Function at 0x690716d0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x448
mov ebx, dword [ecx]
test ebx, ebx
je 0x69071958
test byte [0x690760c0], 8
jne 0x69071778
cmp dword [ebx], 0x42
je 0x69071730
test byte [0x690760c0], 4
jne 0x69071900
mov dword [esp], 1
xor esi, esi
call fcn.69041890
lea esp, [ebp - 0x10]
mov eax, esi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 4
mov eax, dword [ebx + 0x14]
test ah, 4
je 0x69071930
mov esi, dword [ebx + 8]
test esi, esi
je 0x69071890
test byte [0x690760c0], 4
jne 0x690718d0
mov dword [esp], 0x1003
xor esi, esi
call fcn.69041890
lea esp, [ebp - 0x10]
mov eax, esi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 4
mov dword [esp], 0x690760c0
call fcn.690753c0
test al, 8
je 0x690716fa
mov edx, dword [ebx + 0x14]
xor eax, eax
lea edi, [ebp - 0x3fc]
mov ecx, 0xf9
mov dword [ebp - 0x400], 0
mov esi, 0x6907e0e0
rep stosd dword es:[edi], eax
mov dword [ebp - 0x40c], ebx
mov edi, str.PD_PAGENUMS
mov ebx, edx
mov eax, 1
mov ecx, str.PD_SELECTION
jmp 0x690717de
add esi, 8
test edi, edi
je 0x690717fc
mov ecx, edi
mov eax, dword [esi]
mov edi, dword [esi + 0xc]
test eax, ebx
je 0x690717d0
lea eax, [ebp - 0x400]
mov dword [esp + 4], ecx
add esi, 8
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcat]
test edi, edi
jne 0x690717d7
mov edx, ebx
mov ebx, dword [ebp - 0x40c]
test byte [0x690760c0], 8
je 0x690716fa
lea eax, [ebp - 0x400]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], eax
mov eax, dword [ebx + 0x22]
mov dword [esp + 0x34], eax
movzx eax, word [ebx + 0x20]
mov dword [esp + 0x30], eax
movzx eax, word [ebx + 0x1e]
mov dword [esp + 0x2c], eax
movzx eax, word [ebx + 0x1c]
mov dword [esp + 0x28], eax
movzx eax, word [ebx + 0x1a]
mov dword [esp + 0x24], eax
movzx eax, word [ebx + 0x18]
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.__p_:_hwndOwner___p__hDevMode___p__hDevNames___p_npp.__d__d__min_p__d__max_p__d__copies__d__hinst__p_nflags__08lx___s__n
mov dword [esp + 8], str.PrintDlgA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 3
call fcn.6906acc0
jmp 0x690716fa
mov ecx, dword [ebx + 0xc]
test ecx, ecx
jne 0x69071747
lea eax, [ebp - 0x404]
call fcn.6906b450
test eax, eax
jne 0x69071c40
test byte [0x690760c0], 4
jne 0x69071ef9
mov dword [esp], 0x1008
xor esi, esi
call fcn.69041890
jmp 0x69071762
mov dword [esp + 0xc], str.hDevMode_or_hDevNames_non_zero_for_PD_RETURNDEFAULT_n
mov dword [esp + 8], str.PrintDlgA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
call fcn.6906acc0
jmp 0x69071754
mov dword [esp + 0xc], str.structure_size_failure____n
mov dword [esp + 8], str.PrintDlgA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
call fcn.6906acc0
jmp 0x6907170c
test al, 0x40
je 0x69071970
test eax, 0x20000
jne 0x69071ba0
mov dword [esp + 8], 5
test ah, 0x80
je 0x69071db0
mov eax, dword [ebx + 0x36]
jmp 0x6907198f
mov dword [esp], 2
xor esi, esi
call fcn.69041890
jmp 0x6907171a
test eax, 0x10000
jne 0x69071bb0
mov dword [esp + 8], 5
test ah, 0x40
je 0x69071d78
mov eax, dword [ebx + 0x32]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x22]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindResourceA]
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x22]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LoadResource]
sub esp, 8
test eax, eax
je 0x69071bc0
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LockResource]
sub esp, 4
mov esi, eax
test eax, eax
je 0x69071bc0
mov dword [esp + 4], 0x28
mov dword [esp], 1
call dword [sym.imp.ucrtbase.dll_calloc]
mov dword [eax + 4], ebx
mov edi, eax
mov eax, dword [0x6908d004]
