Function at 0x4313e0
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x441b2b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x8c
push ebx
mov ebx, ecx
xor ecx, ecx
push esi
lea eax, [ebx + 4]
mov dword [ebx], 0x442cf0
push edi
lea edi, [ebx + 0xcc]
mov dword [eax], ecx
xor esi, esi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x30], ebx
mov dword [eax + 4], ecx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x20], esi
mov dword [eax + 8], ecx
mov dword [ebp - 4], esi
mov dword [eax + 0xc], ecx
mov ecx, 0x41
xor eax, eax
rep stosd dword es:[edi], eax
lea edi, [ebx + 0x1d0]
mov ecx, 0x40
rep stosd dword es:[edi], eax
mov eax, dword [ebp + 8]
mov dword [ebx + 0xc4], esi
cmp eax, esi
mov dword [ebx + 0xc8], esi
mov dword [ebx + 0xa4], esi
mov dword [ebx + 0xa0], esi
mov dword [ebx + 0x9c], esi
mov dword [ebx + 0x98], esi
mov dword [ebx + 0x94], esi
mov dword [ebx + 0xac], esi
mov dword [ebx + 0xa8], esi
mov dword [ebx + 0xbc], esi
mov dword [ebx + 0xc0], esi
je 0x431590
mov edx, eax
push 0x44c75c
push edx
call fcn.004365e2
mov edi, eax
add esp, 8
cmp edi, esi
mov dword [ebp - 0x2c], edi
jne 0x4314e1
push 4
call fcn.004011d0
mov ecx, dword [ebp + 8]
add esp, 4
push ecx
push eax
push 0x453324
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
lea edx, [ebp - 0x70]
mov dword [ebp - 0x70], 0x453324
push 0x443a58
push edx
call fcn.00436a94
push 2
push esi
push edi
call fcn.0043779d
push edi
call fcn.0043761a
push esi
push esi
push edi
mov dword [ebp - 0x1c], eax
call fcn.0043779d
mov eax, dword [ebp - 0x1c]
add esp, 0x1c
cmp eax, 0x11
jge 0x431521
push 0x13
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x78], eax
lea eax, [ebp - 0x78]
push 0x443a58
push eax
call fcn.00436a94
mov ecx, dword [ebp - 0x1c]
push ecx
call fcn.00436a08
add esp, 4
cmp eax, esi
mov dword [ebp - 0x14], eax
jne 0x43154f
push 7
call fcn.004011d0
add esp, 4
lea edx, [ebp - 0x40]
mov dword [ebp - 0x40], eax
push 0x443a58
push edx
call fcn.00436a94
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x14]
push edi
push 1
push eax
push ecx
call fcn.00436b8f
add esp, 0x10
cmp eax, 1
je 0x431582
push 5
call fcn.004011d0
add esp, 4
lea edx, [ebp - 0x68]
mov dword [ebp - 0x68], eax
push 0x443a58
push edx
call fcn.00436a94
push edi
call fcn.004364d2
add esp, 4
mov dword [ebp - 0x2c], esi
jmp 0x4315c6
push 0x44eea0
push str.125
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceA]
mov edi, eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
push edi
push esi
mov dword [ebp - 0x28], eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
lea edi, [ebx + 4]
mov edx, edi
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
mov al, byte [edi]
cmp al, 0x4e
jne 0x431619
cmp byte [ebx + 5], 0x45
jne 0x431619
cmp byte [ebx + 6], 0x53
jne 0x431619
cmp byte [ebx + 7], 0x1a
jne 0x431619
mov edx, dword [ebp - 0x14]
mov eax, edi
mov ecx, dword [edx]
mov dword [eax], ecx
mov ecx, dword [edx + 4]
mov dword [eax + 4], ecx
mov ecx, dword [edx + 8]
mov dword [eax + 8], ecx
mov edx, dword [edx + 0xc]
mov dword [eax + 0xc], edx
jmp 0x431692
cmp al, 0x46
jne 0x43164c
cmp byte [ebx + 5], 0x44
jne 0x43164c
cmp byte [ebx + 6], 0x53
jne 0x43164c
cmp byte [ebx + 7], 0x1a
jne 0x43164c
mov eax, dword [ebp - 0x14]
mov ecx, edi
mov edx, dword [eax]
mov dword [ecx], edx
mov edx, dword [eax + 4]
mov dword [ecx + 4], edx
mov edx, dword [eax + 8]
mov dword [ecx + 8], edx
mov eax, dword [eax + 0xc]
mov dword [ecx + 0xc], eax
jmp 0x431692
cmp al, 0x4e
jne 0x43167f
cmp byte [ebx + 5], 0x45
jne 0x43167f
cmp byte [ebx + 6], 0x53
jne 0x43167f
cmp byte [ebx + 7], 0x4d
jne 0x43167f
mov ecx, dword [ebp - 0x14]
mov edx, edi
mov eax, dword [ecx]
mov dword [edx], eax
mov eax, dword [ecx + 4]
mov dword [edx + 4], eax
mov eax, dword [ecx + 8]
mov dword [edx + 8], eax
mov ecx, dword [ecx + 0xc]
mov dword [edx + 0xc], ecx
jmp 0x431692
mov eax, dword [ebp - 0x14]
cmp eax, esi
je 0x431692
push eax
call fcn.00436ace
add esp, 4
mov dword [ebp - 0x14], esi
mov al, byte [edi]
cmp al, 0x4e
jne 0x43185c
cmp byte [ebx + 5], 0x45
jne 0x43185c
cmp byte [ebx + 6], 0x53
jne 0x43185c
cmp byte [ebx + 7], 0x1a
jne 0x43185c
xor eax, eax
xor ecx, ecx
mov al, byte [ebx + 8]
mov cl, byte [ebx + 9]
shl eax, 0xe
shl ecx, 0xd
lea edx, [eax + 0x10]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], edx
mov dl, byte [ebx + 0xa]
test dl, 4
mov dword [ebp - 0x24], ecx
mov edi, 0x10
je 0x4316f4
mov edx, dword [ebp - 0x28]
mov edi, 0x210
add edx, 0x200
mov dword [ebp - 0x28], edx
cmp eax, esi
jle 0x431841
mov edx, dword [ebp - 0x1c]
add ecx, eax
cmp ecx, edx
jg 0x431841
push eax
call fcn.00436a08
add esp, 4
cmp eax, esi
mov dword [ebx + 0x94], eax
jne 0x431737
push 7
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x48]
push 0x443a58
push eax
call fcn.00436a94
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x18]
lea esi, [edi + edx]
mov edi, eax
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
mov eax, dword [ebp - 0x24]
and ecx, 3
test eax, eax
rep movsb byte es:[edi], byte [esi]
jle 0x4317dc
mov esi, eax
push esi
call fcn.00436a08
add esp, 4
mov dword [ebx + 0x98], eax
test eax, eax
jne 0x431791
push 7
call fcn.004011d0
add esp, 4
lea ecx, [ebp - 0x84]
mov dword [ebp - 0x84], eax
push 0x443a58
push ecx
call fcn.00436a94
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x1c]
add edx, esi
cmp ecx, edx
jb 0x4317ba
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x14]
mov edi, eax
mov eax, ecx
add esi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4317e6
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x14]
sub ecx, edx
mov dword [ebp - 0x24], ecx
add esi, edx
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4317e6
mov dword [ebx + 0x98], 0
test byte [ebx + 0xa], 4
je 0x431832
push 0x200
call fcn.00436a08
add esp, 4
mov dword [ebx + 0x9c], eax
test eax, eax
jne 0x43181e
push 7
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x50], eax
lea eax, [ebp - 0x50]
