Function at 0x454c40
Capabilities:
Extract resource via kernel32 functions
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x114
push ebx
push esi
mov esi, dword [ebp + 0x10]
mov ebx, ecx
push edi
mov dword [esp + 0x14], ebx
mov edx, esi
nop word [eax + eax]
mov al, byte [edx]
cmp al, 0x20
je 0x454c6a
cmp al, 9
jne 0x454c6d
inc edx
jmp 0x454c60
test al, al
je 0x454cb1
cmp al, 0x2d
je 0x454c79
cmp al, 0x2b
jne 0x454c80
lea eax, [edx + 1]
mov edx, eax
mov al, byte [eax]
cmp al, 0x30
jne 0x454cb1
mov al, byte [edx + 1]
cmp al, 0x78
je 0x454c8f
cmp al, 0x58
jne 0x454cb1
movsx eax, byte [edx + 2]
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isxdigit]
add esp, 4
test eax, eax
je 0x454cb1
push 0x10
push 0
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
add esp, 0xc
jmp 0x454cbb
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov esi, dword [ebp + 0xc]
cmp eax, 1
je 0x454d02
mov ecx, esi
call fcn.0046dc70
test al, al
je 0x454d02
mov eax, dword [0x4c8024]
test byte [eax + 0xe0], 1
jne 0x454cfb
mov ecx, dword [0x4ca738]
push 1
push 0
push 0xffffffffffffffff
push 0x4bb578
call fcn.004a2db0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
mov ecx, ebx
jmp 0x454e4b
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x454cce
mov edx, dword [ebp + 8]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x454d27
sub ecx, esi
mov eax, 0x103
cmp ecx, 0x104
cmovae ecx, eax
lea eax, [ecx + 1]
push eax
push edx
lea eax, [esp + 0x20]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
lea eax, [esp + 0x18]
push eax
call dword [sym.imp.api_ms_win_crt_multibyte_l1_1_0.dll__mbsupr]
add esp, 4
lea eax, [esp + 0x18]
push 0xa
push eax
push 0
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov ebx, eax
test ebx, ebx
je 0x454e2e
push ebx
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x454e2e
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov esi, eax
test esi, esi
je 0x454e2e
cmp dword [esi], 0x4034b50
mov eax, dword [sym.imp.KERNEL32.dll_SizeofResource]
jne 0x454dea
push 0
push ebx
push 0
call eax
push eax
lea edx, [esp + 0x14]
mov ecx, esi
call fcn.004a1f90
add esp, 8
test eax, eax
je 0x454de5
mov esi, dword [esp + 0xc]
lea ecx, [esp + 0x10]
push 0
push ecx
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
push esi
setne bl
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
jmp 0x454e04
mov eax, dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
lea ecx, [esp + 0x14]
push ecx
push ebx
push 0
call eax
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
setne bl
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test bl, bl
je 0x454e35
mov ecx, dword [0x4ca738]
push 1
push 0
push 0xffffffffffffffff
push 0x4b6c08
call fcn.004a2db0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [0x4c8024]
test byte [eax + 0xe0], 1
je 0x454cdc
mov ecx, dword [esp + 0x14]
push 0x4b6ba9
push 0
push 0x4bb578
call fcn.0043e6c0
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0xc