Function at 0x401000
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x13c
pushal
cmp dword [ebp + 0xc], 1
jne 0x4012a4
push 0x4e4941
push 0x4d5f3031
push 0x46434d4d
push 0
lea edx, [esp + 4]
push edx
call dword [sym.imp.USER32.DLL_FindWindowA]
add esp, 0xc
cmp eax, 0
je 0x40128b
push 0xffffffffffffffeb
push eax
call dword [sym.imp.USER32.DLL_GetWindowLongA]
cmp eax, 0
je 0x40128b
mov ebx, eax
cmp dword [ebx + 4], 0x2710
jne 0x40128b
mov eax, dword [ebp + 8]
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 1
mov dword [ebp - 0x134], 0x4012ae
mov dword [ebp - 0x130], 0x4014f0
mov dword [ebp - 0x12c], 0x401811
push 0x20
push 0x29373230
push 0x28333620
push 0x24454c55
push 0x444f4d24
push esp
lea edx, [ebp - 0x128]
push edx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
add esp, 0x14
push 0x118
lea edx, [ebp - 0x13c]
push edx
lea edx, [ebx + 0x8c]
push edx
call fcn.00408813
push 0x6968
push 0x73696275
push 0x7374694d
push esp
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp + 8]
push 0
lea edx, [ebx + 0xa4]
push edx
call fcn.00401972
add esp, 0xc
mov dword [ebp - 0x1c], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x401148
mov dword [ebp - 0x24], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x40113f
mov dword [ebp - 0x20], eax
push 0x15d6
lea edx, [eax + 0x15]
push edx
push 0x40a824
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x6e61635f
push 0x73636174
push 0x655f6968
push 0x73696275
push 0x7374696d
mov dword [ebp - 0x14], esp
push 0x3230
push 0x302e3031
mov dword [ebp - 0x10], esp
push 0x4e
push 0x41432067
push 0x6e69646f
push 0x43205543
push 0x4524315f
push 0x39393924
push esp
push dword [ebp - 0x10]
push dword [ebp - 0x14]
push 0x15d6
push 0x40a824
push 0
push 0x92
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00401972
add esp, 0x18
add esp, 8
add esp, 0x18
mov dword [ebp - 0x18], eax
push 0xa
push 0x3e8
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
test eax, eax
je 0x40120c
mov dword [ebp - 0x24], eax
push eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
test eax, eax
je 0x401203
mov dword [ebp - 0x20], eax
push 0x15d6
lea edx, [eax + 0x15]
push edx
push 0x40a824
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.DLL_FreeResource]
push 0
push 0x6e61635f
push 0x73636174
push 0x655f6968
push 0x73696275
push 0x7374696d
mov dword [ebp - 8], esp
push 0x3230
push 0x302e3031
mov dword [ebp - 4], esp
push 0x4e4143
push 0x20676e69
push 0x646f4320
push 0x53434154
push 0x4524325f
push 0x39393924
push esp
push dword [ebp - 4]
push dword [ebp - 8]
push 0x15d6
push 0x40a824
push 0
push 0x92
push dword [ebp + 8]
push dword [ebp - 0x1c]
lea edx, [ebx + 0xa4]
push edx
call fcn.00401972
add esp, 0x18
add esp, 8
add esp, 0x18
mov dword [ebp - 0xc], eax
push 0
push 0x10
push 0x10
push 1
push 1
push dword [ebp + 8]
call dword [sym.imp.USER32.DLL_LoadImageA]
mov dword [ebx + 0xd10], eax
popal
mov eax, 1
leave
ret 0xc