test dword [ebx + 0x14], 0xc000
je 0x690719fe
mov eax, dword [ebx + 0x22]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0x6906e750
mov edx, dword [ebx + 4]
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [sym.imp.user32.dll_DialogBoxIndirectParamA]
sub esp, 0x14
test eax, eax
jle 0x69071bd8
mov eax, dword [edi + 8]
mov esi, dword [edi]
mov dword [ebp - 0x40c], eax
mov eax, dword [edi + 0xc]
mov dword [ebp - 0x410], eax
mov eax, dword [ebx + 8]
test eax, eax
je 0x69071c08
mov dword [esp + 8], 2
movzx edx, word [esi + 0x24]
movzx ecx, word [esi + 0x26]
mov dword [esp], eax
add edx, ecx
mov dword [esp + 4], edx
call dword [sym.imp.kernel32.dll_GlobalReAlloc]
mov dword [ebx + 8], eax
sub esp, 0xc
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_GlobalLock]
mov dword [ebp - 0x414], eax
call eax
movzx ecx, word [esi + 0x26]
mov edx, eax
movzx eax, word [esi + 0x24]
sub esp, 4
mov dword [esp + 4], esi
add eax, ecx
mov dword [esp], edx
mov dword [esp + 8], eax
call sub.ucrtbase.dll_memcpy
mov esi, dword [ebp - 0x40c]
mov eax, dword [ebp - 0x410]
mov ecx, dword [esi + 4]
mov esi, dword [esi + 0xc]
mov edx, dword [eax + 0xc]
lea eax, [ebx + 0xc]
mov dword [esp], esi
call fcn.69069b00
mov eax, dword [ebx + 8]
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_GlobalUnlock]
mov dword [ebp - 0x40c], eax
call eax
mov eax, dword [edi]
mov esi, dword [sym.imp.ucrtbase.dll_free]
sub esp, 4
mov dword [esp], eax
call esi
mov eax, dword [edi + 8]
mov dword [esp], eax
call esi
mov eax, dword [edi + 0xc]
mov dword [esp], eax
call esi
mov dword [esp], edi
call esi
mov esi, 1
test dword [ebx + 0x14], 0x300
je 0x69071b5d
mov eax, dword [ebx + 0xc]
mov edi, dword [ebp - 0x414]
mov dword [esp], eax
call edi
mov esi, eax
mov eax, dword [ebx + 8]
sub esp, 4
mov dword [esp], eax
call edi
mov edx, dword [ebx + 0x14]
sub esp, 4
test dh, 1
jne 0x69071dba
and dh, 2
jne 0x69071ec8
mov eax, dword [ebx + 0xc]
mov edi, dword [ebp - 0x40c]
mov dword [esp], eax
call edi
mov eax, dword [ebx + 8]
sub esp, 4
mov dword [esp], eax
call edi
mov edx, dword [ebx + 0x10]
xor eax, eax
sub esp, 4
test edx, edx
setne al
mov esi, eax
test byte [0x690760c0], 8
je 0x6907171a
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], str.exit____d__n
mov dword [esp + 8], str.PrintDlgA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 3
call fcn.6906acc0
jmp 0x6907171a
mov eax, dword [ebx + 0x3e]
jmp 0x690719b5
mov eax, dword [ebx + 0x3a]
jmp 0x690719b5
mov dword [esp], 7
xor esi, esi
call fcn.69041890
jmp 0x69071762
mov eax, dword [edi]
mov ebx, dword [sym.imp.ucrtbase.dll_free]
xor esi, esi
mov dword [esp], eax
call ebx
mov eax, dword [edi + 8]
mov dword [esp], eax
call ebx
mov eax, dword [edi + 0xc]
mov dword [esp], eax
call ebx
mov dword [esp], edi
call ebx
jmp 0x69071b5d
test byte [0x690760c0], 8
jne 0x69071e9f
movzx eax, word [esi + 0x24]
movzx edx, word [esi + 0x26]
mov dword [esp], 2
add eax, edx
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_GlobalAlloc]
mov dword [ebx + 8], eax
sub esp, 8
jmp 0x69071a6d
mov eax, dword [ebp - 0x404]
lea edi, [ebp - 0x400]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov dword [esp], eax
call sub.winspool.drv_GetPrinterA
mov ecx, dword [sym.imp.ucrtbase.dll_malloc]
mov edx, dword [ebp - 0x400]
sub esp, 0x14
mov dword [ebp - 0x410], ecx
mov dword [esp], edx
mov dword [ebp - 0x40c], edx
call ecx
mov edx, dword [ebp - 0x40c]
mov dword [esp + 0x10], edi
mov dword [esp + 8], eax
mov esi, eax
mov eax, dword [ebp - 0x404]
mov dword [esp + 0xc], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call sub.winspool.drv_GetPrinterA
mov eax, dword [ebp - 0x404]
sub esp, 0x14
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.winspool.drv_GetPrinterDriverA
mov edx, dword [ebp - 0x400]
mov ecx, dword [ebp - 0x410]
sub esp, 0x18
mov dword [esp], edx
mov dword [ebp - 0x40c], edx
call ecx
mov edx, dword [ebp - 0x40c]
mov dword [esp + 0x14], edi
mov dword [ebp - 0x410], eax
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x404]
mov dword [esp + 0x10], edx
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.winspool.drv_GetPrinterDriverA
sub esp, 0x18
test eax, eax
jne 0x69071deb
test byte [0x690760c0], 2
jne 0x69071f22
mov eax, dword [ebp - 0x410]
mov ebx, dword [sym.imp.ucrtbase.dll_free]
mov dword [esp], eax
call ebx
mov dword [esp], esi
call ebx
jmp 0x69071754
mov dword [esp + 4], 0x6907d981
mov eax, dword [0x6908d004]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindResourceA]
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [0x6908d004]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LoadResource]
sub esp, 8
jmp 0x690719b5
mov dword [esp + 4], 0x6907d973
jmp 0x69071d80
mov dword [esp + 0xc], eax
movzx eax, word [esi + 4]
add eax, esi
mov dword [esp + 8], eax
movzx eax, word [esi + 2]
add eax, esi
mov dword [esp + 4], eax
movzx eax, word [esi]
add esi, eax
mov dword [esp], esi
call dword [sym.imp.gdi32.dll_CreateDCA]
mov dword [ebx + 0x10], eax
sub esp, 0x10
jmp 0x69071b35
mov eax, dword [ebp - 0x404]
mov dword [esp], eax
call sub.winspool.drv_ClosePrinter
mov eax, dword [ebp - 0x410]
mov edi, dword [esi + 0xc]
sub esp, 4
mov ecx, dword [esi + 4]
mov edx, dword [eax + 0xc]
mov dword [esp], edi
lea eax, [ebx + 0xc]
call fcn.69069b00
mov edx, dword [esi + 0x1c]
movzx eax, word [edx + 0x24]
movzx edx, word [edx + 0x26]
mov dword [esp], 2
add eax, edx
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_GlobalAlloc]
mov edx, dword [sym.imp.kernel32.dll_GlobalLock]
sub esp, 8
mov dword [ebx + 8], eax
mov dword [ebp - 0x414], edx
mov dword [esp], eax
call edx
mov edi, dword [esi + 0x1c]
mov edx, eax
sub esp, 4
movzx ecx, word [edi + 0x26]
movzx eax, word [edi + 0x24]
mov dword [esp + 4], edi
mov dword [esp], edx
add eax, ecx
mov dword [esp + 8], eax
call sub.ucrtbase.dll_memcpy
mov edx, dword [sym.imp.kernel32.dll_GlobalUnlock]
mov eax, dword [ebx + 8]
mov dword [ebp - 0x40c], edx
mov dword [esp], eax
call edx
sub esp, 4
mov dword [esp], esi
mov esi, dword [sym.imp.ucrtbase.dll_free]
call esi
mov eax, dword [ebp - 0x410]
mov dword [esp], eax
call esi
jmp 0x69071af4
mov dword [esp + 0xc], str._No_hDevMode_yet..._Need_to_create_my_own_n
mov dword [esp + 8], str.PrintDlgA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 3
call fcn.6906acc0
jmp 0x69071c15
mov dword [esp + 0xc], eax
movzx eax, word [esi + 4]
add eax, esi
mov dword [esp + 8], eax
movzx eax, word [esi + 2]
add eax, esi
mov dword [esp + 4], eax
movzx eax, word [esi]
add esi, eax
mov dword [esp], esi
call dword [sym.imp.gdi32.dll_CreateICA]
mov dword [ebx + 0x10], eax
sub esp, 0x10
jmp 0x69071b35
mov dword [esp + 0xc], str.Cant_find_default_printer_n
mov dword [esp + 8], str.PrintDlgA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
call fcn.6906acc0
jmp 0x690718bb
mov edx, dword [esi + 4]
mov eax, dword fs:[0x18]
mov dword [esp + 0x14], edx
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.GetPrinterDriverA_failed__le__ld__fix_your_config_for_printer__s__n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.PrintDlgA
mov dword [esp + 4], 0x690760c0
mov dword [esp], 1
call fcn.6906acc0
jmp 0x69071d57