Function at 0x45eeb0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x476ac2
mov eax, dword fs:[0]
push eax
sub esp, 0xf4
mov eax, dword [0x4922f8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xd0], 0
push 0
lea ecx, [ebp - 0x1c]
call fcn.00401bb0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1c]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.0045f220
add esp, 8
push 0x485358
lea ecx, [ebp - 0x1c]
call fcn.00418f20
push eax
push 0
call dword [sym.imp.KERNEL32.DLL_FindResourceW]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x45efd4
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
lea edx, [ebp - 0x40]
push edx
call fcn.00460aa0
add esp, 8
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0xd8], eax
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xd8]
push ecx
push str.FindResource_error:
lea edx, [ebp - 0x5c]
push edx
call fcn.00402cb0
add esp, 0xc
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov dword [ebp - 0xe0], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0xe0]
push ecx
mov ecx, 0x495ab8
call fcn.004016f0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x5c]
call fcn.004016d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x40]
call fcn.004016d0
mov ecx, dword [ebp + 8]
call fcn.00401620
mov edx, dword [ebp - 0xd0]
or edx, 1
mov dword [ebp - 0xd0], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401bf0
mov eax, dword [ebp + 8]
jmp 0x45f1f2
mov eax, dword [ebp - 0x24]
push eax
push 0
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
mov dword [ebp - 0x14], eax
cmp dword [ebp - 0x14], 0
jne 0x45f026
push str.Zero_sized_resource
mov ecx, 0x495ab8
call fcn.00401710
mov ecx, dword [ebp + 8]
call fcn.00401620
mov ecx, dword [ebp - 0xd0]
or ecx, 1
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401bf0
mov eax, dword [ebp + 8]
jmp 0x45f1f2
mov edx, dword [ebp - 0x24]
push edx
push 0
call dword [sym.imp.KERNEL32.DLL_LoadResource]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x45f0f3
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.00460aa0
add esp, 8
mov dword [ebp - 0xe4], eax
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0xe8], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0xe8]
push edx
push str.LoadResource_error:
lea eax, [ebp - 0x94]
push eax
call fcn.00402cb0
add esp, 0xc
mov dword [ebp - 0xec], eax
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0xf0], ecx
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xf0]
push edx
mov ecx, 0x495ab8
call fcn.004016f0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x94]
call fcn.004016d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x78]
call fcn.004016d0
mov ecx, dword [ebp + 8]
call fcn.00401620
mov eax, dword [ebp - 0xd0]
or eax, 1
mov dword [ebp - 0xd0], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401bf0
mov eax, dword [ebp + 8]
jmp 0x45f1f2
mov ecx, dword [ebp - 0x10]
push ecx
call dword [sym.imp.KERNEL32.DLL_LockResource]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], 0
jne 0x45f1c1
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
lea edx, [ebp - 0xb0]
push edx
call fcn.00460aa0
add esp, 8
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0xf8], eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xf8]
push ecx
push str.LockResource_error:
lea edx, [ebp - 0xcc]
push edx
call fcn.00402cb0
add esp, 0xc
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x100], eax
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x100]
push ecx
mov ecx, 0x495ab8
call fcn.004016f0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xcc]
call fcn.004016d0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0xb0]
call fcn.004016d0
mov ecx, dword [ebp + 8]
call fcn.00401620
mov edx, dword [ebp - 0xd0]
or edx, 1
mov dword [ebp - 0xd0], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401bf0
mov eax, dword [ebp + 8]
jmp 0x45f1f2
mov eax, dword [ebp - 0x14]
push eax
mov ecx, dword [ebp - 0x20]
push ecx
mov ecx, dword [ebp + 8]
call fcn.00404c80
mov edx, dword [ebp - 0xd0]
or edx, 1
mov dword [ebp - 0xd0], edx
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x1c]
call fcn.00401bf0
mov eax, dword [ebp + 8]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret