Function at 0x1004ebdb
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x2e8
mov eax, 0x101df431
call fcn.1005d984
mov dword [ebp - 0x27c], ecx
mov esi, dword [0x10296350]
lea ecx, [ebp - 0x2f4]
call fcn.100594e0
and dword [ebp - 4], 0
push 0x101e893c
push str.Symbol
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
test edi, edi
je 0x1004f1d1
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
lea eax, [ebp - 0x270]
lea esi, [edi + 1]
push esi
push eax
call fcn.1004dd42
push esi
mov esi, dword [ebp - 0x270]
push 0
push esi
mov byte [ebp - 4], 1
call fcn.10079740
push edi
push ebx
push esi
call fcn.1008e620
add esp, 0x20
lea ecx, [ebp - 0x2f4]
push 0
push 0
push esi
call fcn.1005c180
push 0x101eb0ac
lea ecx, [ebp - 0x2f4]
call fcn.1005a120
test eax, eax
je 0x1004f1c6
mov ecx, eax
call fcn.1005a1c0
jmp 0x1004f1a5
push 0x208
lea eax, [ebp - 0x240]
push 0
push eax
call fcn.10079740
add esp, 0xc
mov ecx, ebx
push 0x101eafb4
call fcn.10059a30
lea ecx, [ebp - 0x240]
push ecx
push eax
call fcn.10074257
pop ecx
pop ecx
mov ecx, ebx
call fcn.1005a1c0
mov edi, eax
push 0x24
mov dword [ebp - 0x268], edi
call fcn.1005d5a3
pop ecx
mov dword [ebp - 0x280], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x1004ecfe
mov ecx, eax
call fcn.1004dc1b
mov ebx, eax
jmp 0x1004ed00
xor ebx, ebx
mov byte [ebp - 4], 1
mov dword [ebp - 0x278], ebx
test ebx, ebx
je 0x1004f1c6
mov ecx, ebx
call fcn.1004dd03
test eax, eax
je 0x1004f1c6
lea eax, [ebp - 0x240]
mov ecx, ebx
push eax
call fcn.1004dd36
and dword [ebp - 0x264], 0
mov ecx, ebx
call fcn.1004dcff
mov dword [ebp - 0x274], eax
jmp 0x1004f16d
push 8
call fcn.1005d5a3
mov edi, eax
pop ecx
mov dword [ebp - 0x284], edi
mov byte [ebp - 4], 3
test edi, edi
je 0x1004ed72
and dword [edi], 0
mov ecx, edi
and dword [edi + 4], 0
call fcn.1002c1d3
mov dword [edi], eax
jmp 0x1004ed74
xor edi, edi
and dword [ebp - 0x260], 0
lea ecx, [ebp - 0x260]
and dword [ebp - 0x25c], 0
push edi
mov byte [ebp - 4], 1
call fcn.10029537
cmp dword [ebp - 0x260], 0
mov byte [ebp - 4], 4
setne al
test al, al
je 0x1004f1b7
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x268]
mov ecx, edi
push 0x101eb594
call fcn.10059a30
test eax, eax
je 0x1004f1b7
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x248], 0
xor eax, eax
push str.text
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push str.text
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 5
push eax
call fcn.10029758
cmp word [ebp - 0x38], 0
jne 0x1004ee36
xor eax, eax
jmp 0x1004ee40
lea eax, [ebp - 0x38]
push eax
call fcn.1008133f
pop ecx
mov ecx, dword [ebp - 0x28c]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eafb4
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x1004ef14
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x248], 0
xor eax, eax
push 0x101e56a8
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push 0x101e56a8
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 6
push eax
call fcn.10029758
cmp word [ebp - 0x38], 0
jne 0x1004eee4
xor eax, eax
jmp 0x1004eeee
lea eax, [ebp - 0x38]
push eax
call fcn.1008133f
pop ecx
mov ecx, dword [ebp - 0x294]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5a8
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x1004efc2
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x248], 0
xor eax, eax
push 0x101eb5ac
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push 0x101eb5ac
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 7
push eax
call fcn.10029758
cmp word [ebp - 0x38], 0
jne 0x1004ef92
xor eax, eax
jmp 0x1004ef9c
lea eax, [ebp - 0x38]
push eax
call fcn.1008133f
pop ecx
mov ecx, dword [ebp - 0x29c]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
push str.page
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x1004f08b
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x248], 0
xor eax, eax
push 0x101eafec
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push 0x101eafec
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2a4]
mov byte [ebp - 4], 8
push eax
call fcn.10029758
cmp word [ebp - 0x38], 0
jne 0x1004f040
xor eax, eax
jmp 0x1004f04a
lea eax, [ebp - 0x38]
push eax
call fcn.1008133f
pop ecx
mov ecx, dword [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
lea eax, [ebp - 0x38]
push eax
call fcn.10088846
pop ecx
mov ecx, dword [ebp - 0x264]
cmp eax, ecx
cmovg ecx, eax
mov dword [ebp - 0x264], ecx
push 0x101eb5b4
mov ecx, edi
call fcn.10059a30
test eax, eax
je 0x1004f139
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.10074257
and dword [ebp - 0x248], 0
xor eax, eax
push str.type
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.1008133f
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push str.type
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 9
push eax
call fcn.10029758
cmp word [ebp - 0x38], 0
jne 0x1004f109
xor eax, eax
jmp 0x1004f113
lea eax, [ebp - 0x38]
push eax
call fcn.1008133f
pop ecx
mov ecx, dword [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
mov ecx, dword [ebp - 0x274]
lea eax, [ebp - 0x260]
push eax
call fcn.10034689
mov ecx, edi
call fcn.1005a5f0
mov ecx, dword [ebp - 0x25c]
mov edi, eax
mov dword [ebp - 0x268], edi
mov byte [ebp - 4], 1
test ecx, ecx
je 0x1004f16d
call fcn.10021ddf
test edi, edi
jne 0x1004ed48
push dword [ebp - 0x264]
mov ecx, ebx
call fcn.10002d50
lea eax, [ebp - 0x278]
push eax
mov eax, dword [ebp - 0x27c]
mov ecx, dword [eax + 0x3e8]
call fcn.1004363a
mov ecx, dword [ebp - 0x26c]
call fcn.1005a5f0
mov ebx, eax
mov dword [ebp - 0x26c], ebx
test ebx, ebx
jne 0x1004ec9d
jmp 0x1004f1c6
mov ecx, dword [ebp - 0x25c]
test ecx, ecx
je 0x1004f1c6
call fcn.10021ddf
test esi, esi
je 0x1004f1d1
push esi
call fcn.1005d5e4
pop ecx
lea ecx, [ebp - 0x2f4]
call fcn.10029b18
call fcn.1005d93f
ret