Function at 0x41037b
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.0041037b
xor esi, esi
xor edi, edi
mov ecx, 0x17
push esi
dec ecx
jne 0x410397
push 0xa
mov ebx, dword [ebp + 8]
push dword [ebx]
push dword [0x41e870]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
fldcw word [ebp - 0x10]
mov esi, eax
mov eax, esi
push eax
push dword [0x41e870]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
fldcw word [ebp - 0x10]
mov edi, eax
mov eax, esi
push eax
push dword [0x41e870]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
fldcw word [ebp - 0x10]
add eax, edi
mov dword [0x41e8b8], eax
mov ebx, edi
movzx eax, byte [ebx]
mov dword [ebp - 0xb4], eax
inc edi
fild dword [ebp - 0xb4]
fstp xword [ebp - 0x50]
fild dword [0x42082c]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
je 0x410ee8
mov eax, 2
add eax, edi
mov ecx, eax
mov dword [ebp - 0x30], ecx
mov ecx, edi
mov eax, 2
call fcn.0041a351
mov eax, 1
call fcn.00413710
mov ecx, dword [ebp - 0x30]
call fcn.0041a351
lea ebx, [ebp - 0x9c]
call fcn.0041be7e
mov eax, 2
add eax, edi
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov dword [ebp - 0x30], eax
call fcn.0041c972
add eax, dword [ebp - 0x30]
mov edi, eax
xor eax, eax
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov ecx, 1
mov edx, 0x41ebf4
call fcn.0041c9a4
xchg ecx, eax
call fcn.00414246
cmp eax, ecx
je 0x4104b0
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov edx, 0x41ebf4
call fcn.0041c9a4
mov eax, dword [0x41e884]
call fcn.0041b081
lea ebx, [ebp - 0x9c]
call fcn.0041be7e
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov edx, 0x41e8f8
call fcn.0041c9a4
mov edx, 0x41e8e8
call fcn.0041c9a4
call fcn.0041c142
call fcn.0041bb9b
mov edx, 0x41ea4c
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x4104fd
mov dword [ebp - 0x98], 0xffffffff
jmp 0x411c83
mov ecx, edi
mov eax, 4
call fcn.0041a351
mov eax, 1
call fcn.004136f4
call fcn.0041be77
mov dword [ebp - 0xa8], eax
xor eax, eax
mov ecx, pe_nt_image_headers32
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x4105d9
push 0
push 0
mov eax, 1
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
call fcn.0041c142
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
xor eax, eax
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 2
xchg ecx, eax
call fcn.0041abcf
cmp eax, ecx
je 0x4105ca
lea ebx, [ebp - 0x9c]
push ebx
call fcn.0040f3c1
mov dword [ebp - 0xac], eax
jmp 0x4105d4
mov dword [ebp - 0xac], 0
jmp 0x4105eb
lea ebx, [ebp - 0x9c]
push ebx
call fcn.0040f3c1
mov dword [ebp - 0xac], eax
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xa8]
call fcn.0041be50
mov eax, dword [ebp - 0xac]
call fcn.0041be50
fcompp
fnstsw ax
sahf
je 0x410d38
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
push 0
mov ebx, esp
call fcn.0041be7e
call sym.download.exe_GET_ATTRIB
mov dword [ebp - 0xd0], eax
xor eax, eax
mov ecx, 0x1f
and ecx, dword [ebp - 0xd0]
cmp ecx, eax
je 0x410663
push pe_nt_image_headers32
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
push 0
mov ebx, esp
call fcn.0041be7e
call sym.download.exe_SET_ATTRIB
xor eax, eax
mov ecx, pe_nt_image_headers32
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410808
push 0
push 0
mov eax, 1
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
call fcn.0041c142
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
xor eax, eax
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 2
xchg ecx, eax
call fcn.0041abcf
cmp eax, ecx
je 0x410808
fild dword [0x4207b4]
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041a61d
mov eax, 1
call fcn.00413725
fcompp
fnstsw ax
sahf
jbe 0x410808
push 0
mov eax, 4
add eax, edi
mov ecx, eax
mov eax, 0xc
call fcn.0041a351
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040fe3d
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041be50
mov edx, 1
call fcn.0041c280
push 0
push 0
push 0
mov eax, 0xa
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
mov ecx, 2
mov eax, 0x7fffffff
call fcn.0041667a
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040fe3d
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
mov ebx, 1
call fcn.0041c248
call fcn.0041be50
fcompp
fnstsw ax
sahf
jb 0x410808
jmp 0x410d62
mov eax, 4
add eax, edi
mov dword [0x41e8b4], eax
mov eax, dword [0x41e8b8]
add eax, dword [0x41e898]
sub eax, edi
mov dword [0x41e898], eax
mov eax, dword [0x41e8b8]
sub eax, edi
cmp eax, 0xf4240
jle 0x41097c
push 0
push 0
mov eax, 0xb
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41ea18
call fcn.0041c9a4
call fcn.0041a54c
call fcn.0041c142
mov edx, 0x41ec10
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
push 0
push 0
mov eax, 7
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41ea18
call fcn.0041c9a4
call fcn.0041a54c
call fcn.0041c142
mov edx, 0x41ec20
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41ea18
call fcn.0041c9a4
call fcn.0041a54c
mov edx, 0x41ec34
call fcn.0041c9a4
call fcn.0041c142
mov ebx, dword [ebp + 8]
fild dword [ebx]
call fcn.0041aaaa
call fcn.0041a6fe
call fcn.0041a755
call fcn.0041c142
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
jmp 0x4109ab
mov edx, dword [0x41e890]
call fcn.0041c98d
mov ebx, dword [ebp + 8]
fild dword [ebx]
call fcn.0041aaaa
call fcn.0041a6fe
call fcn.0041a755
call fcn.0041c142
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
fild dword [0x41e888]
fstp xword [ebp - 0x50]
fild dword [0x4206f4]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x410a45
xor eax, eax
mov ecx, 1
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410a34
lea ebx, [ebp - 0xb8]
push ebx
call fcn.004100d9
push 0
push 0
mov eax, 0x19
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
jmp 0x410a40
lea ebx, [ebp - 0xb8]
push ebx
call fcn.004100d9
jmp 0x410bc8
fild dword [0x4206f0]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x410b09
xor eax, eax
mov ecx, 1
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410ab9
push 0
push 0
mov eax, 3
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
jmp 0x410aff
push 0
push 0
mov eax, 9
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
call fcn.0040c358
jmp 0x410bc8
fild dword [0x4206fc]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x410bc8
xor eax, eax
mov ecx, 1
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410b7d
push 0
push 0
mov eax, 3
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
jmp 0x410bc3
push 0
push 0
mov eax, 9
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
call fcn.0040c959
mov eax, dword [ebp - 0xa8]
call fcn.0041be50
mov edx, 1
call fcn.0041c280
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f3c1
mov ebx, 1
call fcn.0041c248
call fcn.0041be50
fcompp
fnstsw ax
sahf
jne 0x410d1c
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
mov ecx, 1
xchg ecx, eax
call fcn.0041667a
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
mov eax, 1
mov ecx, 1
xchg ecx, eax
call fcn.0041667a
call fcn.0041c1d7
jne 0x410cbf
cmp dword [0x41e894], 0
jne 0x410cbf
push 0
push 0
mov eax, 0x18
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
call fcn.0041c142
push 0
xor eax, eax
call fcn.004135ef
call fcn.00413588
call fcn.0041c142
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
jmp 0x410cde
lea ebx, [ebp - 0x9c]
push ebx
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f46f
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f313
lea ebx, [ebp - 0x9c]
push ebx
call fcn.0040f3c1
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xa8]
call fcn.0041be50
mov eax, dword [ebp - 0xac]
call fcn.0041be50
fcompp
fnstsw ax
sahf
je 0x410d17
inc dword [ebp - 0xb0]
jmp 0x410d38
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f313
inc dword [ebp - 0xb0]
mov eax, 0xbb8
call fcn.00419983
mov eax, dword [ebp - 0xac]
call fcn.0041be50
mov eax, dword [ebp - 0xa8]
call fcn.0041be50
fcompp
fnstsw ax
sahf
je 0x410d62
cmp dword [ebp - 0xb0], 2
jl 0x4105f0
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FreeResource]
fldcw word [ebp - 0x10]
cmp dword [ebp - 0xb0], 2
jne 0x410dc3
mov edx, 0x41ec44
call fcn.0041c9a4
mov ebx, dword [ebp + 8]
fild dword [ebx]
call fcn.0041aaaa
call fcn.0041c142
mov eax, 0x10030
mov edx, 0x41ec64
call fcn.0041c9a4
call fcn.00413e32
xor eax, eax
mov ecx, 1
and ecx, dword [0x41e880]
cmp ecx, eax
je 0x410dbe
jmp 0x411c83
jmp 0x410ee3
xor eax, eax
mov ecx, 2
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410e39
push 0
push 0
mov eax, 5
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
call fcn.0041c142
push 0
mov eax, 1
call fcn.004135ef
call fcn.00413588
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
jmp 0x410ee3
xor eax, eax
mov ecx, 4
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410eaf
push 0
push 0
mov eax, 6
call fcn.004135ef
call fcn.00413588
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
call fcn.0041c142
push 0
mov eax, 1
call fcn.004135ef
call fcn.00413588
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
jmp 0x410ee3
xor eax, eax
mov ecx, 0x1f
and ecx, dword [ebp - 0xd0]
cmp ecx, eax
je 0x410ee3
push dword [ebp - 0xd0]
mov edx, dword [ebp - 0x9c]
call fcn.0041c98d
push 0
mov ebx, esp
call fcn.0041be7e
call sym.download.exe_SET_ATTRIB
jmp 0x411c79
fild dword [0x42082c]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x411c79
mov ecx, edi
mov eax, dword [0x41e8b8]
sub eax, edi
call fcn.0041a351
lea ebx, [ebp - 0xcc]
call fcn.0041be7e
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FreeResource]
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov edx, 0x41ec7c
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x410f59
mov eax, 1
or dword [0x41e880], eax
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov edx, 0x41ec90
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x410f90
mov eax, 2
or dword [0x41e880], eax
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov edx, 0x41eca4
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x411170
push 0
push 0
mov eax, 0xe
call fcn.004135ef
call fcn.00413588
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov eax, 0xe
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov dword [ebp - 0x30], eax
call fcn.0041abba
cmp eax, dword [ebp - 0x30]
jne 0x411146
push 0xa
push 0x3e5
push dword [0x41e870]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
fldcw word [ebp - 0x10]
mov esi, eax
mov eax, esi
push eax
push dword [0x41e870]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
fldcw word [ebp - 0x10]
mov edi, eax
mov eax, esi
push eax
push dword [0x41e870]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
fldcw word [ebp - 0x10]
add eax, edi
mov dword [0x41e8b8], eax
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 2
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a61d
call fcn.0041ab93
mov eax, 1
add eax, edi
mov ecx, eax
mov eax, dword [0x41e8b8]
sub eax, edi
call fcn.0041a351
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a61d
call fcn.0041ab93
fcompp
fnstsw ax
sahf
jbe 0x411135
fld dword [0x42084c]
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 2
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a61d
call fcn.0041ab93
fcompp
fnstsw ax
sahf
jae 0x41111a
mov dword [0x41e8b0], 1
call fcn.00411ca5
xor eax, eax
mov ecx, 2
and ecx, dword [0x41e880]
cmp ecx, eax
je 0x411135
jmp 0x411c83
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FreeResource]
fldcw word [ebp - 0x10]
jmp 0x41116b
mov dword [0x41e8b0], 1
call fcn.00411ca5
xor eax, eax
mov ecx, 2
and ecx, dword [0x41e880]
cmp ecx, eax
je 0x41116b
jmp 0x411c83
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov eax, 1
mov ecx, 8
xchg ecx, eax
call fcn.0041667a
mov edx, 0x41ecb4
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x4111b1
jmp 0x411c83
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov eax, 1
mov ecx, 7
xchg ecx, eax
call fcn.0041667a
mov edx, 0x41ebe8
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x4111f9
lea ebx, [ebp - 0xcc]
push ebx
call fcn.0040fd22
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov eax, 1
mov ecx, 6
xchg ecx, eax
call fcn.0041667a
mov edx, 0x41ecc4
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x4116a4
push 0
push 0
mov eax, 1
call fcn.004135ef
call fcn.00413588
mov edx, 0x41ea54
call fcn.0041c9a4
call fcn.0041c142
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
xor eax, eax
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 2
xchg ecx, eax
call fcn.0041abcf
cmp eax, ecx
jne 0x4112f5
mov edx, 0x41ecd0
call fcn.0041c9a4
mov edx, 0x41e8f0
call fcn.0041c9a4
call fcn.0041c142
mov edx, 0x41ed14
call fcn.0041c9a4
call fcn.0041c142
mov eax, 0x10030
mov edx, 0x41ed44
call fcn.0041c9a4
call fcn.00413e32
jmp 0x411c83
push 0
push 0
mov eax, 0xa
call fcn.004135ef
call fcn.00413588
mov edx, 0x41ea54
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 7
mov eax, 2
call fcn.0041667a
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 5
mov eax, 2
call fcn.0041667a
call fcn.0041c142
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 0xb
mov eax, 2
call fcn.0041667a
call fcn.0041c142
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 9
mov eax, 2
call fcn.0041667a
call fcn.0041c142
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 0xd
mov eax, 2
call fcn.0041667a
call fcn.0041c142
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov dword [ebp - 0xc0], 1
mov edx, dword [ebp - 0xbc]
call fcn.0041c98d
push 0
mov edx, 0x41ea7c
call fcn.0041c9a4
call fcn.0041abba
call fcn.0041be49
mov edx, 0x41ea74
call fcn.0041c9a4
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, dword [ebp - 0xc0]
mov eax, 2
call fcn.0041667a
call fcn.0041c142
call fcn.0041ab93
call fcn.0041be26
fistp qword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
call fcn.004135ef
call fcn.00413588
call fcn.0041c142
lea ebx, [ebp - 0xbc]
call fcn.0041be7e
add dword [ebp - 0xc0], 2
cmp dword [ebp - 0xc0], 0xa
jle 0x4113f0
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41ed58
call fcn.0041c9a4
call fcn.00414246
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x41153f
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a54c
lea ebx, [ebp - 0xc4]
call fcn.0041be7e
mov edx, dword [ebp - 0xbc]
call fcn.0041c98d
call fcn.0041ab93
mov edx, dword [ebp - 0xc4]
call fcn.0041c98d
call fcn.0041ab93
fcompp
fnstsw ax
sahf
je 0x41153f
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040fd22
jmp 0x411c83
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41ed60
call fcn.0041c9a4
call fcn.00414246
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x4115ef
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a54c
lea ebx, [ebp - 0xc4]
call fcn.0041be7e
mov edx, dword [ebp - 0xbc]
call fcn.0041c98d
call fcn.0041ab93
mov edx, dword [ebp - 0xc4]
call fcn.0041c98d
call fcn.0041ab93
fcompp
fnstsw ax
sahf
jb 0x4115ef
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040fd22
jmp 0x411c83
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41ed68
call fcn.0041c9a4
call fcn.00414246
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x41169f
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a54c
lea ebx, [ebp - 0xc4]
call fcn.0041be7e
mov edx, dword [ebp - 0xbc]
call fcn.0041c98d
call fcn.0041ab93
mov edx, dword [ebp - 0xc4]
call fcn.0041c98d
call fcn.0041ab93
fcompp
fnstsw ax
sahf
ja 0x41169f
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040fd22
jmp 0x411c83
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov eax, 1
mov ecx, 9
xchg ecx, eax
call fcn.0041667a
mov edx, 0x41ed70
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x41182e
push 0
push 0
mov eax, 0xa
call fcn.004135ef
call fcn.00413588
mov edx, 0x41ed80
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
push 0
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41e8f0
call fcn.0041c9a4
call fcn.0041a54c
