Function at 0x4952f6
Capabilities:
Extract resource via kernel32 functions

Disassembly:
sub esp, 0x24
push ebx
movzx ebx, word [esp + 0x30]
add ebx, dword [esp + 0x2c]
push esi
push edi
push 0xda
mov edi, edx
push 1
xor esi, esi
push edi
mov dword [esp + 0x30], ecx
mov dword [esp + 0x34], ebx
mov dword [esp + 0x1c], esi
mov dword [esp + 0x2c], esi
call dword [sym.imp.kernel32.dll_FindResourceA]
cmp eax, esi
jne 0x495337
pop edi
pop esi
xor ax, ax
pop ebx
add esp, 0x24
ret 0x18
push eax
push edi
call dword [sym.imp.kernel32.dll_LoadResource]
cmp eax, esi
je 0x49532b
push ebp
push eax
call dword [sym.imp.kernel32.dll_LockResource]
mov cl, byte [esp + 0x48]
mov ebp, eax
mov al, cl
and al, 1
mov byte [esp + 0x13], al
je 0x4953a1
test cl, 8
mov ecx, dword [esp + 0x40]
je 0x495368
mov edi, ecx
jmp 0x495373
mov edi, dword [esp + 0x40]
add edi, 2
mov word [edi - 2], si
cmp word [esp + 0x3c], si
jne 0x49538a
pop ebp
mov word [edi], si
pop edi
pop esi
xor ax, ax
pop ebx
add esp, 0x24
ret 0x18
movzx eax, word [esp + 0x44]
mov edx, dword [esp + 0x14]
mov dword [esp + 0x18], eax
lea eax, [edi + eax*2 - 2]
mov dword [esp + 0x1c], eax
jmp 0x4953fe
cmp word [esp + 0x3c], si
jne 0x4953c5
test cl, 4
mov eax, dword [esp + 0x40]
mov byte [eax], 0
je 0x4953b8
mov byte [eax + 1], 0
pop ebp
pop edi
pop esi
xor ax, ax
pop ebx
add esp, 0x24
ret 0x18
movzx eax, word [esp + 0x44]
mov ecx, dword [esp + 0x4c]
push ecx
lea edx, [esp + 0x18]
mov dword [esp + 0x1c], eax
add eax, eax
push edx
push eax
mov dword [esp + 0x48], eax
call fcn.00469bbc
test eax, eax
jl 0x4953b8
mov edx, dword [esp + 0x14]
mov eax, dword [esp + 0x3c]
lea ecx, [eax + edx - 2]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x40]
mov edi, edx
cmp dword [esp + 0x38], ebx
mov dword [esp + 0x30], edi
jae 0x4954e4
cmp edi, dword [esp + 0x1c]
jae 0x4954e0
mov eax, dword [esp + 0x38]
mov dl, byte [eax]
add eax, 1
mov byte [esp + 0x3c], dl
mov dword [esp + 0x38], eax
mov dword [esp + 0x20], 8
lea esp, [esp]
mov al, byte [esp + 0x3c]
shr al, 7
movzx cx, al
movzx ecx, cx
movzx eax, si
movzx ebx, cx
mov dword [esp + 0x24], ecx
lea edx, [eax + eax*2]
lea ecx, [ebx + edx*2]
movzx ecx, word [ebp + ecx*2]
test cx, cx
je 0x49545f
movzx esi, cx
jmp 0x4954b7
lea edx, [eax + eax*2]
lea edx, [ebp + edx*4 + 4]
mov eax, edx
xor ecx, ecx
cmp word [eax], cx
jne 0x495476
mov eax, 1
jmp 0x49548b
add eax, 2
cmp cx, 4
jae 0x495488
add ecx, 1
cmp word [eax], 0
jne 0x495476
movzx eax, cx
movzx ecx, ax
lea esi, [edi + ecx*2]
mov ecx, dword [esp + 0x1c]
cmp esi, ecx
jbe 0x4954a0
sub ecx, edi
sar ecx, 1
movzx eax, cx
movzx esi, ax
add esi, esi
push esi
push edx
push edi
call sub.MSVCR80.dll_memcpy
add esp, 0xc
add edi, esi
movzx esi, word [ebp + ebx*2]
mov eax, dword [esp + 0x20]
shl byte [esp + 0x3c], 1
sub eax, 1
test eax, eax
mov dword [esp + 0x20], eax
jne 0x495432
mov edx, dword [esp + 0x2c]
cmp dword [esp + 0x38], edx
mov ecx, dword [esp + 0x40]
jb 0x49540c
mov edx, dword [esp + 0x14]
movzx ebx, word [esp + 0x24]
movzx eax, si
lea esi, [eax + eax*2]
lea esi, [ebx + esi*2]
cmp word [ebp + esi*2], 0
jne 0x495555
lea eax, [eax + eax*2]
lea ebp, [ebp + eax*4 + 4]
mov eax, ebp
xor ecx, ecx
cmp word [eax], cx
jne 0x495511
mov eax, 1
jmp 0x495526
add eax, 2
cmp cx, 4
jae 0x495523
add ecx, 1
cmp word [eax], 0
jne 0x495511
movzx eax, cx
movzx ecx, ax
lea edx, [edi + ecx*2]
mov ecx, dword [esp + 0x1c]
cmp edx, ecx
jbe 0x49553b
sub ecx, edi
sar ecx, 1
movzx eax, cx
movzx esi, ax
add esi, esi
push esi
push ebp
push edi
call sub.MSVCR80.dll_memcpy
mov edx, dword [esp + 0x20]
mov ecx, dword [esp + 0x4c]
add esp, 0xc
add edi, esi
sub edi, 2
cmp edi, dword [esp + 0x30]
jb 0x495564
cmp word [edi], 0
je 0x495555
add edi, 2
cmp byte [esp + 0x13], 0
je 0x4955a2
test byte [esp + 0x48], 4
mov word [edi], 0
je 0x495592
sub edi, ecx
sar edi, 1
sub edi, 1
pop ebp
mov word [ecx], di
movzx ax, byte [ecx]
pop edi
pop esi
pop ebx
add esp, 0x24
ret 0x18
pop ebp
mov eax, edi
pop edi
sub eax, ecx
pop esi
sar eax, 1
pop ebx
add esp, 0x24
ret 0x18
sub edi, edx
sar edi, 1
test byte [esp + 0x48], 8
je 0x4955ea
cmp edx, ecx
jne 0x4955b5
xor ebx, ebx
jmp 0x4955cf
mov eax, dword [esp + 0x18]
push 0
push 0
push eax
push ecx
mov ecx, dword [esp + 0x38]
push edi
call fcn.00493fc4
mov edx, dword [esp + 0x14]
mov ebx, eax
cmp word [esp + 0x44], 0
je 0x4955e0
cmp ebx, dword [esp + 0x18]
jne 0x4955e0
sub ebx, 1
mov ecx, dword [esp + 0x40]
mov byte [ebx + ecx], 0
jmp 0x49562b
lea eax, [ecx + 1]
cmp edx, eax
jne 0x4955f5
xor ebx, ebx
jmp 0x49560f
mov ecx, dword [esp + 0x18]
push 0
push 0
push ecx
mov ecx, dword [esp + 0x34]
push eax
push edi
call fcn.00493fc4
mov edx, dword [esp + 0x14]
mov ebx, eax
cmp word [esp + 0x44], 0
je 0x495620
cmp ebx, dword [esp + 0x18]
jne 0x495620
sub ebx, 1
mov eax, dword [esp + 0x40]
mov byte [eax], bl
mov byte [ebx + eax + 1], 0
mov eax, dword [esp + 0x4c]
push eax
push edx
call fcn.00469caf
pop ebp
pop edi
pop esi
mov ax, bx
pop ebx
add esp, 0x24
ret 0x18