Function at 0x4241e3
Capabilities:
Check for time delay via gettickcount
Get file version info
Get geographical location
Impersonate file version information
Set uefi variable

Disassembly:
push 0x8c0
mov eax, 0x43e470
call fcn.0042bb26
mov eax, dword [ebp + 8]
mov dword [ebp - 0x83c], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetTickCount]
call edi
push ebx
mov esi, eax
call fcn.0042a8e7
mov dword [ebp - 0x840], esi
fild dword [ebp - 0x840]
pop ecx
mov dword [ebp - 0x830], eax
test esi, esi
jge 0x42422d
fadd qword [0x44b078]
call fcn.004396a0
fild dword [ebp - 0x830]
mov eax, dword [ebp - 0x830]
test eax, eax
jge 0x424248
fadd qword [0x44b078]
fcompp
fnstsw ax
test ah, 5
jp 0x42425c
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
call fcn.0041f43d
mov dword [ebp - 0x874], ebx
call fcn.004295cd
cdq
push 0x14
pop ecx
idiv ecx
mov esi, edx
inc esi
call fcn.004295cd
cdq
idiv esi
cmp edx, esi
jg 0x424285
mov eax, esi
cdq
idiv esi
cmp edx, ebx
je 0x4242b8
call fcn.0040b4a9
push 4
lea eax, [ebp - 0x840]
push eax
push 0x20001009
mov esi, 0x400
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x20
lea eax, [ebp - 0x868]
push eax
push 0x58
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
jmp 0x4242bd
mov esi, 0x400
mov dword [ebp - 0x870], ebx
call edi
push ebx
mov edi, eax
call fcn.0042a8e7
mov dword [ebp - 0x840], edi
fild dword [ebp - 0x840]
pop ecx
mov dword [ebp - 0x830], eax
test edi, edi
jge 0x4242ea
fadd qword [0x44b078]
call fcn.004396a0
fild dword [ebp - 0x830]
mov eax, dword [ebp - 0x830]
test eax, eax
jge 0x424305
fadd qword [0x44b078]
fcompp
fnstsw ax
test ah, 5
jp 0x42431d
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetFirmwareEnvironmentVariableA]
xor eax, eax
inc eax
jmp 0x42431f
xor eax, eax
dec eax
jne 0x42432c
call fcn.0040b4a9
call fcn.0041f4b9
mov dword [ebp - 0x830], ebx
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push ebx
shr edi, 0x18
call fcn.0042a8e7
imul eax, eax, 0x63
pop ecx
cmp edi, eax
jbe 0x424379
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push 4
lea eax, [ebp - 0x840]
push eax
push 0x20001009
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x20
lea eax, [ebp - 0x868]
push eax
push 0x58
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
cmp dword [ebp + 0x28], 0x10
mov eax, dword [ebp + 0x14]
jae 0x424385
lea eax, [ebp + 0x14]
lea ecx, [ebp - 0x874]
push ecx
push eax
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov esi, eax
mov dword [ebp - 0x840], esi
cmp esi, ebx
je 0x424ee3
push esi
call fcn.00428337
cmp dword [ebp + 0x28], 0x10
mov dword [ebp - 0x834], eax
mov eax, dword [ebp + 0x14]
pop ecx
jae 0x4243bb
lea eax, [ebp + 0x14]
push dword [ebp - 0x834]
push esi
push ebx
push eax
call sub.VERSION.dll_GetFileVersionInfoA
cmp eax, ebx
je 0x424eba
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x838], esp
push 0x1a
push str.2__8_Y___7
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.00427b2c
cmp dword [eax + 0x18], 8
jb 0x42441e
mov eax, dword [eax + 4]
jmp 0x424421
add eax, 4
push eax
push dword [ebp - 0x834]
call sub.VERSION.dll_VerQueryValueW
push ebx
push 1
lea esi, [ebp - 0x864]
mov edi, eax
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], bl
call fcn.00404654
cmp edi, ebx
je 0x424eba
xor eax, eax
push 0x7fe
mov word [ebp - 0x810], ax
lea eax, [ebp - 0x80e]
push ebx
push eax
call fcn.00431920
mov eax, dword [ebp - 0x86c]
movzx ecx, word [eax + 2]
movzx eax, word [eax]
add esp, 0xc
push ecx
push eax
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x838], esp
push 0x1e
push 0x44a944
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00427946
cmp dword [eax + 0x18], 8
jb 0x4244bf
mov eax, dword [eax + 4]
jmp 0x4244c2
add eax, 4
push eax
lea eax, [ebp - 0x810]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], bl
call fcn.00404654
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x82c]
call fcn.00425210
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
push edi
mov byte [ebp - 4], 3
call fcn.0042529e
sub esp, 0x1c
add eax, 0x38
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xb
push 0x44a964
mov byte [ebp - 4], 4
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.00427d97
mov byte [ebp - 4], 6
cmp dword [eax + 0x18], 8
jb 0x42456f
mov eax, dword [eax + 4]
jmp 0x424572
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 8
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
sub esp, 0x1c
add eax, 0x54
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xf
push 0x44a970
mov byte [ebp - 4], 9
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00427f88
mov byte [ebp - 4], 0xb
cmp dword [eax + 0x18], 8
jb 0x424621
mov eax, dword [eax + 4]
jmp 0x424624
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0xd
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
sub esp, 0x1c
add eax, 0xe0
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xb
push str._:_0n.G_n
mov byte [ebp - 4], 0xe
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0xf
call fcn.00427946
mov byte [ebp - 4], 0x10
cmp dword [eax + 0x18], 8
jb 0x4246d5
mov eax, dword [eax + 4]
jmp 0x4246d8
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x12
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
sub esp, 0x1c
add eax, 0x70
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xc
push 0x44a98c
mov byte [ebp - 4], 0x13
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x14
call fcn.00427f88
mov byte [ebp - 4], 0x15
cmp dword [eax + 0x18], 8
jb 0x424787
mov eax, dword [eax + 4]
jmp 0x42478a
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x17
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
sub esp, 0x1c
mov edi, 0x8c
add eax, edi
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xe
push str._64T_bZ_t_f
mov byte [ebp - 4], 0x18
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x19
call fcn.00427946
mov byte [ebp - 4], 0x1a
cmp dword [eax + 0x18], 8
jb 0x42483d
mov eax, dword [eax + 4]
jmp 0x424840
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x1c
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
call fcn.0042529e
sub esp, 0x1c
add eax, edi
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xf
push str._64T
mov byte [ebp - 4], 0x1d
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.00427946
mov byte [ebp - 4], 0x1f
cmp dword [eax + 0x18], 8
jb 0x4248f0
mov eax, dword [eax + 4]
jmp 0x4248f3
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x21
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
call dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
dec eax
je 0x42494e
dec eax
dec eax
je 0x42494e
sub eax, 4
jne 0x424981
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
push 4
lea eax, [ebp - 0x838]
push eax
push 0x20001009
mov esi, 0x400
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x20
lea eax, [ebp - 0x868]
push eax
push 0x58
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
call fcn.0042529e
sub esp, 0x1c
mov edi, 0xa8
add eax, edi
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0x10
push 0x44a9bc
mov byte [ebp - 4], 0x22
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00427a76
mov byte [ebp - 4], 0x24
cmp dword [eax + 0x18], 8
jb 0x4249ee
mov eax, dword [eax + 4]
jmp 0x4249f1
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x26
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
call fcn.0042529e
sub esp, 0x1c
add eax, edi
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xc
push 0x44a9d0
mov byte [ebp - 4], 0x27
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x28
call fcn.00427f88
mov byte [ebp - 4], 0x29
cmp dword [eax + 0x18], 8
jb 0x424aa1
mov eax, dword [eax + 4]
jmp 0x424aa4
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x2b
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
call fcn.004011bd
test eax, eax
je 0x424afa
call fcn.0041f547
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
call fcn.0042529e
sub esp, 0x1c
add eax, 0xc4
