Function at 0x439f90
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
push eax
movzx esi, word [ebp + 0x10]
mov ebx, dword [ebp + 0xc]
shr ebx, 4
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, eax
inc ebx
movzx eax, bx
push esi
push eax
push 6
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
test eax, eax
je 0x43a06a
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x43a06a
mov esi, eax
mov eax, dword [ebp + 0xc]
and eax, 0xf
movzx ecx, word [esi]
test ecx, ecx
mov ebx, dword [ebp + 8]
je 0x43a041
mov edi, esi
add edi, 2
test eax, eax
je 0x43a00a
lea esi, [edi + ecx*2]
movzx ecx, word [esi]
test ecx, ecx
je 0x43a084
lea edi, [esi + 2]
cmp eax, 1
jne 0x43a07f
cmp cx, 4
jbe 0x43a046
mov ebx, ecx
or ebx, 3
lea eax, [ebx*2 + 2]
push eax
mov dword [ebp - 0x10], ecx
call fcn.004e82a5
add esp, 4
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
add ebx, 0x80000001
mov dword [ecx + 8], ebx
mov ecx, dword [ebp - 0x10]
mov ebx, dword [ebp + 8]
mov dword [ebx + 4], ecx
jmp 0x43a04b
add esi, 2
jmp 0x439ff7
mov byte [ebx + 0xb], cl
mov eax, ebx
lea ecx, [esi + ecx*2]
add ecx, 2
movzx edx, word [edi]
mov word [eax], dx
add edi, 2
add eax, 2
cmp edi, ecx
jne 0x43a051
mov word [eax], 0
mov eax, ebx
jmp 0x43a077
xor ecx, ecx
mov eax, dword [ebp + 8]
mov dword [eax + 4], ecx
mov dword [eax], ecx
mov dword [eax + 8], ecx
add esp, 4
pop esi
pop edi
pop ebx
pop ebp
ret
lea esi, [edi + ecx*2]
jmp 0x43a087
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a09f
lea edi, [esi + 2]
cmp eax, 2
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a0a2
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a0ba
lea edi, [esi + 2]
cmp eax, 3
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a0bd
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a0d5
lea edi, [esi + 2]
cmp eax, 4
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a0d8
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a0f0
lea edi, [esi + 2]
cmp eax, 5
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a0f3
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a10b
lea edi, [esi + 2]
cmp eax, 6
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a10e
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a126
lea edi, [esi + 2]
cmp eax, 7
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a129
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a141
lea edi, [esi + 2]
cmp eax, 8
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a144
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a15c
lea edi, [esi + 2]
cmp eax, 9
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a15f
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a177
lea edi, [esi + 2]
cmp eax, 0xa
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a17a
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a192
lea edi, [esi + 2]
cmp eax, 0xb
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a195
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a1ad
lea edi, [esi + 2]
cmp eax, 0xc
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a1b0
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a1c8
lea edi, [esi + 2]
cmp eax, 0xd
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a1cb
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a1e3
lea edi, [esi + 2]
cmp eax, 0xe
je 0x43a00a
lea esi, [edi + ecx*2]
jmp 0x43a1e6
add esi, 2
movzx ecx, word [esi]
test ecx, ecx
je 0x43a1fa
cmp eax, 0xf
jne 0x43a1fa
lea edi, [esi + 2]
jmp 0x43a00a
xor eax, eax
mov dword [ebx + 4], eax
mov dword [ebx], eax
mov dword [ebx + 8], eax
jmp 0x43a066