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0041001b
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
mov dword [ebp - 0xc8], eax
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
mov edx, 0x41ed60
call fcn.0041c9a4
call fcn.00414246
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x411829
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a54c
lea ebx, [ebp - 0xc4]
call fcn.0041be7e
push dword [ebp - 0xc8]
lea ebx, [ebp - 0xc4]
push ebx
call fcn.0041001b
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x411829
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040fd22
jmp 0x411c83
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov eax, 1
mov ecx, 9
xchg ecx, eax
call fcn.0041667a
mov edx, 0x41ed9c
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x411a91
push 0
push 0
mov eax, 0xe
call fcn.004135ef
call fcn.00413588
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 2
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a61d
call fcn.0041ab93
mov eax, 1
add eax, edi
mov ecx, eax
mov eax, dword [0x41e8b8]
sub eax, edi
call fcn.0041a351
mov eax, 1
mov edx, 0x41ed60
call fcn.0041c9a4
call fcn.0041a61d
call fcn.0041ab93
fcompp
fnstsw ax
sahf
jb 0x411a8c
push 0
push 0
mov eax, 6
call fcn.004135ef
call fcn.00413588
mov edx, 0x41edac
call fcn.0041c9a4
call fcn.0041c142
push 0
mov eax, 1
call fcn.004135ef
call fcn.00413588
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
push 0
push 0
mov eax, 0xff
call fcn.004135ef
call fcn.00413588
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
mov eax, 0x1f4
call fcn.00419983
mov ebx, 0x41e8d0
push ebx
call sym.download.exe_CLOSECOM
push 0
call fcn.0040e527
push 0
push 0
mov eax, 0xe
call fcn.004135ef
call fcn.00413588
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
lea ebx, [ebp - 0xb8]
call fcn.0041be7e
mov edx, dword [ebp - 0xb8]
call fcn.0041c98d
mov ecx, 2
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8f8
call fcn.0041c9a4
call fcn.0041a61d
call fcn.0041ab93
mov eax, 1
add eax, edi
mov ecx, eax
mov eax, dword [0x41e8b8]
sub eax, edi
call fcn.0041a351
mov eax, 1
mov edx, 0x41ed60
call fcn.0041c9a4
call fcn.0041a61d
call fcn.0041ab93
fcompp
fnstsw ax
sahf
jb 0x411a8c
mov edx, 0x41edcc
call fcn.0041c9a4
mov eax, 0x12000
mov edx, 0x41ee08
call fcn.0041c9a4
call fcn.00413e32
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
xor eax, eax
call fcn.004154c9
mov eax, 1
mov ecx, 5
xchg ecx, eax
call fcn.0041667a
mov edx, 0x41ee14
call fcn.0041c9a4
call fcn.0041c1d7
jne 0x411bfc
push 0
push 0
mov eax, 1
call fcn.004135ef
call fcn.00413588
mov edx, 0x41ee20
call fcn.0041c9a4
call fcn.0041c142
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
mov ecx, 2
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041a54c
lea ebx, [ebp - 0xe0]
call fcn.0041be7e
nop
nop
nop
nop
nop
nop
mov edx, dword [ebp - 0xe0]
call fcn.0041c98d
mov edx, 0x41ea4c
call fcn.0041c9a4
call fcn.0041c1d7
je 0x411bf7
push 0
push 0
mov eax, 2
call fcn.004135ef
call fcn.00413588
mov edx, 0x41ee20
call fcn.0041c9a4
call fcn.0041c142
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041c142
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041c9bb
mov ecx, 2
mov eax, 0x7fffffff
call fcn.0041667a
mov eax, 1
mov edx, 0x41e8e0
call fcn.0041c9a4
call fcn.0041a54c
lea ebx, [ebp - 0xe0]
call fcn.0041be7e
jmp 0x411b50
jmp 0x411c79
mov edx, dword [ebp - 0xcc]
call fcn.0041c98d
push 0
mov eax, 0xff
call fcn.004135ef
call fcn.00413588
call fcn.0041c1d7
jne 0x411c68
mov dword [0x41e8ac], 1
push 0
push 0
mov eax, 0xff
call fcn.004135ef
call fcn.00413588
lea ebx, [esp]
push ebx
call fcn.0041be7e
call fcn.0040f210
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041a349
pop eax
add esp, 4
call fcn.0041a349
jmp 0x411c79
lea ebx, [ebp - 0xcc]
push ebx
call fcn.0040f210
call fcn.0041a349
mov dword [ebp - 0x98], 0xffffffff
call fcn.0041c87e
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 4