Function at 0x473eb0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x228
push ebx
push edi
push esi
lea eax, [ebp - 0x204]
push eax
mov eax, 0
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x208]
push eax
mov eax, 0
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x20c]
push eax
mov eax, 0
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x210]
push eax
mov eax, 0
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x474018
lea eax, [ebp - 0x200]
push eax
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, eax
pop esi
push edx
push esi
call fcn.00472d50
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x200]
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4740d5
lea eax, [ebp + 8]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x473f71
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x473f87
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp + 8]
push dword [eax]
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x20c]
push eax
mov eax, 1
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4740d5
lea eax, [ebp + 8]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x473fda
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp + 8]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
movzx eax, word [eax]
push eax
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x473ff2
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp + 8]
movzx eax, word [eax]
push eax
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x20c]
push eax
mov eax, 1
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4740d5
xor eax, eax
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
mov ebx, 0
lea ecx, [ebp + 8]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x473f05
mov ebx, 2
lea ecx, [ebp + 8]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x473f36
mov ebx, 0x13
lea ecx, [ebp + 8]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x473f36
mov ebx, 0xd
lea ecx, [ebp + 8]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x473f9d
jmp 0x474008
jmp 0x4741dc
lea eax, [ebp - 0x100]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, eax
pop esi
push edx
push esi
call fcn.00472d50
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp - 0x100]
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x210]
push eax
mov eax, 1
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x474299
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x474157
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push dword [eax]
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x47416d
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp + 0x10]
push dword [eax]
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x474299
lea eax, [ebp + 0x10]
mov edx, eax
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov eax, edx
test eax, eax
je 0x4741af
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp + 0x10]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
movzx eax, word [eax]
push eax
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4741c7
lea eax, [ebp - 0x208]
push eax
lea eax, [ebp + 0x10]
movzx eax, word [eax]
push eax
call fcn.00474610
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x474299
xor eax, eax
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x18
mov ebx, 0
lea ecx, [ebp + 0x10]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x4740da
mov ebx, 2
lea ecx, [ebp + 0x10]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47411c
mov ebx, 0x13
lea ecx, [ebp + 0x10]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47411c
mov ebx, 0xd
lea ecx, [ebp + 0x10]
mov edx, ecx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ecx, edx
mov esi, ecx
mov edi, ebx
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x474172
jmp 0x4741cc
mov eax, 0
mov edx, eax
lea eax, [ebp - 0x228]
mov esi, eax
mov dword [esi], edx
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x208]
push dword [eax]
lea eax, [ebp - 0x204]
push dword [eax]
mov eax, 0
push eax
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x218]
cmp dword [eax], 0
je 0x4745f6
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x218]
push dword [eax]
mov eax, 0
push eax
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x214]
push eax
lea eax, [ebp - 0x218]
push dword [eax]
mov eax, 0
push eax
call dword [sym.imp.KERNEL32.DLL_LoadResource]
mov edx, eax
pop esi
mov dword [esi], edx
lea eax, [ebp - 0x214]
cmp dword [eax], 0
je 0x4745f6
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x214]
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_LockResource]
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x474510
xor eax, eax
lea ebx, [ebp - 0x220]
mov esi, dword [ebx]
mov edi, eax
cmp esi, edi
setne dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x4743c4
lea eax, [ebp - 0x21c]
push dword [eax]
lea eax, [ebp - 0x220]
push dword [eax]
lea eax, [ebp + 0x18]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
lea eax, [ebp + 0x18]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
mov edx, eax
lea eax, [ebp - 0x21c]
mov esi, dword [eax]
lea eax, [edx + esi]
push eax
mov eax, 0
mov edx, eax
pop esi
mov byte [esi], dl
lea eax, [ebp - 0x228]
push eax
mov eax, 1
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4745f6
xor eax, eax
lea ebx, [ebp - 0x220]
mov esi, dword [ebx]
mov edi, eax
cmp esi, edi
setne dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x474412
lea eax, [ebp + 0x18]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push eax
lea eax, [ebp - 0x220]
mov edx, eax
pop esi
mov edx, dword [edx]
mov dword [esi], edx
lea eax, [ebp - 0x228]
push eax
mov eax, 1
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4745f6
xor eax, eax
lea ebx, [ebp - 0x220]
mov esi, dword [ebx]
mov edi, eax
cmp esi, edi
setne dl
and edx, 0xff
mov eax, edx
lea ebx, [ebp + 0x18]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff0000
shr edx, 0x10
mov ebx, edx
mov edx, ebx
mov esi, eax
and edx, esi
mov eax, edx
test eax, eax
je 0x47447d
lea eax, [ebp + 0x18]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push eax
lea eax, [ebp - 0x220]
mov edx, eax
pop esi
mov edi, dword [edx]
mov dword [esi], edi
lea eax, [ebp - 0x228]
push eax
mov eax, 1
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4745f6
xor eax, eax
lea ebx, [ebp - 0x220]
mov esi, dword [ebx]
mov edi, eax
cmp esi, edi
setne dl
and edx, 0xff
mov eax, edx
test eax, eax
je 0x47450b
mov eax, 1
lea ebx, [ebp - 0x21c]
mov ebx, dword [ebx]
add eax, ebx
push eax
mov eax, 1
push eax
lea eax, [ebp - 0x224]
push eax
call fcn.00472f70
lea eax, [ebp - 0x21c]
push dword [eax]
lea eax, [ebp - 0x220]
push dword [eax]
lea eax, [ebp - 0x224]
push dword [eax]
call dword [sym.imp.KERNEL32.DLL_RtlMoveMemory]
lea eax, [ebp + 0x18]
mov edx, eax
mov edx, dword [edx]
mov eax, edx
push eax
lea eax, [ebp - 0x224]
mov edx, eax
pop esi
mov edx, dword [edx]
mov dword [esi], edx
lea eax, [ebp - 0x228]
push eax
mov eax, 1
mov edx, eax
pop esi
mov dword [esi], edx
jmp 0x4745f6
mov eax, 0
lea ebx, [ebp + 0x18]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x47434f
mov eax, 0x10
lea ebx, [ebp + 0x18]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x4743c9
mov eax, 0x13
lea ebx, [ebp + 0x18]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x474417
mov eax, 2
lea ebx, [ebp + 0x18]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x474417
mov eax, 5
lea ebx, [ebp + 0x18]
mov edx, ebx
add edx, 4
mov edx, dword [edx]
and edx, 0xffff
mov ebx, edx
mov esi, ebx
mov edi, eax
cmp esi, edi
sete dl
and edx, 0xff
test dl, dl
jne 0x474482
lea eax, [ebp - 0x228]
mov edx, dword [eax]
mov eax, edx
pop esi
pop edi
pop ebx
mov esp, ebp
pop ebp
ret 0x18