Function at 0x10024f49
Capabilities:
Extract resource via kernel32 functions
Get common file path

Disassembly:
mov eax, 0x10084417
call fcn.10083320
sub esp, 0x5c
push esi
push edi
push 3
pop edi
mov esi, ecx
lea ecx, [ebp - 0x58]
push edi
call fcn.10025495
xor edx, edx
mov dword [ebp - 4], edx
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x14], edx
jmp 0x10024f8a
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x58]
mov dword [eax + ecx*4], 0xc93b
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10024f7a
push ebx
push 1
mov dword [ebp - 0x18], edx
pop ebx
jmp 0x10025024
push ebx
lea ecx, [ebp - 0x4c]
call fcn.10025495
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1c], 0xe008fb0b
push edi
call fcn.10025495
xor edx, edx
mov dword [ebp - 0x14], edx
jmp 0x10024fce
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x4c]
mov dword [eax + ecx*4], 0x13e13a6c
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jl 0x10024fbe
mov dword [ebp - 0x14], edx
jmp 0x10024fe4
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10024fd8
mov eax, dword [ebp - 0x34]
mov dword [eax + 4], ebx
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], dl
je 0x1002500d
push 0x1d60
push edx
push 0x172e
push 0x19f9
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
lea ecx, [ebp - 0x34]
call fcn.1002554b
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0
call fcn.1002554b
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10024f9b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x58]
call fcn.1002554b
push esi
push ebx
call fcn.10020630
pop ecx
pop ecx
push edi
lea ecx, [ebp - 0x40]
call fcn.10025495
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x18], 0
jmp 0x1002506c
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x40]
mov dword [eax + ecx*4], 0xff0ea75c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x1002505c
mov byte [ebp - 0xd], 0
cmp byte [ebp - 0xd], 0
je 0x10025083
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
push 2
mov dword [ebp - 0x14], 0
pop edi
jmp 0x100250cd
mov dword [ebp - 0x1c], 0xbbef7d65
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0x14]
add eax, dword [ecx + edx*4]
mov dword [ebp - 0x1c], eax
xor eax, eax
mov byte [ebp - 0xd], al
cmp byte [ebp - 0xd], al
je 0x100250ca
push eax
push 0x1052
push eax
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jle 0x1002508f
lea ecx, [ebp - 0x40]
call fcn.1002554b
push esi
call fcn.10043427
mov dword [ebp - 0x18], 0x42c7
xor edx, edx
mov dword [ebp - 0x1c], edx
mov esi, eax
mov dword [ebp - 0x1c], 0xf27779e4
mov dword [ebp - 0x1c], 0xffffffff
mov dword [ebp - 0x1c], 0xcbd72f54
mov dword [ebp - 0x1c], 0xffffffff
pop ecx
mov dword [ebp - 0x14], edx
jmp 0x1002511a
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x68], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 4
jl 0x10025110
mov dword [ebp - 0x14], edx
jmp 0x10025133
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x28], 0xa2b52f10
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x10025125
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0x455d89f
mov dword [ebp - 0x18], 0x32f8
mov dword [ebp - 0x18], edx
jmp 0x10025166
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x20], 0xcb0b9d62
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jl 0x10025158
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], dl
je 0x10025183
push edx
push 0xe47
push edx
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
xor edx, edx
mov ecx, 0xd177
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x1c]
dec dword [ebp - 0x1c]
cmp eax, ecx
cmovge ebx, edx
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0xd], dl
cmp byte [ebp - 0xd], 0
pop ebx
je 0x100251aa
push edx
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret