Function at 0x493537
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffbc
push ebx
push esi
push edi
mov esi, dword [ebp + 0xc]
mov eax, 0x4cd831
call fcn.0049d698
xor ebx, ebx
mov word [ebp - 0x1c], 8
lea eax, [ebp - 4]
push eax
call fcn.004aa26c
pop ecx
inc dword [ebp - 0x10]
mov word [ebp - 0x1c], 0x14
mov edx, dword [ebp + 0x10]
shr edx, 4
inc edx
mov dword [ebp - 0x34], edx
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x38], ecx
push 6
push dword [ebp - 0x38]
push dword [esi + 8]
call sub.KERNEL32.dll_FindResourceA
mov edi, eax
test edi, edi
je 0x4936c8
mov dword [ebp - 0x3c], edi
push dword [ebp - 0x3c]
push dword [esi + 8]
call sub.KERNEL32.dll_LoadResource
mov dword [ebp - 0x30], eax
test eax, eax
je 0x4936c8
push dword [ebp - 0x30]
call sub.KERNEL32.dll_LockResource
mov edi, eax
test eax, eax
je 0x493670
mov eax, dword [ebp + 0x10]
and eax, 0xf
jmp 0x4935c6
add ebx, ebx
add edi, ebx
mov bx, word [edi]
add edi, 2
movzx ebx, bx
mov edx, eax
add eax, 0xffffffff
test edx, edx
jne 0x4935c2
test ebx, ebx
je 0x493670
push 0
push 0
push 0
push 0
push ebx
push edi
push 0
push 0
call sub.KERNEL32.dll_WideCharToMultiByte
mov dword [ebp - 0x40], eax
mov word [ebp - 0x1c], 0x14
mov word [ebp - 0x1c], 0x2c
mov eax, dword [ebp - 0x40]
inc eax
push eax
call fcn.004a78f4
pop ecx
mov dword [ebp - 8], eax
inc dword [ebp - 0x10]
mov word [ebp - 0x1c], 0x20
push 0
push 0
mov ecx, dword [ebp - 0x40]
inc ecx
push ecx
push dword [ebp - 8]
push ebx
push edi
push 0
push 0
call sub.KERNEL32.dll_WideCharToMultiByte
mov ebx, eax
push ebx
lea eax, [ebp - 4]
push eax
call fcn.004aa994
add esp, 8
xor edi, edi
cmp ebx, edi
jbe 0x493664
mov dword [ebp - 0x44], edi
push dword [ebp - 0x44]
lea eax, [ebp - 4]
push eax
call fcn.004aa874
add esp, 8
mov edx, dword [ebp - 8]
mov cl, byte [edx + edi]
mov byte [eax], cl
inc edi
cmp ebx, edi
ja 0x493645
dec dword [ebp - 0x10]
push dword [ebp - 8]
call fcn.004a789c
pop ecx
push dword [ebp - 0x30]
call sub.KERNEL32.dll_FreeResource
test ebx, ebx
je 0x4936c8
mov word [ebp - 0x1c], 0x38
lea eax, [ebp - 4]
push eax
push dword [ebp + 8]
call fcn.004aa2d8
add esp, 8
inc dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov word [ebp - 0x1c], 0x44
push eax
dec dword [ebp - 0x10]
push 2
lea edx, [ebp - 4]
push edx
call fcn.004aac40
add esp, 8
pop eax
mov word [ebp - 0x1c], 0x38
inc dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
jmp 0x493765
cmp esi, dword [0x4ce698]
je 0x49371e
mov word [ebp - 0x1c], 0x50
push dword [ebp + 0x10]
push dword [0x4ce698]
push dword [ebp + 8]
call fcn.00493537
add esp, 0xc
inc dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov word [ebp - 0x1c], 0x5c
push eax
dec dword [ebp - 0x10]
push 2
lea edx, [ebp - 4]
push edx
call fcn.004aac40
add esp, 8
pop eax
mov word [ebp - 0x1c], 0x50
inc dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
jmp 0x493765
mov word [ebp - 0x1c], 0x68
lea ecx, [ebp - 4]
push ecx
push dword [ebp + 8]
call fcn.004aa2d8
add esp, 8
inc dword [ebp - 0x10]
mov eax, dword [ebp + 8]
mov word [ebp - 0x1c], 0x74
push eax
dec dword [ebp - 0x10]
push 2
lea edx, [ebp - 4]
push edx
call fcn.004aac40
add esp, 8
pop eax
mov word [ebp - 0x1c], 0x68
inc dword [ebp - 0x10]
mov edx, dword [ebp - 0x2c]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret