Function at 0x435a50
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5e65a0
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push esi
push edi
mov eax, dword [0x677000]
xor eax, esp
push eax
lea eax, [esp + 0x78]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [0x74e300]
push str.BitmapHead.bmp
mov dword [eax], 0x6c7928
mov dword [eax + 4], 0xb
call fcn.00465fd0
mov dword [esi + 0x94], eax
push 0x16
xor eax, eax
push str.DATA_HEADALIGNMENTFILE
lea ecx, [esp + 0x1c]
mov dword [esp + 0x30], 7
mov dword [esp + 0x2c], 0
mov word [esp + 0x1c], ax
call fcn.00406400
mov dword [esp + 0x80], 0
mov ecx, dword [0x74e2f4]
lea eax, [esp + 0x14]
push eax
lea ecx, [ecx + 0xc]
call fcn.00409da0
mov dword [esp + 0x80], 0xffffffff
cmp dword [esp + 0x28], 8
mov edi, eax
jb 0x435b05
push dword [esp + 0x14]
call fcn.0049500b
add esp, 4
xor eax, eax
mov word [esp + 0x14], ax
mov eax, dword [esi + 0x94]
mov dword [esp + 0x28], 7
mov dword [esp + 0x24], 0
mov dword [esi + 0x1f8], eax
cmp edi, 1
jne 0x435b31
push 0
jmp 0x435b55
cmp edi, 2
je 0x435b53
cmp edi, 3
je 0x435b53
cmp edi, 5
je 0x435b53
cmp edi, 6
je 0x435b53
cmp edi, 4
je 0x435b4f
cmp edi, 7
jne 0x435b61
push 2
jmp 0x435b55
push 1
lea eax, [esi + 0x184]
push eax
call fcn.0047adf0
mov ebx, dword [0x74e300]
push 4
xor eax, eax
push str.LANG
lea ecx, [esp + 0x34]
lea edi, [esi + 0x98]
mov dword [esp + 0x48], 7
mov dword [esp + 0x44], 0
mov word [esp + 0x34], ax
call fcn.00406400
lea eax, [esp + 0x2c]
push eax
mov dword [esp + 0x84], 1
mov ecx, dword [0x74e2f4]
lea eax, [esp + 0x60]
push eax
add ecx, 0xc
call fcn.00409910
push 6
push str.Arabic
mov byte [esp + 0x88], 2
push dword [eax + 0x10]
push ecx
mov ecx, eax
call fcn.00407060
test eax, eax
sete byte [esp + 0x13]
cmp dword [esp + 0x70], 8
jb 0x435beb
push dword [esp + 0x5c]
call fcn.0049500b
add esp, 4
xor eax, eax
mov dword [esp + 0x80], 0xffffffff
cmp dword [esp + 0x40], 8
mov dword [esp + 0x70], 7
mov dword [esp + 0x6c], 0
mov word [esp + 0x5c], ax
jb 0x435c20
push dword [esp + 0x2c]
call fcn.0049500b
add esp, 4
xor eax, eax
mov dword [esp + 0x40], 7
mov dword [esp + 0x3c], 0
mov word [esp + 0x2c], ax
cmp byte [esp + 0x13], al
je 0x435c48
lea eax, [ebx + 0x2c]
push eax
push str.HEADER3_RTL.bmp
jmp 0x435c51
lea eax, [ebx + 0x1c]
push eax
push str.HEADER3.bmp
push edi
call fcn.0047a920
lea eax, [esi + 0x110]
push eax
call fcn.0047a9b0
push 3
lea eax, [esi + 0x2e4]
push eax
call fcn.0047adf0
push 4
lea eax, [esi + 0x360]
push eax
call fcn.0047adf0
push 5
lea eax, [esi + 0x1fc]
push eax
call fcn.0047adf0
push 0x16
xor eax, eax
push str.DATA_HEADALIGNMENTFLAG
lea ecx, [esp + 0x4c]
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
call fcn.00406400
mov dword [esp + 0x80], 3
mov ecx, dword [0x74e2f4]
lea eax, [esp + 0x44]
push eax
lea ecx, [ecx + 0xc]
call fcn.00409da0
mov dword [esp + 0x80], 0xffffffff
cmp dword [esp + 0x58], 8
mov edi, eax
jb 0x435cf2
push dword [esp + 0x44]
call fcn.0049500b
add esp, 4
xor eax, eax
mov word [esp + 0x44], ax
lea eax, [edi - 1]
mov dword [esp + 0x58], 7
mov dword [esp + 0x54], 0
cmp eax, 4
ja case.default.0x435d11
jmp dword [eax*4 + 0x435d5c]
push 6
jmp 0x435d2a
push 7
jmp 0x435d2a
push 8
jmp 0x435d2a
push 9
jmp 0x435d2a
push 0xa
lea eax, [esi + 0x270]
push eax
call fcn.0047adf0
mov eax, dword [0x74e300]
mov dword [eax], 0
mov dword [eax + 4], 0
mov ecx, dword [esp + 0x78]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret