Function at 0x427c70
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5a9f18
mov eax, dword fs:[0]
push eax
sub esp, 0x24
push ebx
push esi
push edi
mov eax, dword [0x62c2a0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00471068
mov edi, dword [sym.imp.USER32.dll_LoadBitmapW]
push 0x85
mov eax, dword [eax + 0xc]
push eax
call edi
push eax
mov ecx, 0x62d6a0
call fcn.00467687
mov esi, dword [sym.imp.GDI32.dll_GetObjectA]
lea eax, [ebp - 0x2c]
push eax
push 0x18
push dword [0x62d6a4]
call esi
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [0x639d5c], eax
mov dword [0x639d60], ecx
call fcn.00471068
push 0x84
mov eax, dword [eax + 0xc]
push eax
call edi
push eax
mov ecx, 0x62d6a8
call fcn.00467687
lea eax, [ebp - 0x2c]
push eax
push 0x18
push dword [0x62d6ac]
call esi
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
push 0xf5f5f5
mov dword [0x639d64], eax
mov dword [0x639d68], ecx
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
push eax
mov ecx, 0x62d6d4
call fcn.00467687
mov esi, dword [sym.imp.GDI32.dll_CreatePen]
push 0xd7d7d7
push 1
push 0
call esi
push eax
mov ecx, 0x62d6b0
call fcn.00467687
push 0xd5d5d5
push 1
push 0
call esi
push eax
mov ecx, 0x62d6b8
call fcn.00467687
mov dword [0x639b84], 0xefefef
mov dword [0x639b80], 0xf5f5f5
call fcn.00471068
push 0x5f97f0
push 0x99
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, dword [sym.imp.KERNEL32.dll_LoadResource]
mov ebx, dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427dd3
push eax
push 0
call esi
test eax, eax
je 0x427dd3
push eax
call ebx
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427dd3
push dword [ebp - 0x10]
push 0
call edi
test eax, eax
je 0x427dd3
push ecx
push eax
push dword [ebp - 0x14]
mov ecx, 0x62d980
call fcn.00444790
call fcn.00471068
push 0x5f97f0
push 0x87
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427e20
push eax
push 0
call esi
test eax, eax
je 0x427e20
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427e20
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x427e20
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d740
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0x8a
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427e6d
push eax
push 0
call esi
test eax, eax
je 0x427e6d
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427e6d
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x427e6d
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d780
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0x8c
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427eba
push eax
push 0
call esi
test eax, eax
je 0x427eba
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427eba
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x427eba
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d7a0
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0x8b
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427f07
push eax
push 0
call esi
test eax, eax
je 0x427f07
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427f07
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x427f07
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d6c0
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0x8d
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427f54
push eax
push 0
call esi
test eax, eax
je 0x427f54
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427f54
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x427f54
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d900
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0x8f
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427fa1
push eax
push 0
call esi
test eax, eax
je 0x427fa1
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427fa1
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x427fa1
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d7c0
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0x8e
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x427fee
push eax
push 0
call esi
test eax, eax
je 0x427fee
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x427fee
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x427fee
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d7e0
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0xba
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x42803b
push eax
push 0
call esi
test eax, eax
je 0x42803b
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x42803b
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x42803b
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d820
call fcn.00444790
push ecx
push 0x92
mov ecx, 0x62d800
call fcn.00444b00
push ecx
push 0x97
mov ecx, 0x62d840
call fcn.00444b00
push ecx
push 0x93
mov ecx, 0x62d860
call fcn.00444b00
push ecx
push 0x94
mov ecx, 0x62d6e0
call fcn.00444b00
push ecx
push 0x9a
mov ecx, 0x62d700
call fcn.00444b00
push ecx
push 0x95
mov ecx, 0x62d720
call fcn.00444b00
push ecx
push 0x96
mov ecx, 0x62d960
call fcn.00444b00
push ecx
push 0x9d
mov ecx, 0x62d8a0
call fcn.00444b00
push ecx
push 0x9c
mov ecx, 0x62d880
call fcn.00444b00
call fcn.00471068
push 0x5f97f4
push 0xc7
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x428118
push eax
push 0
call esi
test eax, eax
je 0x428118
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x428118
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x428118
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d760
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0xcc
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x428165
push eax
push 0
call esi
test eax, eax
je 0x428165
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x428165
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x428165
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d8c0
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0xcf
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x4281b2
push eax
push 0
call esi
test eax, eax
je 0x4281b2
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4281b2
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x4281b2
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d940
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0xd0
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x4281ff
push eax
push 0
call esi
test eax, eax
je 0x4281ff
push eax
call ebx
mov dword [ebp - 0x10], eax
test eax, eax
je 0x4281ff
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x4281ff
push ecx
push eax
push dword [ebp - 0x10]
mov ecx, 0x62d8e0
call fcn.00444790
call fcn.00471068
push 0x5f97f4
push 0xd2
mov eax, dword [eax + 8]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x428249
push eax
push 0
call esi
test eax, eax
je 0x428249
push eax
call ebx
mov esi, eax
test esi, esi
je 0x428249
push dword [ebp - 0x14]
push 0
call edi
test eax, eax
je 0x428249
push ecx
push eax
push esi
mov ecx, 0x62d920
call fcn.00444790
push ecx
call fcn.00428430
mov eax, dword [0x639d6c]
add esp, 4
cmp dword [eax - 0xc], 8
jl 0x42830c
push 8
lea eax, [ebp - 0x14]
mov ecx, 0x639d6c
push eax
call fcn.00426000
push eax
mov ecx, 0x639d70
mov dword [ebp - 4], 0
call fcn.004054a0
mov dword [ebp - 4], 0xffffffff
or ecx, 0xffffffff
mov edx, dword [ebp - 0x14]
add edx, 0xfffffff0
lea eax, [edx + 0xc]
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x4282a7
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [0x639d6c]
mov edi, 8
mov esi, dword [edx - 0xc]
cmp esi, edi
jge 0x4282bf
mov edi, esi
test esi, esi
jle 0x42830c
sub esi, edi
cmp dword [edx - 4], 1
lea ebx, [esi + 1]
jle 0x4282dd
push dword [edx - 0xc]
mov ecx, 0x639d6c
call fcn.004036d0
mov edx, dword [0x639d6c]
push ebx
lea eax, [edx + edi]
push eax
push ebx
push edx
call fcn.005829cc
push eax
call fcn.00403320
add esp, 0x14
test esi, esi
js 0x428323
mov eax, dword [0x639d6c]
cmp esi, dword [eax - 8]
jg 0x428323
mov dword [eax - 0xc], esi
mov eax, dword [0x639d6c]
mov byte [esi + eax], 0
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push 0x80070057
call fcn.00403a80
int3