Function at 0x48af0e
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
lea ebp, [esp - 0x70]
sub esp, 0xac
mov eax, dword [0x4ffeb0]
xor eax, ebp
mov dword [ebp + 0x6c], eax
push ebx
push esi
push edi
push ecx
mov dword [ebp - 0x10], ecx
movzx ecx, word [ebp + 0x7c]
mov eax, esp
mov dword [eax], ecx
push ecx
mov ecx, dword [ebp + 0x78]
mov eax, esp
xor ebx, ebx
mov dword [eax], ecx
lea ecx, [ebp - 0x18]
mov byte [ebp - 5], bl
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
call fcn.004703cd
cmp al, bl
je 0x48b18e
push dword [ebp - 0x14]
push dword [0x507354]
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov esi, eax
inc esi
cmp esi, 0xf4240
jle 0x48af8d
lea ecx, [ebp - 0x18]
call fcn.0047040d
mov ecx, dword [ebp + 0x6c]
pop edi
pop esi
mov al, bl
xor ecx, ebp
pop ebx
call fcn.004a0e91
add ebp, 0x70
leave
ret 8
xor ecx, ecx
push 2
pop edx
mov eax, esi
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0049f280
mov edi, eax
pop ecx
mov dword [ebp - 0x1c], edi
cmp edi, ebx
je 0x48b18e
lea eax, [esi + esi]
push eax
push ebx
push edi
call fcn.004a0bd0
add esp, 0xc
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_LockResource]
dec esi
push esi
push eax
push edi
call fcn.004a0ea0
mov eax, 0xfeff
add esp, 0xc
mov esi, edi
cmp word [edi], ax
jne 0x48afe3
lea esi, [edi + 2]
lea ecx, [ebp - 0x3c]
call fcn.00497159
push 0x4d3958
lea eax, [ebp - 0x3c]
push eax
push esi
call fcn.0047dfe5
add esp, 0xc
push ebx
lea ecx, [ebp + 0x50]
mov dword [ebp + 0x68], 7
call fcn.00405790
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x30]
push 0x1c
cdq
pop ecx
idiv ecx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x24], eax
cmp eax, ebx
jbe 0x48b157
push dword [ebp - 0xc]
lea ecx, [ebp - 0x3c]
call fcn.00496521
cmp dword [eax + 0x18], 8
jb 0x48b03d
mov eax, dword [eax + 4]
jmp 0x48b040
add eax, 4
push eax
lea ecx, [ebp + 0x34]
call fcn.00406560
push ebx
push 0x4d893c
lea ecx, [ebp + 0x34]
call fcn.0040b5f0
push ebx
push 0x4d8938
lea ecx, [ebp + 0x34]
mov dword [ebp - 0x20], eax
call fcn.0040b5f0
push ebx
push 0x4d8934
lea ecx, [ebp + 0x34]
mov esi, eax
call fcn.0040b5f0
mov edi, eax
cmp dword [ebp - 0x20], ebx
jne 0x48b0c9
cmp esi, 0xffffffff
je 0x48b0c9
lea eax, [ebp - 5]
push eax
dec esi
push esi
push 1
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp + 0x18]
call fcn.004267c0
push 0xffffffffffffffff
push ebx
lea eax, [ebp + 0x18]
push eax
lea ecx, [ebp + 0x50]
call fcn.004068c0
push ebx
push 1
lea ecx, [ebp + 0x18]
call fcn.00405350
cmp dword [ebp + 0x68], 8
mov eax, dword [ebp + 0x54]
jae 0x48b0be
lea eax, [ebp + 0x54]
mov ecx, dword [ebp - 0x10]
push eax
call fcn.0048a484
jmp 0x48b13a
cmp edi, 0xffffffff
je 0x48b13a
lea eax, [ebp - 5]
push eax
push edi
push ebx
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp + 0x18]
call fcn.004267c0
lea eax, [ebp - 5]
push eax
push dword [ebp + 0x48]
inc edi
push edi
lea eax, [ebp + 0x34]
push eax
lea ecx, [ebp - 4]
call fcn.004267c0
cmp dword [ebp + 0x14], 8
mov edx, dword [ebp]
jae 0x48b101
lea edx, [ebp]
cmp dword [ebp + 0x30], 8
mov ecx, dword [ebp + 0x1c]
jae 0x48b10d
lea ecx, [ebp + 0x1c]
cmp dword [ebp + 0x68], 8
mov eax, dword [ebp + 0x54]
jae 0x48b119
lea eax, [ebp + 0x54]
push edx
push ecx
mov ecx, dword [ebp - 0x10]
push eax
call fcn.0048a820
push ebx
push 1
lea ecx, [ebp - 4]
call fcn.00405350
push ebx
push 1
lea ecx, [ebp + 0x18]
call fcn.00405350
push ebx
push 1
lea ecx, [ebp + 0x34]
call fcn.00405350
inc dword [ebp - 0xc]
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp - 0x24]
jb 0x48b027
mov edi, dword [ebp - 0x1c]
push edi
call fcn.004a2e1b
mov eax, dword [ebp - 0x10]
pop ecx
mov ecx, dword [eax + 0x10]
sub ecx, dword [eax + 0xc]
sar ecx, 2
test ecx, ecx
jbe 0x48b172
mov byte [ebp - 5], 1
push ebx
push 1
lea ecx, [ebp + 0x50]
call fcn.00405350
lea ecx, [ebp - 0x3c]
call fcn.0047dac7
push dword [ebp - 0x3c]
call fcn.0049c830
pop ecx
mov bl, byte [ebp - 5]
jmp 0x48af6f