Function at 0x1049ce4
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x20
mov eax, 0x10b4125
call fcn.0101df4b
mov ebx, ecx
and dword [ebx + 0x10c], 0
mov esi, dword [0x10c568c]
mov dword [ebp - 0x14], esi
test esi, esi
je 0x1049e3c
push 0
xor edi, edi
inc edi
push edi
push esi
call fcn.0104c09e
test eax, eax
je 0x1049e3c
push edi
push 0x1005d6c
lea ecx, [ebx + 8]
call fcn.010496a1
test eax, eax
jne 0x1049e3c
push edi
push 0x1005d50
lea ecx, [ebx + 0x48]
call fcn.010496a1
test eax, eax
jne 0x1049e3c
push edi
push 0x1005d08
lea ecx, [ebx + 0x68]
call fcn.010496a1
test eax, eax
jne 0x1049e3c
push edi
push 0x1005c88
lea ecx, [ebx + 0x28]
call fcn.010496a1
test eax, eax
jne 0x1049e3c
push edi
push 0x1005c58
lea ecx, [ebx + 0x88]
call fcn.010496a1
test eax, eax
jne 0x1049e3c
mov edi, dword [sym.imp.KERNEL32.dll_FindResourceW]
push 0x1005c4c
push 0xc352
push esi
call edi
test eax, eax
je 0x1049e3c
push eax
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x1049e3c
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
test eax, eax
je 0x1049e3c
push eax
lea ecx, [ebp - 0x18]
call fcn.01048721
and dword [ebp - 4], 0
push 1
lea esi, [ebx + 0xa8]
push 0xbb8
mov ecx, esi
call fcn.01042a3c
push esi
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.01042c36
mov ecx, ebx
call fcn.01049947
mov ecx, dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
add ecx, 0xfffffff0
call fcn.0100d6e4
push 0x1005c4c
push 0xc351
push dword [ebp - 0x14]
call edi
mov esi, eax
test esi, esi
je 0x1049e3c
push esi
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x1049e3c
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
test edi, edi
jne 0x1049e46
mov edi, 0x80004005
jmp 0x1049f54
push esi
push dword [ebp - 0x14]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
cdq
sub eax, edx
sar eax, 1
push eax
push edi
lea ecx, [ebp - 0x18]
call fcn.01043aa0
xor eax, eax
inc eax
push eax
lea esi, [ebx + 0xd8]
push 0x64
mov ecx, esi
mov dword [ebp - 4], eax
call fcn.01042a3c
push esi
push ecx
lea eax, [ebp - 0x18]
mov dword [ebp - 0x1c], esp
mov ecx, esp
push eax
call fcn.01042c36
mov ecx, ebx
call fcn.01049947
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.0100d6e4
lea esi, [ebx + 0x108]
push esi
push 0x10045e8
push 0x17
push 0
push 0x100c378
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov edi, eax
test edi, edi
jl 0x1049f54
push dword [esi]
lea ecx, [ebp - 0x14]
call fcn.0103012f
push 0x1004670
lea ecx, [ebp - 0x18]
mov dword [ebp - 4], 2
call fcn.01012445
push 0x1004664
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.01030158
mov eax, dword [ebp - 0x14]
mov byte [ebp - 4], 4
test eax, eax
je 0x1049f10
mov ecx, dword [eax]
sub esp, 0x10
mov edi, esp
push dword [ebp - 0x18]
lea esi, [ebp - 0x2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push eax
movsd dword es:[edi], dword [esi]
call dword [ecx + 0x140]
mov edi, eax
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
push dword [ebp - 0x18]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x14]
or dword [ebp - 4], 0xffffffff
test eax, eax
je 0x1049f34
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
test edi, edi
jl 0x1049f54
lea esi, [ebx + 0x10c]
push esi
call fcn.01042aca
mov edi, eax
test edi, edi
jl 0x1049f54
cmp dword [esi], 0
jne 0x1049f54
mov edi, 0x80004002
and dword [ebp - 0x10], 0
mov dword [ebp - 4], 5
test edi, edi
jl 0x1049fa9
lea esi, [ebx + 0x10c]
mov eax, dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov esi, dword [esi]
mov eax, dword [esi]
lea ecx, [ebp - 0x10]
push ecx
push 0x1005ec8
push esi
call dword [eax]
mov edi, eax
test edi, edi
jl 0x1049fa9
cmp dword [ebp - 0x10], 0
jne 0x1049f92
mov edi, 0x80004002
test edi, edi
jl 0x1049fa9
lea eax, [ebx + 0x110]
push eax
push dword [ebp - 0x10]
push 0
call fcn.0104d012
mov edi, eax
mov eax, dword [ebp - 0x10]
and dword [ebx + 0x114], 0
or dword [ebp - 4], 0xffffffff
test eax, eax
je 0x1049fc1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, edi
call fcn.0101e037
ret