Function at 0x447e10
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, dword [0x4ece48]
sub esp, 0x14
push ebp
push esi
mov esi, dword [sym.imp.KERNEL32.dll_FindResourceW]
push edi
push 0x4d2820
push 0xa8
push eax
call esi
test eax, eax
je 0x447e3f
push 0x4ebf74
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0xb2
push ecx
call esi
test eax, eax
je 0x447e63
push 0x4ec594
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0xb1
push edx
call esi
test eax, eax
je 0x447e87
push 0x4ecdf0
call fcn.0044c8f0
add esp, 4
mov eax, dword [0x4ece48]
push 0x4d2820
push 0xb0
push eax
call esi
test eax, eax
je 0x447eaa
push 0x4ecde4
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0xb3
push ecx
call esi
test eax, eax
je 0x447ece
push 0x4ecde0
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0xb9
push edx
call esi
test eax, eax
je 0x447ef2
push 0x4ebd64
call fcn.0044c8f0
add esp, 4
mov eax, dword [0x4ece48]
push 0x4d2820
push 0x99
push eax
call esi
test eax, eax
je 0x447f15
push 0x4ecdcc
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0xc8
push ecx
call esi
test eax, eax
je 0x447f39
push 0x4edfc0
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0xc9
push edx
call esi
test eax, eax
je 0x447f5d
push 0x4edfc4
call fcn.0044c8f0
add esp, 4
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.USER32.dll_LoadBitmapW]
mov ebp, eax
push 0x7de
push ebp
mov dword [esp + 0x18], ebp
call edi
push 0x7dd
push ebp
mov dword [0x4ecdec], eax
call edi
push 0x7e1
push ebp
mov dword [0x4ecdc8], eax
call edi
push 0x7df
push ebp
mov dword [0x4ecdd0], eax
call edi
push 0x7e0
push ebp
mov dword [0x4ecdd4], eax
call edi
push 0x90
push ebp
mov dword [0x4ecde8], eax
call edi
push 0x4d2820
mov dword [0x4ec7a4], eax
mov eax, dword [0x4ece48]
push 0x9d
push eax
call esi
test eax, eax
je 0x447fe2
push 0x4edfe0
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0x9c
push ecx
call esi
test eax, eax
je 0x448006
push 0x4edfe4
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0x9b
push edx
call esi
test eax, eax
je 0x44802a
push 0x4edfe8
call fcn.0044c8f0
add esp, 4
mov eax, dword [0x4ece48]
push 0x4d2820
push 0xaf
push eax
call esi
test eax, eax
je 0x44804d
push 0x4edfec
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0xa1
push ecx
call esi
test eax, eax
je 0x448071
push 0x4edff0
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0xa0
push edx
call esi
test eax, eax
je 0x448095
push 0x4edff4
call fcn.0044c8f0
add esp, 4
mov eax, dword [0x4ece48]
push 0x4d2820
push 0x9e
push eax
call esi
test eax, eax
je 0x4480b8
push 0x4edff8
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0xa5
push ecx
call esi
test eax, eax
je 0x4480dc
push 0x4edffc
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0x7e9
push edx
call esi
test eax, eax
je 0x448100
push 0x4edfc8
call fcn.0044c8f0
add esp, 4
mov eax, dword [0x4ece48]
push 0x4d2820
push 0x7ea
push eax
call esi
test eax, eax
je 0x448123
push 0x4edfcc
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0x7eb
push ecx
call esi
test eax, eax
je 0x448147
push 0x4edfd0
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0x98
push edx
call esi
test eax, eax
je 0x44816b
push 0x4edfd4
call fcn.0044c8f0
add esp, 4
mov eax, dword [0x4ece48]
push 0x4d2820
push 0x259
push eax
call esi
test eax, eax
je 0x44818e
push 0x4edfd8
call fcn.0044c8f0
add esp, 4
mov ecx, dword [0x4ece48]
push 0x4d2820
push 0x7e7
push ecx
call esi
test eax, eax
je 0x4481b2
push 0x4edfdc
call fcn.0044c8f0
add esp, 4
mov edx, dword [0x4ece48]
