Function at 0x4069c0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
push 0x42e128
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 8
push edi
mov eax, dword [0x43c990]
xor edi, edi
mov dword [esp + 0x14], edi
mov dword [esp + 8], eax
mov dword [esp + 4], eax
mov edx, dword [ecx + 0x14]
mov eax, 4
cmp edx, eax
mov byte [esp + 0x14], 2
jne 0x406a88
mov ecx, dword [esp + 0x24]
mov byte [esp + 0x14], 1
cmp ecx, eax
lea ecx, [esp + 4]
jne 0x406a4d
call fcn.00422a0b
lea ecx, [esp + 8]
mov byte [esp + 0x14], 0
call fcn.00422a0b
lea ecx, [esp + 0x20]
mov dword [esp + 0x14], 0xffffffff
call fcn.00422a0b
mov eax, 6
pop edi
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret 0xc
call fcn.00422a0b
lea ecx, [esp + 8]
mov byte [esp + 0x14], 0
call fcn.00422a0b
lea ecx, [esp + 0x20]
mov dword [esp + 0x14], 0xffffffff
call fcn.00422a0b
mov eax, 1
pop edi
mov ecx, dword [esp + 8]
mov dword fs:[0], ecx
add esp, 0x14
ret 0xc
mov eax, dword [esp + 0x24]
push ebx
dec eax
push ebp
cmp eax, 5
push esi
ja case.default.0x406a99
jmp dword [eax*4 + 0x406c44]
lea ecx, [esp + 0x2c]
push ecx
lea ecx, [esp + 0x18]
call fcn.00422b44
push 0x3f6
lea ecx, [esp + 0x14]
call fcn.004236a1
xor ebp, ebp
jmp 0x406b91
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x14]
push edx
call fcn.00422b44
mov eax, dword [esp + 0x2c]
push eax
push 0x3f5
jmp 0x406af5
lea edx, [esp + 0x2c]
lea ecx, [esp + 0x14]
push edx
call fcn.00422b44
mov eax, dword [esp + 0x2c]
push eax
push 0x3f4
lea ecx, [esp + 0x18]
push ecx
call fcn.00421c61
add esp, 0xc
xor ebp, ebp
jmp 0x406b91
push 0x3e8
lea ecx, [esp + 0x18]
call fcn.004236a1
mov edx, dword [esp + 0x2c]
lea eax, [esp + 0x10]
push edx
push 0x3e9
push eax
call fcn.00421c61
add esp, 0xc
mov ebp, 0x24
jmp 0x406b91
push 0x3e8
lea ecx, [esp + 0x18]
call fcn.004236a1
mov ecx, dword [esp + 0x2c]
lea edx, [esp + 0x10]
push ecx
push 0x3f8
push edx
call fcn.00421c61
add esp, 0xc
mov ebp, 0x24
jmp 0x406b91
push 0x3e8
lea ecx, [esp + 0x18]
call fcn.004236a1
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x10]
push eax
push 0x3f9
push ecx
call fcn.00421c61
add esp, 0xc
mov ebp, 0x24
jmp 0x406b91
mov ebp, dword [esp + 0x2c]
call fcn.0042a814
mov esi, dword [eax + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
cmp esi, edi
mov dword [esp + 0x30], edx
je 0x406be8
push 0x43c460
push 0xfa0
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
test eax, eax
je 0x406bd8
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x406bd8
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x406bd8
mov di, word [eax]
and edi, 0xffff
dec edi
jne 0x406be8
mov eax, 0x180000
jmp 0x406bea
xor eax, eax
mov ecx, dword [esp + 0x28]
or eax, ebp
push eax
mov eax, dword [esp + 0x34]
push ebx
push eax
push ecx
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [esp + 0x10]
mov esi, eax
mov byte [esp + 0x20], 1
call fcn.00422a0b
lea ecx, [esp + 0x14]
mov byte [esp + 0x20], 0
call fcn.00422a0b
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], 0xffffffff
call fcn.00422a0b
mov ecx, dword [esp + 0x18]
mov eax, esi
pop esi
pop ebp
pop ebx
pop edi
mov dword fs:[0], ecx
add esp, 0x14
ret 0xc