Function at 0x10045ad0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x14]
mov dword [ebp - 0x50], ecx
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov edi, dword [ebp + 0xc]
cmp eax, 0x7d8
jg 0x10045c9b
je 0x10045bc5
cmp eax, 3
ja case.0x10045cba.2022
jmp dword [eax*4 + 0x100461f8]
mov eax, sym.ExuiKrnln_X32.dll_CallInternalFunction_Ex
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
cmp dword [0x10177ecc], 0
je case.0x10045cba.2022
lea eax, [ebp - 0x4c]
push eax
push edi
call dword [sym.imp.USER32.dll_BeginPaint]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push eax
push dword [ebp - 0x4c]
call dword [0x10178314]
mov eax, dword [0x10177ecc]
push 0
push 0
push 0
push 2
push dword [eax + 0x18]
push dword [eax + 0x14]
push 0
push 0
push 0x18
push 0x18
push 0
push 0
push dword [eax + 4]
push dword [ebp - 0x50]
call dword [0x10178360]
push dword [ebp - 0x50]
call dword [0x10178340]
lea eax, [ebp - 0x4c]
push eax
push edi
call dword [sym.imp.USER32.dll_EndPaint]
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
mov edx, edi
call fcn.100f3f40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
mov ebx, dword [ebp + 0x18]
mov dword [0x10177560], ebx
cmp ebx, 0x134b425
jle 0x10045c86
push 0x2c
mov edi, 0x10045890
call fcn.1012d684
add esp, 4
mov esi, eax
push 0x2c
push 0
push esi
call fcn.1012f3e0
mov eax, 0x10045890
add esp, 0xc
cmp eax, 0xffffffff
jne 0x10045c11
mov eax, dword [ebx]
mov dword [eax], esi
mov edi, dword [ebx + 4]
mov eax, dword [ebx + 8]
mov dword [esi], eax
mov ebx, dword [ebx + 0xc]
push 0
push 0x2710
push 0x2710
push esi
push 0x10102b80
mov dword [esi + 0x18], edi
lea edi, [esi + 4]
push 0
push edi
mov dword [esi + 0x28], 0
mov dword [esi + 0x20], 0x2710
mov dword [esi + 0x24], 0x2710
mov word [esi + 0xd], 0
mov dword [esi + 0x1c], ebx
mov dword [esi + 0x10], 0xfffffffe
call dword [sym.imp.KERNEL32.dll_CreateTimerQueueTimer]
test eax, eax
jne 0x10045c5d
mov dword [edi], eax
cmp dword [edi], 0
jne case.0x10045cba.2022
push 0x2c
push esi
call fcn.1012d6b4
add esp, 8
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
cmp eax, 0xbb9
jg 0x10045ffc
je 0x10045fee
add eax, 0xfffff81d
cmp eax, 0xf
ja case.0x10045cba.2022
jmp dword [eax*4 + 0x10046208]
mov edx, edi
mov ecx, 0x10177754
call fcn.100f5270
mov edx, ebx
mov ecx, 0x10177750
call fcn.100f5270
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
test edi, edi
setne byte [0x10177410]
test edi, edi
je 0x10045ecc
test ecx, ecx
mov dword [0x10177524], 0
setne byte [0x10177411]
cmp dword [0x10177424], 0
jne 0x10045d2b
push 0x606060
call dword [sym.imp.GDI32.dll_CreateSolidBrush]
mov dword [0x10177424], eax
push 0x1015d878
push 0x3ea
push dword [0x10177520]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push dword [0x10177520]
call dword [sym.imp.KERNEL32.dll_LoadResource]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_FreeResource]
push esi
push dword [0x10177520]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push edi
mov esi, eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edx, esi
mov ecx, eax
call fcn.100f4950
cmp dword [0x10177ecc], 0
mov ebx, eax
jne case.0x10045b0c.1
mov esi, dword [ebx + 4]
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
mov edi, eax
test edi, edi
je 0x10045df3
push edi
call dword [sym.imp.KERNEL32.dll_GlobalLock]
push esi
lea ecx, [ebx + 8]
push ecx
push eax
call fcn.10130870
add esp, 0xc
push edi
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
lea eax, [ebp - 0x54]
mov dword [ebp - 0x54], 0
push eax
push 0
push edi
call dword [sym.imp.ole32.dll_CreateStreamOnHGlobal]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x50], 0
push eax
push dword [ebp - 0x54]
call dword [0x10178224]
mov eax, dword [ebp - 0x54]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
cmp dword [ebp - 0x50], 0
jne 0x10045e15
push edi
call dword [sym.imp.KERNEL32.dll_GlobalFree]
movzx eax, byte [0x10177410]
xor esi, esi
mov dword [0x10177ecc], esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
push 0x3c
call fcn.1012d684
mov esi, eax
add esp, 4
mov dword [esi + 4], 0
mov dword [esi + 8], 0
mov dword [esi + 0xc], 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0
mov dword [esi + 0x24], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0
mov dword [esi], 5
mov dword [esi + 0x20], 0xffffffff
mov dword [esi + 0x1c], 0
mov eax, dword [ebp - 0x50]
mov dword [esi + 4], eax
lea eax, [esi + 0x14]
push eax
mov dword [esi + 0x10], edi
push dword [ebp - 0x50]
call dword [0x1017825c]
lea eax, [esi + 0x18]
push eax
push dword [ebp - 0x50]
call dword [0x101781ec]
movzx eax, byte [0x10177410]
mov dword [0x10177ecc], esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [0x10177524]
mov ecx, 1
cmp dword [0x10177458], 0
mov byte [0x10177411], 0
cmovne eax, ecx
mov dword [0x10177524], eax
movzx eax, byte [0x10177410]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
cmp dword [ebp + 0x18], 9
mov dword [0x10177570], edi
jne case.0x10045cba.2022
mov byte [0x10177413], 1
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
cmp dword [0x10177458], 0
je case.0x10045cba.2022
mov dword [0x10177524], edi
test edi, edi
jne 0x10045fab
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
cmp dword [0x10177458], 0
je case.0x10045cba.2022
cmp dword [0x10177524], 0
jmp 0x10045f3f
push ebx
push edi
call sym.ExuiKrnln_X32.dll_ControlSetWinScale
jmp case.0x10045cba.2022
movss xmm0, dword [edi + 0x10c]
mulss xmm0, dword [0x10161858]
cvttss2si eax, xmm0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
cmp dword [0x101776c8], 0
je case.0x10045cba.2022
mov dword [0x1017757c], ebx
test ebx, ebx
je case.0x10045cba.2022
mov eax, 1
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
cmp dword [0x101776c8], 0
je case.0x10045cba.2022
xor eax, eax
cmp dword [0x1017757c], eax
setne al
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
mov edx, ebx
mov ecx, edi
call fcn.100893e0
jmp case.0x10045cba.2022
cmp eax, 0xa2c42
jg 0x100461a8
je 0x10046067
sub eax, 0x10485
je 0x1004604b
sub eax, 0x927a5
je 0x1004603c
sub eax, 1
jne case.0x10045cba.2022
mov edx, ebx
mov ecx, edi
call fcn.10051050
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
push ecx
mov edx, ebx
mov ecx, edi
call fcn.10050bd0
jmp case.0x10045cba.2022
mov eax, dword [edi + 0xd8]
mov eax, dword [eax + 0x10]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
mov esi, dword [0x1017751c]
push str.Tab_Control
push edi
call dword [sym.imp.USER32.dll_GetPropW]
movss xmm0, dword [0x10161668]
mov dword [ebp - 0x54], eax
movss xmm1, dword [eax + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x100460c3
movd xmm0, ebx
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
movss xmm0, dword [0x10161668]
add esp, 8
fstp qword [ebp - 0x5c]
cvttsd2si ebx, qword [ebp - 0x5c]
mov eax, dword [ebp - 0x54]
movss xmm1, dword [eax + 0x10c]
ucomiss xmm1, xmm0
lahf
test ah, 0x44
jnp 0x10046103
movd xmm0, dword [ebp - 0x50]
sub esp, 8
cvtdq2ps xmm0, xmm0
mulss xmm0, xmm1
cvtps2pd xmm0, xmm0
movsd qword [esp], xmm0
call fcn.10130e30
fstp qword [ebp - 0x5c]
cvttsd2si eax, qword [ebp - 0x5c]
add esp, 8
mov dword [ebp - 0x50], eax
jmp 0x10046106
mov eax, dword [ebp - 0x50]
test esi, esi
je 0x10046192
nop
cmp dword [esi + 0x28], edi
jne 0x10046171
cmp byte [esi + 0xd4], 0
je 0x10046171
mov ecx, dword [esi + 0x58]
cmp ecx, 1
je 0x10046171
cmp esi, dword [ebp + 0x18]
je 0x10046171
cmp ebx, dword [esi + 0x84]
jl 0x10046171
cmp ebx, dword [esi + 0x8c]
jge 0x10046171
mov edx, dword [esi + 0x88]
cmp eax, edx
jl 0x10046171
cmp eax, dword [esi + 0x90]
jge 0x10046171
test ecx, ecx
je 0x1004617d
mov ecx, eax
mov eax, dword [esi + 0xd8]
sub ecx, edx
imul ecx, dword [esi + 0x50]
mov eax, dword [eax + 0x10]
sub ecx, dword [esi + 0x84]
add ecx, ebx
cmp byte [eax + ecx*4 - 1], 0
jne 0x1004617d
mov esi, dword [esi + 0x18]
test esi, esi
je 0x10046192
mov eax, dword [ebp - 0x50]
jmp 0x10046110
mov eax, esi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
mov eax, dword [ebp - 0x54]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
sub eax, 0xa2c43
je 0x100461d5
sub eax, 1
jne case.0x10045cba.2022
push ecx
mov edx, ebx
mov ecx, edi
call fcn.100520a0
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14
push ecx
mov edx, ebx
mov ecx, edi
call fcn.100514c0
mov ecx, dword [ebp - 8]
add esp, 4
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.1012d671
mov esp, ebp
pop ebp
ret 0x14