Function at 0x69071f60
Capabilities:
Extract resource via kernel32 functions

Disassembly:
lea ecx, [esp + 4]
and esp, 0xfffffff0
push dword [ecx - 4]
push ebp
mov ebp, esp
push edi
push esi
push ebx
push ecx
sub esp, 0x458
mov ebx, dword [ecx]
test ebx, ebx
je 0x690721e8
test byte [0x690760c0], 8
jne 0x69072008
cmp dword [ebx], 0x42
je 0x69071fc0
test byte [0x690760c0], 4
jne 0x69072190
mov dword [esp], 1
xor esi, esi
call fcn.69041890
lea esp, [ebp - 0x10]
mov eax, esi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 4
mov eax, dword [ebx + 0x14]
test ah, 4
je 0x690721c0
mov esi, dword [ebx + 8]
test esi, esi
je 0x69072120
test byte [0x690760c0], 4
jne 0x69072160
mov dword [esp], 0x1003
xor esi, esi
call fcn.69041890
lea esp, [ebp - 0x10]
mov eax, esi
pop ecx
pop ebx
pop esi
pop edi
pop ebp
lea esp, [ecx - 4]
ret 4
mov dword [esp], 0x690760c0
call fcn.690753c0
test al, 8
je 0x69071f8a
mov edx, dword [ebx + 0x14]
xor eax, eax
lea edi, [ebp - 0x3fc]
mov ecx, 0xf9
mov dword [ebp - 0x400], 0
mov esi, 0x6907e0e0
rep stosd dword es:[edi], eax
mov dword [ebp - 0x40c], ebx
mov edi, str.PD_PAGENUMS
mov ebx, edx
mov eax, 1
mov ecx, str.PD_SELECTION
jmp 0x6907206e
add esi, 8
test edi, edi
je 0x6907208c
mov ecx, edi
mov eax, dword [esi]
mov edi, dword [esi + 0xc]
test ebx, eax
je 0x69072060
lea eax, [ebp - 0x400]
mov dword [esp + 4], ecx
add esi, 8
mov dword [esp], eax
call dword [sym.imp.ucrtbase.dll_strcat]
test edi, edi
jne 0x69072067
mov edx, ebx
mov ebx, dword [ebp - 0x40c]
test byte [0x690760c0], 8
je 0x69071f8a
lea eax, [ebp - 0x400]
mov dword [esp + 0x38], edx
mov dword [esp + 0x3c], eax
mov eax, dword [ebx + 0x22]
mov dword [esp + 0x34], eax
movzx eax, word [ebx + 0x20]
mov dword [esp + 0x30], eax
movzx eax, word [ebx + 0x1e]
mov dword [esp + 0x2c], eax
movzx eax, word [ebx + 0x1c]
mov dword [esp + 0x28], eax
movzx eax, word [ebx + 0x1a]
mov dword [esp + 0x24], eax
movzx eax, word [ebx + 0x18]
mov dword [esp + 0x20], eax
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x1c], eax
mov eax, dword [ebx + 8]
mov dword [esp + 0x18], eax
mov eax, dword [ebx + 4]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x14], eax
mov dword [esp + 0xc], str.__p_:_hwndOwner___p__hDevMode___p__hDevNames___p_npp.__d__d__min_p__d__max_p__d__copies__d__hinst__p_nflags__08lx___s__n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 3
call fcn.6906acc0
jmp 0x69071f8a
mov ecx, dword [ebx + 0xc]
test ecx, ecx
jne 0x69071fd7
lea eax, [ebp - 0x404]
call fcn.6906b450
test eax, eax
jne 0x69072550
test byte [0x690760c0], 4
jne 0x6907289e
mov dword [esp], 0x1008
xor esi, esi
call fcn.69041890
jmp 0x69071ff2
mov dword [esp + 0xc], str.hDevMode_or_hDevNames_non_zero_for_PD_RETURNDEFAULT_n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
call fcn.6906acc0
jmp 0x69071fe4
mov dword [esp + 0xc], str.structure_size_failure____n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
call fcn.6906acc0
jmp 0x69071f9c
test al, 0x40
je 0x69072200
test eax, 0x20000
jne 0x690724b0
mov dword [esp + 8], 5
test ah, 0x80
je 0x690726c0
mov eax, dword [ebx + 0x36]
jmp 0x6907221f
mov dword [esp], 2
xor esi, esi
call fcn.69041890
jmp 0x69071faa
test eax, 0x10000
jne 0x690724a8
mov dword [esp + 8], 5
test ah, 0x40
je 0x69072688
mov eax, dword [ebx + 0x32]
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x22]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindResourceW]
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x22]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LoadResource]
sub esp, 8
test eax, eax
je 0x690724c0
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LockResource]
sub esp, 4
mov edi, eax
test eax, eax
je 0x690724c0
mov dword [esp + 4], 0x28
mov dword [esp], 1
call dword [sym.imp.ucrtbase.dll_calloc]
mov dword [eax + 4], ebx
mov esi, eax
mov eax, dword [0x6908d004]
test dword [ebx + 0x14], 0xc000
je 0x6907228e
mov eax, dword [ebx + 0x22]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], 0x69070500
mov edx, dword [ebx + 4]
mov dword [esp + 4], edi
mov dword [esp + 8], edx
mov dword [esp], eax
call dword [sym.imp.user32.dll_DialogBoxIndirectParamW]
sub esp, 0x14
test eax, eax
jle 0x690724d8
mov eax, dword [esi + 8]
mov edi, dword [esi]
mov dword [ebp - 0x410], eax
mov eax, dword [esi + 0xc]
mov dword [ebp - 0x414], eax
mov eax, dword [ebx + 8]
test eax, eax
je 0x69072508
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GlobalFlags]
mov edx, eax
sub esp, 4
and dx, 0xff
jne 0x690726d0
mov eax, dword [sym.imp.kernel32.dll_GlobalUnlock]
mov dword [ebp - 0x40c], eax
mov dword [esp + 8], 2
movzx eax, word [edi + 0x44]
movzx edx, word [edi + 0x46]
add eax, edx
mov dword [esp + 4], eax
mov eax, dword [ebx + 8]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GlobalReAlloc]
mov dword [ebx + 8], eax
sub esp, 0xc
mov dword [esp], eax
mov eax, dword [sym.imp.kernel32.dll_GlobalLock]
mov dword [ebp - 0x418], eax
call eax
movzx ecx, word [edi + 0x46]
mov edx, eax
movzx eax, word [edi + 0x44]
sub esp, 4
mov dword [esp + 4], edi
add eax, ecx
mov dword [esp], edx
mov dword [esp + 8], eax
call sub.ucrtbase.dll_memcpy
mov eax, dword [ebx + 0xc]
test eax, eax
je 0x690723ac
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_GlobalFlags]
mov edi, eax
sub esp, 4
and di, 0xff
je 0x690723ac
test byte [0x690760c0], 4
jne 0x69072903
mov dword [ebp - 0x41c], esi
mov esi, ebx
mov ebx, dword [ebp - 0x40c]
sub edi, 1
lea esi, [esi]
mov eax, dword [esi + 0xc]
sub edi, 1
mov dword [esp], eax
call ebx
sub esp, 4
cmp di, 0xffff
jne 0x69072390
mov ebx, esi
mov esi, dword [ebp - 0x41c]
mov edi, dword [ebp - 0x410]
mov eax, dword [ebp - 0x414]
mov ecx, dword [edi + 4]
mov edi, dword [edi + 0xc]
mov edx, dword [eax + 0xc]
lea eax, [ebx + 0xc]
mov dword [esp], edi
call fcn.69069d30
mov eax, dword [ebx + 8]
mov dword [esp], eax
mov eax, dword [ebp - 0x40c]
call eax
mov eax, dword [esi]
mov edi, dword [sym.imp.ucrtbase.dll_free]
sub esp, 4
mov dword [esp], eax
call edi
mov eax, dword [esi + 8]
mov dword [esp], eax
call edi
mov eax, dword [esi + 0xc]
mov dword [esp], eax
call edi
mov dword [esp], esi
call edi
mov esi, 1
test dword [ebx + 0x14], 0x300
je 0x69072468
mov eax, dword [ebx + 0xc]
mov edi, dword [ebp - 0x418]
mov dword [esp], eax
call edi
mov esi, eax
mov eax, dword [ebx + 8]
sub esp, 4
mov dword [esp], eax
call edi
mov edx, dword [ebx + 0x14]
sub esp, 4
test dh, 1
jne 0x69072759
and dh, 2
jne 0x6907286a
mov eax, dword [ebx + 0xc]
mov edi, dword [ebp - 0x40c]
mov dword [esp], eax
call edi
mov eax, dword [ebx + 8]
sub esp, 4
mov dword [esp], eax
call edi
mov edx, dword [ebx + 0x10]
xor eax, eax
sub esp, 4
test edx, edx
setne al
mov esi, eax
test byte [0x690760c0], 8
je 0x69071faa
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], str.exit____d__n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 3
call fcn.6906acc0
jmp 0x69071faa
mov eax, dword [ebx + 0x3a]
jmp 0x69072245
mov eax, dword [ebx + 0x3e]
jmp 0x69072245
mov dword [esp], 7
xor esi, esi
call fcn.69041890
jmp 0x69071ff2
mov eax, dword [esi]
mov ebx, dword [sym.imp.ucrtbase.dll_free]
mov dword [esp], eax
call ebx
mov eax, dword [esi + 8]
mov dword [esp], eax
call ebx
mov eax, dword [esi + 0xc]
mov dword [esp], eax
call ebx
mov dword [esp], esi
xor esi, esi
call ebx
jmp 0x69072468
test byte [0x690760c0], 8
jne 0x69072841
movzx edx, word [edi + 0x46]
movzx eax, word [edi + 0x44]
mov dword [esp], 2
add eax, edx
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_GlobalAlloc]
mov edx, dword [sym.imp.kernel32.dll_GlobalUnlock]
mov dword [ebx + 8], eax
sub esp, 8
mov dword [ebp - 0x40c], edx
jmp 0x69072324
mov eax, dword [ebp - 0x404]
lea edi, [ebp - 0x400]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], edi
mov dword [esp + 8], 0
mov dword [esp + 4], 2
mov dword [esp], eax
call sub.winspool.drv_GetPrinterW
mov ecx, dword [sym.imp.ucrtbase.dll_malloc]
mov edx, dword [ebp - 0x400]
sub esp, 0x14
mov dword [ebp - 0x410], ecx
mov dword [esp], edx
mov dword [ebp - 0x40c], edx
call ecx
mov edx, dword [ebp - 0x40c]
mov dword [esp + 0x10], edi
mov dword [esp + 8], eax
mov esi, eax
mov eax, dword [ebp - 0x404]
mov dword [esp + 0xc], edx
mov dword [esp + 4], 2
mov dword [esp], eax
call sub.winspool.drv_GetPrinterW
mov eax, dword [ebp - 0x404]
sub esp, 0x14
mov dword [esp + 0x14], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.winspool.drv_GetPrinterDriverW
mov edx, dword [ebp - 0x400]
mov ecx, dword [ebp - 0x410]
sub esp, 0x18
mov dword [esp], edx
mov dword [ebp - 0x40c], edx
call ecx
mov edx, dword [ebp - 0x40c]
mov dword [esp + 0x14], edi
mov dword [ebp - 0x410], eax
mov dword [esp + 0xc], eax
mov eax, dword [ebp - 0x404]
mov dword [esp + 0x10], edx
mov dword [esp + 8], 3
mov dword [esp + 4], 0
mov dword [esp], eax
call sub.winspool.drv_GetPrinterDriverW
sub esp, 0x18
test eax, eax
jne 0x6907278d
test byte [0x690760c0], 2
jne 0x69072933
mov eax, dword [ebp - 0x410]
mov ebx, dword [sym.imp.ucrtbase.dll_free]
mov dword [esp], eax
call ebx
mov dword [esp], esi
call ebx
jmp 0x69071fe4
mov dword [esp + 4], str.PRINT32
mov eax, dword [0x6908d004]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_FindResourceW]
sub esp, 0xc
mov dword [esp + 4], eax
mov eax, dword [0x6908d004]
mov dword [esp], eax
call dword [sym.imp.kernel32.dll_LoadResource]
sub esp, 8
jmp 0x69072245
mov dword [esp + 4], str.PRINT32_SETUP
jmp 0x69072690
test byte [0x690760c0], 4
jne 0x690728c7
mov eax, dword [sym.imp.kernel32.dll_GlobalUnlock]
sub edx, 1
mov dword [ebp - 0x418], esi
movzx edx, dx
mov dword [ebp - 0x41c], edi
mov dword [ebp - 0x40c], eax
mov edi, edx
mov esi, eax
jmp 0x69072705
sub edi, 1
jb 0x69072748
mov eax, dword [ebx + 8]
mov dword [esp], eax
call esi
sub esp, 4
test byte [0x690760c0], 8
je 0x69072700
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], str.Now_got__d_locks_n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 3
call fcn.6906acc0
jmp 0x69072700
mov esi, dword [ebp - 0x418]
mov edi, dword [ebp - 0x41c]
jmp 0x690722fc
mov dword [esp + 0xc], eax
movzx eax, word [esi + 4]
lea eax, [esi + eax*2]
mov dword [esp + 8], eax
movzx eax, word [esi + 2]
lea eax, [esi + eax*2]
mov dword [esp + 4], eax
movzx eax, word [esi]
lea eax, [esi + eax*2]
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_CreateDCW]
mov dword [ebx + 0x10], eax
sub esp, 0x10
jmp 0x69072440
mov eax, dword [ebp - 0x404]
mov dword [esp], eax
call sub.winspool.drv_ClosePrinter
mov eax, dword [ebp - 0x410]
mov edi, dword [esi + 0xc]
sub esp, 4
mov ecx, dword [esi + 4]
mov edx, dword [eax + 0xc]
mov dword [esp], edi
lea eax, [ebx + 0xc]
call fcn.69069d30
mov edx, dword [esi + 0x1c]
movzx eax, word [edx + 0x44]
movzx edx, word [edx + 0x46]
mov dword [esp], 2
add eax, edx
mov dword [esp + 4], eax
call dword [sym.imp.kernel32.dll_GlobalAlloc]
mov edx, dword [sym.imp.kernel32.dll_GlobalLock]
sub esp, 8
mov dword [ebx + 8], eax
mov dword [ebp - 0x418], edx
mov dword [esp], eax
call edx
mov edi, dword [esi + 0x1c]
mov edx, eax
sub esp, 4
movzx ecx, word [edi + 0x46]
movzx eax, word [edi + 0x44]
mov dword [esp + 4], edi
mov dword [esp], edx
add eax, ecx
mov dword [esp + 8], eax
call sub.ucrtbase.dll_memcpy
mov edx, dword [sym.imp.kernel32.dll_GlobalUnlock]
mov eax, dword [ebx + 8]
mov dword [ebp - 0x40c], edx
mov dword [esp], eax
call edx
sub esp, 4
mov dword [esp], esi
mov esi, dword [sym.imp.ucrtbase.dll_free]
call esi
mov eax, dword [ebp - 0x410]
mov dword [esp], eax
call esi
jmp 0x690723ff
mov dword [esp + 0xc], str._No_hDevMode_yet..._Need_to_create_my_own_n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 3
call fcn.6906acc0
jmp 0x69072515
mov dword [esp + 0xc], eax
movzx eax, word [esi + 4]
lea eax, [esi + eax*2]
mov dword [esp + 8], eax
movzx eax, word [esi + 2]
lea eax, [esi + eax*2]
mov dword [esp + 4], eax
movzx eax, word [esi]
lea eax, [esi + eax*2]
mov dword [esp], eax
call dword [sym.imp.gdi32.dll_CreateICW]
mov dword [ebx + 0x10], eax
sub esp, 0x10
jmp 0x69072440
mov dword [esp + 0xc], str.Cant_find_default_printer_n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
call fcn.6906acc0
jmp 0x6907214b
movzx eax, dx
mov dword [esp + 0xc], str.hDevMode_has__d_locks_on_it._Unlocking_it_now_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
mov dword [ebp - 0x40c], edx
call fcn.6906acc0
mov edx, dword [ebp - 0x40c]
jmp 0x690726dd
movzx eax, di
mov dword [esp + 0xc], str.hDevNames_has__d_locks_on_it._Unlocking_it_now_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 4], 0x690760c0
mov dword [esp], 2
call fcn.6906acc0
jmp 0x6907237c
mov eax, dword [esi + 4]
call fcn.6906a7f0
mov edx, eax
mov dword [esp + 0x14], edx
mov eax, dword fs:[0x18]
mov eax, dword [eax + 0x34]
mov dword [esp + 0xc], str.GetPrinterDriverA_failed__le__ld__fix_your_config_for_printer__s__n
mov dword [esp + 8], str.PrintDlgW
mov dword [esp + 0x10], eax
mov dword [esp + 4], 0x690760c0
mov dword [esp], 1
call fcn.6906acc0
jmp 0x69072667