Function at 0x104c221
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 8
mov eax, 0x10dbd11
call fcn.010a0c60
mov eax, dword [0x10ed030]
cmp eax, 0x10ed030
je 0x104c25f
test byte [eax + 0x1c], 1
je 0x104c25f
cmp byte [eax + 0x19], 5
jb 0x104c25f
push dword [ebp + 8]
push 0x1004f00
push 0x13
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010294b2
mov eax, dword [0x10ed030]
mov ecx, dword [0x10efca8]
mov dword [ebp - 0x14], ecx
mov ebx, 0xffff
mov edi, 0x80070000
test ecx, ecx
jne 0x104c28d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x104c284
and eax, ebx
or eax, edi
mov esi, eax
mov eax, dword [0x10ed030]
jmp 0x104c28f
xor esi, esi
cmp eax, 0x10ed030
je 0x104c2ba
test byte [eax + 0x1c], 2
je 0x104c2ba
cmp byte [eax + 0x19], 4
jb 0x104c2ba
push esi
push 0x1004f00
push 0x14
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010294b2
mov eax, dword [0x10ed030]
and dword [ebp - 0x10], 0
cmp dword [ebp - 0x14], 0
je 0x104c322
movzx eax, word [ebp + 8]
push 0x3f9
push eax
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x10], eax
test eax, eax
jne 0x104c2f0
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x104c2ec
and eax, ebx
or eax, edi
mov esi, eax
jmp 0x104c2f2
xor esi, esi
mov eax, dword [0x10ed030]
cmp eax, 0x10ed030
je 0x104c322
test byte [eax + 0x1c], 2
je 0x104c322
cmp byte [eax + 0x19], 4
jb 0x104c322
push esi
push 0x1004f00
push 0x15
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010294b2
mov eax, dword [0x10ed030]
and dword [ebp + 8], 0
cmp dword [ebp - 0x10], 0
je 0x104c383
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp + 8], eax
test eax, eax
jne 0x104c351
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x104c34d
and eax, ebx
or eax, edi
mov esi, eax
jmp 0x104c353
xor esi, esi
mov eax, dword [0x10ed030]
cmp eax, 0x10ed030
je 0x104c383
test byte [eax + 0x1c], 2
je 0x104c383
cmp byte [eax + 0x19], 4
jb 0x104c383
push esi
push 0x1004f00
push 0x16
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010294b2
mov eax, dword [0x10ed030]
cmp dword [ebp + 8], 0
je 0x104c49c
push dword [ebp - 0x10]
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x14], eax
test eax, eax
jne 0x104c3b2
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x104c3ae
and eax, ebx
or eax, edi
mov esi, eax
jmp 0x104c3b4
xor esi, esi
mov eax, dword [0x10ed030]
cmp eax, 0x10ed030
je 0x104c3e7
test byte [eax + 0x1c], 2
je 0x104c3e7
cmp byte [eax + 0x19], 4
jb 0x104c3e7
push esi
mov ebx, 0x1004f00
push ebx
push 0x17
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010294b2
mov eax, dword [0x10ed030]
jmp 0x104c3ec
mov ebx, 0x1004f00
cmp dword [ebp - 0x14], 0
je 0x104c4a1
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
mov esi, edi
neg esi
sbb esi, esi
and esi, 0x7fffbffb
add esi, 0x80004005
mov eax, dword [0x10ed030]
cmp eax, 0x10ed030
je 0x104c43f
test byte [eax + 0x1c], 2
je 0x104c43f
cmp byte [eax + 0x19], 4
jb 0x104c43f
push esi
push ebx
push 0x18
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010294b2
mov eax, dword [0x10ed030]
test edi, edi
je 0x104c4a1
cmp eax, 0x10ed030
je 0x104c464
test byte [eax + 0x1c], 2
je 0x104c464
cmp byte [eax + 0x19], 4
jb 0x104c464
push ebx
push 0x19
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01027e15
push 0x10f1178
lea ecx, [ebp + 8]
call fcn.0102847f
push dword [ebp - 0x14]
and dword [ebp - 4], 0
push edi
lea ecx, [ebp + 8]
call fcn.0104bf70
mov edi, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
push edi
call fcn.0104bcd1
lea ecx, [edi - 0x10]
call fcn.01028079
mov eax, dword [0x10ed030]
jmp 0x104c4a1
mov ebx, 0x1004f00
cmp eax, 0x10ed030
je 0x104c4d2
test byte [eax + 0x1c], 1
je 0x104c4d2
movzx ecx, byte [eax + 0x19]
xor edx, edx
test esi, esi
setl dl
dec edx
and edx, 3
inc edx
inc edx
cmp ecx, edx
jl 0x104c4d2
push esi
push ebx
push 0x1a
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010294b2
mov eax, esi
call fcn.010a0d4c
ret 8