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xb
push str.__b.MQA_t
mov byte [ebp - 4], 0x2c
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x2d
call fcn.00427b2c
mov byte [ebp - 4], 0x2e
cmp dword [eax + 0x18], 8
jb 0x424b65
mov eax, dword [eax + 4]
jmp 0x424b68
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x30
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
call fcn.0042529e
sub esp, 0x1c
mov edi, 0xe0
add eax, edi
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xe
push str.__1M_A_
mov byte [ebp - 4], 0x31
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x32
call fcn.00427946
mov byte [ebp - 4], 0x33
cmp dword [eax + 0x18], 8
jb 0x424c1d
mov eax, dword [eax + 4]
jmp 0x424c20
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x35
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
call fcn.00401219
test eax, eax
je 0x424c76
call fcn.0041f58a
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
call fcn.0042529e
sub esp, 0x1c
add eax, edi
mov esi, esp
mov dword [ebp - 0x838], esp
push eax
call fcn.00425233
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x830], esp
push 0xc
push 0x44a9fc
mov byte [ebp - 4], 0x36
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.00427a76
mov byte [ebp - 4], 0x38
cmp dword [eax + 0x18], 8
jb 0x424cde
mov eax, dword [eax + 4]
jmp 0x424ce1
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x830], esp
push eax
lea eax, [ebp - 0x82c]
push eax
push ecx
call fcn.00425ba6
add esp, 0xc
mov ecx, dword [ebp - 0x834]
mov byte [ebp - 4], 0x3a
call fcn.00424ef8
push ebx
push 1
lea esi, [ebp - 0x864]
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x848]
push eax
lea eax, [ebp - 0x864]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x838], esp
push 2
push 0x448b54
call fcn.004081ed
lea ecx, [ebp - 0x8cc]
call fcn.0041eded
mov ecx, eax
mov byte [ebp - 4], 0x3b
call fcn.00427946
cmp dword [eax + 0x18], 8
jb 0x424d76
mov eax, dword [eax + 4]
jmp 0x424d79
add eax, 4
push eax
push dword [ebp - 0x834]
call sub.VERSION.dll_VerQueryValueW
push ebx
push 1
lea esi, [ebp - 0x864]
mov edi, eax
call fcn.0042541a
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 3
call fcn.00404654
cmp edi, ebx
je 0x424e6d
mov edi, dword [ebp + 0xc]
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
mov eax, dword [eax + 0xfc]
mov ecx, dword [ebp - 0x848]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
mov eax, dword [eax + 0x100]
mov ecx, dword [ebp - 0x848]
mov dword [ecx + 0xc], eax
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
mov eax, dword [eax + 0xfc]
mov ecx, dword [ebp - 0x848]
mov dword [ecx + 0x10], eax
lea eax, [ebp - 0x841]
mov byte [ebp - 0x841], bl
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x424e0f
sub eax, esi
push 0
pop eax
setne al
dec eax
jne 0x424e52
push 4
lea eax, [ebp - 0x838]
push eax
push 0x20001009
mov esi, 0x400
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoA]
push 0x20
lea eax, [ebp - 0x868]
push eax
push 0x58
push esi
call dword [sym.imp.KERNEL32.dll_GetLocaleInfoW]
call fcn.0040b4a9
mov eax, dword [ebp - 0x83c]
push edi
call fcn.0042529e
mov eax, dword [eax + 0x100]
mov ecx, dword [ebp - 0x848]
mov dword [ecx + 0x14], eax
cmp dword [ebp + 0x28], 0x10
mov eax, dword [ebp + 0x14]
jae 0x424e79
lea eax, [ebp + 0x14]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceA]
mov dword [ebp - 0x830], eax
cmp eax, ebx
je 0x424eac
push dword [ebp - 0x840]
mov ecx, dword [ebp - 0x86c]
push dword [ebp - 0x834]
movzx ecx, word [ecx]
push ecx
push 1
push 0x10
push eax
call dword [sym.imp.KERNEL32.dll_UpdateResourceA]
push ebx
push 1
lea esi, [ebp - 0x82c]
call fcn.0042541a
cmp dword [ebp - 0x834], ebx
je 0x424ece
push dword [ebp - 0x834]
call fcn.004295b0
pop ecx
cmp dword [ebp - 0x830], ebx
je 0x424ee3
push ebx
push dword [ebp - 0x830]
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceA]
push ebx
push 1
lea ecx, [ebp + 0x10]
call fcn.004035bd
xor eax, eax
call fcn.0042bba9
ret 0x24