Function at 0x422948
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x47b5c5
call fcn.00457fe8
sub esp, 0xd4
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
push str.InjectHtml
mov ecx, 0x4a8db0
call fcn.0040198f
push 0x485c2c
mov ecx, 0x4a8e80
call fcn.004149e4
mov dword [ebp - 0x28], 0xf
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x40]
call fcn.004013d5
mov dword [ebp - 4], ebx
push 0x485c24
push 0x8c
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
cmp esi, ebx
je 0x4229d1
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov edi, eax
cmp edi, ebx
je 0x4229d1
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
push edi
call dword [sym.imp.KERNEL32.dll_LockResource]
push esi
push eax
lea ecx, [ebp - 0x40]
call fcn.004019ae
lea ecx, [ebp - 0x14]
call fcn.00401407
mov byte [ebp - 4], 1
push str.__DOCTYPE_html_PUBLIC_____W3C__DTD_XHTML_1.0_Transitional__EN___http:__www.w3.org_TR_xhtml1_DTD_xhtml1_transitional.dtd___html_xmlns_http:__www.w3.org_1999_xhtml__
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str.___head_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str._t_meta_http_equiv_X_UA_Compatible__content_IEEdge__
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str._____META_HTTP_EQUIV_Pragma__CONTENT_no_cache____
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str._____meta_http_equiv_Content_Type__content_text_html__charsetutf_8____
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str.____head_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str.___body_unselectableon_onselectstartreturn_false__onmousedownreturn_false__style_cursor:default_width:670px_height:410px_margin:0_overflow:hidden_overflow_x:hidden_overflow_y:hidden____
lea ecx, [ebp - 0x14]
call fcn.0040dbff
cmp dword [ebp - 0x28], 0x10
mov eax, dword [ebp - 0x3c]
jae 0x422a44
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040bc4e
mov byte [ebp - 4], 2
push str._____script_class__allowed__type_text_javascript__language_Javascript__
lea ecx, [ebp - 0x14]
call fcn.0040dbff
mov eax, dword [ebp - 0x1c]
push dword [eax - 0xc]
push eax
lea ecx, [ebp - 0x14]
call fcn.00409112
push str.______script_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str._____div_class__ParentContainer__
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str.______div_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str.____body_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
push str.__html_
lea ecx, [ebp - 0x14]
call fcn.0040dbff
mov byte [ebp - 4], 3
cmp dword [0x4a8e94], ebx
je 0x422ac5
mov dword [0x4a8e94], ebx
jmp 0x422be5
mov dword [0x4a8e94], 1
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp - 0x14]
mov eax, dword [eax - 0xc]
lea esi, [eax + 1]
push esi
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov dword [ebp - 0x20], eax
push eax
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov edi, eax
push dword [ebp - 0x14]
lea ecx, [ebp - 0xe0]
call fcn.0040ba08
mov byte [ebp - 4], 4
push dword [eax]
lea ecx, [ebp - 0x5c]
call fcn.00401a69
mov byte [ebp - 4], 5
cmp dword [eax + 0x18], 0x10
jb 0x422b1b
mov eax, dword [eax + 4]
jmp 0x422b1e
add eax, 4
push esi
push eax
push edi
call fcn.0045aea0
add esp, 0xc
mov byte [ebp - 4], 4
push ebx
push 1
lea ecx, [ebp - 0x5c]
call fcn.004014ab
mov byte [ebp - 4], 3
lea eax, [ebp - 0xdc]
cmp dword [ebp - 0xe0], eax
je 0x422b56
push dword [ebp - 0xe0]
call fcn.00459a97
pop ecx
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea eax, [ebp - 0x24]
push eax
push 1
push dword [ebp - 0x20]
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
cmp eax, ebx
jl 0x422ba8
mov ecx, dword [0x4a8e78]
call fcn.0043276d
cmp eax, ebx
je 0x422ba8
mov ecx, dword [eax]
lea edx, [ebp - 0x18]
push edx
push 0x48de94
push eax
call dword [ecx]
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x422bb5
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov eax, dword [ebp - 0x18]
mov ecx, dword [eax]
push dword [ebp - 0x24]
push eax
call dword [ecx + 0x14]
mov eax, dword [ebp - 0x18]
cmp eax, ebx
je 0x422bb5
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov dword [ebp - 4], 2
jmp 0x422be5
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1c]
call fcn.00401436
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x14]
call fcn.00401436
or dword [ebp - 4], 0xffffffff
push ebx
push 1
lea ecx, [ebp - 0x40]
call fcn.004014ab
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret