Function at 0x4e99f4
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x38
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 8], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
mov esi, dword [ebx + 0xa4]
push edi
push 0x6bb848
call fcn.004609af
cmp eax, esi
jne 0x4e9bc8
lea eax, [ebx + 0xe00]
mov dword [ebp - 0x38], eax
call fcn.00483698
and dword [ebp - 0x2c], 0
and dword [ebp - 0x28], 0
push ecx
mov eax, esp
mov dword [eax], str.NEW_SKIN
push ecx
mov eax, esp
lea esi, [ebp - 0x2c]
mov dword [eax], str.SKIN
call fcn.0044208d
and dword [ebp - 0x24], 0
xor eax, eax
lea edi, [ebp - 0x34]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov edi, dword [ebx + 0xf8]
test edi, edi
je 0x4e9a6f
lea esi, [ebp - 0x24]
call fcn.0046074a
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0x20]
push edx
xor esi, esi
push 0x63ec50
mov dword [ebp - 0x20], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
test eax, eax
js 0x4e9ba3
mov eax, dword [ebp - 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
mov dword [ebp - 0x30], eax
test eax, eax
jle 0x4e9ba3
mov eax, dword [ebp - 0x20]
lea edx, [ebp - 0x1c]
push edx
xor edi, edi
push esi
mov dword [ebp - 0x1c], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
test eax, eax
js 0x4e9adf
mov eax, dword [ebp - 0x1c]
push dword [0x6be720]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
test eax, eax
je 0x4e9adf
mov eax, dword [ebp - 0x1c]
push dword [0x6be6d8]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x74]
cmp eax, 0xb
je 0x4e9af7
mov eax, dword [ebp - 0x1c]
cmp eax, edi
je 0x4e9aec
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc esi
cmp esi, dword [ebp - 0x30]
jl 0x4e9aa1
jmp 0x4e9ba3
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x170]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x170]
mov eax, dword [eax + 4]
push 2
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x1c]
mov ecx, dword [eax]
lea edx, [ebp - 0x18]
push edx
push eax
call dword [ecx + 0x138]
mov eax, dword [ebp - 0x10]
mov edi, dword [ebp - 0xc]
cdq
sub eax, edx
mov esi, eax
mov eax, dword [ebp - 0x18]
cdq
sub eax, edx
sar eax, 1
sar esi, 1
push 0xd
add esi, eax
lea eax, [ebx + 0xe68]
push 0x65b020
add edi, 0xfffffffb
call fcn.0040aa23
push dword [ebp - 0x28]
push dword [0x6bb728]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
push 0x7530
push 6
push dword [ebp - 0x30]
push eax
mov eax, dword [ebp - 0x38]
push str.MicBlockedTip.xml
push dword [ebx + 4]
call fcn.004dde23
mov eax, dword [ebp - 0x1c]
test eax, eax
je 0x4e9ba3
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x20]
test eax, eax
je 0x4e9bb0
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x2c], 0
je 0x4e9bc8
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_FreeResource]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00403fc1
leave
ret 4