Function at 0x448290
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d4000
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x5b0
mov eax, dword [0x507254]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
push str.ProductInfo::Load
lea ecx, [ebp - 0x5b8]
call fcn.00408780
mov dword [ebp - 4], 0
mov dword [ebp - 0x88], 0
push 0xb8
lea eax, [ebp - 0x1a0]
mov byte [ebp - 4], 1
push 0
push eax
call fcn.004a8a30
add esp, 8
lea ecx, [ebp - 0x1a0]
call fcn.00405910
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x190]
cmp dword [0x50bd4c], 8
mov eax, 0x50bd38
push 0x40
cmovae eax, dword [0x50bd38]
push 1
push eax
call fcn.004068b0
test eax, eax
lea ecx, [ebp - 0x1a0]
mov eax, dword [ebp - 0x1a0]
mov eax, dword [eax + 4]
je 0x448362
add ecx, eax
xor edx, edx
mov eax, 4
cmp dword [ecx + 0x38], edx
cmovne eax, edx
jmp 0x448376
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push 0
push eax
call fcn.00404670
cmp dword [ebp - 0x144], 0
je 0x4484dc
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0xf
mov byte [ebp - 0x70], 0
push 0
lea eax, [ebp - 0x70]
mov byte [ebp - 4], 3
push eax
mov ecx, 0x507d48
call fcn.00403c60
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x5c]
cmp edx, 0x10
jb 0x4483f0
mov ecx, dword [ebp - 0x70]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4483e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b22
push edx
push ecx
call fcn.004a6287
add esp, 8
lea eax, [ebp - 0x1a0]
push eax
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0xb8]
call fcn.00432720
add esp, 4
mov byte [ebp - 4], 4
mov edx, dword [ebp - 0xa8]
test edx, edx
je 0x448464
cmp dword [ebp - 0xa4], 0x10
lea eax, [ebp - 0xb8]
push edx
cmovae eax, dword [ebp - 0xb8]
mov ecx, 0x507d48
push eax
call fcn.00403c60
mov eax, dword [ebp - 0x1a0]
lea ecx, [ebp - 0x1a0]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00404670
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0xa4]
cmp edx, 0x10
jb 0x4484a2
mov ecx, dword [ebp - 0xb8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x448498
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b22
push edx
push ecx
call fcn.004a6287
add esp, 8
lea ecx, [ebp - 0x190]
call fcn.00405fa0
test eax, eax
jne 0x4484dc
mov eax, dword [ebp - 0x1a0]
lea ecx, [ebp - 0x1a0]
push 0
mov eax, dword [eax + 4]
add ecx, eax
xor eax, eax
cmp dword [ecx + 0x38], eax
sete al
lea eax, [eax*4 + 2]
or eax, dword [ecx + 0xc]
push eax
call fcn.00404670
cmp dword [ebp - 0x88], 0
je 0x44851c
lea eax, [ebp - 0x88]
mov ecx, 0x50bcf0
push eax
call fcn.00448b40
test al, al
je 0x44851c
lea ecx, [ebp - 0x1a0]
call fcn.00404950
lea ecx, [ebp - 0x88]
call fcn.00431e00
mov byte [ebp - 0x5b9], 1
jmp 0x448af3
lea ecx, [ebp - 0x1a0]
call fcn.00404950
lea ecx, [ebp - 0x88]
call fcn.00431e00
lea edx, [ebp - 0x80]
mov dword [ebp - 0x80], 0
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x7c], 0x507cf0
call fcn.00437040
mov dword [ebp - 0xe8], 0
xor ecx, ecx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 7
mov word [eax], cx
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x4485d1
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4485c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b27
push edx
push ecx
call fcn.004a6287
add esp, 8
cmp dword [ebp - 0x80], 0
je 0x4485e3
mov byte [ebp - 0x5b9], 0
jmp 0x448a39
push 1
mov byte [ebp - 4], 6
call fcn.00490646
add esp, 4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0xb8]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0xe8]
call fcn.00445ec0
push eax
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 8
call fcn.00403010
lea eax, [ebp - 0x80]
mov byte [ebp - 4], 9
push eax
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0xa0]
call fcn.0044a1e0
add esp, 4
mov byte [ebp - 4], 0xb
mov edx, dword [ebp - 0x5c]
cmp edx, 8
jb 0x44866e
mov ecx, dword [ebp - 0x70]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448664
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b2c
push edx
push ecx
call fcn.004a6287
add esp, 8
xor eax, eax
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 7
mov word [ebp - 0x70], ax
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0xa4]
cmp edx, 8
jb 0x4486c6
mov ecx, dword [ebp - 0xb8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x4486bc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b2c
push edx
push ecx
call fcn.004a6287
add esp, 8
xor eax, eax
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 7
mov word [ebp - 0xb8], ax
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x448701
mov eax, dword [ecx]
mov eax, dword [eax + 8]
call eax
mov ecx, eax
test ecx, ecx
je 0x448701
mov eax, dword [ecx]
push 1
call dword [eax]
mov edi, dword [ebp - 0x8c]
lea ecx, [ebp - 0xa0]
mov esi, dword [ebp - 0xa0]
cmp edi, 8
mov eax, dword [ebp - 0x90]
cmovae ecx, esi
cmp eax, 0x13
jne 0x448741
push eax
push str.productagentservice
push ecx
call fcn.004036a0
add esp, 0xc
test eax, eax
je 0x4487c1
mov eax, dword [ebp - 0x90]
cmp edi, 8
lea ecx, [ebp - 0xa0]
cmovae ecx, esi
cmp eax, 0xe
jne 0x44876b
push eax
push str.productagentui
push ecx
call fcn.004036a0
add esp, 0xc
test eax, eax
je 0x4487c1
mov eax, dword [ebp - 0x90]
cmp edi, 8
lea ecx, [ebp - 0xa0]
cmovae ecx, esi
cmp eax, 8
jne 0x448795
push eax
push str.watchdog
push ecx
call fcn.004036a0
add esp, 0xc
test eax, eax
je 0x4487c1
mov eax, dword [ebp - 0x90]
cmp edi, 8
lea ecx, [ebp - 0xa0]
cmovae ecx, esi
cmp eax, 0xc
jne 0x4489e1
push eax
push str.discoverysrv
push ecx
call fcn.004036a0
add esp, 0xc
test eax, eax
jne 0x4489e1
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.SETTINGS
mov edi, eax
push 0xc350
push edi
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x74], eax
test eax, eax
je 0x4489d5
push eax
push edi
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x4489d5
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
push dword [ebp - 0x74]
mov esi, eax
push edi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0xb0], 0
mov edi, 0xf
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], edi
mov byte [ebp - 0xd0], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0x74], ecx
lea edx, [ebp - 0x6c]
xor ecx, ecx
mov dword [ebp - 0x6c], esi
mov word [ebp - 0x5f], cx
add eax, esi
mov byte [ebp - 0x5d], cl
mov byte [ebp - 0x60], cl
lea ecx, [ebp - 0x74]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 0xffffffff
mov dword [ebp - 0x5c], 1
call fcn.0044b040
test al, al
jne 0x44897d
push dword [ebp - 0x5c]
lea eax, [ebp - 0x58]
push str.syntax_error_at_line__d_near:
push 0x40
push eax
call fcn.00435f20
lea ecx, [ebp - 0x58]
add esp, 0x10
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x448898
sub ecx, edx
lea eax, [ebp - 0x58]
push ecx
push eax
lea ecx, [ebp - 0xd0]
call fcn.00403c60
mov eax, dword [ebp - 0x6c]
cmp byte [ebp - 0x60], 0
je 0x4488c3
mov ecx, dword [ebp - 0x64]
mov byte [ebp - 0x60], 0
jmp 0x4488db
cmp eax, dword [ebp - 0x68]
je 0x44893b
cmp dword [ebp - 0x64], 0xa
jne 0x4488d1
inc dword [ebp - 0x5c]
movzx ecx, byte [eax]
inc eax
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x6c], eax
cmp ecx, 0xffffffff
je 0x44893b
cmp ecx, 0xa
je 0x44893b
cmp ecx, 0x20
jl 0x4488b4
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xbc]
mov byte [ebp - 0x74], cl
cmp edx, esi
jae 0x448920
lea eax, [edx + 1]
cmp esi, 0x10
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0xd0]
cmovae eax, dword [ebp - 0xd0]
mov byte [eax + edx], cl
mov byte [eax + edx + 1], 0
jmp 0x4488b1
push dword [ebp - 0x74]
mov byte [ebp - 0x7c], 0
push dword [ebp - 0x7c]
push ecx
lea ecx, [ebp - 0xd0]
call fcn.00406760
jmp 0x4488b1
cmp dword [ebp - 0xc0], 0
je 0x448977
mov edx, dword [ebp - 0xbc]
cmp edx, 0x10
jb 0x4489ca
mov ecx, dword [ebp - 0xd0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x448974
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b36
push edx
jmp 0x4489c1
mov edi, dword [ebp - 0xbc]
lea eax, [ebp - 0xb0]
mov ecx, 0x50bcf0
push eax
call fcn.00448b40
test al, al
jne 0x448a75
cmp edi, 0x10
jb 0x4489ca
mov ecx, dword [ebp - 0xd0]
inc edi
mov eax, ecx
cmp edi, 0x1000
jb 0x4489c0
mov ecx, dword [ecx - 4]
add edi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b36
push edi
push ecx
call fcn.004a6287
add esp, 8
lea ecx, [ebp - 0xb0]
call fcn.00431e00
mov esi, dword [ebp - 0xa0]
mov edi, dword [ebp - 0x8c]
mov byte [ebp - 0x5b9], 0
cmp edi, 8
jb 0x448a1c
lea edi, [edi*2 + 2]
mov eax, esi
cmp edi, 0x1000
jb 0x448a12
mov esi, dword [esi - 4]
add edi, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b31
push edi
push esi
call fcn.004a6287
add esp, 8
xor eax, eax
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 7
mov word [ebp - 0xa0], ax
mov edx, dword [ebp - 0xd4]
cmp edx, 8
jb 0x448ad6
mov ecx, dword [ebp - 0xe8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x448acc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b31
jmp 0x448acc
cmp edi, 0x10
jb 0x448aa9
mov ecx, dword [ebp - 0xd0]
inc edi
mov eax, ecx
cmp edi, 0x1000
jb 0x448a9f
mov ecx, dword [ecx - 4]
add edi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x448b36
push edi
push ecx
call fcn.004a6287
add esp, 8
lea ecx, [ebp - 0xb0]
call fcn.00431e00
mov edi, dword [ebp - 0x8c]
mov esi, dword [ebp - 0xa0]
mov byte [ebp - 0x5b9], 1
jmp 0x4489e8
push edx
push ecx
call fcn.004a6287
add esp, 8
xor eax, eax
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 7
mov word [ebp - 0xe8], ax
lea ecx, [ebp - 0x5b8]
call fcn.00408890
mov al, byte [ebp - 0x5b9]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004a6256
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.004ab23f
call fcn.004ab23f
call fcn.004ab23f
call fcn.004ab23f
call fcn.004ab23f
int3