Function at 0x43b590
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
push 0x4cff9b
mov eax, dword fs:[0]
push eax
sub esp, 0x54
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4f87d8]
xor eax, esp
push eax
lea eax, [esp + 0x68]
mov dword fs:[0], eax
mov eax, dword [esp + 0x7c]
mov esi, ecx
mov ebx, dword [eax + 0x18]
cmp ebx, 8
lea edi, [eax + 4]
jb 0x43b5cc
mov eax, dword [edi]
jmp 0x43b5ce
mov eax, edi
mov ecx, 0x4db57c
mov dx, word [eax]
xor ebp, ebp
cmp dx, word [ecx]
jne 0x43b5fb
cmp dx, bp
je 0x43b5f7
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43b5fb
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x43b5d3
xor eax, eax
jmp 0x43b600
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x43b676
movzx eax, word [esp + 0x78]
mov ecx, dword [esi + 0x38]
push eax
push ecx
call dword [sym.imp.USER32.dll_LoadBitmapW]
mov esi, eax
cmp esi, ebp
je 0x43b7bc
lea edx, [esp + 0x24]
push edx
push 0x18
push esi
call dword [sym.imp.GDI32.dll_GetObjectW]
push 0x10
call fcn.004a84f2
add esp, 4
cmp eax, ebp
je 0x43b64c
mov dword [eax], ebp
mov dword [eax + 4], ebp
mov dword [eax + 8], ebp
mov byte [eax + 0xc], 0
mov byte [eax + 0xd], 0
jmp 0x43b64e
xor eax, eax
mov ecx, dword [esp + 0x80]
mov dword [ecx], eax
mov dword [eax], esi
mov eax, dword [ecx]
mov edx, dword [esp + 0x28]
mov dword [eax + 4], edx
mov eax, dword [ecx]
mov edx, dword [esp + 0x2c]
mov dword [eax + 8], edx
mov eax, dword [ecx]
mov byte [eax + 0xc], 0
jmp 0x43b9ca
cmp ebx, 8
jb 0x43b67f
mov eax, dword [edi]
jmp 0x43b681
mov eax, edi
mov ecx, 0x4db584
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x43b6ac
cmp dx, bp
je 0x43b6a8
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x43b6ac
add eax, 4
add ecx, 4
cmp dx, bp
jne 0x43b686
xor eax, eax
jmp 0x43b6b1
sbb eax, eax
sbb eax, 0xffffffff
cmp eax, ebp
jne 0x43b782
push 0xa8
call fcn.004a84f2
add esp, 4
mov dword [esp + 0x1c], eax
cmp eax, ebp
mov dword [esp + 0x70], ebp
je 0x43b6dc
push eax
call fcn.0045de00
mov esi, eax
jmp 0x43b6de
xor esi, esi
mov dword [esp + 0x70], 0xffffffff
movzx ecx, word [esp + 0x78]
push ecx
push esi
call fcn.0045e320
test eax, eax
je 0x43b7bc
mov edx, dword [esp + 0x84]
push 0x10
mov dword [esi + 0xa4], edx
call fcn.004a84f2
add esp, 4
cmp eax, ebp
je 0x43b727
mov dword [eax], ebp
mov dword [eax + 4], ebp
mov dword [eax + 8], ebp
mov byte [eax + 0xc], 0
mov byte [eax + 0xd], 0
jmp 0x43b729
xor eax, eax
mov edi, dword [esp + 0x80]
push esi
mov dword [edi], eax
call fcn.0045f4e0
mov ecx, dword [edi]
mov dword [ecx], eax
mov edx, dword [esi + 8]
mov ecx, dword [edi]
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
mov eax, dword [esi + 8]
mov ecx, dword [edi]
mov dword [esp + 0x20], edx
mov edx, dword [esi + 4]
mov dword [ecx + 8], eax
mov dword [esp + 0x1c], edx
mov edx, dword [edi]
mov byte [edx + 0xc], 1
mov eax, dword [edi]
mov byte [eax + 0xd], 1
mov edi, dword [edi]
call fcn.0043ac60
lea ecx, [esp + 0x78]
push ecx
mov dword [esp + 0x7c], edi
call fcn.00477330
mov dword [eax], esi
jmp 0x43b9ca
cmp ebx, 8
jb 0x43b78b
mov eax, dword [edi]
jmp 0x43b78d
mov eax, edi
movzx edx, word [esp + 0x78]
push eax
mov eax, dword [esi + 0x38]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
cmp edi, ebp
je 0x43b7bc
mov ecx, dword [esi + 0x38]
