Function at 0x518510
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5caf6f
mov eax, dword fs:[0]
push eax
sub esp, 0x960
mov eax, dword [0x70c0f0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x924], ecx
call fcn.00447430
mov ecx, eax
call fcn.004d6330
push eax
lea ecx, [ebp - 0x7f8]
call fcn.00446660
mov dword [ebp - 4], 0
push str.SettingFilterConfig.xml
lea ecx, [ebp - 0x7f8]
call fcn.004465f0
lea eax, [ebp - 0x7f8]
push eax
lea ecx, [ebp - 0x810]
push ecx
call fcn.004db8c9
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x96c]
call fcn.0047b320
mov byte [ebp - 4], 2
mov dword [ebp - 0x8c0], 0
movzx edx, byte [ebp + 8]
test edx, edx
je 0x518774
mov dword [ebp - 0x920], 0
call fcn.00447430
mov ecx, eax
call fcn.004a74e9
mov dword [ebp - 0x8d0], eax
push 0x602504
push str.DefFilter.xml
mov eax, dword [ebp - 0x8d0]
push eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov dword [ebp - 0x8cc], eax
cmp dword [ebp - 0x8cc], 0
jne 0x518633
mov byte [ebp - 0x8b1], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x96c]
call fcn.00446460
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x810]
call fcn.00446710
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f8]
call fcn.00446610
mov al, byte [ebp - 0x8b1]
jmp 0x518da5
mov ecx, dword [ebp - 0x8cc]
push ecx
mov edx, dword [ebp - 0x8d0]
push edx
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x900], eax
mov eax, dword [ebp - 0x900]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov dword [ebp - 0x908], eax
mov ecx, dword [ebp - 0x8cc]
push ecx
mov edx, dword [ebp - 0x8d0]
push edx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [ebp - 0x8d4], eax
mov eax, dword [ebp - 0x8d4]
add eax, 1
push eax
call fcn.00495ecb
add esp, 4
mov dword [ebp - 0x904], eax
mov ecx, dword [ebp - 0x904]
mov dword [ebp - 0x8bc], ecx
mov edx, dword [ebp - 0x8d4]
add edx, 1
push edx
push 0
mov eax, dword [ebp - 0x8bc]
push eax
call fcn.004e1330
add esp, 0xc
mov ecx, dword [ebp - 0x8d4]
push ecx
mov edx, dword [ebp - 0x908]
push edx
mov eax, dword [ebp - 0x8bc]
push eax
call fcn.004e60b0
add esp, 0xc
push 0
push 0
mov ecx, dword [ebp - 0x8bc]
push ecx
lea ecx, [ebp - 0x96c]
call fcn.0047e0c0
push 0x602528
lea ecx, [ebp - 0x96c]
call fcn.0047c000
mov dword [ebp - 0x8c0], eax
cmp dword [ebp - 0x8c0], 0
jne 0x518772
mov edx, dword [ebp - 0x8bc]
mov dword [ebp - 0x90c], edx
mov eax, dword [ebp - 0x90c]
push eax
call fcn.00495c1d
add esp, 4
mov dword [ebp - 0x8bc], 0
mov byte [ebp - 0x8a9], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x96c]
call fcn.00446460
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x810]
call fcn.00446710
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f8]
call fcn.00446610
mov al, byte [ebp - 0x8a9]
jmp 0x518da5
jmp 0x5187a3
push 1
lea ecx, [ebp - 0x810]
call fcn.004466d0
push eax
lea ecx, [ebp - 0x96c]
call fcn.0047c2d0
push 0x602538
lea ecx, [ebp - 0x96c]
call fcn.0047c000
mov dword [ebp - 0x8c0], eax
cmp dword [ebp - 0x8c0], 0
jne 0x5187ee
mov byte [ebp - 0x8aa], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x96c]
call fcn.00446460
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x810]
call fcn.00446710
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f8]
call fcn.00446610
mov al, byte [ebp - 0x8aa]
jmp 0x518da5
push 0x602548
mov ecx, dword [ebp - 0x8c0]
call fcn.0047c000
mov dword [ebp - 0x8fc], eax
xor ecx, ecx
mov word [ebp - 0x7e0], cx
push 0x3e6
push 0
lea edx, [ebp - 0x7de]
push edx
call fcn.004e1330
add esp, 0xc
xor eax, eax
mov word [ebp - 0x3f8], ax
push 0x3e6
push 0
lea ecx, [ebp - 0x3f6]
push ecx
call fcn.004e1330
add esp, 0xc
mov dword [ebp - 0x8a8], 0
mov dword [ebp - 0x8a4], 0
cmp dword [ebp - 0x8fc], 0
je 0x518d68
mov ecx, dword [ebp - 0x8fc]
call fcn.0047c040
mov dword [ebp - 0x8b0], eax
cmp dword [ebp - 0x8b0], 0
je 0x518d68
lea ecx, [ebp - 0x8a0]
call fcn.0044e1d0
mov byte [ebp - 4], 3
push 0x602554
mov ecx, dword [ebp - 0x8b0]
call fcn.0047c000
mov dword [ebp - 0x8f4], eax
cmp dword [ebp - 0x8f4], 0
je 0x518924
mov ecx, dword [ebp - 0x8f4]
call fcn.0044e040
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 0
je 0x518924
mov edx, dword [ebp - 0x8a4]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x8a4]
mov edx, dword [eax + 0x30]
call edx
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 0
je 0x518924
mov ecx, dword [ebp - 0x8a8]
call fcn.0044e020
mov dword [ebp - 0x910], eax
lea eax, [ebp - 0x3f8]
push eax
mov ecx, dword [ebp - 0x910]
push ecx
call fcn.004db74d
add esp, 8
lea edx, [ebp - 0x3f8]
push edx
lea ecx, [ebp - 0x89c]
call fcn.0044c0b0
push 0x60255c
mov ecx, dword [ebp - 0x8b0]
call fcn.0047c000
mov dword [ebp - 0x8f0], eax
cmp dword [ebp - 0x8f0], 0
je 0x518999
mov ecx, dword [ebp - 0x8f0]
call fcn.0044e040
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 0
je 0x518999
mov eax, dword [ebp - 0x8a4]
mov edx, dword [eax]
mov ecx, dword [ebp - 0x8a4]
mov eax, dword [edx + 0x30]
call eax
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 0
je 0x518999
mov ecx, dword [ebp - 0x8a8]
call fcn.0044e020
push eax
call fcn.004e6060
add esp, 4
mov dword [ebp - 0x8a0], eax
push 0x602564
mov ecx, dword [ebp - 0x8b0]
call fcn.0047c000
mov dword [ebp - 0x8ec], eax
cmp dword [ebp - 0x8ec], 0
je 0x518aa0
push 0x602570
mov ecx, dword [ebp - 0x8ec]
call fcn.0047c000
mov dword [ebp - 0x8c4], eax
cmp dword [ebp - 0x8c4], 0
je 0x518aa0
lea ecx, [ebp - 0x830]
call fcn.0044e230
mov byte [ebp - 4], 4
push 0x602578
mov ecx, dword [ebp - 0x8c4]
call fcn.0047b8b0
mov dword [ebp - 0x8dc], eax
cmp dword [ebp - 0x8dc], 0
je 0x518a35
lea ecx, [ebp - 0x3f8]
push ecx
mov edx, dword [ebp - 0x8dc]
push edx
call fcn.004db74d
add esp, 8
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x828]
call fcn.0044c0b0
push 0x602580
mov ecx, dword [ebp - 0x8c4]
call fcn.0047b8b0
mov dword [ebp - 0x914], eax
cmp dword [ebp - 0x8dc], 0
je 0x518a69
mov ecx, dword [ebp - 0x914]
push ecx
call fcn.004e6060
add esp, 4
mov dword [ebp - 0x82c], eax
lea edx, [ebp - 0x830]
push edx
lea ecx, [ebp - 0x884]
call fcn.0044e760
mov ecx, dword [ebp - 0x8c4]
call fcn.0047c3b0
mov dword [ebp - 0x8c4], eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x830]
call fcn.0044e250
jmp 0x5189d2
lea eax, [ebp - 0x8a0]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.0044e580
push 0x602588
mov ecx, dword [ebp - 0x8b0]
call fcn.0047c000
mov dword [ebp - 0x8e8], eax
cmp dword [ebp - 0x8e8], 0
je 0x518d43
mov ecx, dword [ebp - 0x8e8]
call fcn.0047c040
mov dword [ebp - 0x8b8], eax
cmp dword [ebp - 0x8b8], 0
je 0x518d43
lea ecx, [ebp - 0x878]
call fcn.0044e1d0
mov byte [ebp - 4], 5
push 0x602594
mov ecx, dword [ebp - 0x8b8]
call fcn.0047c000
mov dword [ebp - 0x8f8], eax
cmp dword [ebp - 0x8f8], 0
je 0x518b93
mov ecx, dword [ebp - 0x8f8]
call fcn.0044e040
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 0
je 0x518b93
mov ecx, dword [ebp - 0x8a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8a4]
mov eax, dword [edx + 0x30]
call eax
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 0
je 0x518b93
mov ecx, dword [ebp - 0x8a8]
call fcn.0044e020
mov dword [ebp - 0x918], eax
lea ecx, [ebp - 0x3f8]
push ecx
mov edx, dword [ebp - 0x918]
push edx
call fcn.004db74d
add esp, 8
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x874]
call fcn.0044c0b0
push 0x60259c
mov ecx, dword [ebp - 0x8b8]
call fcn.0047c000
mov dword [ebp - 0x8e0], eax
cmp dword [ebp - 0x8e0], 0
je 0x518c08
mov ecx, dword [ebp - 0x8e0]
call fcn.0044e040
mov dword [ebp - 0x8a4], eax
cmp dword [ebp - 0x8a4], 0
je 0x518c08
mov ecx, dword [ebp - 0x8a4]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x8a4]
mov eax, dword [edx + 0x30]
call eax
mov dword [ebp - 0x8a8], eax
cmp dword [ebp - 0x8a8], 0
je 0x518c08
mov ecx, dword [ebp - 0x8a8]
call fcn.0044e020
push eax
call fcn.004e6060
add esp, 4
mov dword [ebp - 0x878], eax
push 0x6025a4
mov ecx, dword [ebp - 0x8b8]
call fcn.0047c000
mov dword [ebp - 0x8e4], eax
cmp dword [ebp - 0x8e4], 0
je 0x518d0f
push 0x6025b0
mov ecx, dword [ebp - 0x8e4]
call fcn.0047c000
mov dword [ebp - 0x8c8], eax
cmp dword [ebp - 0x8c8], 0
je 0x518d0f
lea ecx, [ebp - 0x850]
call fcn.0044e230
mov byte [ebp - 4], 6
push 0x6025b8
mov ecx, dword [ebp - 0x8c8]
call fcn.0047b8b0
mov dword [ebp - 0x8d8], eax
cmp dword [ebp - 0x8d8], 0
je 0x518ca4
lea ecx, [ebp - 0x3f8]
push ecx
mov edx, dword [ebp - 0x8d8]
push edx
call fcn.004db74d
add esp, 8
lea eax, [ebp - 0x3f8]
push eax
lea ecx, [ebp - 0x848]
call fcn.0044c0b0
push 0x6025c0
mov ecx, dword [ebp - 0x8c8]
call fcn.0047b8b0
mov dword [ebp - 0x91c], eax
cmp dword [ebp - 0x8d8], 0
je 0x518cd8
mov ecx, dword [ebp - 0x91c]
push ecx
call fcn.004e6060
add esp, 4
mov dword [ebp - 0x84c], eax
lea edx, [ebp - 0x850]
push edx
lea ecx, [ebp - 0x85c]
call fcn.0044e760
mov ecx, dword [ebp - 0x8c8]
call fcn.0047c3b0
mov dword [ebp - 0x8c8], eax
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x850]
call fcn.0044e250
jmp 0x518c41
mov ecx, dword [ebp - 0x8b8]
call fcn.0047c3b0
mov dword [ebp - 0x8b8], eax
lea eax, [ebp - 0x878]
push eax
mov ecx, dword [ebp + 0xc]
call fcn.0044e580
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x878]
call fcn.0044e200
jmp 0x518ae3
mov ecx, dword [ebp - 0x8b0]
call fcn.0047c3b0
mov dword [ebp - 0x8b0], eax
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x8a0]
call fcn.0044e200
jmp 0x518874
mov byte [ebp - 0x8ab], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x96c]
call fcn.00446460
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x810]
call fcn.00446710
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x7f8]
call fcn.00446610
mov al, byte [ebp - 0x8ab]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00495c0c
mov esp, ebp
pop ebp
ret 8