Function at 0x41d570
Capabilities:
Extract resource via kernel32 functions

Disassembly:
mov eax, 0x4ca7b1
call fcn.004ca220
sub esp, 0xec
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x24], 6
mov dword [ebp - 0x20], 8
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x20], 0x7f71
xor ebx, ebx
cmp dword [ebp - 0x20], 0x8323
jle 0x41d5ef
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov eax, edi
cdq
idiv ebx
mov eax, esi
mov ecx, edx
shl eax, cl
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
inc ebx
cmp ebx, 0x117d
jl 0x41d5b9
inc edi
cmp edi, 0x4add
push 0
pop ebx
jl 0x41d5b6
inc esi
cmp esi, 0x6e7e
jl 0x41d5b4
mov byte [ebp - 0x11], bl
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x20], 0x7d8c
jge 0x41d60d
mov edx, str.xizfxqw_xpjwb_ewhv_uszqjzwgu
mov ecx, 0xa9b358
call fcn.0040e54d
or dword [ebp - 4], 0xffffffff
jmp 0x41d633
cmp byte [ebp - 0x11], 0
je 0x41d644
push 0x1a90
call dword [sym.imp.GDI32.dll_SaveDC]
mov dword [ebp - 0x1c], 0x8d4081c2
mov dword [ebp - 0x1c], ebx
jmp 0x41d661
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x9c], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x41d650
xor esi, esi
inc esi
mov dword [ebp - 0x1c], esi
cmp dword [ebp - 0x1c], ebx
jl 0x41d683
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x9c], ebx
jne 0x41d683
dec dword [ebp - 0x1c]
jns 0x41d672
mov dword [ebp - 0x18], 0x462d5e48
push esi
lea ecx, [ebp - 0x88]
call fcn.0040bc2e
mov dword [ebp - 0x1c], ebx
jmp 0x41d6ae
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], 0xfffffff9
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x41d69b
mov dword [ebp - 0x18], ebx
jmp 0x41d6d7
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41d6d4
push 0xf34
push ebx
push 0x167
push 0x4e
call dword [sym.imp.USER32.dll_MapWindowPoints]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x19
jl 0x41d6b8
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x41d7fa
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x34], 0x25ad
cmp dword [ebp - 0x34], 0x294e
jle 0x41d77a
push 0x807
call dword [sym.imp.USER32.dll_GetKeyboardType]
mov dword [ebp - 0x38], ebx
mov eax, ebx
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0x794d
mov edi, ebx
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
lea ecx, [ebp - 0xe0]
call fcn.004019b1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41d735
mov eax, dword [eax]
push eax
call fcn.004b4d47
pop ecx
push ebx
push esi
lea ecx, [ebp - 0xe0]
call fcn.0040c2ae
inc edi
cmp edi, 0x3dd3
mov eax, dword [ebp - 0x20]
jl 0x41d718
mov edi, dword [ebp - 0x38]
add eax, edi
mov dword [ebp - 0x20], eax
dec dword [ebp - 0x1c]
jne 0x41d716
inc edi
mov dword [ebp - 0x38], edi
cmp edi, 0x16af
jl 0x41d70a
push ebx
push 0x13f0
call dword [sym.imp.USER32.dll_BeginPaint]
mov byte [ebp - 0x11], bl
mov dword [ebp - 4], 2
cmp dword [ebp - 0x34], 0x247a
jge 0x41d798
push str.njyeebme_bhxljw_tutkikhj_qybihvvcn_fgjmskmgr_epbxjiij_ejklr_fkzqbxe_ettb_wbnvoi_nftak_kijdf_klibhc_mhuk
call fcn.004b4d47
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41d7c1
cmp byte [ebp - 0x11], 0
je 0x41d7d3
push ebx
push 0x5ae
call dword [sym.imp.GDI32.dll_GetWindowOrgEx]
mov dword [ebp - 0x1c], ebx
jmp 0x41d7ed
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx + eax*4]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x41d7d8
dec dword [ebp - 0x18]
jmp 0x41d6e0
lea ecx, [ebp - 0x88]
call fcn.0040bd00
movdqa xmm0, xmmword [0xa8f860]
movdqu xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
push dword [ebp - 0x48]
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xac]
push eax
push ebx
lea ecx, [ebp - 0x60]
call fcn.0040ebbd
mov dword [ebp - 0x30], 0x2bd7b1c2
mov dword [ebp - 0x2c], 0xc1b16eb2
mov dword [ebp - 0x24], 0x251f
mov dword [ebp - 0x1c], ebx
push 3
pop edi
jmp 0x41d866
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xc8], 0xccb4f7bc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x41d855
mov dword [ebp - 0x30], edi
cmp dword [ebp - 0x30], ebx
jl 0x41dd54
mov dword [ebp - 0x18], 0xf8c7b5c6
mov dword [ebp - 0x20], 0x3a4d1b40
mov eax, dword [ebp - 0x18]
cmp eax, dword [ebp - 0x18]
jle 0x41d894
cmp dword [ebp - 0x18], ebx
mov ecx, esi
jne 0x41d896
mov ecx, ebx
mov eax, dword [ebp - 0x18]
add eax, ecx
jne 0x41d8a0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
imul eax, dword [ebp - 0x20], 0xffff
xor ecx, ecx
cmp eax, 0xfffffffa
setl cl
xor eax, eax
cmp ecx, 0x40ee1d45
setg al
xor ecx, ecx
cmp eax, 0xfffffffc
setge cl
mov eax, dword [ebp - 0x20]
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x18]
je 0x41d8ef
mov dword [ebp - 0x24], 0x1701
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
jmp 0x41d92e
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41d90a
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegQueryInfoKeyW]
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41d92e
push 0x1537
push 0xddb
push 0x1275
push 0x2115
push ebx
call dword [sym.imp.USER32.dll_SetRect]
lea eax, [ebp - 0x30]
push eax
lea edx, [ebp - 0x60]
lea ecx, [ebp - 0x2c]
call fcn.0041ca7c
pop ecx
push edi
lea ecx, [ebp - 0x7c]
call fcn.0040bc2e
mov dword [ebp - 0x18], 0x977
mov dword [ebp - 0x1c], 0xcc7c44d9
mov dword [ebp - 0x18], ebx
jmp 0x41d96a
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x7c]
mov dword [eax + ecx*4], 0x707dfe4d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x41d95a
mov dword [ebp - 0x18], 0xc341
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x1c], ebx
jne 0x41dbb1
mov dword [ebp - 0x1c], 2
cmp dword [ebp - 0x1c], ebx
jl 0x41dbc7
mov dword [ebp - 0x24], 0x7118
cmp dword [ebp - 0x24], 0x74a1
jle 0x41da39
mov edi, ebx
mov dword [ebp - 0x28], ebx
mov eax, ebx
mov dword [ebp - 0x40], ebx
mov edx, ebx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x20], edi
mov ecx, eax
sar dword [ebp - 0x20], cl
mov edi, dword [ebp - 0x20]
mov eax, edx
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], 0x78de
and eax, edi
cdq
push edx
push eax
lea ecx, [ebp - 0xf8]
call fcn.004019b1
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x41d9e6
mov eax, dword [eax]
push eax
call fcn.004b4d47
pop ecx
push ebx
push esi
lea ecx, [ebp - 0xf8]
call fcn.0040c2ae
mov eax, dword [ebp - 0x34]
dec eax
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x38]
jne 0x41d9cc
mov edx, dword [ebp - 0x3c]
inc edx
mov dword [ebp - 0x3c], edx
cmp edx, 0xbbe
jl 0x41d9c0
mov eax, dword [ebp - 0x40]
inc eax
mov dword [ebp - 0x40], eax
cmp eax, 0x6b5b
mov edi, dword [ebp - 0x28]
jl 0x41d9b0
inc edi
mov dword [ebp - 0x28], edi
cmp edi, 0x5f31
jl 0x41d9ab
push 3
pop edi
cmp dword [ebp - 0x18], ebx
jne 0x41dbc7
mov dword [ebp - 4], 4
cmp dword [ebp - 0x24], 0x6fb7
jge 0x41da5d
push str.ibbriwim_yhpj_lmi_yrlo_yvflqvx_oqjevio_uryd_oqtd
call fcn.004b4d47
pop ecx
or dword [ebp - 4], 0xffffffff
jmp 0x41da89
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x41dba9
push edi
lea ecx, [ebp - 0x94]
call fcn.0040bc2e
mov dword [ebp - 0x28], 0x38e
cmp dword [ebp - 0x28], 0x4ce
jle 0x41dae6
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov edi, eax
mov esi, 0x663
mov eax, edi
cdq
push edx
push eax
mov ecx, 0xa9b358
call fcn.0040b8d9
dec edi
dec esi
jne 0x41dac1
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x5d11
jl 0x41daba
inc esi
push 3
pop edi
mov dword [ebp - 0x20], ebx
jmp 0x41dafe
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x94]
mov dword [eax + ecx*4], 0xd058bbe5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edi
jl 0x41daeb
mov dword [ebp - 4], 6
cmp dword [ebp - 0x28], 0x10f
jge 0x41db22
mov edx, str.hejfsjan_yjc_hjygg_oidyncs_mbuy_mckqolkmp_djot
mov ecx, 0xa9b358
call fcn.0040e54d
or dword [ebp - 4], 0xffffffff
jmp 0x41db4e
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x24], eax
mov dword [eax + 4], ebx
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41db6e
push 0x151
call dword [sym.imp.USER32.dll_IsZoomed]
mov edx, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
mov dword [ecx + edx*4], eax
mov eax, dword [ebp - 0x24]
inc dword [eax + 4]
cmp dword [eax + 4], 2
jle 0x41db5a
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41db96
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
lea ecx, [ebp - 0x94]
call fcn.0040bd00
dec dword [ebp - 0x18]
jmp 0x41da90
dec dword [ebp - 0x1c]
jmp 0x41d989
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41dbc7
push ebx
push 0x1c27
push ebx
call dword [sym.imp.GDI32.dll_GetBitmapBits]
lea ecx, [ebp - 0x7c]
call fcn.0040bd00
mov dword [ebp - 0x2c], ebx
jmp 0x41dd43
mov dword [ebp - 0x64], 0x40774242
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x60]
cmp dword [eax + ecx*4], ebx
jne 0x41dd4c
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x24], 0xba86
mov dword [ebp - 0x3c], 0x19c2
mov dword [ebp - 0x28], 0x8cdc14c3
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
cmp ecx, eax
setne dl
mov eax, dword [ebp - 0x1c]
sub eax, edx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
setle dl
imul eax, edx, 0xfffffffb
test eax, eax
je 0x41dc5b
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41dd38
push 0x771
call dword [sym.imp.GDI32.dll_UpdateColors]
jmp 0x41dd38
mov dword [ebp - 0x40], 0xfc72fa5d
mov dword [ebp - 0x28], 0x5adb51fd
mov dword [ebp - 0x28], 0x87ea82bc
mov dword [ebp - 0x20], ebx
jmp 0x41dc83
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x6c], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x41dc75
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], esi
jg 0x41dd26
push 0xfffffffffffffff8
pop edi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], esi
mov byte [ebp - 0x11], bl
cmp byte [ebp - 0x11], 0
je 0x41dcb9
push ebx
push 0x1f3a
push ebx
push 0x914
call dword [sym.imp.GDI32.dll_GetTextExtentPointW]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x6c]
cmp dword [ebp - 0x20], ebx
je 0x41dcf9
cmp dword [ebp - 0x24], ebx
jne 0x41dcf9
mov eax, dword [ebp - 0x20]
xor ecx, ecx
cmp eax, 0x76e1
setg cl
cmp ecx, dword [ebp - 0x20]
jg 0x41dce3
cmp dword [ebp - 0x68], ebx
mov eax, ebx
je 0x41dce5
mov eax, esi
cmp eax, dword [ebp - 0x6c]
jne 0x41dcf1
cmp dword [ebp - 0x18], ebx
mov eax, esi
jne 0x41dcf3
mov eax, ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
neg eax
cmp edi, eax
sbb edx, edx
neg edx
neg edx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
cmp edx, eax
setle cl
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x41dc98
push 3
pop edi
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x64]
call fcn.0041d437
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edi
jle 0x41dbd7
dec dword [ebp - 0x30]
jmp 0x41d86e
lea ecx, [ebp - 0x60]
call fcn.0040bd00
mov dword [ebp - 0x18], 0x3f4f46db
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], ebx
jmp 0x41dd79
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x54], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edi
jl 0x41dd6b
mov dword [ebp - 0x18], ebx
jmp 0x41dd91
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x41dd83
mov dword [ebp - 0x18], ebx
jmp 0x41de36
mov dword [ebp - 0x28], 0xdb821342
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x20], ebx
jmp 0x41ddc2
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xbc], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x41ddb1
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
xor edx, edx
cmp eax, esi
setle dl
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
xor ecx, ecx
cmp eax, edx
setle cl
mov edx, 0xffff
sub edx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x28]
xor ecx, ecx
cmp dword [ebp - 0x24], eax
setl cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0xb0], eax
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x41dd9e
mov dword [ebp - 0x44], 0xfffffff8
mov eax, dword [ebp - 0x48]
cdq
mov ecx, 0x3e8
idiv ecx
mov esi, edx
mov edi, eax
mov ecx, dword [ebp - 0x70]
call fcn.0041c94e
add eax, esi
add eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret