Function at 0x428a50
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x49afad
mov eax, dword fs:[0]
push eax
sub esp, 0x820
mov eax, dword [0x4c2c40]
xor eax, esp
mov dword [esp + 0x818], eax
push ebx
push esi
push edi
mov eax, dword [0x4c2c40]
xor eax, esp
push eax
lea eax, [esp + 0x830]
mov dword fs:[0], eax
push 0xb
push 0
push 0
push 0
push 0
mov edi, ecx
mov eax, dword [edi + 0x20]
push 0xfffffffffffffffe
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x7ce
lea ecx, [esp + 0x5a]
push 0
push ecx
mov word [esp + 0x60], 0
call fcn.0047dfc0
add esp, 0xc
mov ecx, edi
mov byte [esp + 0x17], 1
call fcn.0045acd4
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x20
call esi
push 0x21
mov dword [esp + 0x14], eax
call esi
push 0x21
mov dword [esp + 0x1c], eax
call esi
push 4
mov ebx, eax
call esi
mov edx, dword [esp + 0x18]
add ebx, eax
mov eax, dword [esp + 0x10]
push 1
lea ebx, [ebx + edx + 0x214]
push ebx
lea eax, [eax + eax + 0x248]
push eax
push 0
push 0
mov ecx, edi
call fcn.004607d0
push 0
mov ecx, edi
call fcn.0045d325
push 5
push 0xfa3
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
test ebx, ebx
jne 0x428b43
mov byte [esp + 0x17], al
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
jne 0x428b54
mov byte [esp + 0x17], al
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push ebx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
test eax, eax
mov dword [esp + 0x18], eax
je 0x428bd9
cmp byte [esp + 0x17], 0
je 0x428bd9
mov esi, dword [sym.imp.KERNEL32.dll_FindResourceW]
push 0x4abe30
push 0xbb8
push 0
call esi
test eax, eax
je 0x428b97
lea ecx, [edi + 0x74]
push ecx
call fcn.0042d6d0
add esp, 4
push 0x4abe30
push 0xbb9
push 0
call esi
test eax, eax
je 0x428bb8
lea edx, [edi + 0xa4]
push edx
call fcn.0042d6d0
add esp, 4
push 0x4abe30
push 0xbbb
push 0
call esi
test eax, eax
je 0x428bd9
lea ecx, [edi + 0xd4]
push ecx
call fcn.0042d6d0
add esp, 4
push 0x3ff
mov ecx, edi
call fcn.00460672
lea esi, [edi + 0x2a0]
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428bf7
xor eax, eax
jmp 0x428bfa
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x10]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push eax
mov eax, dword [edx + 0x20]
push 0x30
push eax
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x1e7
push 0x66
push 0
push 0
call fcn.004607d0
push 0x406
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428c3d
xor eax, eax
jmp 0x428c40
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x20]
push 1
push eax
push 0x30
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x2a
push 0x2a
push 0xf
push 0x72
call fcn.004607d0
push 0x415
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428c7a
xor eax, eax
jmp 0x428c7d
mov eax, dword [esi + 4]
push 1
push eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x20]
push 0x30
push ecx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x2e
push 0x184
push 0xf
push 0xa6
call fcn.004607d0
push 0x412
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428cbd
xor eax, eax
jmp 0x428cc0
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x10]
push 1
push eax
mov eax, dword [edx + 0x20]
push 0x30
push eax
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x2e
push 0x1c2
push 0x44
push 0x72
call fcn.004607d0
push 0x407
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428cfd
xor eax, eax
jmp 0x428d00
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x20]
push 1
push eax
push 0x30
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x64
push 0x134
push 0x71
push 0xaf
call fcn.004607d0
push 0x40e
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428d40
xor eax, eax
jmp 0x428d43
mov eax, dword [esi + 4]
push 1
push eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x20]
push 0x30
push ecx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x2e
push 0x1d8
push 0xea
push 0x72
call fcn.004607d0
push 0x40b
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428d83
xor eax, eax
jmp 0x428d86
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x10]
push 1
push eax
mov eax, dword [edx + 0x20]
push 0x30
push eax
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x14
push 0x1d8
push 0x10e
push 0x72
call fcn.004607d0
push 0x40f
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428dc6
xor eax, eax
jmp 0x428dc9
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x20]
push 1
push eax
push 0x30
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x94
push 0x1c2
push 0x123
push 0x72
call fcn.004607d0
push 0x418
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x428e0c
xor eax, eax
jmp 0x428e0f
mov eax, dword [esi + 4]
push 1
push eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x20]
push 0x30
push ecx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x1e
push 0x1d8
push 0x1c4
push 0x72
call fcn.004607d0
push 1
mov ecx, edi
call fcn.00460672
test esi, esi
mov ebx, eax
jne 0x428e4a
xor eax, eax
jmp 0x428e4d
mov eax, dword [esi + 4]
mov edx, dword [ebx + 0x20]
push 1
push eax
push 0x30
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x14
push 0x58
push 0x1f4
push 0x165
mov ecx, ebx
call fcn.004607d0
push 2
mov ecx, edi
call fcn.00460672
test esi, esi
mov ebx, eax
jne 0x428e86
xor eax, eax
jmp 0x428e89
mov eax, dword [esi + 4]
push 1
push eax
mov eax, dword [ebx + 0x20]
push 0x30
push eax
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x14
push 0x58
push 0x1f4
push 0x1d0
mov ecx, ebx
call fcn.004607d0
call fcn.00429740
mov ecx, 0xa0
lea edx, [esp + 0x1c]
call fcn.00432a50
mov esi, 8
mov dword [esp + 0x838], 0
cmp dword [eax + 0x18], esi
jb 0x428edc
mov eax, dword [eax + 4]
jmp 0x428edf
add eax, 4
push eax
lea ecx, [edi + 0x1c0]
call fcn.00460774
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x34], esi
jb 0x428f09
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0045a870
add esp, 4
mov edx, dword [edi + 0x104]
push edx
push 0x4aa924
lea edx, [esp + 0x5c]
call fcn.00424440
add esp, 8
lea eax, [esp + 0x54]
push eax
mov ecx, edi
call fcn.00460774
push 0
lea ecx, [edi + 0x270]
push 0x4a9c14
call fcn.00424800
push 0x7d0
lea ecx, [esp + 0x58]
push 0
push ecx
call fcn.0047dfc0
add esp, 0xc
mov ecx, 0x9e
lea edx, [esp + 0x1c]
call fcn.00432a50
cmp dword [eax + 0x18], esi
jb 0x428f6b
mov eax, dword [eax + 4]
jmp 0x428f6e
add eax, 4
mov edx, dword [edi + 0x104]
push edx
push eax
lea edx, [esp + 0x5c]
call fcn.00424440
add esp, 8
cmp dword [esp + 0x34], esi
jb 0x428f95
mov eax, dword [esp + 0x20]
push eax
call fcn.0045a870
add esp, 4
lea eax, [esp + 0x54]
lea ecx, [edi + 0x26c]
lea ebx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x428fa2
sub eax, ebx
sar eax, 1
push eax
lea edx, [esp + 0x58]
push edx
call fcn.00424800
mov ecx, 0x98
lea edx, [esp + 0x1c]
call fcn.00432a50
mov dword [esp + 0x838], 1
cmp dword [eax + 0x18], esi
jb 0x428fdf
mov eax, dword [eax + 4]
jmp 0x428fe2
add eax, 4
push eax
lea ecx, [edi + 0x108]
call fcn.00460774
or ebx, 0xffffffff
mov dword [esp + 0x838], ebx
cmp dword [esp + 0x34], esi
jb 0x42900b
mov eax, dword [esp + 0x20]
push eax
call fcn.0045a870
add esp, 4
mov ecx, 0x75
lea edx, [esp + 0x1c]
call fcn.00432a50
mov dword [esp + 0x838], 2
cmp dword [eax + 0x18], esi
jb 0x42902e
mov eax, dword [eax + 4]
jmp 0x429031
add eax, 4
push eax
lea ecx, [edi + 0x15c]
call fcn.00460774
mov dword [esp + 0x838], ebx
cmp dword [esp + 0x34], esi
jb 0x429057
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0045a870
add esp, 4
mov ecx, 0xaa
lea edx, [esp + 0x1c]
call fcn.00432a50
mov dword [esp + 0x838], 3
cmp dword [eax + 0x18], esi
jb 0x42907a
mov ebx, dword [eax + 4]
jmp 0x42907d
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x268]
jne 0x42908b
xor eax, eax
jmp 0x42909f
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x429090
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x34], 8
jb 0x4290c7
mov edx, dword [esp + 0x20]
push edx
call fcn.0045a870
add esp, 4
mov ecx, 0xa4
lea edx, [esp + 0x1c]
call fcn.00432a50
mov dword [esp + 0x838], 4
cmp dword [eax + 0x18], 8
jb 0x4290eb
mov ebx, dword [eax + 4]
jmp 0x4290ee
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x274]
jne 0x4290fc
xor eax, eax
jmp 0x429110
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x429101
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x34], 8
jb 0x429138
mov eax, dword [esp + 0x20]
push eax
call fcn.0045a870
add esp, 4
mov ecx, 0xa1
lea edx, [esp + 0x1c]
call fcn.00432a50
mov dword [esp + 0x838], 5
cmp dword [eax + 0x18], 8
jb 0x42915c
mov ebx, dword [eax + 4]
jmp 0x42915f
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x278]
jne 0x42916d
xor eax, eax
jmp 0x429181
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x429172
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x34], 8
jb 0x4291a9
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0045a870
add esp, 4
mov edx, dword [edi + 0x2c8]
mov esi, dword [sym.imp.USER32.dll_SendMessageW]
push 0
push 0
push 0xf1
push edx
call esi
mov ecx, 0xac
lea edx, [esp + 0x38]
call fcn.00432a50
mov ebx, 8
mov dword [esp + 0x838], 6
cmp dword [eax + 0x18], ebx
jb 0x4291e9
mov eax, dword [eax + 4]
jmp 0x4291ec
add eax, 4
push eax
lea ecx, [edi + 0x2a8]
call fcn.00460774
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x50], ebx
jb 0x429216
mov eax, dword [esp + 0x3c]
push eax
call fcn.0045a870
add esp, 4
mov ecx, dword [edi + 0xd8]
mov edx, dword [edi + 0x31c]
push ecx
xor ebx, ebx
push ebx
push 0x172
push edx
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], ebx
mov word [esp + 0x4c], bx
call esi
push ebx
mov ecx, edi
call fcn.0045d29a
mov eax, dword [esp + 0x18]
cmp eax, ebx
je 0x429256
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, 1
mov ecx, dword [esp + 0x830]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x818]
xor ecx, esp
call fcn.00478599
mov esp, ebp
pop ebp
ret