 0x43205d6b
push 0x34303531
push 0x5b303852
push 0x36205441
push 0x29545345
push 0x54282432
push 0x5f37386d
push 0x315f3738
push 0x64726f66
push 0x6d637424
push esp
push dword [ebp - 4]
push dword [ebp - 8]
push 0x16da
push 0x409686
push esp
push 0xc83
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea edx, [ebx + 0xa4]
push edx
call fcn.0040231d
add esp, 0x2c
add esp, 8
add esp, 0x20
mov dword [ebp - 0xc], eax
popal
mov eax, 1
leave
ret 0xc