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov ebx, eax
cmp ebx, ebp
push edi
jne 0x43b7c3
call dword [sym.imp.KERNEL32.dll_FreeResource]
xor al, al
jmp 0x43b9cc
mov edx, dword [esi + 0x38]
push edx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
cmp esi, ebp
je 0x43b7bc
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
lea ecx, [esp + 0x78]
push ecx
push esi
lea esi, [esp + 0x20]
lea edx, [esp + 0x1c]
mov ecx, eax
call fcn.00455970
add esp, 8
cmp eax, ebp
mov dword [esp + 0x78], eax
je 0x43b7bc
push edi
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0x2c
lea edx, [esp + 0x40]
push ebp
push edx
call fcn.004b1550
mov edi, dword [esp + 0x20]
mov esi, dword [esp + 0x24]
add esp, 0xc
mov dword [esp + 0x4c], ebp
push 0
mov ebp, edi
imul ebp, esi
push 0
mov eax, esi
neg eax
lea edx, [esp + 0x84]
push edx
mov dword [esp + 0x50], eax
push 0
lea eax, [esp + 0x4c]
push eax
lea ecx, [ebp*4]
push 0
mov dword [esp + 0x54], 0x28
mov dword [esp + 0x58], edi
mov word [esp + 0x60], 1
mov word [esp + 0x62], 0x20
mov dword [esp + 0x68], ecx
xor bl, bl
mov dword [esp + 0x94], 0
call dword [sym.imp.GDI32.dll_CreateDIBSection]
test eax, eax
mov dword [esp + 0x1c], eax
jne 0x43b893
mov ecx, dword [esp + 0x78]
push ecx
call fcn.004aa2ff
add esp, 4
xor al, al
jmp 0x43b9cc
xor ecx, ecx
test ebp, ebp
jle 0x43b97d
mov esi, dword [esp + 0x78]
mov eax, dword [esp + 0x7c]
add esi, 3
jmp 0x43b8b0
mov dl, byte [esi]
mov byte [eax + ecx*4 + 3], dl
mov edi, dword [esp + 0x7c]
cmp byte [edi + ecx*4 + 3], 0xff
jae 0x43b914
movzx eax, byte [esi]
movzx edx, byte [esi - 1]
imul edx, eax
mov eax, 0x80808081
mul edx
shr edx, 7
mov byte [edi + ecx*4], dl
movzx eax, byte [esi]
movzx edx, byte [esi - 2]
imul edx, eax
mov eax, 0x80808081
mul edx
mov eax, dword [esp + 0x7c]
shr edx, 7
mov byte [eax + ecx*4 + 1], dl
movzx eax, byte [esi]
movzx edx, byte [esi - 3]
imul edx, eax
mov eax, 0x80808081
mul edx
mov eax, dword [esp + 0x7c]
shr edx, 7
mov byte [eax + ecx*4 + 2], dl
mov bl, 1
jmp 0x43b932
mov dl, byte [esi - 1]
mov byte [edi + ecx*4], dl
movzx eax, byte [esi - 2]
mov edx, dword [esp + 0x7c]
mov byte [edx + ecx*4 + 1], al
movzx eax, byte [esi - 3]
mov edx, dword [esp + 0x7c]
mov byte [edx + ecx*4 + 2], al
mov eax, dword [esp + 0x7c]
mov edx, dword [esp + 0x84]
cmp dword [eax + ecx*4], edx
jne 0x43b967
mov byte [eax + ecx*4], 0
mov eax, dword [esp + 0x7c]
mov byte [eax + ecx*4 + 1], 0
mov edx, dword [esp + 0x7c]
mov byte [edx + ecx*4 + 2], 0
mov eax, dword [esp + 0x7c]
mov byte [eax + ecx*4 + 3], 0
mov eax, dword [esp + 0x7c]
mov bl, 1
add ecx, 1
add esi, 4
cmp ecx, ebp
jl 0x43b8b0
mov edi, dword [esp + 0x14]
mov esi, dword [esp + 0x18]
push 0x10
call fcn.004a84f2
xor ecx, ecx
add esp, 4
cmp eax, ecx
je 0x43b99d
mov dword [eax], ecx
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov byte [eax + 0xc], cl
mov byte [eax + 0xd], cl
jmp 0x43b99f
xor eax, eax
mov ecx, dword [esp + 0x80]
mov edx, dword [esp + 0x1c]
mov dword [ecx], eax
mov dword [eax], edx
mov eax, dword [ecx]
mov dword [eax + 4], edi
mov edx, dword [ecx]
mov dword [edx + 8], esi
mov eax, dword [ecx]
mov ecx, dword [esp + 0x78]
push ecx
mov byte [eax + 0xc], bl
call fcn.004aa2ff
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x68]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x60
ret 0x10