push 0x443a58
push eax
call fcn.00436a94
mov ecx, dword [ebp - 0x14]
mov edi, eax
lea esi, [ecx + 0x10]
mov ecx, 0x80
rep movsd dword es:[edi], dword [esi]
jmp 0x431cb2
mov dword [ebx + 0x9c], 0
jmp 0x431cb2
push 0x12
call fcn.004011d0
add esp, 4
lea edx, [ebp - 0x34]
mov dword [ebp - 0x34], eax
push 0x443a58
push edx
call fcn.00436a94
cmp al, 0x46
jne 0x431be3
cmp byte [ebx + 5], 0x44
jne 0x431be3
cmp byte [ebx + 6], 0x53
jne 0x431be3
cmp byte [ebx + 7], 0x1a
jne 0x431be3
xor eax, eax
mov al, byte [ebx + 8]
mov ecx, eax
mov dword [ebx + 0xc0], eax
shl ecx, 0xb
sub ecx, eax
shl ecx, 3
sub ecx, eax
lea edx, [ecx*4 + 0x10]
mov ecx, dword [ebp - 0x1c]
cmp ecx, edx
jge 0x4318c2
push 0x17
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0x58]
push 0x443a58
push eax
call fcn.00436a94
cmp eax, 4
jle 0x4318e2
push 0x16
call fcn.004011d0
add esp, 4
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], eax
push 0x443a58
push ecx
call fcn.00436a94
mov eax, edi
xor edx, edx
mov dword [eax], edx
mov dword [eax + 4], edx
mov dword [eax + 8], edx
mov dword [eax + 0xc], edx
mov eax, dword [ebx + 0xc0]
mov byte [ebx + 9], dl
mov edx, eax
mov cl, byte [ebx + 0xc0]
mov byte [edi], 0x4e
shl edx, 0xb
sub edx, eax
mov byte [ebx + 5], 0x45
shl edx, 3
sub edx, eax
mov byte [ebx + 6], 0x53
shl cl, 2
lea edi, [edx*4 + 0x10]
mov byte [ebx + 7], 0x1a
push edi
mov byte [ebx + 8], cl
mov byte [ebx + 0xa], 0x40
mov byte [ebx + 0xb], 0x10
mov dword [ebp - 0x18], edi
call fcn.00436a08
add esp, 4
cmp eax, esi
mov dword [ebx + 0x94], eax
jne 0x431961
push 7
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x60], eax
lea eax, [ebp - 0x60]
push 0x443a58
push eax
call fcn.00436a94
push edi
call fcn.00436a08
add esp, 4
cmp eax, esi
mov dword [ebx + 0xa4], eax
jne 0x43198f
push 7
call fcn.004011d0
add esp, 4
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x38], eax
push 0x443a58
push ecx
call fcn.00436a94
mov edx, dword [ebx + 0x94]
lea eax, [ebx + 4]
mov dword [ebx + 0x98], 0
push 0x44eea0
mov ecx, dword [eax]
push str.DISKSYS
mov dword [edx], ecx
push str.C:Program_Files_
mov ecx, dword [eax + 4]
mov dword [edx + 4], ecx
mov ecx, dword [eax + 8]
mov dword [edx + 8], ecx
mov eax, dword [eax + 0xc]
mov dword [edx + 0xc], eax
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
mov edi, dword [ebx + 0x94]
lea ecx, [eax - 0x10]
add edi, 0x10
lea esi, [edx + 0x10]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [ebx + 0xa4]
mov ecx, eax
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebx + 0x94]
mov byte [eax], 0x46
mov ecx, dword [ebx + 0x94]
mov byte [ecx + 1], 0x44
mov edx, dword [ebx + 0x94]
mov byte [edx + 2], 0x53
mov eax, dword [ebx + 0x94]
mov byte [eax + 3], 0x1a
mov ecx, dword [ebx + 0x94]
mov dl, byte [ebx + 0xc0]
lea eax, [ebp - 0x98]
push eax
mov byte [ecx + 4], dl
call fcn.00417a10
add esp, 0x10
mov eax, dword [ebp - 0x94]
mov byte [ebp - 4], 1
test eax, eax
jne 0x431a5a
mov eax, 0x442380
push 0x44c75c
push eax
