Function at 0x4107eb
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
push 0x133f
sub esp, 0x70
push fcn.004107eb
xor esi, esi
xor edi, edi
mov ecx, 0x17
push esi
dec ecx
jne 0x410807
push 0xa
mov ebx, dword [ebp + 8]
push dword [ebx]
push dword [0x41f870]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
fldcw word [ebp - 0x10]
mov esi, eax
mov eax, esi
push eax
push dword [0x41f870]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
fldcw word [ebp - 0x10]
mov edi, eax
mov eax, esi
push eax
push dword [0x41f870]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
fldcw word [ebp - 0x10]
add eax, edi
mov dword [0x41f8c0], eax
mov ebx, edi
movzx eax, byte [ebx]
mov dword [ebp - 0xb4], eax
inc edi
fild dword [ebp - 0xb4]
fstp xword [ebp - 0x50]
fild dword [0x421890]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
je 0x4113cc
mov eax, 2
add eax, edi
mov ecx, eax
mov dword [ebp - 0x30], ecx
mov ecx, edi
mov eax, 2
call fcn.0041aecc
mov eax, 1
call fcn.00414260
mov ecx, dword [ebp - 0x30]
call fcn.0041aecc
lea ebx, [ebp - 0x9c]
call fcn.0041c9f9
mov eax, 2
add eax, edi
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov dword [ebp - 0x30], eax
call fcn.0041d4ed
add eax, dword [ebp - 0x30]
mov edi, eax
xor eax, eax
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov ecx, 1
mov edx, 0x41fc10
call fcn.0041d51f
xchg ecx, eax
call fcn.00414d96
cmp eax, ecx
je 0x410920
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov edx, 0x41fc10
call fcn.0041d51f
mov eax, dword [0x41f884]
call fcn.0041bbfc
lea ebx, [ebp - 0x9c]
call fcn.0041c9f9
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov edx, 0x41f900
call fcn.0041d51f
mov edx, 0x41f8f0
call fcn.0041d51f
call fcn.0041ccbd
call fcn.0041c716
mov edx, 0x41fa68
call fcn.0041d51f
call fcn.0041cd52
jne 0x41096d
mov dword [ebp - 0x98], 0xffffffff
jmp 0x412234
mov ecx, edi
mov eax, 4
call fcn.0041aecc
mov eax, 1
call fcn.00414244
call fcn.0041c9f2
mov dword [ebp - 0xa8], eax
xor eax, eax
mov ecx, pe_nt_image_headers32
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410a49
push 0
push 0
mov eax, 1
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
call fcn.0041ccbd
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
xor eax, eax
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 2
xchg ecx, eax
call fcn.0041b74a
cmp eax, ecx
je 0x410a3a
lea ebx, [ebp - 0x9c]
push ebx
call fcn.0040f681
mov dword [ebp - 0xac], eax
jmp 0x410a44
mov dword [ebp - 0xac], 0
jmp 0x410a5b
lea ebx, [ebp - 0x9c]
push ebx
call fcn.0040f681
mov dword [ebp - 0xac], eax
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0xa8]
call fcn.0041c9cb
mov eax, dword [ebp - 0xac]
call fcn.0041c9cb
fcompp
fnstsw ax
sahf
je 0x41121c
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
push 0
mov ebx, esp
call fcn.0041c9f9
call sym.download.exe_GET_ATTRIB
mov dword [ebp - 0xd0], eax
xor eax, eax
mov ecx, 0x1f
and ecx, dword [ebp - 0xd0]
cmp ecx, eax
je 0x410ad3
push pe_nt_image_headers32
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
push 0
mov ebx, esp
call fcn.0041c9f9
call sym.download.exe_SET_ATTRIB
xor eax, eax
mov ecx, pe_nt_image_headers32
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410c78
push 0
push 0
mov eax, 1
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
call fcn.0041ccbd
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
xor eax, eax
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 2
xchg ecx, eax
call fcn.0041b74a
cmp eax, ecx
je 0x410c78
fild dword [0x421818]
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041b198
mov eax, 1
call fcn.00414275
fcompp
fnstsw ax
sahf
jbe 0x410c78
push 0
mov eax, 4
