Function at 0x48d7fb
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x4afa13
call fcn.004ae7a8
sub esp, 0xd0
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov esi, ecx
mov dword [ebp - 0x24], esi
xor ebx, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], ebx
jmp 0x48d82e
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], 0xfffffffb
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x48d820
mov dword [ebp - 0x14], ebx
jmp 0x48d843
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x3c], ebx
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x48d839
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], bl
je 0x48d857
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
cmp dword [esi], ebx
je 0x48dcb9
push dword [esi]
push ebx
push dword [esi + 4]
call fcn.00479207
add esp, 0xc
movdqa xmm0, xmmword [0xacf9e0]
movdqu xmmword [ebp - 0x74], xmm0
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
push dword [ebp - 0x30]
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x74]
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.00443dad
mov dword [ebp - 0x1c], 0x255c
cmp dword [ebp - 0x1c], 0x291c
jle 0x48d939
mov edi, ebx
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov dword [ebp - 0x20], ebx
mov esi, ebx
mov dword [ebp - 0x28], edi
mov ecx, eax
sar edi, cl
mov eax, edi
mov ecx, esi
sar eax, cl
cdq
push edx
push eax
lea ecx, [ebp - 0xc4]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x48d8dc
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xc4]
call fcn.00442427
inc esi
cmp esi, 0x66cf
jl 0x48d8be
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 0x5361
mov edi, dword [ebp - 0x14]
jl 0x48d8b5
inc edi
mov dword [ebp - 0x14], edi
cmp edi, 0x52c4
jl 0x48d8b0
push 0xd0b
push 0x5ef
push 0x2a6
push 0x9db
push 0x493
call dword [sym.imp.GDI32.dll_IntersectClipRect]
mov esi, dword [ebp - 0x24]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x1c], 0x22fc
jge 0x48d950
push str.ain_uezjskck_ciny_anowjsbo_lkxraoybo_prwavhc_owwjqnlaa_wtrf_avrsjmkef_loamtgsh_grzmrqebh_nperzk_fefpsbajv
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x48d979
mov dword [ebp - 0x14], ebx
push 2
pop edi
jmp 0x48d98f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x7c], 0x9beab1d6
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x48d981
mov eax, dword [ebp - 0x48]
mov dword [eax + 8], ebx
lea ecx, [ebp - 0x48]
call fcn.0044211d
push dword [esi + 4]
call fcn.004990de
pop ecx
mov dword [ebp - 0x28], 0x513a
mov dword [ebp - 0x38], str.jxxzrnshf_hhjordl_qxiyyvy_xspfmbv_udiq_fellgt_uggkr_hdizk_cmxjdyp
cmp dword [ebp - 0x28], 0x5173
jle 0x48da34
mov eax, ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x20], 0x3fff
mov esi, eax
mov edi, 0x5c84
mov eax, esi
cdq
push edx
push eax
lea ecx, [ebp - 0x94]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x48d9f2
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x94]
call fcn.00442427
dec esi
dec edi
jne 0x48d9d8
mov eax, dword [ebp - 0x1c]
dec eax
mov dword [ebp - 0x1c], eax
dec dword [ebp - 0x20]
jne 0x48d9d1
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x2901
jl 0x48d9c7
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_HeapFree]
mov esi, dword [ebp - 0x24]
push 2
pop edi
mov dword [ebp - 0x20], 0x3ae35568
mov dword [ebp - 0x1c], edi
push edi
lea ecx, [ebp - 0x64]
call fcn.0044204b
mov dword [ebp - 0x1c], 0xc6516eae
mov dword [ebp - 0x1c], 0xfffffff7
mov dword [ebp - 0x14], ebx
jmp 0x48da67
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x64]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], edi
jl 0x48da5a
mov dword [ebp - 0x14], ebx
jmp 0x48da7f
mov eax, dword [ebp - 0x14]
mov dword [ebp + eax*4 - 0x58], 9
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 1
jl 0x48da71
mov dword [ebp - 0x20], 0x12
cmp dword [ebp - 0x20], 0x17
jne 0x48db97
push 3
lea ecx, [ebp - 0x54]
call fcn.0044204b
mov dword [ebp - 0x1c], 0x1615e82a
mov dword [ebp - 0x1c], 0xe9ad3ee7
mov dword [ebp - 0x14], ebx
jmp 0x48dac3
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x54]
mov dword [eax + ecx*4], 0x98311173
inc dword [ebp - 0x14]
cmp dword [ebp - 0x14], 3
jl 0x48dab3
mov eax, dword [ebp - 0x54]
or dword [eax + 8], 0xffffffff
mov byte [ebp - 0x15], bl
cmp byte [ebp - 0x15], 0
je 0x48db87
mov dword [ebp - 0x14], 0x406e
cmp dword [ebp - 0x14], 0x40a2
jle 0x48db3d
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x1c], 0x1b08
mov eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xac]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x48db12
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xac]
call fcn.00442427
add edi, esi
dec dword [ebp - 0x1c]
jne 0x48daf8
inc esi
cmp esi, 0xb81
jl 0x48daef
mov esi, dword [ebp - 0x24]
push 2
pop edi
push ebx
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 4], edi
cmp dword [ebp - 0x14], 0x3f5a
jge 0x48db5b
push str.tvmayxrvp_qrhplcqfj_sbnidxpu_yrsdfhbqy_wzqyirjw_rjzdmc_aez
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x48db87
lea ecx, [ebp - 0x54]
call fcn.0044211d
inc dword [ebp - 0x20]
jmp 0x48da8c
lea ecx, [ebp - 0x64]
call fcn.0044211d
mov dword [ebp - 4], 4
cmp dword [ebp - 0x28], 0x4ecd
jge 0x48dbb8
push dword [ebp - 0x38]
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x48dbe1
mov dword [esi + 4], ebx
mov dword [ebp - 0x2c], 0x40d7f825
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], 0xfffffff5
jne 0x48dcb1
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x34], ebx
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x28], 0x7574
cmp dword [ebp - 0x28], 0x75cc
jle 0x48dc62
mov edi, ebx
mov esi, ebx
mov eax, esi
xor eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xdc]
call fcn.004019d3
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x48dc38
mov eax, dword [eax]
push eax
call fcn.00499008
pop ecx
push ebx
push 1
lea ecx, [ebp - 0xdc]
call fcn.00442427
inc esi
cmp esi, 0x6400
jl 0x48dc1c
inc edi
cmp edi, 0x7e2
jl 0x48dc1a
mov esi, dword [ebp - 0x24]
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x74a0
jge 0x48dc7d
push str.zytplxl_lafqsfol_grxol_dqblp_jmnlgz
call fcn.00499008
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x48dca6
mov eax, dword [ebp - 0x34]
dec dword [ebp - 0x2c]
jmp 0x48dbee
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov dword [esi], ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret