Function at 0x4272d0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x49b038
mov eax, dword fs:[0]
push eax
sub esp, 0x820
mov eax, dword [0x4c2c40]
xor eax, esp
mov dword [esp + 0x818], eax
push ebx
push esi
push edi
mov eax, dword [0x4c2c40]
xor eax, esp
push eax
lea eax, [esp + 0x830]
mov dword fs:[0], eax
push 0x7ce
lea eax, [esp + 0x5a]
push 0
push eax
mov edi, ecx
mov word [esp + 0x60], 0
call fcn.0047dfc0
add esp, 0xc
mov ecx, edi
mov byte [esp + 0x17], 1
call fcn.0045acd4
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push 0x20
call esi
push 0x21
mov dword [esp + 0x14], eax
call esi
push 0x21
mov dword [esp + 0x38], eax
call esi
push 4
mov ebx, eax
call esi
mov ecx, dword [esp + 0x34]
add ebx, eax
mov eax, dword [esp + 0x10]
push 1
lea ebx, [ebx + ecx + 0x214]
push ebx
lea eax, [eax + eax + 0x248]
push eax
push 0
push 0
mov ecx, edi
call fcn.004607d0
push 0
mov ecx, edi
call fcn.0045d325
mov edx, dword [edi + 0x20]
push 0xb
push 0
push 0
push 0
push 0
push 0xfffffffffffffffe
push edx
call dword [sym.imp.USER32.dll_SetWindowPos]
push 5
push 0x412
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
test ebx, ebx
jne 0x4273c3
mov byte [esp + 0x17], al
push esi
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
jne 0x4273d4
mov byte [esp + 0x17], al
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push ebx
push 0x40
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
test eax, eax
mov dword [esp + 0x34], eax
je 0x427459
cmp byte [esp + 0x17], 0
je 0x427459
mov esi, dword [sym.imp.KERNEL32.dll_FindResourceW]
push 0x4abe30
push 0xbb8
push 0
call esi
test eax, eax
je 0x427417
lea ecx, [edi + 0x78]
push ecx
call fcn.0042d6d0
add esp, 4
push 0x4abe30
push 0xbb9
push 0
call esi
test eax, eax
je 0x427438
lea edx, [edi + 0xa8]
push edx
call fcn.0042d6d0
add esp, 4
push 0x4abe30
push 0xbbb
push 0
call esi
test eax, eax
je 0x427459
lea ecx, [edi + 0xd8]
push ecx
call fcn.0042d6d0
add esp, 4
push 0x3ff
mov ecx, edi
call fcn.00460672
lea esi, [edi + 0x2a8]
test esi, esi
mov dword [esp + 0x10], eax
jne 0x427477
xor eax, eax
jmp 0x42747a
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x10]
mov ebx, dword [sym.imp.USER32.dll_SendMessageW]
push 1
push eax
mov eax, dword [edx + 0x20]
push 0x30
push eax
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x1e7
push 0x66
push 0
push 0
call fcn.004607d0
push 0x406
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x4274bd
xor eax, eax
jmp 0x4274c0
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x20]
push 1
push eax
push 0x30
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x2a
push 0x2a
push 0xf
push 0x72
call fcn.004607d0
push 0x40c
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x4274fa
xor eax, eax
jmp 0x4274fd
mov eax, dword [esi + 4]
push 1
push eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x20]
push 0x30
push ecx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x2e
push 0x198
push 0xf
push 0xa6
call fcn.004607d0
push 0x414
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x42753d
xor eax, eax
jmp 0x427540
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x10]
push 1
push eax
mov eax, dword [edx + 0x20]
push 0x30
push eax
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x2e
push 0x1c2
push 0x44
push 0x72
call fcn.004607d0
push 0x407
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x42757d
xor eax, eax
jmp 0x427580
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x20]
push 1
push eax
push 0x30
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x64
push 0x134
push 0x71
push 0xaf
call fcn.004607d0
push 0x40d
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x4275c0
xor eax, eax
jmp 0x4275c3
mov eax, dword [esi + 4]
push 1
push eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x20]
push 0x30
push ecx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x14
push 0x1d8
push 0xea
push 0x72
call fcn.004607d0
push 0x412
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x427603
xor eax, eax
jmp 0x427606
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x10]
push 1
push eax
mov eax, dword [edx + 0x20]
push 0x30
push eax
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x24
push 0x1c2
push 0xff
push 0x72
call fcn.004607d0
push 0x40e
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x427646
xor eax, eax
jmp 0x427649
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x20]
push 1
push eax
push 0x30
push edx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x24
push 0x1c2
push 0x123
push 0x72
call fcn.004607d0
push 0x40b
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x427689
xor eax, eax
jmp 0x42768c
mov eax, dword [esi + 4]
push 1
push eax
mov eax, dword [esp + 0x18]
mov ecx, dword [eax + 0x20]
push 0x30
push ecx
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x14
push 0x1d8
push 0x147
push 0x72
call fcn.004607d0
push 0x40f
mov ecx, edi
call fcn.00460672
test esi, esi
mov dword [esp + 0x10], eax
jne 0x4276cc
xor eax, eax
jmp 0x4276cf
mov eax, dword [esi + 4]
mov edx, dword [esp + 0x10]
push 1
push eax
mov eax, dword [edx + 0x20]
push 0x30
push eax
call ebx
mov ecx, dword [esp + 0x10]
push 1
push 0x88
push 0x1c2
push 0x15c
push 0x72
call fcn.004607d0
push 1
mov ecx, edi
call fcn.00460672
test esi, esi
mov ebx, eax
jne 0x42770d
xor eax, eax
jmp 0x427710
mov eax, dword [esi + 4]
mov ecx, dword [ebx + 0x20]
push 1
push eax
push 0x30
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x14
push 0x58
push 0x1f4
push 0x165
mov ecx, ebx
call fcn.004607d0
push 2
mov ecx, edi
call fcn.00460672
test esi, esi
mov ebx, eax
jne 0x427749
xor eax, eax
jmp 0x42774c
mov eax, dword [esi + 4]
mov edx, dword [ebx + 0x20]
push 1
push eax
push 0x30
push edx
call dword [sym.imp.USER32.dll_SendMessageW]
push 1
push 0x14
push 0x58
push 0x1f4
push 0x1d0
mov ecx, ebx
call fcn.004607d0
call fcn.004280a0
mov ecx, 0x9f
lea edx, [esp + 0x18]
call fcn.00432a50
mov esi, 8
mov dword [esp + 0x838], 0
cmp dword [eax + 0x18], esi
jb 0x42779f
mov eax, dword [eax + 4]
jmp 0x4277a2
add eax, 4
push eax
lea ecx, [edi + 0x1c4]
call fcn.00460774
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x30], esi
jb 0x4277cc
mov eax, dword [esp + 0x1c]
push eax
call fcn.0045a870
add esp, 4
mov ecx, dword [edi + 0x108]
push ecx
push 0x4aa924
lea edx, [esp + 0x5c]
call fcn.00424440
add esp, 8
lea edx, [esp + 0x54]
push edx
mov ecx, edi
call fcn.00460774
push 0x7d0
lea eax, [esp + 0x58]
push 0
push eax
call fcn.0047dfc0
add esp, 0xc
cmp dword [edi + 0x74], esi
lea edx, [esp + 0x18]
mov ecx, 0xa7
je 0x427817
mov ecx, 0x9e
call fcn.00432a50
cmp dword [eax + 0x18], esi
jb 0x427826
mov eax, dword [eax + 4]
jmp 0x427829
add eax, 4
mov ecx, dword [edi + 0x108]
push ecx
push eax
lea edx, [esp + 0x5c]
call fcn.00424440
add esp, 8
cmp dword [esp + 0x30], esi
jb 0x427850
mov edx, dword [esp + 0x1c]
push edx
call fcn.0045a870
add esp, 4
lea eax, [esp + 0x54]
lea ecx, [edi + 0x26c]
lea ebx, [eax + 2]
lea ecx, [ecx]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x427860
sub eax, ebx
sar eax, 1
push eax
lea eax, [esp + 0x58]
push eax
call fcn.00424800
push 0x7d0
lea ecx, [esp + 0x58]
push 0
push ecx
call fcn.0047dfc0
add esp, 0xc
cmp dword [edi + 0x74], esi
lea edx, [esp + 0x18]
jne 0x4278c8
mov ecx, 0xa6
call fcn.00432a50
cmp dword [eax + 0x18], esi
jb 0x4278ab
mov eax, dword [eax + 4]
jmp 0x4278ae
add eax, 4
push eax
lea edx, [esp + 0x58]
call fcn.00424440
add esp, 4
cmp dword [esp + 0x30], esi
jb 0x4278ff
mov edx, dword [esp + 0x1c]
push edx
jmp 0x4278f7
mov ecx, 0xa8
call fcn.00432a50
cmp dword [eax + 0x18], esi
jb 0x4278dc
mov eax, dword [eax + 4]
jmp 0x4278df
add eax, 4
push eax
lea edx, [esp + 0x58]
call fcn.00424440
add esp, 4
cmp dword [esp + 0x30], esi
jb 0x4278ff
mov eax, dword [esp + 0x1c]
push eax
call fcn.0045a870
add esp, 4
