Function at 0x42c000
Capabilities:
Extract resource via kernel32 functions
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x50b3b2
mov eax, dword fs:[0]
push eax
sub esp, 0x45c
mov eax, dword [0x546330]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x400], ecx
push 0xfffffffffffffff0
mov ecx, dword [ebp - 0x400]
call fcn.00429f10
push eax
call dword [sym.imp.USER32.dll_GetWindowLongW]
mov dword [ebp - 0x410], eax
mov eax, dword [ebp - 0x410]
and eax, 0xff3fffff
mov dword [ebp - 0x410], eax
mov ecx, dword [ebp - 0x410]
or ecx, 0x4000000
or ecx, 0x2000000
push ecx
push 0xfffffffffffffff0
mov ecx, dword [ebp - 0x400]
call fcn.00429f10
push eax
call dword [sym.imp.USER32.dll_SetWindowLongW]
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0x400]
call fcn.00429f10
push eax
call dword [sym.imp.USER32.dll_GetClientRect]
push 0x20
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x1c]
push eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
push ecx
mov edx, dword [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x20]
push eax
push 0
mov ecx, dword [ebp - 0x400]
call fcn.00429f10
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
mov ecx, dword [ebp - 0x400]
mov edx, dword [ecx + 4]
push edx
mov ecx, dword [ebp - 0x400]
add ecx, 0x30
call fcn.00421b90
cmp dword [ebp - 0x400], 0
je 0x42c0f8
mov eax, dword [ebp - 0x400]
add eax, 0x28
mov dword [ebp - 0x414], eax
jmp 0x42c102
mov dword [ebp - 0x414], 0
mov ecx, dword [ebp - 0x414]
push ecx
mov ecx, dword [ebp - 0x400]
add ecx, 0x30
call fcn.00420a80
lea ecx, [ebp - 0x1ec]
call fcn.00453ee0
mov dword [ebp - 4], 0
push 0xffffffffffffffff
lea edx, [ebp - 0x2f4]
push edx
mov eax, dword [ebp - 0x400]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x400]
mov eax, dword [edx + 0x20]
call eax
mov dword [ebp - 0x460], eax
mov ecx, dword [ebp - 0x460]
mov dword [ebp - 0x45c], ecx
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x45c]
call fcn.00421a30
push eax
lea ecx, [ebp - 0xa4]
call fcn.00429190
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2f4]
call fcn.004293e0
lea ecx, [ebp - 0xa4]
call fcn.00421a30
push eax
call fcn.00427c70
add esp, 4
call fcn.00421ab0
mov dword [ebp - 0x418], eax
cmp dword [ebp - 0x418], 2
je 0x42c1b7
cmp dword [ebp - 0x418], 4
je 0x42c211
jmp 0x42c3a7
push 1
lea edx, [ebp - 0x270]
push edx
mov eax, dword [ebp - 0x400]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x400]
mov eax, dword [edx + 0x2c]
call eax
mov dword [ebp - 0x458], eax
mov ecx, dword [ebp - 0x458]
mov dword [ebp - 0x454], ecx
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x454]
call fcn.00421a30
push eax
call fcn.00427d70
add esp, 8
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x270]
call fcn.004293e0
jmp 0x42c3a7
push 0x514324
call fcn.00421a90
push eax
call fcn.00421a70
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x404], eax
cmp dword [ebp - 0x404], 0
jne 0x42c26d
mov dword [ebp - 0x450], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.004293e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.0042b850
mov eax, dword [ebp - 0x450]
jmp 0x42c609
mov dword [ebp - 0x408], 0
mov edx, dword [ebp - 0x404]
push edx
call fcn.00421a70
push eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x41c], eax
cmp dword [ebp - 0x41c], 0
jne 0x42c2dc
mov eax, dword [ebp - 0x404]
push eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov dword [ebp - 0x44c], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.004293e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.0042b850
mov eax, dword [ebp - 0x44c]
jmp 0x42c609
mov ecx, dword [ebp - 0x404]
push ecx
call fcn.00421a70
push eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0
jne 0x42c334
mov dword [ebp - 0x464], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.004293e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.0042b850
mov eax, dword [ebp - 0x464]
jmp 0x42c609
push 0x5239b8
mov edx, dword [ebp - 0x408]
push edx
call fcn.004be1d9
add esp, 8
mov dword [ebp - 0x42c], eax
mov eax, dword [ebp - 0x42c]
mov dword [0x54e368], eax
cmp dword [0x54e368], 0
je 0x42c385
mov ecx, dword [ebp - 0x408]
push ecx
mov edx, dword [ebp - 0x41c]
push edx
call dword [sym.imp.KERNEL32.dll_LockResource]
push eax
mov eax, dword [0x54e368]
push eax
call fcn.004e2000
add esp, 0xc
mov ecx, dword [ebp - 0x404]
push ecx
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov edx, dword [ebp - 0x408]
push edx
mov eax, dword [0x54e368]
push eax
call fcn.00427cf0
add esp, 8
mov dword [ebp - 0x40c], 0
call fcn.00421ab0
cmp eax, 3
jne 0x42c477
lea ecx, [ebp - 0x3fc]
push ecx
mov edx, dword [ebp - 0x400]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x400]
mov edx, dword [eax + 0x24]
call edx
mov dword [ebp - 0x430], eax
mov eax, dword [ebp - 0x430]
mov dword [ebp - 0x434], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x434]
call fcn.00421a30
push eax
call fcn.004f16d2
add esp, 4
push eax
lea ecx, [ebp - 0x438]
call fcn.0041faa0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x3fc]
call fcn.004293e0
cmp dword [ebp - 0x400], 0
je 0x42c438
mov ecx, dword [ebp - 0x400]
add ecx, 0x2c
mov dword [ebp - 0x420], ecx
jmp 0x42c442
mov dword [ebp - 0x420], 0
push 0
mov edx, dword [ebp - 0x400]
add edx, 0x30
push edx
mov eax, dword [ebp - 0x420]
push eax
push 0x514334
mov ecx, dword [ebp - 0x438]
push ecx
lea ecx, [ebp - 0x1ec]
call fcn.00455690
mov dword [ebp - 0x40c], eax
jmp 0x42c51c
cmp dword [ebp - 0x400], 0
je 0x42c491
mov edx, dword [ebp - 0x400]
add edx, 0x2c
mov dword [ebp - 0x424], edx
jmp 0x42c49b
mov dword [ebp - 0x424], 0
push 0
mov eax, dword [ebp - 0x400]
add eax, 0x30
push eax
mov ecx, dword [ebp - 0x424]
push ecx
push 0
push ecx
mov esi, esp
mov dword [ebp - 0x468], esp
lea edx, [ebp - 0x378]
push edx
mov eax, dword [ebp - 0x400]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x400]
mov eax, dword [edx + 0x24]
call eax
mov dword [ebp - 0x43c], eax
mov ecx, dword [ebp - 0x43c]
mov dword [ebp - 0x440], ecx
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x440]
call fcn.00421a30
push eax
mov ecx, esi
call fcn.0041fac0
lea ecx, [ebp - 0x1ec]
call fcn.00455690
mov dword [ebp - 0x40c], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x378]
call fcn.004293e0
cmp dword [ebp - 0x40c], 0
jne 0x42c577
push 0x10
push str.Duilib
push 0x51434c
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edx, dword [ebp - 0x40c]
push edx
mov ecx, dword [ebp - 0x400]
add ecx, 0x30
call fcn.00420c10
cmp dword [ebp - 0x400], 0
je 0x42c5a6
mov eax, dword [ebp - 0x400]
add eax, 0x24
mov dword [ebp - 0x428], eax
jmp 0x42c5b0
mov dword [ebp - 0x428], 0
mov ecx, dword [ebp - 0x428]
push ecx
mov ecx, dword [ebp - 0x400]
add ecx, 0x30
call fcn.00420930
mov edx, dword [ebp - 0x400]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x400]
mov edx, dword [eax + 0x18]
call edx
mov dword [ebp - 0x448], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xa4]
call fcn.004293e0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1ec]
call fcn.0042b850
mov eax, dword [ebp - 0x448]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004bd6ac
mov esp, ebp
pop ebp
ret 0x10