call fcn.004365e2
mov esi, eax
add esp, 8
test esi, esi
mov dword [ebp - 0x2c], esi
jne 0x431a8c
push 0x15
call fcn.004011d0
add esp, 4
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
push 0x443a58
push ecx
call fcn.00436a94
push 2
push 0
push esi
call fcn.0043779d
push esi
call fcn.0043761a
push 0
push 0
push esi
mov edi, eax
call fcn.0043779d
add esp, 0x1c
cmp edi, 0x11
jge 0x431acb
push 0x13
call fcn.004011d0
add esp, 4
lea edx, [ebp - 0x44]
mov dword [ebp - 0x44], eax
push 0x443a58
push edx
call fcn.00436a94
push edi
call fcn.00436a08
add esp, 4
mov dword [ebp - 0x20], eax
test eax, eax
jne 0x431af6
push 7
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push 0x443a58
push eax
call fcn.00436a94
mov ecx, dword [ebp - 0x20]
push esi
push 1
push edi
push ecx
call fcn.00436b8f
add esp, 0x10
cmp eax, 1
je 0x431b26
push 5
call fcn.004011d0
add esp, 4
lea edx, [ebp - 0x54]
mov dword [ebp - 0x54], eax
push 0x443a58
push edx
call fcn.00436a94
push esi
call fcn.004364d2
push 0x2000
mov dword [ebp - 0x2c], 0
call fcn.00436a08
add esp, 8
mov dword [ebx + 0xa0], eax
test eax, eax
jne 0x431b65
push 7
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x5c], eax
lea eax, [ebp - 0x5c]
push 0x443a58
push eax
call fcn.00436a94
mov ecx, dword [ebp - 0x20]
cmp byte [ecx], 0x4e
jne 0x431b8f
cmp byte [ecx + 1], 0x45
jne 0x431b8f
cmp byte [ecx + 2], 0x53
jne 0x431b8f
cmp byte [ecx + 3], 0x1a
jne 0x431b8f
mov edx, dword [ebp - 0x20]
mov ecx, 0x800
lea esi, [edx + 0x6010]
jmp 0x431b97
mov esi, dword [ebp - 0x20]
mov ecx, 0x800
mov edi, eax
mov eax, dword [ebp - 0x20]
rep movsd dword es:[edi], dword [esi]
push eax
call fcn.00436ace
mov eax, dword [ebp - 0x94]
xor edi, edi
add esp, 4
cmp eax, edi
mov dword [ebp - 0x20], edi
mov byte [ebp - 4], 0
je 0x431cb4
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x431bd5
cmp al, 0xff
je 0x431bd5
dec al
mov byte [ecx], al
jmp 0x431cb4
push ecx
call fcn.00435930
add esp, 4
jmp 0x431cb4
cmp al, 0x4e
jne 0x4321c6
cmp byte [ebx + 5], 0x45
jne 0x4321c6
cmp byte [ebx + 6], 0x53
jne 0x4321c6
cmp byte [ebx + 7], 0x4d
jne 0x4321c6
lea eax, [ebx + 4]
xor ecx, ecx
mov dword [ebx + 0xc4], 1
mov edx, dword [ebp - 0x1c]
mov dword [eax], ecx
mov esi, dword [ebp - 0x14]
lea edi, [ebx + 0x14]
mov dword [eax + 4], ecx
mov dword [eax + 8], ecx
mov dword [eax + 0xc], ecx
lea eax, [edx + 0xf7f]
mov ecx, 0x20
and eax, 0xfffff000
rep movsd dword es:[edi], dword [esi]
push eax
mov dword [ebp - 0x18], eax
call fcn.00436a08
mov edi, eax
add esp, 4
test edi, edi
mov dword [ebx + 0x94], edi
jne 0x431c71
push 7
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x64], eax
lea eax, [ebp - 0x64]
push 0x443a58
push eax
call fcn.00436a94
mov edx, dword [ebp - 0x18]
xor eax, eax
mov ecx, edx
mov esi, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, esi
and ecx, 3
rep stosb byte es:[edi], al
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
mov edi, dword [ebx + 0x94]
add ecx, 0xffffff80
