Function at 0x1067611
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x1273390
call fcn.01160458
sub esp, 0x80
mov eax, dword [0x12cf8c8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [0x12d23c0]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp + 0x18]
push edi
mov dword [ebp - 0x84], eax
movzx eax, word [ebp + 0xc]
push 0xf1
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
xor ebx, ebx
cmp eax, ebx
je 0x1067664
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
jne 0x106766b
xor eax, eax
jmp 0x10678e4
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
xor eax, eax
cmp esi, ebx
je 0x10678e4
cmp dword [ebp + 0x10], ebx
setne al
mov edi, eax
movzx eax, word [esi + 6]
add eax, edi
mov dword [ebp - 0x88], eax
lea eax, [eax + eax*4]
shl eax, 2
add eax, 3
and eax, 0xfffffffc
call fcn.01160620
cmp dword [ebp + 0x10], ebx
mov eax, esp
mov dword [ebp - 0x8c], eax
je 0x10676c6
mov dword [eax], 4
mov dword [eax + 4], ebx
mov byte [eax + 8], bl
mov byte [eax + 9], 1
mov dword [eax + 0xc], ebx
mov dword [eax + 0x10], ebx
xor ecx, ecx
cmp word [esi + 6], bx
mov dword [ebp - 0x78], ebx
jbe 0x106771a
lea edx, [edi + edi*4]
lea eax, [eax + edx*4 + 8]
cmp word [esi + ecx*2 + 8], bx
je 0x10676f8
mov edx, dword [ebp - 0x78]
inc dword [ebp - 0x78]
mov dword [eax - 8], edx
movzx edx, word [esi + ecx*2 + 8]
mov dword [eax - 4], edx
mov byte [eax], 4
mov byte [eax + 1], bl
jmp 0x1067708
mov dword [eax - 8], 8
mov dword [eax - 4], ebx
mov byte [eax], bl
mov byte [eax + 1], 1
mov dword [eax + 4], ebx
mov dword [eax + 8], ebx
movzx edx, word [esi + 6]
inc ecx
add eax, 0x14
cmp ecx, edx
jl 0x10676d8
push ebx
push dword [0x12d23bc]
push dword [ebp - 0x84]
push dword [ebp - 0x7c]
push 0x64
push 0x64
push ebx
push ebx
push dword [ebp + 0x14]
push ebx
push 0x1003af0
push ebx
call dword [sym.imp.USER32.dll_CreateWindowExW]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
push ebx
push 0x14
push 0x41e
push eax
mov dword [ebp - 0x74], eax
call edi
push ebx
push ebx
push 0x31
push dword [ebp - 0x74]
call edi
mov dword [ebp - 0x84], eax
mov dword [ebp - 4], ebx
cmp eax, ebx
jne 0x1067778
push 0x11
call dword [sym.imp.GDI32.dll_GetStockObject]
mov dword [ebp - 0x84], eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0x84]
call fcn.010620a1
mov eax, dword [ebp - 0x6c]
cdq
xor eax, edx
sub eax, edx
mov dword [ebp - 0x7c], eax
movzx eax, word [ebp + 0xc]
push ecx
mov ecx, esp
mov dword [ebp - 0x80], esp
mov dword [ecx], eax
call fcn.0103d4e5
cmp al, bl
je 0x106780a
movzx eax, word [ebp + 0xc]
push 0x2000
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
mov dword [ecx], eax
call fcn.01032be2
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x80], eax
mov byte [ebp - 4], 1
movzx eax, word [esi + 4]
push 1
push dword [ebp - 0x78]
push 0xa020
push eax
movzx eax, word [esi + 2]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push ebx
push dword [ebp - 0x70]
mov dword [ebp - 0x78], eax
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Add]
push dword [ebp - 0x78]
push ebx
push 0x430
push dword [ebp - 0x74]
call edi
mov byte [ebp - 4], bl
cmp dword [ebp - 0x70], ebx
je 0x106786f
lea ecx, [ebp - 0x80]
jmp 0x106786a
mov dword [ebp - 0x70], ebx
mov byte [ebp - 4], 2
push ecx
movzx ecx, word [ebp + 0xc]
mov eax, esp
mov dword [eax], ecx
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x80], esp
call fcn.010a5e8f
movzx eax, word [esi + 4]
push 1
push dword [ebp - 0x78]
push 0xa001
push eax
movzx eax, word [esi + 2]
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_Create]
push 0xc0c0c0
push dword [ebp - 0x70]
mov dword [ebp - 0x80], eax
push eax
call dword [sym.imp.COMCTL32.dll_ImageList_AddMasked]
push dword [ebp - 0x80]
push ebx
push 0x430
push dword [ebp - 0x74]
call edi
mov byte [ebp - 4], bl
cmp dword [ebp - 0x70], ebx
je 0x106786f
lea ecx, [ebp - 0x70]
call fcn.0103d890
push dword [ebp - 0x8c]
push dword [ebp - 0x88]
push 0x444
push dword [ebp - 0x74]
call edi
xor eax, eax
mov ax, word [esi + 4]
cmp ax, word [ebp - 0x7c]
ja 0x1067894
mov eax, dword [ebp - 0x7c]
movzx ecx, word [esi + 2]
movzx eax, ax
shl eax, 0x10
or eax, ecx
push eax
push ebx
push 0x420
push dword [ebp - 0x74]
call edi
xor eax, eax
mov ax, word [esi + 4]
cmp ax, word [ebp - 0x7c]
ja 0x10678bb
mov eax, dword [ebp - 0x7c]
mov cx, word [esi + 2]
add eax, 7
movzx eax, ax
add cx, 7
movzx ecx, cx
shl eax, 0x10
or eax, ecx
push eax
push ebx
push 0x41f
push dword [ebp - 0x74]
call edi
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x74]
lea esp, [ebp - 0x98]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x10]
call fcn.0116015a
pop edi
pop esi
pop ebx
leave
ret 0x14