Function at 0x42a5b0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48788b
mov eax, dword fs:[0]
push eax
sub esp, 0xc0
mov eax, dword [0x4b3014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xc8], edi
mov eax, dword [ebp + 8]
push 0
mov dword [ebp - 0xcc], eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0x49b208
mov esi, eax
push 0xd2
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x28], eax
test eax, eax
jne 0x42a617
xor al, al
jmp 0x42afc6
push eax
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
test eax, eax
je 0x42a610
push dword [ebp - 0x28]
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x42a610
xorps xmm0, xmm0
movups xmmword [ebp - 0x38], xmm0
mov dword [ebp - 0x2c], 0
psrldq xmm0, 8
movd eax, xmm0
and eax, 0xfffffe00
mov dword [ebp - 0x30], eax
push 0x70
lea eax, [ebp - 0xc0]
mov dword [ebp - 4], 1
push 0
push eax
call fcn.00463d60
add esp, 0xc
lea ecx, [ebp - 0xc0]
call fcn.0044b540
mov byte [ebp - 4], 2
call fcn.0040f790
mov ecx, eax
test ecx, ecx
jne 0x42a697
push 0x80004005
call fcn.0041ffc0
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
call eax
add eax, 0x10
mov dword [ebp - 0x28], eax
push esi
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 3
call fcn.0042d550
lea edx, [ebp - 0x28]
mov byte [ebp - 4], 4
mov ecx, eax
call fcn.0045bca0
mov byte [ebp - 4], 3
or eax, 0xffffffff
mov edx, dword [ebp - 0x24]
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x42a6de
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x28]
cmp dword [esi - 4], 1
jle 0x42a6f5
push dword [esi - 0xc]
lea ecx, [ebp - 0x28]
call fcn.0042e4c0
mov esi, dword [ebp - 0x28]
push esi
lea ecx, [ebp - 0x50]
call fcn.0042c4b0
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x50]
mov byte [ebp - 4], 5
push eax
lea ecx, [ebp - 0x98]
call fcn.0042e010
cmp dword [ebp - 0x84], 0x10
lea ecx, [ebp - 0x98]
mov eax, dword [ebp - 0x88]
lea edx, [ebp - 0x38]
cmovae ecx, dword [ebp - 0x98]
push ecx
add eax, ecx
push edx
push eax
push ecx
lea ecx, [ebp - 0xc0]
call fcn.0044b640
test al, al
je 0x42af63
cmp byte [ebp - 0x30], 0
je 0x42af63
push ecx
mov ecx, dword [ebp - 0xcc]
push str._debug
call fcn.0042d1d0
cmp eax, 0xffffffff
je 0x42a774
mov byte [edi + 0x170], 1
jmp 0x42a7a3
push str.debug
lea ecx, [ebp - 0x38]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42a7a3
push ecx
push str.debug
lea ecx, [ebp - 0x38]
call fcn.0044f1c0
mov ecx, eax
call fcn.0044eec0
mov byte [edi + 0x170], al
push str.QAInstaller
lea ecx, [ebp - 0x38]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42a8f2
push ecx
push str.QAInstaller
lea ecx, [ebp - 0x38]
call fcn.0044f1c0
mov ecx, eax
call fcn.0044eec0
mov byte [edi + 0x208], al
test al, al
je 0x42a8f2
push str.QAInstallerType
lea ecx, [ebp - 0x38]
mov byte [edi + 0x170], 1
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42a828
push ecx
push str.QAInstallerType
lea ecx, [ebp - 0x38]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42a828
push ecx
push str.QAInstallerType
lea ecx, [ebp - 0x38]
call fcn.0044f1c0
lea ecx, [edi + 0x21c]
push dword [eax]
call fcn.0042d470
push str.QANameBrand
lea ecx, [ebp - 0x38]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42a86b
push ecx
push str.QANameBrand
lea ecx, [ebp - 0x38]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42a86b
push ecx
push str.QANameBrand
lea ecx, [ebp - 0x38]
call fcn.0044f1c0
lea ecx, [edi + 0x218]
push dword [eax]
call fcn.0042d470
push 0x4983ec
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0
call fcn.0042d660
lea ecx, [edi + 0x21c]
mov byte [ebp - 4], 6
mov edx, str.prod
call fcn.0042ccf0
test al, al
je 0x42a8a4
push str.QTClients_
lea ecx, [ebp - 0x24]
call fcn.0042d500
mov eax, dword [edi + 0x218]
lea ecx, [ebp - 0x24]
push dword [eax - 0xc]
push eax
call fcn.0042e5e0
mov eax, dword [ebp - 0xc8]
lea ecx, [edi + 0x214]
add eax, 0x20c
push eax
call fcn.0042e6b0
push dword [ebp - 0x24]
lea ecx, [edi + 0x214]
push str.PTBGQA9_PT830012_New_Client
call fcn.0042d210
lea ecx, [ebp - 0x24]
mov byte [ebp - 4], 5
call fcn.0042cc10
mov edi, dword [ebp - 0xc8]
cmp byte [edi + 0x170], 0
sete byte [ebp - 0xc1]
call fcn.004587e0
mov edi, eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
mov eax, dword [ebp - 0xc8]
push dword [eax + 0x174]
push str._sWebInstaller__d.log
push edi
call fcn.0042fc90
mov al, byte [ebp - 0xc1]
lea ecx, [ebp - 0x38]
add esp, 0x10
mov byte [edi + 4], al
push str.brand_config
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42af5a
push ecx
xorps xmm0, xmm0
lea ecx, [ebp - 0x38]
push str.brand_config
movups xmmword [ebp - 0x20], xmm0
call fcn.0044f1c0
push eax
lea ecx, [ebp - 0x20]
call fcn.0044e860
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x20]
cmp byte [ebp - 0x18], 0
jne 0x42a985
call fcn.0044e9b0
mov byte [ebp - 0xc1], 1
jmp 0x42af6a
push 0x49b2bc
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42a9cd
push ecx
push 0x49b2bc
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42a9cd
push ecx
push 0x49b2bc
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
mov edi, dword [ebp - 0xc8]
push dword [eax]
lea ecx, [edi + 0x1b8]
call fcn.0042d470
jmp 0x42a9d3
mov edi, dword [ebp - 0xc8]
push str.fallback_url
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42aa16
push ecx
push str.fallback_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42aa16
push ecx
push str.fallback_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1dc]
push dword [eax]
call fcn.0042d470
push str.app_id
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42aa59
push ecx
push str.app_id
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42aa59
push ecx
push str.app_id
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1b4]
push dword [eax]
call fcn.0042d470
push 0x49b2d8
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42aa9c
push ecx
push 0x49b2d8
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42aa9c
push ecx
push 0x49b2d8
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1b0]
push dword [eax]
call fcn.0042d470
push str.name
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42aadf
push ecx
push str.name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42aadf
push ecx
push str.name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1bc]
push dword [eax]
call fcn.0042d470
push str.company_name
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ab22
push ecx
push str.company_name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ab22
push ecx
push str.company_name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1c0]
push dword [eax]
call fcn.0042d470
push str.file_description
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ab65
push ecx
push str.file_description
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ab65
push ecx
push str.file_description
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1c4]
push dword [eax]
call fcn.0042d470
push str.product_name
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42aba8
push ecx
push str.product_name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42aba8
push ecx
push str.product_name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1c8]
push dword [eax]
call fcn.0042d470
push str.created_at
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42abeb
push ecx
push str.created_at
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42abeb
push ecx
push str.created_at
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1cc]
push dword [eax]
call fcn.0042d470
push str.updated_at
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ac2e
push ecx
push str.updated_at
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ac2e
push ecx
push str.updated_at
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1d0]
push dword [eax]
call fcn.0042d470
push str.copyright
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ac71
push ecx
push str.copyright
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ac71
push ecx
push str.copyright
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1d4]
push dword [eax]
call fcn.0042d470
push str.publisher_id
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42acb4
push ecx
push str.publisher_id
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42acb4
push ecx
push str.publisher_id
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1d8]
push dword [eax]
call fcn.0042d470
push str.template_file_path
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42acf7
push ecx
push str.template_file_path
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42acf7
push ecx
push str.template_file_path
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1e0]
push dword [eax]
call fcn.0042d470
push str.brand_system_name
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ad3a
push ecx
push str.brand_system_name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ad3a
push ecx
push str.brand_system_name
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1e4]
push dword [eax]
call fcn.0042d470
push str.fallback_languages
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ad7d
push ecx
push str.fallback_languages
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ad7d
push ecx
push str.fallback_languages
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1e8]
push dword [eax]
call fcn.0042d470
push str.fallback_templates
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42adc0
push ecx
push str.fallback_templates
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42adc0
push ecx
push str.fallback_templates
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1ec]
push dword [eax]
call fcn.0042d470
push str.cabs_base_url
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ae03
push ecx
push str.cabs_base_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ae03
push ecx
push str.cabs_base_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1f0]
push dword [eax]
call fcn.0042d470
push str.cabs_languages
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ae46
push ecx
push str.cabs_languages
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ae46
push ecx
push str.cabs_languages
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1f4]
push dword [eax]
call fcn.0042d470
push str.playtech_brand_id
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42ae89
push ecx
push str.playtech_brand_id
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42ae89
push ecx
push str.playtech_brand_id
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1f8]
push dword [eax]
call fcn.0042d470
push str.error_url
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42aecc
push ecx
push str.error_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42aecc
push ecx
push str.error_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x1fc]
push dword [eax]
call fcn.0042d470
push str.stats_url
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42af0f
push ecx
push str.stats_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42af0f
push ecx
push str.stats_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x200]
push dword [eax]
call fcn.0042d470
push str.post_log_url
lea ecx, [ebp - 0x20]
call fcn.0044f380
cmp eax, 0x4b75d0
je 0x42af52
push ecx
push str.post_log_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
cmp byte [eax + 8], 0
je 0x42af52
push ecx
push str.post_log_url
lea ecx, [ebp - 0x20]
call fcn.0044f1c0
lea ecx, [edi + 0x204]
push dword [eax]
call fcn.0042d470
lea ecx, [ebp - 0x20]
call fcn.0044e9b0
mov byte [ebp - 0xc1], 1
jmp 0x42af6a
mov byte [ebp - 0xc1], 0
mov eax, dword [ebp - 0x3c]
cmp eax, 0x10
jb 0x42af7f
inc eax
lea ecx, [ebp - 0x50]
push eax
push dword [ebp - 0x50]
call fcn.0042ea50
mov dword [ebp - 0x3c], 0xf
add esi, 0xfffffff0
mov dword [ebp - 0x40], 0
or eax, 0xffffffff
mov byte [ebp - 0x50], 0
mov byte [ebp - 4], 2
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x42afad
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
lea ecx, [ebp - 0xc0]
call fcn.0042aff0
lea ecx, [ebp - 0x38]
call fcn.0044e9b0
mov al, byte [ebp - 0xc1]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0045f48f
mov esp, ebp
pop ebp
ret 4