lea esi, [eax + 0x80]
mov eax, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
sar edx, 0xc
rep movsb byte es:[edi], byte [esi]
mov dword [ebx + 0xc8], edx
xor edi, edi
cmp dword [ebp + 8], edi
jne 0x431d0e
mov edi, 0x453440
or ecx, 0xffffffff
xor eax, eax
push 8
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
lea edi, [ebx + 0xcc]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.004011d0
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 4
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
lea edi, [ebx + 0x1d0]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor edi, edi
cmp dword [ebx + 0xc4], edi
jne 0x432174
mov cl, byte [ebx + 0xa]
mov al, byte [ebx + 0xb]
mov edx, ecx
and eax, 0xf0
and edx, 0xff
mov dword [ebx + 0xb0], edi
shr edx, 4
or eax, edx
mov dword [ebx + 0xac], edi
cmp eax, 0x14
mov dword [ebx + 0xbc], eax
mov dword [ebx + 0xa8], edi
je 0x43212d
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x24]
test cl, 4
mov ecx, dword [ebp - 0x18]
lea esi, [eax + 0x10]
push esi
je 0x431dab
lea eax, [edx + ecx + 0x200]
push eax
call fcn.00409810
mov ecx, dword [ebp - 0x18]
add esp, 8
add ecx, 0x200
mov dword [ebx + 0xac], eax
push esi
push ecx
call fcn.00409810
mov dword [ebx + 0xa8], eax
mov eax, dword [ebp - 0x24]
add esp, 8
test eax, eax
je 0x431df0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x14]
lea edx, [edx + ecx + 0x210]
push edx
jmp 0x431de1
add edx, ecx
push edx
call fcn.00409810
add esp, 8
mov dword [ebx + 0xac], eax
mov eax, dword [ebp - 0x18]
push esi
push eax
call fcn.00409810
mov dword [ebx + 0xa8], eax
mov eax, dword [ebp - 0x24]
add esp, 8
test eax, eax
je 0x431df0
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x14]
lea ecx, [ecx + edx + 0x10]
push ecx
push eax
call fcn.00409810
add esp, 8
mov dword [ebx + 0xb0], eax
mov edx, dword [ebx + 0xa8]
mov eax, dword [ebx + 0xac]
push edx
push eax
lea eax, [ebx + 4]
mov ecx, 0x50e540
push eax
call fcn.00432430
cmp dword [ebx + 0xa8], 0x57970078
jne 0x431e3f
mov ecx, dword [ebx + 0x94]
mov byte [ecx + 0x78c], 0x6c
mov edx, dword [ebx + 0x94]
mov byte [edx + 0x3fe1], 0xff
mov eax, dword [ebx + 0x94]
mov byte [eax + 0x3fe6], 0
mov eax, dword [ebx + 0xa8]
cmp eax, 0xaf2bbcbc
je 0x431e53
cmp eax, 0x3acd4bf1
jne 0x431e7e
mov ecx, dword [ebx + 0x94]
mov byte [ecx + 0x90d], 0x6e
mov edx, dword [ebx + 0x94]
mov byte [edx + 0x7fdf], 0xff
mov eax, dword [ebx + 0x94]
mov byte [eax + 0x7fe4], 0
mov byte [ebx + 0xa], 1
mov eax, dword [ebx + 0xa8]
cmp eax, 0xe16bb5fe
jne 0x431e8f
and byte [ebx + 0xa], 0xf6
cmp eax, 0x7831b2ff
je 0x431edc
cmp eax, 0x190a3e11
je 0x431edc
cmp eax, 0x52449508
je 0x431edc
cmp eax, 0x973f714
je 0x431edc
cmp eax, 0x7172f3d4
je 0x431edc
cmp eax, 0xa5781280
je 0x431edc
cmp eax, 0x8ce9c87b
je 0x431edc
cmp eax, 0xec47296d
je 0x431edc
cmp eax, 0xcee5857b
je 0x431edc
cmp eax, 0xe63d9193
je 0x431edc
cmp eax, 0xd54f5da9
jne 0x431ee0
or byte [ebx + 0xa], 2
cmp eax, 0x1995ac4e
jne 0x431f01
mov ecx, dword [ebx + 0x94]
