Function at 0x4cda14
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x2cc
push ebx
xor ebx, ebx
push esi
push edi
mov dword [esp + 0x38], ebx
cmp dword [ebp + 0x10], ebx
jne 0x4cda35
xor eax, eax
jmp 0x4cdf83
lea esi, [esp + 0x44]
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x28], ebx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x24], ebx
call fcn.0041e729
lea eax, [esp + 0x20]
call fcn.0041ba58
cmp dword [esp + 0x44], ebx
je 0x4cdf6d
lea ecx, [esp + 0xa0]
mov eax, esi
call fcn.00435802
mov esi, dword [eax]
mov eax, dword [esp + 0x20]
cmp eax, ebx
je 0x4cda83
mov dword [esp + 0x20], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [esp + 0x20]
push ecx
mov dword [esp + 0x24], ebx
mov eax, dword [esi]
push esi
call dword [eax + 0x10]
test eax, eax
jl 0x4cdf6d
xor eax, eax
push 0x206
mov word [esp + 0xd4], ax
lea eax, [esp + 0xd6]
push ebx
push eax
call fcn.004ee670
add esp, 0xc
lea ecx, [esp + 0xa0]
lea eax, [esp + 0x20]
call fcn.00435802
mov eax, dword [eax]
mov ecx, dword [eax]
push 0x53f98c
push eax
call dword [ecx + 0x2c]
push eax
push 0x53f4bc
mov ecx, 0x104
lea edi, [esp + 0xdc]
call fcn.004530ab
add esp, 0xc
mov eax, edi
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [esp + 0x34], eax
cmp eax, ebx
je 0x4cdf6d
mov esi, dword [sym.imp.USER32.dll_GetSystemMetrics]
push ebx
push 0xc
call esi
push eax
push 0xb
call esi
mov esi, dword [sym.imp.USER32.dll_LoadImageW]
push eax
push 1
push 0x64
push dword [esp + 0x48]
call esi
push ebx
push 0x30
push 0x30
push 1
push 0x64
push dword [esp + 0x48]
mov edi, eax
mov dword [esp + 0x58], edi
call esi
lea esi, [esp + 0xc]
mov dword [esp + 0x2c], eax
call fcn.00431afc
cmp edi, ebx
je 0x4cdf14
cmp dword [esp + 0xc], ebx
je 0x4cdf14
mov eax, dword [esp + 0x2c]
cmp eax, ebx
je 0x4cdf14
mov dword [esp + 0x48], edi
mov dword [esp + 0x4c], eax
cmp dword [ebp + 0xc], ebx
je 0x4cdeee
cmp dword [ebp + 0xc], 0x270f
ja 0x4cdeee
push ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov edi, dword [sym.imp.KERNEL32.dll_FindResourceW]
push 0x536fb4
push 0x3e8
push eax
mov dword [esp + 0x20], eax
call edi
mov esi, eax
push esi
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push dword [esp + 0x18]
mov dword [esp + 0x20], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
lea esi, [esp + 0x10]
mov dword [esp + 0x1c], eax
call fcn.00401fed
cmp dword [esp + 0x10], ebx
je 0x4cdbfe
cmp dword [esp + 0x1c], ebx
je 0x4cdbfe
lea ecx, [esp + 0xa0]
mov eax, esi
call fcn.00435802
push dword [esp + 0x18]
mov eax, dword [eax]
push dword [esp + 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov dword [esp + 0x24], eax
cmp eax, ebx
jne 0x4cdc0c
lea eax, [esp + 0x10]
call fcn.0042e22a
jmp 0x4cdf14
lea eax, [esp + 0x50]
push eax
push dword [esp + 0x44]
call dword [sym.imp.USER32.dll_GetIconInfo]
push 0x80
push 0x20
push 0x20
push dword [esp + 0x6c]
call fcn.004cd9d4
add esp, 0x10
test eax, eax
je 0x4cdbfe
push dword [ebp + 0xc]
push dword [esp + 0x28]
push dword [esp + 0x68]
call fcn.004cd42e
add esp, 0xc
test eax, eax
je 0x4cdbfe
push dword [esp + 0x60]
mov eax, dword [esp + 0x60]
call fcn.004cd217
mov esi, dword [sym.imp.USER32.dll_CreateIconIndirect]
pop ecx
lea eax, [esp + 0x50]
push eax
call esi
push dword [esp + 0x60]
mov dword [esp + 0x2c], eax
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [esp + 0x5c]
call dword [sym.imp.GDI32.dll_DeleteObject]
cmp dword [esp + 0x28], ebx
je 0x4cdbfe
lea eax, [esp + 0x64]
push eax
push dword [esp + 0x30]
call dword [sym.imp.USER32.dll_GetIconInfo]
push 0xc0
push 0x30
push 0x30
push dword [esp + 0x80]
call fcn.004cd9d4
add esp, 0x10
test eax, eax
je 0x4cdbfe
push dword [ebp + 0xc]
push dword [esp + 0x28]
push dword [esp + 0x7c]
call fcn.004cd42e
add esp, 0xc
test eax, eax
je 0x4cdbfe
push dword [esp + 0x74]
mov eax, dword [esp + 0x74]
call fcn.004cd217
pop ecx
lea eax, [esp + 0x64]
push eax
call esi
push dword [esp + 0x74]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
mov dword [esp + 0x34], eax
call esi
push dword [esp + 0x70]
call esi
mov eax, dword [esp + 0x30]
cmp eax, ebx
je 0x4cdbfe
mov ecx, dword [esp + 0x28]
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], eax
lea ecx, [esp + 0xb0]
lea eax, [esp + 0xc]
call fcn.00435802
push dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push 2
lea edx, [esp + 0x50]
push edx
push eax
call dword [ecx + 0x2c]
mov dword [esp + 0x3c], eax
cmp dword [ebp + 0x14], ebx
je 0x4cdbfe
push 0x536fb4
push 0x4b8
push dword [esp + 0x1c]
call edi
mov esi, eax
push esi
push dword [esp + 0x18]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push dword [esp + 0x18]
mov dword [esp + 0x40], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
je 0x4cdbfe
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
cmp edi, ebx
je 0x4cdbfe
lea esi, [esp + 0x18]
call fcn.00401fed
cmp dword [esp + 0x18], ebx
je 0x4cddbb
lea ecx, [esp + 0xb0]
mov eax, esi
call fcn.00435802
push dword [esp + 0x38]
mov eax, dword [eax]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x10]
mov dword [esp + 0x14], eax
cmp eax, ebx
jne 0x4cddc9
lea eax, [esp + 0x18]
call fcn.0042e22a
jmp 0x4cdbfe
push 0x10
pop esi
push 0xa
pop ecx
cmp dword [ebp + 0xc], ecx
jae 0x4cddd8
mov edx, esi
jmp 0x4cddf2
cmp dword [ebp + 0xc], 0x64
jae 0x4cdde3
push 0x17
pop edx
jmp 0x4cddf2
cmp dword [ebp + 0xc], 0x3e8
sbb edx, edx
and edx, 0xfffffffa
add edx, 0x25
xor eax, eax
push 0x20
lea edi, [esp + 0x7c]
rep stosd dword es:[edi], eax
inc eax
mov word [esp + 0x88], ax
pop eax
push ebx
push ebx
mov word [esp + 0x8e], ax
lea eax, [esp + 0x40]
push eax
push ebx
lea eax, [esp + 0x88]
push eax
push ebx
mov dword [esp + 0x90], 0x28
mov dword [esp + 0x94], edx
mov dword [esp + 0x98], esi
mov dword [esp + 0xa0], ebx
mov dword [esp + 0xa4], ebx
mov dword [esp + 0xa8], ebx
mov dword [esp + 0xac], ebx
mov dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
call dword [sym.imp.GDI32.dll_CreateDIBSection]
push dword [ebp + 0xc]
mov edi, eax
push dword [esp + 0x18]
push edi
call fcn.004cd42e
add esp, 0xc
test eax, eax
je 0x4cddbb
push dword [ebp + 0x10]
lea ecx, [esp + 0x20]
call fcn.00401f01
push 0x54c7b0
push 0x104
lea ecx, [esp + 0x24]
call fcn.00401db6
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
or eax, 0xffffffff
lea esi, [esp + 0x1c]
call fcn.004048ba
lea ecx, [esp + 0xc0]
lea eax, [esp + 0x18]
call fcn.00435802
push dword [esp + 0x1c]
mov eax, dword [eax]
mov ecx, dword [eax]
push edi
push eax
call dword [ecx + 0x14]
mov esi, dword [sym.imp.GDI32.dll_DeleteObject]
push edi
call esi
push dword [esp + 0x14]
call esi
lea ecx, [esp + 0x1c]
call fcn.00402996
jmp 0x4cddbb
lea ecx, [esp + 0xc0]
lea eax, [esp + 0xc]
call fcn.00435802
push dword [ebp + 0x10]
mov eax, dword [eax]
mov ecx, dword [eax]
push 2
lea edx, [esp + 0x50]
push edx
push eax
call dword [ecx + 0x2c]
mov dword [esp + 0x3c], eax
lea eax, [esp + 0xc]
call fcn.0042e22a
mov esi, dword [sym.imp.USER32.dll_DestroyIcon]
cmp dword [esp + 0x40], ebx
je 0x4cdf2f
push dword [esp + 0x40]
call esi
cmp dword [esp + 0x2c], ebx
je 0x4cdf3b
push dword [esp + 0x2c]
call esi
cmp dword [esp + 0x28], ebx
je 0x4cdf47
push dword [esp + 0x28]
call esi
cmp dword [esp + 0x30], ebx
je 0x4cdf53
push dword [esp + 0x30]
call esi
cmp dword [esp + 0x24], ebx
je 0x4cdf63
push dword [esp + 0x24]
call dword [sym.imp.GDI32.dll_DeleteObject]
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea eax, [esp + 0x20]
call fcn.0042e22a
lea eax, [esp + 0x44]
call fcn.0042e22a
mov eax, dword [esp + 0x3c]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x10