lea eax, [esp + 0x54]
lea ecx, [edi + 0x270]
lea ebx, [eax + 2]
lea esp, [esp]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x427910
sub eax, ebx
sar eax, 1
push eax
lea edx, [esp + 0x58]
push edx
call fcn.00424800
mov ecx, 0x9f
lea edx, [esp + 0x18]
call fcn.00432a50
mov dword [esp + 0x838], 1
cmp dword [eax + 0x18], esi
jb 0x42794d
mov ebx, dword [eax + 4]
jmp 0x427950
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x274]
jne 0x42795e
xor eax, eax
jmp 0x427972
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x427963
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x30], 8
jb 0x42799a
mov eax, dword [esp + 0x1c]
push eax
call fcn.0045a870
add esp, 4
mov ecx, 0xa0
lea edx, [esp + 0x18]
call fcn.00432a50
mov dword [esp + 0x838], 2
cmp dword [eax + 0x18], 8
jb 0x4279be
mov ebx, dword [eax + 4]
jmp 0x4279c1
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x278]
jne 0x4279cf
xor eax, eax
jmp 0x4279e3
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x4279d4
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x30], 8
jb 0x427a0b
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0045a870
add esp, 4
mov ecx, 0xa9
lea edx, [esp + 0x18]
call fcn.00432a50
mov dword [esp + 0x838], 3
cmp dword [eax + 0x18], 8
jb 0x427a2f
mov ebx, dword [eax + 4]
jmp 0x427a32
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x27c]
jne 0x427a40
xor eax, eax
jmp 0x427a54
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x427a45
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x30], 8
jb 0x427a7c
mov edx, dword [esp + 0x1c]
push edx
call fcn.0045a870
add esp, 4
mov ecx, 0xa1
lea edx, [esp + 0x18]
call fcn.00432a50
mov dword [esp + 0x838], 4
cmp dword [eax + 0x18], 8
jb 0x427aa0
mov ebx, dword [eax + 4]
jmp 0x427aa3
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x284]
jne 0x427ab1
xor eax, eax
jmp 0x427ac5
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x427ab6
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x30], 8
jb 0x427aed
mov eax, dword [esp + 0x1c]
push eax
call fcn.0045a870
add esp, 4
mov ecx, 0xa4
lea edx, [esp + 0x18]
call fcn.00432a50
mov dword [esp + 0x838], 5
cmp dword [eax + 0x18], 8
jb 0x427b11
mov ebx, dword [eax + 4]
jmp 0x427b14
lea ebx, [eax + 4]
test ebx, ebx
lea esi, [edi + 0x280]
jne 0x427b22
xor eax, eax
jmp 0x427b36
mov eax, ebx
lea ecx, [eax + 2]
mov dx, word [eax]
add eax, 2
test dx, dx
jne 0x427b27
sub eax, ecx
sar eax, 1
push eax
push ebx
mov ecx, esi
call fcn.00424800
mov dword [esp + 0x838], 0xffffffff
cmp dword [esp + 0x30], 8
jb 0x427b5e
mov ecx, dword [esp + 0x1c]
push ecx
call fcn.0045a870
add esp, 4
mov ecx, 0x98
lea edx, [esp + 0x18]
call fcn.00432a50
mov esi, 8
mov dword [esp + 0x838], 6
cmp dword [eax + 0x18], esi
jb 0x427b86
mov eax, dword [eax + 4]
jmp 0x427b89
add eax, 4
push eax
lea ecx, [edi + 0x10c]
call fcn.00460774
or ebx, 0xffffffff
mov dword [esp + 0x838], ebx
cmp dword [esp + 0x30], esi
jb 0x427bb2
mov edx, dword [esp + 0x1c]
push edx
call fcn.0045a870
add esp, 4
mov ecx, 0x75
lea edx, [esp + 0x38]
call fcn.00432a50
mov dword [esp + 0x838], 7
cmp dword [eax + 0x18], esi
jb 0x427bd5
mov eax, dword [eax + 4]
jmp 0x427bd8
add eax, 4
push eax
lea ecx, [edi + 0x160]
call fcn.00460774
mov dword [esp + 0x838], ebx
cmp dword [esp + 0x50], esi
jb 0x427bfe
mov eax, dword [esp + 0x3c]
push eax
call fcn.0045a870
add esp, 4
mov ecx, dword [edi + 0xdc]
mov edx, dword [edi + 0x2d0]
push ecx
xor esi, esi
push esi
push 0x172
push edx
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], esi
mov word [esp + 0x4c], si
call dword [sym.imp.USER32.dll_SendMessageW]
push esi
mov ecx, edi
call fcn.0045d29a
mov eax, dword [esp + 0x34]
cmp eax, esi
je 0x427c42
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, 1
mov ecx, dword [esp + 0x830]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x818]
xor ecx, esp
call fcn.00478599
mov esp, ebp
pop ebp
ret