Function at 0x413546
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x56e878
call fcn.00529900
push ecx
push ecx
mov eax, dword [ebp + 0x18]
push ebx
neg eax
sbb eax, eax
push esi
and al, 0xfd
push edi
push dword [ebp + 8]
add eax, 4
or eax, 0x40000
xor ebx, ebx
mov esi, ecx
push eax
push ebx
mov dword [ebp - 0x14], esi
call fcn.00546ba3
lea ecx, [esi + 0xbc]
mov dword [ebp - 4], ebx
call fcn.0054c354
lea ecx, [esi + 0xc0]
mov byte [ebp - 4], 1
call fcn.0054c354
lea edi, [esi + 0xc8]
mov byte [ebp - 4], 2
mov ecx, edi
call fcn.0054800a
mov dword [edi], vtable.CComboBox.0
lea edi, [esi + 0x144]
mov byte [ebp - 4], 3
mov ecx, edi
call fcn.0054c354
mov byte [ebp - 4], 4
mov dword [esi], method.CPrintDialog.virtual_0
call fcn.0055f23b
mov eax, dword [eax + 0xc]
lea ecx, [ebp + 8]
mov dword [ebp - 0x10], eax
call fcn.0054c354
mov eax, dword [ebp + 0xc]
push 0x10
mov dword [esi + 0x134], eax
mov eax, dword [ebp + 0x1c]
mov dword [esi + 0x124], eax
mov dword [esi + 0x140], eax
mov eax, dword [ebp + 0x18]
mov byte [ebp - 4], 5
mov dword [esi + 0x128], eax
mov eax, dword [ebp + 0x20]
mov dword [esi + 0x12c], eax
mov eax, dword [ebp + 0x10]
mov dword [esi + 0x10c], ebx
mov dword [esi + 0x138], ebx
mov dword [esi + 0x13c], 1
mov dword [esi + 0x130], eax
call fcn.0043c434
pop ecx
mov dword [esi + 0xa4], eax
push 0x4f
call fcn.0043c434
pop ecx
mov dword [esi + 0x104], eax
push 0xf
call fcn.0043c434
pop ecx
mov ecx, eax
push 3
dec ecx
pop eax
cmp ecx, eax
jg 0x41365d
push 0xf
call fcn.0043c434
pop ecx
dec eax
cmp eax, ebx
jge 0x413665
xor eax, eax
jmp 0x413680
push 0xf
call fcn.0043c434
pop ecx
mov ecx, eax
push 3
dec ecx
pop eax
cmp ecx, eax
jg 0x413680
push 0xf
call fcn.0043c434
pop ecx
dec eax
push 0x41
mov dword [esi + 0xa8], eax
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb0], ebx
call fcn.0043c434
neg eax
sbb eax, eax
pop ecx
inc eax
push 0x50
mov dword [esi + 0x120], eax
mov dword [esi + 0xb4], ebx
call fcn.0043c434
pop ecx
mov dword [esi + 0xc4], eax
push 0x5b23e4
mov ecx, edi
mov dword [esi + 0x108], ebx
call fcn.0054c5e7
mov ecx, esi
call fcn.00546e2c
test eax, eax
je 0x41370e
lea eax, [ebp + 0xc]
mov ecx, esi
push eax
call fcn.00546dae
push eax
lea ecx, [ebp + 8]
mov byte [ebp - 4], 6
call fcn.0054c598
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 5
call fcn.0054c49f
mov eax, 0x41472b
push 1
test eax, eax
pop edi
jne 0x41371b
mov dword [esi + 0x138], edi
jmp 0x41371b
push 1
mov dword [esi + 0x138], 1
pop edi
cmp dword [esi + 0x138], ebx
je 0x41373d
push ebx
push esi
push 0x474c
mov dword [esi + 0x110], edi
call fcn.004171a9
add esp, 0xc
jmp 0x4137f8
mov eax, dword [esi + 0x5c]
or byte [eax + 0x16], 1
mov eax, dword [esi + 0x5c]
and byte [eax + 0x15], 0xfb
mov eax, dword [0x5b3058]
cmp dword [eax + 0x110], ebx
je 0x41375f
mov eax, dword [esi + 0x5c]
or dword [eax + 0x14], 0x20
cmp dword [ebp + 0x14], ebx
mov dword [esi + 0x110], ebx
mov dword [esi + 0x114], ebx
je 0x41377d
cmp dword [esi + 0xa8], 3
jge 0x41377d
mov eax, edi
jmp 0x41377f
xor eax, eax
cmp dword [ebp + 0x18], ebx
movzx eax, ax
mov dword [esi + 0x118], eax
je 0x413799
mov dword [esi + 0xb8], 3
jmp 0x41379f
mov dword [esi + 0xb8], ebx
push 5
push 0x11a
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FindResourceA]
cmp eax, ebx
je 0x4137de
push eax
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
mov dword [esi + 0x10c], eax
jne 0x4137e4
push ebx
push esi
push 0x474a
mov dword [esi + 0x110], edi
call fcn.004171a9
add esp, 0xc
jmp 0x4137e4
mov dword [esi + 0x110], edi
cmp dword [esi + 0x110], ebx
jne 0x4137f8
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0x10c]
mov dword [eax + 0x3a], ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 4
call fcn.0054c49f
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
leave
ret 0x1c