push 0x4d2820
push 0x7f5
push edx
call esi
test eax, eax
je 0x4481d6
push 0x4ee008
call fcn.0044c8f0
add esp, 4
mov eax, dword [0x4ece48]
push 0x4d2820
push 0xb8
push eax
call esi
test eax, eax
je 0x4481f9
push 0x4ee00c
call fcn.0044c8f0
add esp, 4
push ebx
push 0x4d2828
push 0x84
push ebp
call esi
mov ebx, eax
test ebx, ebx
je 0x448289
push ebx
push ebp
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push ebx
push ebp
mov edi, eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov ebp, eax
push ebp
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [esp + 0x10], eax
xor ecx, ecx
lea eax, [edi + 1]
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00494ec8
mov ebx, eax
lea eax, [edi + 1]
push eax
push 0
push ebx
call fcn.00499a30
mov eax, dword [esp + 0x20]
push edi
push eax
push ebx
call fcn.0049c020
lea ecx, [ebx + 2]
shr edi, 1
push ecx
mov word [ebx + edi*2], 0
call fcn.00496121
push ebx
mov dword [0x4ee000], eax
call fcn.004961ac
add esp, 0x24
push ebp
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov ebp, dword [esp + 0x14]
mov eax, dword [0x4ee000]
xor ecx, ecx
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.00494ec8
xor edi, edi
add esp, 4
cmp dword [0x4ee000], edi
mov dword [0x4ee004], eax
jle 0x4482f7
jmp 0x4482c0
mov eax, dword [0x4ee004]
lea ecx, [edi + 0x1f5]
movzx edx, cx
push 0x4d2820
lea ebx, [eax + edi*4]
mov eax, dword [0x4ece48]
push edx
push eax
call esi
test eax, eax
je 0x4482ec
push ebx
call fcn.0044c8f0
add esp, 4
add edi, 1
cmp edi, dword [0x4ee000]
jl 0x4482c0
call fcn.004753a0
mov ecx, dword [eax + 4]
cmp ecx, 6
mov edx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov esi, dword [sym.imp.GDI32.dll_CreateFontW]
mov dword [esp + 0x1c], edx
mov dword [esp + 0x20], eax
pop ebx
jge 0x448406
push str.Tahoma
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xe
call esi
push str.Tahoma
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0xe
mov dword [0x4ee010], eax
call esi
push str.Tahoma
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xe
mov dword [0x4ee014], eax
call esi
push str.Tahoma
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0xd
mov dword [0x4ee01c], eax
call esi
push str.Tahoma
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0xe
mov dword [0x4ee020], eax
call esi
push str.Tahoma
push 0
push 0
push 0
push 0
push 1
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0xe
jmp 0x4484ea
push str.Microsoft_YaHei
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0x12
call esi
push str.Microsoft_YaHei
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x2bc
push 0
push 0
push 0
push 0x12
mov dword [0x4ee010], eax
call esi
push str.Microsoft_YaHei
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x4ee014], eax
call esi
push str.Microsoft_YaHei
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0x190
push 0
push 0
push 0
push 0x12
mov dword [0x4ee01c], eax
call esi
push str.Microsoft_YaHei
push 0
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0x12
mov dword [0x4ee020], eax
call esi
push str.Microsoft_YaHei
push 0
push 0
push 0
push 0
push 1
push 0
push 1
push 0
push 0
push 0
push 0
push 0
push 0x12
mov dword [0x4ee018], eax
call esi
mov esi, dword [sym.imp.USER32.dll_LoadImageW]
push 0
push 0x10
push 0x10
push 1
push 0x6c
push ebp
mov dword [0x4ee024], eax
call esi
push 0
push 0x20
push 0x20
push 1
push 0x6c
push ebp
mov dword [0x4ee028], eax
call esi
pop edi
pop esi
mov dword [0x4ee02c], eax
mov eax, 1
pop ebp
add esp, 0x14
ret