mov byte [ecx + 0x1f7ad], 0xff
mov edx, dword [ebx + 0x94]
mov byte [edx + 0x1f7bc], 0
cmp dword [ebx + 0xa8], 0x20d22251
jne 0x431f27
mov ecx, dword [ebx + 0x94]
mov al, 0xea
mov byte [ecx + 0x1f17e], al
mov edx, dword [ebx + 0x94]
mov byte [edx + 0x1f17f], al
cmp dword [ebx + 0xa8], 0x11469ce3
jne 0x431f3c
mov eax, dword [ebx + 0x98]
mov byte [eax], 1
mov eax, dword [ebx + 0xa8]
cmp eax, 0x63af202f
jne 0x431f55
mov cl, byte [ebx + 0xa]
and cl, 0xf7
or cl, 1
mov byte [ebx + 0xa], cl
cmp eax, 0x99a62e47
jne 0x431f68
mov dl, byte [ebx + 0xa]
and dl, 0xf7
or dl, 1
mov byte [ebx + 0xa], dl
cmp eax, 0x932a077a
jne 0x431f79
mov dword [ebx + 0xbc], 0x57
cmp eax, 0x8218c637
jne 0x431f84
mov byte [ebx + 0xa], 1
cmp eax, 0x2bb6a0f8
je 0x431f99
cmp eax, 0x28c11d24
je 0x431f99
cmp eax, 0x2863604
jne 0x431fa5
mov cl, byte [ebx + 0xa]
and cl, 0xf7
or cl, 1
mov byte [ebx + 0xa], cl
cmp eax, 0x58581770
jne 0x431fb8
mov dl, byte [ebx + 0xa]
and dl, 0xf7
or dl, 1
mov byte [ebx + 0xa], dl
cmp eax, 0xf3feb3ab
je 0x431ff7
cmp eax, 0xa524ae9b
je 0x431ff7
cmp eax, 0x46dc6e57
je 0x431ff7
cmp eax, 0x66b2dec7
je 0x431ff7
cmp eax, 0x92b07fd9
je 0x431ff7
cmp eax, 0x8ee6463a
je 0x431ff7
cmp eax, 0xaf754426
je 0x431ff7
cmp eax, 0xfe4e5b11
je 0x431ff7
cmp eax, 0x57c12c17
jne 0x431ffb
or byte [ebx + 0xa], 2
cmp eax, 0x42e03e4a
jne 0x432015
mov cl, byte [ebx + 0xa]
mov dword [ebx + 0xbc], 0x76
or cl, 2
mov byte [ebx + 0xa], cl
cmp eax, 0xfd0299c3
jne 0x432036
mov eax, dword [ebx + 0x94]
mov byte [eax + 0x3d522], 0xa9
mov ecx, dword [ebx + 0x94]
mov byte [ecx + 0x3d523], 0x19
mov eax, dword [ebx + 0xa8]
cmp eax, 0xe91548d8
jne 0x432047
or byte [ebx + 0xa], 2
cmp eax, 0xc9cce8f2
jne 0x432052
or byte [ebx + 0xa], 2
cmp eax, 0x983d8175
je 0x43209f
cmp eax, 0x894efdbc
je 0x43209f
cmp eax, 0x19e81461
je 0x43209f
cmp eax, 0xbe06853f
je 0x43209f
cmp eax, 0xbe0a328
je 0x43209f
cmp eax, 0x5b457641
je 0x43209f
cmp eax, 0xf51a7f46
je 0x43209f
cmp eax, 0x31cd9903
je 0x43209f
cmp eax, 0xe49fc53e
je 0x43209f
cmp eax, 0x9499f4d
je 0x43209f
cmp eax, 0x2e991109
jne 0x4320a3
or byte [ebx + 0xa], 2
cmp eax, 0x3296ff7a
je 0x4320c6
cmp eax, 0x429fd177
je 0x4320c6
cmp eax, 0xdd454208
je 0x4320c6
cmp eax, 0xb1b9e187
je 0x4320c6
cmp eax, 0xaf15338f
jne 0x4320ca
or byte [ebx + 0xa], 2
cmp eax, 0x836cc1ab
jne 0x4320d5
or byte [ebx + 0xa], 2
cmp eax, 0x547e6cc1
jne 0x4320e6
mov dword [ebx + 0xbc], 0x30
cmp eax, 0xfd3fc292
jne 0x4320f7
mov dword [ebx + 0xbc], 0x20
cmp eax, 0xfde79681
jne 0x432102
or byte [ebx + 0xa], 2
cmp eax, 0x4819a595
jne 0x43210d
or byte [ebx + 0xa], 2
cmp eax, 0xe63f7d0b
jne 0x43211e
mov dword [ebx + 0xbc], 0x65
cmp eax, 0xc68363f6
jne 0x432129
and byte [ebx + 0xa], 0xf6
xor edi, edi
jmp 0x432190
mov esi, dword [ebx + 0x94]
xor edx, edx
mov dword [ebx + 0xb0], edi
mov dword [ebx + 0xac], edi
mov dword [ebx + 0xa8], edi
mov dl, byte [esi + 0x1f]
xor eax, eax
mov dword [ebx + 0xb4], edx
mov ah, byte [esi + 0x20]
xor ecx, ecx
