Function at 0x490dab
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffbc
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov eax, 0x4cbadd
call fcn.0049af0c
xor ebx, ebx
mov word [ebp - 0x1c], 8
lea eax, [ebp - 4]
push eax
call fcn.004a7930
pop ecx
inc dword [ebp - 0x10]
mov word [ebp - 0x1c], 0x14
mov edx, dword [ebp + 0x10]
shr edx, 4
inc edx
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x38], ecx
push 6
push dword [ebp - 0x38]
push dword [esi + 8]
call sub.KERNEL32.dll_FindResourceA
mov edi, eax
test edi, edi
je 0x490f3c
mov dword [ebp - 0x3c], edi
push dword [ebp - 0x3c]
push dword [esi + 8]
call sub.KERNEL32.dll_LoadResource
mov dword [ebp - 0x30], eax
test eax, eax
je 0x490f3c
push dword [ebp - 0x30]
call sub.KERNEL32.dll_LockResource
mov edi, eax
test eax, eax
je 0x490ee4
mov eax, dword [ebp + 0x10]
and eax, 0xf
jmp 0x490e3a
add ebx, ebx
add edi, ebx
mov bx, word [edi]
add edi, 2
movzx ebx, bx
mov edx, eax
add eax, 0xffffffff
test edx, edx
jne 0x490e36
test ebx, ebx
je 0x490ee4
push 0
push 0
push 0
push 0
push ebx
push edi
push 0
push 0
call sub.KERNEL32.dll_WideCharToMultiByte
mov dword [ebp - 0x40], eax
mov word [ebp - 0x1c], 0x14
mov word [ebp - 0x1c], 0x2c
mov eax, dword [ebp - 0x40]
inc eax
push eax
call fcn.004a4fc0
pop ecx
mov dword [ebp - 8], eax
inc dword [ebp - 0x10]
mov word [ebp - 0x1c], 0x20
push 0
push 0
mov ecx, dword [ebp - 0x40]
inc ecx
push ecx
push dword [ebp - 8]
push ebx
push edi
push 0
push 0
call sub.KERNEL32.dll_WideCharToMultiByte
mov ebx, eax
push ebx
lea eax, [ebp - 4]
push eax
call fcn.004a8058
add esp, 8
xor edi, edi
cmp ebx, edi
jbe 0x490ed8
mov dword [ebp - 0x44], edi
push dword [ebp - 0x44]
lea eax, [ebp - 4]
push eax
call fcn.004a7f38
add esp, 8
mov edx, dword [ebp - 8]
mov cl, byte [edx + edi]
mov byte [eax], cl
inc edi
cmp ebx, edi
ja 0x490eb9
dec dword [ebp - 0x10]
push dword [ebp - 8]
call fcn.004a4f68
pop ecx
push dword [ebp - 0x30]
call sub.KERNEL32.dll_FreeResource
test ebx, ebx
je 0x490f3c
mov word [ebp - 0x1c], 0x38
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
call fcn.004a799c
add esp, 8
inc dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov word [ebp - 0x1c], 0x44
push eax
dec dword [ebp - 0x10]
push 2
lea edx, [ebp - 4]
push edx
call fcn.004a8304
add esp, 8
pop eax
mov word [ebp - 0x1c], 0x38
inc dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
jmp 0x490fd9
cmp esi, dword [0x4cc944]
je 0x490f92
mov word [ebp - 0x1c], 0x50
push dword [ebp + 0x10]
push dword [0x4cc944]
push dword [ebp + 8]
call fcn.00490dab
add esp, 0xc
inc dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov word [ebp - 0x1c], 0x5c
push eax
dec dword [ebp - 0x10]
push 2
lea edx, [ebp - 4]
push edx
call fcn.004a8304
add esp, 8
pop eax
mov word [ebp - 0x1c], 0x50
inc dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
jmp 0x490fd9
mov word [ebp - 0x1c], 0x68
lea ecx, [ebp - 4]
push ecx
push dword [ebp + 8]
call fcn.004a799c
add esp, 8
inc dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov word [ebp - 0x1c], 0x74
push eax
dec dword [ebp - 0x10]
push 2
lea edx, [ebp - 4]
push edx
call fcn.004a8304
add esp, 8
pop eax
mov word [ebp - 0x1c], 0x68
inc dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret