Function at 0x43dd60
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x6141b8
call fcn.0044c164
sub esp, 0x44
mov eax, dword [0x672530]
push ebx
push esi
push edi
mov edi, ecx
mov dword [ebp - 0x10], eax
xor ebx, ebx
push ebx
push 0xe7
mov dword [ebp - 4], ebx
call fcn.005f41ca
mov ecx, eax
call fcn.005f441b
push ebx
push 0xe1
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f441b
push ebx
push 0xe2
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f441b
push ebx
push 0xe3
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f441b
mov esi, 0x6adac0
mov ecx, edi
push esi
push 0xe1
call fcn.005f4222
push esi
push 0xe2
mov ecx, edi
call fcn.005f4222
push esi
push 0xe3
mov ecx, edi
call fcn.005f4222
push esi
push 0xe9
mov ecx, edi
call fcn.005f4222
push esi
push 0xfe
mov ecx, edi
call fcn.005f4222
push esi
push 0x193
mov ecx, edi
call fcn.005f4222
mov eax, dword [0x6adfa0]
push 0xe7
mov ecx, edi
lea esi, [eax + 0x1f4]
call fcn.005f41ca
cmp esi, ebx
jne 0x43de3f
xor esi, esi
jmp 0x43de42
mov esi, dword [esi + 4]
push ebx
push esi
mov esi, dword [sym.imp.USER32.dll_SendMessageA]
push 0x30
push dword [eax + 0x1c]
call esi
mov eax, dword [0x6adfa0]
push 0xe1
add eax, 0x1f4
mov ecx, edi
mov dword [ebp - 0x20], eax
call fcn.005f41ca
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
jne 0x43de75
xor ecx, ecx
jmp 0x43de78
mov ecx, dword [ecx + 4]
push ebx
push ecx
push 0x30
push dword [eax + 0x1c]
call esi
mov eax, dword [0x6adfa0]
push 0xe2
add eax, 0x1f4
mov ecx, edi
mov dword [ebp - 0x20], eax
call fcn.005f41ca
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
jne 0x43dea5
xor ecx, ecx
jmp 0x43dea8
mov ecx, dword [ecx + 4]
push ebx
push ecx
push 0x30
push dword [eax + 0x1c]
call esi
mov eax, dword [0x6adfa0]
push 0xe3
add eax, 0x1f4
mov ecx, edi
mov dword [ebp - 0x20], eax
call fcn.005f41ca
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
jne 0x43ded5
xor ecx, ecx
jmp 0x43ded8
mov ecx, dword [ecx + 4]
push ebx
push ecx
push 0x30
push dword [eax + 0x1c]
call esi
mov eax, dword [0x6adfa0]
push 0xfe
add eax, 0x1f4
mov ecx, edi
mov dword [ebp - 0x20], eax
call fcn.005f41ca
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
jne 0x43df05
xor ecx, ecx
jmp 0x43df08
mov ecx, dword [ecx + 4]
push ebx
push ecx
push 0x30
push dword [eax + 0x1c]
call esi
mov eax, dword [0x6adfa0]
push 0xe9
add eax, 0x1f4
mov ecx, edi
mov dword [ebp - 0x20], eax
call fcn.005f41ca
mov ecx, dword [ebp - 0x20]
cmp ecx, ebx
jne 0x43df35
xor ecx, ecx
jmp 0x43df38
mov ecx, dword [ecx + 4]
push ebx
push ecx
push 0x30
push dword [eax + 0x1c]
call esi
push 0x30
lea ecx, [ebp - 0x28]
call fcn.005f0629
push 0x31
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.005f0629
push dword [ebp - 0x24]
mov byte [ebp - 4], 2
call fcn.0044c7a3
pop ecx
mov dword [ebp - 0x20], eax
push dword [ebp - 0x28]
neg eax
push ebx
push ebx
push ebx
push ebx
push 1
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push eax
call dword [sym.imp.GDI32.dll_CreateFontA]
push eax
lea ecx, [edi + 0x194]
call fcn.005f843c
push 0x193
mov ecx, edi
call fcn.005f41ca
lea ecx, [edi + 0x194]
cmp ecx, ebx
jne 0x43dfa8
xor ecx, ecx
jmp 0x43dfab
mov ecx, dword [ecx + 4]
push ebx
push ecx
push 0x30
push dword [eax + 0x1c]
call esi
push ebx
push 0x177
push 0x1f4
push ebx
mov esi, 0x227
push ebx
push esi
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f438b
push ebx
push 0x20
push 0x20
push 0xb
push 0xe
push 0x6afca0
push 0xf0
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
push 0x40
push 0x10
push 0xb4
push 0x2b
push 0x40
push esi
mov ecx, edi
call fcn.005f41ca
push eax
push 0xfe
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
push ebx
push 0x10
push 0x5a
push 5
push 0x9e
push esi
mov ecx, edi
call fcn.005f41ca
push eax
push 0xe7
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
mov eax, dword [ebp + 8]
push ebx
add eax, 0xfffffefc
push 0x10
push eax
push 5
push 0xf8
push esi
mov ecx, edi
mov dword [ebp + 0xc], eax
call fcn.005f41ca
push eax
push 0xe1
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
push ebx
push 0x10
push dword [ebp + 0xc]
mov ecx, edi
push 0x15
push 0xf8
push esi
call fcn.005f41ca
push eax
push 0xe2
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
push ebx
push 0x10
push dword [ebp + 0xc]
mov ecx, edi
push 0x25
push 0xf8
push esi
call fcn.005f41ca
push eax
push 0xe3
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
push ebx
push 0x10
push 0x140
push 0x10d
push 0xe
push esi
mov ecx, edi
call fcn.005f41ca
push eax
push 0xe9
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
push ebx
push 0x50
pop eax
mov ecx, edi
cdq
idiv dword [ebp - 0x20]
imul eax, dword [ebp - 0x20]
push eax
push 0x140
push 0x122
push 0xe
push esi
call fcn.005f41ca
push eax
push 0x193
mov ecx, edi
call fcn.005f41ca
mov ecx, eax
call fcn.005f43cc
call fcn.00603e5e
mov eax, dword [eax + 0xc]
push str.RT_RCDATA
push 0x12e
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov esi, eax
call fcn.00603e5e
mov eax, dword [eax + 0xc]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x20], eax
call fcn.00603e5e
mov eax, dword [eax + 0xc]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
lea eax, [esi + 8]
push eax
call fcn.0059b438
mov dword [ebp + 0xc], eax
add eax, esi
push 8
push eax
call fcn.0059ac37
add esp, 0xc
push esi
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
push dword [ebp + 0xc]
call fcn.0059acbb
add esp, 0xc
mov ecx, edi
push dword [ebp + 0xc]
push 0x193
call fcn.005f4222
push dword [ebp + 0xc]
call fcn.00593542
pop ecx
mov ecx, dword [0x6adfa0]
push 1
call fcn.00411cc3
push 0x1c
lea ecx, [ebp - 0x10]
mov esi, eax
call fcn.005f53d4
push dword [ebp - 0x10]
mov ecx, edi
push 0xe1
call fcn.005f4222
push 0x1d
lea ecx, [ebp - 0x10]
call fcn.005f53d4
push dword [ebp - 0x10]
mov ecx, edi
push 0xe2
call fcn.005f4222
push 0x1e
lea ecx, [ebp - 0x10]
call fcn.005f53d4
mov ecx, dword [ebp - 0x10]
mov eax, dword [ecx - 8]
cmp eax, 4
jle 0x43e236
mov ecx, eax
lea eax, [ebp + 0xc]
add ecx, 0xfffffffc
push ecx
push eax
lea ecx, [ebp - 0x10]
call fcn.005ed9a9
push eax
lea ecx, [ebp - 0x10]
mov byte [ebp - 4], 3
call fcn.005f06f4
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 2
call fcn.005f05bb
mov ecx, dword [ebp - 0x10]
push ecx
push 0xe3
mov ecx, edi
call fcn.005f4222
mov eax, dword [0x672530]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
push 4
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 5
call fcn.005f53d4
push 5
lea ecx, [ebp - 0x18]
call fcn.005f53d4
mov eax, dword [0x672530]
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 6
push eax
call fcn.004694c8
pop ecx
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 0x34]
push str.SoftwareAdobeAdobe_Acrobat5.0_
push eax
call fcn.005f08c4
push 0x66d34c
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 7
push eax
call fcn.005f0850
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 8
push ecx
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.005f0850
push eax
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 9
call fcn.005f06f4
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 8
call fcn.005f05bb
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 7
call fcn.005f05bb
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 6
call fcn.005f05bb
lea eax, [ebp - 0x38]
push eax
push 0x20019
push ebx
push dword [ebp - 0x14]
push reloc.CoolType.dll_Ordinal_2
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
test eax, eax
jne 0x43e32c
mov dword [ebp + 0xc], 1
push dword [ebp + 0xc]
lea eax, [ebp - 0x50]
push dword [ebp - 0x18]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
inc dword [ebp + 0xc]
cmp dword [ebp + 0xc], 4
jl 0x43e307
push dword [ebp - 0x38]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
mov ecx, dword [0x6adfa0]
push esi
call fcn.00411cc3
mov ecx, edi
call fcn.0043e4cc
push 0x1388
lea ecx, [edi + 0x118]
call fcn.0043ec01
lea ecx, [ebp - 0x14]
mov byte [ebp - 4], 5
call fcn.005f05bb
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 4
call fcn.005f05bb
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 2
call fcn.005f05bb
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 1
call fcn.005f05bb
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], bl
call fcn.005f05bb
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call fcn.005f05bb
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
leave
ret 8