mov al, byte [esi + 0x21]
mov cl, byte [esi + 0x22]
shl eax, 8
or eax, ecx
xor edx, edx
mov dl, byte [esi + 0x23]
shl eax, 8
or eax, edx
mov dword [ebx + 0xb8], eax
jmp 0x43219c
mov dword [ebx + 0xbc], 0x100
mov dword [ebx + 0xb0], edi
mov dword [ebx + 0xac], edi
mov dword [ebx + 0xa8], edi
mov dword [ebx + 0xb8], edi
mov dword [ebx + 0xb4], edi
cmp dword [ebp + 8], edi
je 0x4321b1
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x4321b1
push eax
call fcn.00436ace
add esp, 4
mov ecx, dword [ebp - 0xc]
pop edi
mov eax, ebx
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret 4
push 0x11
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x6c], eax
lea eax, [ebp - 0x6c]
push 0x443a58
push eax
call fcn.00436a94
mov eax, dword [ebp - 0x2c]
xor edi, edi
cmp eax, edi
je 0x4321f3
push eax
call fcn.004364d2
add esp, 4
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x432203
push eax
call fcn.00436ace
add esp, 4
mov eax, dword [ebp - 0x20]
cmp eax, edi
je 0x432213
push eax
call fcn.00436ace
add esp, 4
mov esi, dword [ebp - 0x30]
mov eax, dword [esi + 0x94]
cmp eax, edi
je 0x43222f
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0x94], edi
mov eax, dword [esi + 0x98]
cmp eax, edi
je 0x432248
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0x98], edi
mov eax, dword [esi + 0x9c]
cmp eax, edi
je 0x432261
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0x9c], edi
mov eax, dword [esi + 0xa0]
cmp eax, edi
je 0x43227a
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0xa0], edi
mov eax, dword [esi + 0xa4]
cmp eax, edi
je 0x432293
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0xa4], edi
mov ecx, dword [ebp - 0x88]
lea edx, [ebp - 0x74]
push 0x443a58
push edx
mov dword [ebp - 0x74], ecx
call fcn.00436a94
mov eax, dword [ebp - 0x2c]
xor edi, edi
cmp eax, edi
je 0x4322bc
push eax
call fcn.004364d2
add esp, 4
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x4322cc
push eax
call fcn.00436ace
add esp, 4
mov eax, dword [ebp - 0x20]
cmp eax, edi
je 0x4322dc
push eax
call fcn.00436ace
add esp, 4
mov esi, dword [ebp - 0x30]
mov eax, dword [esi + 0x94]
cmp eax, edi
je 0x4322f8
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0x94], edi
mov eax, dword [esi + 0x98]
cmp eax, edi
je 0x432311
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0x98], edi
mov eax, dword [esi + 0x9c]
cmp eax, edi
je 0x43232a
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0x9c], edi
mov eax, dword [esi + 0xa0]
cmp eax, edi
je 0x432343
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0xa0], edi
mov eax, dword [esi + 0xa4]
cmp eax, edi
je 0x43235c
push eax
call fcn.00436ace
add esp, 4
mov dword [esi + 0xa4], edi
push 3
call fcn.004011d0
add esp, 4
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x7c]
push 0x443a58
push eax
call fcn.00436a94
nop
nop
nop
nop
nop
nop
nop
nop
nop
push esi
mov esi, ecx
call fcn.004323a0
test byte [esp + 8], 1
je 0x432398
push esi
call fcn.00435930
add esp, 4
mov eax, esi
pop esi
ret 4