Function at 0x441970
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0xb0
mov esi, edx
mov dword [esp + 4], ecx
mov edx, dword [ebp + 0xc]
mov eax, dword [ebp + 8]
mov ecx, dword [0x547008]
xor ecx, ebp
mov dword [esp + 0xa8], ecx
test edx, edx
je 0x4419a2
lock inc dword [edx + 4]
mov ebx, edx
mov edi, dword [esp + 4]
mov ecx, edi
mov edx, esi
push ebx
push eax
call fcn.004429d0
add esp, 8
mov dword [edi], 0x527a1c
call fcn.004e1db0
mov dword [edi + 0x14], eax
mov eax, esi
shr eax, 0xe
mov ecx, esi
shr ecx, 0x13
mov ecx, dword [ecx*4 + 0x54ea50]
bt ecx, eax
jae 0x441a3a
push esi
call fcn.0044f4e0
add esp, 4
mov edi, dword [esp + 4]
mov dword [edi + 0x18], esi
push 0xcfcfcf
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [edi + 0x1c], eax
xor eax, eax
mov dword [edi + 0x20], eax
mov dword [edi + 0x24], eax
mov dword [edi + 0x28], eax
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov esi, eax
mov ecx, dword [edi + 0x18]
call fcn.0041a590
mov ebx, eax
push 0xc
call fcn.004e82a5
add esp, 4
test bl, bl
jne 0x441a48
mov dword [eax + 8], 0x82b
mov dword [eax + 4], 0x82a
mov dword [eax], 0x829
jmp 0x441a5c
mov eax, esi
shr eax, 0x15
mov byte [eax + 0x556a50], 1
jmp 0x4419e3
mov dword [eax + 8], 0x82a
mov dword [eax + 4], 0x828
mov dword [eax], 0x827
mov ebx, eax
mov eax, dword [esp + 4]
add eax, 0x20
mov dword [esp + 0x10], eax
xor eax, eax
mov dword [esp + 8], esi
mov dword [esp], ebx
jmp 0x441bf5
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x94]
push esi
call fcn.00516ab0
add esp, 8
lea ecx, [esp + 0x18]
push esi
push 0x126
push 0x52cad0
push 1
call fcn.0045bec0
lea ecx, [esp + 0x54]
push 0x52cb32
push str.Unable_to_load_font_id
call fcn.004148f0
push dword [esp + 0xc]
lea esi, [esp + 0x84]
push esi
call fcn.0047de70
add esp, 8
movzx eax, byte [esp + 0x8b]
test al, al
mov ebx, dword [esp]
js 0x441ae1
and eax, 0x7f
mov edx, esi
jmp 0x441aef
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 8]
add eax, edx
lea edi, [esp + 0x54]
mov ecx, edi
push eax
push edx
call fcn.004148f0
mov ecx, edi
push 0x52cb42
push str._from_resources
jmp 0x441ba7
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea esi, [esp + 0x94]
push esi
call fcn.00516ab0
add esp, 8
lea ecx, [esp + 0x18]
push esi
push 0x12a
push 0x52cad0
push 1
call fcn.0045bec0
lea ecx, [esp + 0x54]
push 0x52cb5a
push str.Unable_to_find_font_id
call fcn.004148f0
push ebx
lea esi, [esp + 0x84]
push esi
call fcn.0047de70
add esp, 8
movzx eax, byte [esp + 0x8b]
test al, al
js 0x441b77
and eax, 0x7f
mov edx, esi
jmp 0x441b85
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
mov esi, dword [esp + 8]
mov ebx, dword [esp]
add eax, edx
lea edi, [esp + 0x54]
mov ecx, edi
push eax
push edx
call fcn.004148f0
mov ecx, edi
push 0x52cb68
push str._in_resources
call fcn.004148f0
cmp byte [esp + 0x8b], 0
jns 0x441bc5
push dword [esp + 0x80]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x18]
call fcn.0045bf00
cmp byte [esp + 0x9b], 0
jns 0x441be7
push dword [esp + 0x90]
call fcn.004e82d5
add esp, 4
mov eax, dword [esp + 0x14]
inc eax
cmp eax, 3
je 0x441f53
mov dword [esp + 0x14], eax
mov ebx, dword [ebx + eax*4]
movzx eax, bx
push 8
push eax
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
test eax, eax
je 0x441b13
mov edi, esi
mov esi, eax
mov dword [esp + 0xc], ebx
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x441a77
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov ebx, eax
xor eax, eax
mov dword [esp + 0xa4], eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [esp + 0xa0], 0xffffffff
lea ecx, [esp + 0xa4]
push ecx
xor ecx, ecx
push ecx
push eax
push ebx
call dword [sym.imp.GDI32.dll_AddFontMemResourceEx]
mov dword [esp + 0xa0], eax
cmp eax, 0xffffffff
je 0x441c9f
mov ecx, eax
mov edx, dword [esp + 4]
mov eax, dword [edx + 0x24]
cmp eax, dword [edx + 0x28]
jae 0x441d2b
test eax, eax
mov ebx, dword [esp]
lea esi, [esp + 0x80]
lea edi, [esp + 0x74]
je 0x441fcb
mov dword [eax], ecx
add eax, 4
jmp 0x441d4a
mov esi, edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea edi, [esp + 0x94]
push edi
call fcn.00516ab0
add esp, 8
lea ecx, [esp + 0x18]
push edi
push 0x122
push 0x52cad0
push 1
call fcn.0045bec0
lea ecx, [esp + 0x54]
push 0x52cb1a
push str.Unable_to_add_font_id
call fcn.004148f0
push dword [esp + 0xc]
lea edi, [esp + 0x84]
push edi
call fcn.0047de70
add esp, 8
movzx eax, byte [esp + 0x8b]
test al, al
js 0x441d08
and eax, 0x7f
mov edx, edi
jmp 0x441d16
mov edx, dword [esp + 0x80]
mov eax, dword [esp + 0x84]
mov ebx, dword [esp]
add eax, edx
lea ecx, [esp + 0x54]
push eax
push edx
call fcn.004148f0
jmp 0x441bac
mov ecx, dword [esp + 0x10]
lea eax, [esp + 0xa0]
push eax
call fcn.00439840
mov ebx, dword [esp]
lea esi, [esp + 0x80]
lea edi, [esp + 0x74]
mov ecx, dword [esp + 4]
mov dword [ecx + 0x24], eax
lea ecx, [esp + 0x18]
push 0x120
push 0x52cad0
push 0
call fcn.0045baa0
push dword [esp + 0xa4]
push esi
call fcn.00516cd0
add esp, 8
movzx eax, byte [esp + 0x8b]
test al, al
js 0x441de0
mov edx, 0xa
cmp al, 0xb
jb 0x441e40
lea ecx, [esp + eax]
add ecx, 0x80
cmp ecx, str._font_s__added__id
ja 0x441db5
lea edx, [esp + eax]
add edx, 0x93
cmp edx, str._font_s__added__id
ja 0x441fb5
movups xmm0, xmmword [str._font_s__added__id]
movups xmmword [ecx], xmm0
mov dword [ecx + 0xf], 0x3d646920
add eax, 0x13
mov ecx, eax
and cl, 0x7f
mov byte [esp + 0x8b], cl
mov ecx, esi
mov byte [ecx + eax], 0
jmp 0x441e60
mov edx, dword [esp + 0x88]
mov eax, 0x7fffffff
and edx, eax
dec edx
mov eax, dword [esp + 0x84]
mov ecx, edx
sub ecx, eax
cmp ecx, 0x13
jb 0x441e40
mov ecx, dword [esp + 0x80]
lea edx, [ecx + eax]
cmp edx, str._font_s__added__id
ja 0x441e23
lea esi, [ecx + eax]
add esi, 0x13
cmp esi, str._font_s__added__id
ja 0x441fb5
movups xmm0, xmmword [str._font_s__added__id]
movups xmmword [edx], xmm0
mov dword [edx + 0xf], 0x3d646920
add eax, 0x13
mov dword [esp + 0x84], eax
jmp 0x441dd7
mov esi, eax
sub esi, edx
add esi, 0x13
lea ecx, [esp + 0x80]
push str._font_s__added__id
push 0x13
push 0
push eax
push eax
push esi
push edx
call fcn.0047c9b0
mov eax, dword [esp + 0x88]
mov dword [esp + 0x98], eax
movsd xmm0, qword [esp + 0x80]
movsd qword [esp + 0x90], xmm0
xor eax, eax
mov dword [esp + 0x84], eax
mov dword [esp + 0x80], eax
mov dword [esp + 0x88], eax
movzx eax, byte [esp + 0x9b]
test al, al
js 0x441eaf
and eax, 0x7f
lea edx, [esp + 0x90]
jmp 0x441ebd
mov edx, dword [esp + 0x90]
mov eax, dword [esp + 0x94]
mov esi, dword [esp + 8]
add eax, edx
lea ecx, [esp + 0x54]
push eax
push edx
call fcn.004148f0
push dword [esp + 0xc]
push edi
call fcn.0047de70
add esp, 8
movzx eax, byte [esp + 0x7f]
test al, al
jns 0x441eee
mov edx, dword [esp + 0x74]
mov eax, dword [esp + 0x78]
jmp 0x441ef3
and eax, 0x7f
mov edx, edi
add eax, edx
lea ecx, [esp + 0x54]
push eax
push edx
call fcn.004148f0
cmp byte [esp + 0x7f], 0
jns 0x441f13
push dword [esp + 0x74]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x9b], 0
jns 0x441f2c
push dword [esp + 0x90]
call fcn.004e82d5
add esp, 4
cmp byte [esp + 0x8b], 0
jns 0x441f45
push dword [esp + 0x80]
call fcn.004e82d5
add esp, 4
lea ecx, [esp + 0x18]
call fcn.0045bd40
jmp 0x441be7
test ebx, ebx
mov edi, dword [ebp + 0xc]
je 0x441f73
cmp ebx, 0xfffffff8
je 0x441fe6
mov eax, ebx
add eax, 4
je 0x441fe6
push ebx
call fcn.004e82d5
add esp, 4
test edi, edi
je 0x441f9b
xor eax, eax
dec eax
lock xadd dword [edi + 4], eax
test eax, eax
jne 0x441f9b
mov eax, dword [edi]
mov esi, dword [eax + 4]
mov ecx, esi
call dword [section..00cfg]
mov ecx, edi
call esi
mov ecx, edi
call fcn.0047c2a0
mov ecx, dword [esp + 0xa8]
xor ecx, ebp
call fcn.004e8be6
mov eax, dword [esp + 4]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push str.char_traits::copy_overlapped_range
push str.__s2_____s1____s2_____s1____n
push 0xf3
push str....._third_partylibc_srcinclude__stringchar_traits.h
jmp 0x441fdc
push str.null_pointer_given_to_construct_at
push str.__location___nullptr
push 0x28
push str....._third_partylibc_srcinclude__memoryconstruct_at.h
push str._s:_d:_assertion__s_failed:__s_n
call fcn.00457520
push str.null_pointer_given_to_destroy_at
push str.__loc___nullptr
push 0x44
jmp 0x441fd7