Function at 0x48d020
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push 0xffffffffffffffff
push 0x7fe8b9
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xb0
mov eax, dword [esp + 0xc4]
push ebx
push esi
push edi
xor ebx, ebx
push 0x905dc4
push eax
push ebx
mov dword [esp + 0x4c], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
cmp esi, ebx
jne 0x48d0f9
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [esp + 0x70]
call fcn.00584680
lea ecx, [esp + 0x44]
push eax
push ecx
mov dword [esp + 0xcc], ebx
call fcn.0046aa40
add esp, 8
cmp eax, ebx
mov byte [esp + 0xc4], 1
je 0x48d098
add eax, 4
jmp 0x48d09a
xor eax, eax
push eax
lea edx, [esp + 0x34]
push str.FindResource___failed_with_the_following_error:_n
push edx
call fcn.0044e080
add esp, 0xc
mov esi, eax
mov bl, 2
lea ecx, [esp + 0x10]
mov byte [esp + 0xc4], bl
call fcn.007ac4ef
push esi
lea ecx, [esp + 0x24]
mov byte [esp + 0xc8], 3
mov dword [esp + 0x20], 6
call fcn.0042b6c0
lea eax, [esp + 0x10]
push 0x8a24ec
push eax
mov dword [esp + 0x18], vtable.CryptoPP::Exception.0
mov byte [esp + 0xcc], bl
call fcn.007ac5c6
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
cmp eax, ebx
jne 0x48d1a4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [esp + 0x70]
call fcn.00584680
lea ecx, [esp + 0x44]
push eax
push ecx
mov dword [esp + 0xcc], 5
call fcn.0046aa40
add esp, 8
cmp eax, ebx
mov byte [esp + 0xc4], 6
je 0x48d143
add eax, 4
jmp 0x48d145
xor eax, eax
push eax
lea edx, [esp + 0x34]
push str.LoadResource___failed_with_the_following_error:_n
push edx
call fcn.0044e080
add esp, 0xc
mov esi, eax
mov bl, 7
lea ecx, [esp + 0x10]
mov byte [esp + 0xc4], bl
call fcn.007ac4ef
push esi
lea ecx, [esp + 0x24]
mov byte [esp + 0xc8], 8
mov dword [esp + 0x20], 6
call fcn.0042b6c0
lea eax, [esp + 0x10]
push 0x8a24ec
push eax
mov dword [esp + 0x18], vtable.CryptoPP::Exception.0
mov byte [esp + 0xcc], bl
call fcn.007ac5c6
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
cmp edi, ebx
jne 0x48d250
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [esp + 0x70]
call fcn.00584680
lea ecx, [esp + 0x44]
push eax
push ecx
mov dword [esp + 0xcc], 0xa
call fcn.0046aa40
add esp, 8
cmp eax, ebx
mov byte [esp + 0xc4], 0xb
je 0x48d1ef
add eax, 4
jmp 0x48d1f1
xor eax, eax
push eax
lea edx, [esp + 0x34]
push str.LockResource___failed_with_the_following_error:_n
push edx
call fcn.0044e080
add esp, 0xc
mov esi, eax
mov bl, 0xc
lea ecx, [esp + 0x10]
mov byte [esp + 0xc4], bl
call fcn.007ac4ef
push esi
lea ecx, [esp + 0x24]
mov byte [esp + 0xc8], 0xd
mov dword [esp + 0x20], 6
call fcn.0042b6c0
lea eax, [esp + 0x10]
push 0x8a24ec
push eax
mov dword [esp + 0x18], vtable.CryptoPP::Exception.0
mov byte [esp + 0xcc], bl
call fcn.007ac5c6
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
cmp eax, ebx
jne 0x48d2ce
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [esp + 0x70]
call fcn.00584680
lea ecx, [esp + 0x44]
push eax
push ecx
mov dword [esp + 0xcc], 0xf
call fcn.0046aa40
add esp, 8
cmp eax, ebx
mov byte [esp + 0xc4], 0x10
je 0x48d296
add eax, 4
jmp 0x48d298
xor eax, eax
push eax
lea edx, [esp + 0x34]
push str.SizeofResource___failed_with_the_following_error:_n
push edx
call fcn.0044e080
add esp, 0xc
push eax
push 6
lea ecx, [esp + 0x18]
mov byte [esp + 0xcc], 0x11
call fcn.0040f6a0
lea eax, [esp + 0x10]
push 0x8a24ec
push eax
call fcn.007ac5c6
mov esi, dword [esp + 0xcc]
lea ecx, [esp + 0xf]
push ecx
push eax
push edi
mov ecx, esi
call fcn.0048d610
mov ecx, dword [esp + 0xbc]
mov eax, esi
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
add esp, 0xbc
ret