Function at 0x1004ecd1
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0x2e8
mov eax, 0x101df437
call fcn.1005dbe7
mov dword [ebp - 0x27c], ecx
mov esi, dword [0x10296350]
lea ecx, [ebp - 0x2f4]
call fcn.10059770
and dword [ebp - 4], 0
push 0x101e893c
push str.Symbol
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov edi, eax
test edi, edi
je 0x1004f2c7
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push edi
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov edi, eax
lea eax, [ebp - 0x270]
lea esi, [edi + 1]
push esi
push eax
call fcn.1004de38
push esi
mov esi, dword [ebp - 0x270]
push 0
push esi
mov byte [ebp - 4], 1
call fcn.10079700
push edi
push ebx
push esi
call fcn.1008e630
add esp, 0x20
lea ecx, [ebp - 0x2f4]
push 0
push 0
push esi
call fcn.1005c400
push 0x101eb0ac
lea ecx, [ebp - 0x2f4]
call fcn.1005a3b0
test eax, eax
je 0x1004f2bc
mov ecx, eax
call fcn.1005a450
jmp 0x1004f29b
push 0x208
lea eax, [ebp - 0x240]
push 0
push eax
call fcn.10079700
add esp, 0xc
mov ecx, ebx
push 0x101eafb4
call fcn.10059cc0
lea ecx, [ebp - 0x240]
push ecx
push eax
call fcn.1007441e
pop ecx
pop ecx
mov ecx, ebx
call fcn.1005a450
mov edi, eax
push 0x24
mov dword [ebp - 0x268], edi
call fcn.1005d806
pop ecx
mov dword [ebp - 0x280], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x1004edf4
mov ecx, eax
call fcn.1004dd20
mov ebx, eax
jmp 0x1004edf6
xor ebx, ebx
mov byte [ebp - 4], 1
mov dword [ebp - 0x278], ebx
test ebx, ebx
je 0x1004f2bc
mov ecx, ebx
call fcn.1004de05
test eax, eax
je 0x1004f2bc
lea eax, [ebp - 0x240]
mov ecx, ebx
push eax
call fcn.10043940
and dword [ebp - 0x264], 0
mov ecx, ebx
call fcn.1004de01
mov dword [ebp - 0x274], eax
jmp 0x1004f263
push 8
call fcn.1005d806
mov edi, eax
pop ecx
mov dword [ebp - 0x284], edi
mov byte [ebp - 4], 3
test edi, edi
je 0x1004ee68
and dword [edi], 0
mov ecx, edi
and dword [edi + 4], 0
call fcn.1002beef
mov dword [edi], eax
jmp 0x1004ee6a
xor edi, edi
and dword [ebp - 0x260], 0
lea ecx, [ebp - 0x260]
and dword [ebp - 0x25c], 0
push edi
mov byte [ebp - 4], 1
call fcn.100295ce
cmp dword [ebp - 0x260], 0
mov byte [ebp - 4], 4
setne al
test al, al
je 0x1004f2ad
push 0xa
pop ecx
xor eax, eax
lea edi, [ebp - 0x38]
rep stosd dword es:[edi], eax
mov edi, dword [ebp - 0x268]
mov ecx, edi
push 0x101eb594
call fcn.10059cc0
test eax, eax
je 0x1004f2ad
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x248], 0
xor eax, eax
push str.text
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push str.text
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x28c]
mov byte [ebp - 4], 5
push eax
call fcn.1002985e
cmp word [ebp - 0x38], 0
jne 0x1004ef2c
xor eax, eax
jmp 0x1004ef36
lea eax, [ebp - 0x38]
push eax
call fcn.100812ef
pop ecx
mov ecx, dword [ebp - 0x28c]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eafb4
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x1004f00a
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x248], 0
xor eax, eax
push 0x101e56a8
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push 0x101e56a8
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x294]
mov byte [ebp - 4], 6
push eax
call fcn.1002985e
cmp word [ebp - 0x38], 0
jne 0x1004efda
xor eax, eax
jmp 0x1004efe4
lea eax, [ebp - 0x38]
push eax
call fcn.100812ef
pop ecx
mov ecx, dword [ebp - 0x294]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
push 0x101eb5a8
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x1004f0b8
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x248], 0
xor eax, eax
push 0x101eb5ac
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push 0x101eb5ac
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x29c]
mov byte [ebp - 4], 7
push eax
call fcn.1002985e
cmp word [ebp - 0x38], 0
jne 0x1004f088
xor eax, eax
jmp 0x1004f092
lea eax, [ebp - 0x38]
push eax
call fcn.100812ef
pop ecx
mov ecx, dword [ebp - 0x29c]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
push str.page
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x1004f181
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x248], 0
xor eax, eax
push 0x101eafec
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push 0x101eafec
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2a4]
mov byte [ebp - 4], 8
push eax
call fcn.1002985e
cmp word [ebp - 0x38], 0
jne 0x1004f136
xor eax, eax
jmp 0x1004f140
lea eax, [ebp - 0x38]
push eax
call fcn.100812ef
pop ecx
mov ecx, dword [ebp - 0x2a4]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
lea eax, [ebp - 0x38]
push eax
call fcn.100887ff
pop ecx
mov ecx, dword [ebp - 0x264]
cmp eax, ecx
cmovg ecx, eax
mov dword [ebp - 0x264], ecx
push 0x101eb5b4
mov ecx, edi
call fcn.10059cc0
test eax, eax
je 0x1004f22f
lea ecx, [ebp - 0x38]
push ecx
push eax
call fcn.1007441e
and dword [ebp - 0x248], 0
xor eax, eax
push str.type
mov dword [ebp - 0x244], 7
mov word [ebp - 0x258], ax
call fcn.100812ef
add esp, 0xc
lea ecx, [ebp - 0x258]
push eax
push str.type
call fcn.10002750
mov ecx, dword [ebp - 0x260]
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x2ac]
mov byte [ebp - 4], 9
push eax
call fcn.1002985e
cmp word [ebp - 0x38], 0
jne 0x1004f1ff
xor eax, eax
jmp 0x1004f209
lea eax, [ebp - 0x38]
push eax
call fcn.100812ef
pop ecx
mov ecx, dword [ebp - 0x2ac]
push eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ecx + 0x28]
call fcn.10002750
push 0
push 1
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 4
call fcn.10002690
mov ecx, dword [ebp - 0x274]
lea eax, [ebp - 0x260]
push eax
call fcn.10033f74
mov ecx, edi
call fcn.1005a880
mov ecx, dword [ebp - 0x25c]
mov edi, eax
mov dword [ebp - 0x268], edi
mov byte [ebp - 4], 1
test ecx, ecx
je 0x1004f263
call fcn.10021ea6
test edi, edi
jne 0x1004ee3e
push dword [ebp - 0x264]
mov ecx, ebx
call fcn.10002d50
lea eax, [ebp - 0x278]
push eax
mov eax, dword [ebp - 0x27c]
mov ecx, dword [eax + 0x3e8]
call fcn.1003d471
mov ecx, dword [ebp - 0x26c]
call fcn.1005a880
mov ebx, eax
mov dword [ebp - 0x26c], ebx
test ebx, ebx
jne 0x1004ed93
jmp 0x1004f2bc
mov ecx, dword [ebp - 0x25c]
test ecx, ecx
je 0x1004f2bc
call fcn.10021ea6
test esi, esi
je 0x1004f2c7
push esi
call fcn.1005d847
pop ecx
lea ecx, [ebp - 0x2f4]
call fcn.10029bf6
call fcn.1005dba2
ret