add eax, edi
mov ecx, eax
mov eax, 0xc
call fcn.0041aecc
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.004102aa
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041c9cb
mov edx, 1
call fcn.0041cdfb
push 0
push 0
push 0
mov eax, 0xa
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
mov ecx, 2
mov eax, 0x7fffffff
call fcn.004171ca
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.004102aa
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
mov ebx, 1
call fcn.0041cdc3
call fcn.0041c9cb
fcompp
fnstsw ax
sahf
jb 0x410c78
jmp 0x411246
mov eax, 4
add eax, edi
mov dword [0x41f8bc], eax
mov eax, dword [0x41f8c0]
add eax, dword [0x41f898]
sub eax, edi
mov dword [0x41f898], eax
mov eax, dword [0x41f8c0]
sub eax, edi
cmp eax, 0xf4240
jle 0x410e60
push 0
push 0
mov eax, 0xb
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fa34
call fcn.0041d51f
call fcn.0041b0c7
call fcn.0041ccbd
mov edx, 0x41fc40
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
push 0
push 0
mov eax, 0xb
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fa34
call fcn.0041d51f
call fcn.0041b0c7
call fcn.0041ccbd
mov edx, 0x41fc4c
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
push 0
push 0
mov eax, 7
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fa34
call fcn.0041d51f
call fcn.0041b0c7
call fcn.0041ccbd
mov edx, 0x41fc60
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fa34
call fcn.0041d51f
call fcn.0041b0c7
mov edx, 0x41fc78
call fcn.0041d51f
call fcn.0041ccbd
mov ebx, dword [ebp + 8]
fild dword [ebx]
call fcn.0041b625
call fcn.0041b279
call fcn.0041b2d0
call fcn.0041ccbd
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
jmp 0x410e8f
mov edx, dword [0x41f890]
call fcn.0041d508
mov ebx, dword [ebp + 8]
fild dword [ebx]
call fcn.0041b625
call fcn.0041b279
call fcn.0041b2d0
call fcn.0041ccbd
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
fild dword [0x41f888]
fstp xword [ebp - 0x50]
fild dword [0x421758]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x410f29
xor eax, eax
mov ecx, 1
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410f18
lea ebx, [ebp - 0xb8]
push ebx
call fcn.00410549
push 0
push 0
mov eax, 0x19
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
jmp 0x410f24
lea ebx, [ebp - 0xb8]
push ebx
call fcn.00410549
jmp 0x4110ac
fild dword [0x421754]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x410fed
xor eax, eax
mov ecx, 1
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x410f9d
push 0
push 0
mov eax, 3
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
jmp 0x410fe3
push 0
push 0
mov eax, 9
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
call fcn.0040c358
jmp 0x4110ac
fild dword [0x421760]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x4110ac
xor eax, eax
mov ecx, 1
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x411061
push 0
push 0
mov eax, 3
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
jmp 0x4110a7
push 0
push 0
mov eax, 9
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
call fcn.0040c959
mov eax, dword [ebp - 0xa8]
call fcn.0041c9cb
mov edx, 1
call fcn.0041cdfb
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f681
mov ebx, 1
call fcn.0041cdc3
call fcn.0041c9cb
fcompp
fnstsw ax
sahf
jne 0x411200
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
mov ecx, 1
xchg ecx, eax
call fcn.004171ca
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
mov eax, 1
mov ecx, 1
xchg ecx, eax
call fcn.004171ca
call fcn.0041cd52
jne 0x4111a3
cmp dword [0x41f894], 0
jne 0x4111a3
push 0
push 0
mov eax, 0x18
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
call fcn.0041ccbd
push 0
xor eax, eax
call fcn.0041413f
call fcn.004140d8
call fcn.0041ccbd
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
jmp 0x4111c2
lea ebx, [ebp - 0x9c]
push ebx
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f733
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f5d3
lea ebx, [ebp - 0x9c]
push ebx
call fcn.0040f681
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xa8]
call fcn.0041c9cb
mov eax, dword [ebp - 0xac]
call fcn.0041c9cb
fcompp
fnstsw ax
sahf
je 0x4111fb
inc dword [ebp - 0xb0]
jmp 0x41121c
lea ebx, [ebp - 0xb8]
push ebx
call fcn.0040f5d3
inc dword [ebp - 0xb0]
mov eax, 0xbb8
call fcn.0041a4fe
mov eax, dword [ebp - 0xac]
call fcn.0041c9cb
mov eax, dword [ebp - 0xa8]
call fcn.0041c9cb
fcompp
fnstsw ax
sahf
je 0x411246
cmp dword [ebp - 0xb0], 2
jl 0x410a60
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FreeResource]
fldcw word [ebp - 0x10]
cmp dword [ebp - 0xb0], 2
jne 0x4112a7
mov edx, 0x41fc8c
call fcn.0041d51f
mov ebx, dword [ebp + 8]
fild dword [ebx]
call fcn.0041b625
call fcn.0041ccbd
mov eax, 0x10030
mov edx, 0x41fcac
call fcn.0041d51f
call fcn.00414982
xor eax, eax
mov ecx, 1
and ecx, dword [0x41f880]
cmp ecx, eax
je 0x4112a2
jmp 0x412234
jmp 0x4113c7
xor eax, eax
mov ecx, 2
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x41131d
push 0
push 0
mov eax, 5
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
call fcn.0041ccbd
push 0
mov eax, 1
call fcn.0041413f
call fcn.004140d8
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
jmp 0x4113c7
xor eax, eax
mov ecx, 4
and ecx, dword [ebp - 0xb4]
cmp ecx, eax
je 0x411393
push 0
push 0
mov eax, 6
call fcn.0041413f
call fcn.004140d8
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
call fcn.0041ccbd
push 0
mov eax, 1
call fcn.0041413f
call fcn.004140d8
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
jmp 0x4113c7
xor eax, eax
mov ecx, 0x1f
and ecx, dword [ebp - 0xd0]
cmp ecx, eax
je 0x4113c7
push dword [ebp - 0xd0]
mov edx, dword [ebp - 0x9c]
call fcn.0041d508
push 0
mov ebx, esp
call fcn.0041c9f9
call sym.download.exe_SET_ATTRIB
jmp 0x41222a
fild dword [0x421890]
fld xword [ebp - 0x50]
fcompp
fnstsw ax
sahf
jne 0x41222a
mov ecx, edi
mov eax, dword [0x41f8c0]
sub eax, edi
call fcn.0041aecc
lea ebx, [ebp - 0xcc]
call fcn.0041c9f9
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FreeResource]
fldcw word [ebp - 0x10]
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov edx, 0x41fcc4
call fcn.0041d51f
call fcn.0041cd52
jne 0x41143d
mov eax, 1
or dword [0x41f880], eax
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov edx, 0x41fcd8
call fcn.0041d51f
call fcn.0041cd52
jne 0x411474
mov eax, 2
or dword [0x41f880], eax
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov edx, 0x41fcec
call fcn.0041d51f
call fcn.0041cd52
jne 0x411654
push 0
push 0
mov eax, 0xe
call fcn.0041413f
call fcn.004140d8
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov eax, 0xe
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov dword [ebp - 0x30], eax
call fcn.0041b735
cmp eax, dword [ebp - 0x30]
jne 0x41162a
push 0xa
push 0x3e5
push dword [0x41f870]
call dword [sym.imp.KERNEL32.DLL_FindResourceA]
fldcw word [ebp - 0x10]
mov esi, eax
mov eax, esi
push eax
push dword [0x41f870]
call dword [sym.imp.KERNEL32.DLL_LoadResource]
fldcw word [ebp - 0x10]
mov edi, eax
mov eax, esi
push eax
push dword [0x41f870]
call dword [sym.imp.KERNEL32.DLL_SizeofResource]
fldcw word [ebp - 0x10]
add eax, edi
mov dword [0x41f8c0], eax
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 2
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b198
call fcn.0041b70e
mov eax, 1
add eax, edi
mov ecx, eax
mov eax, dword [0x41f8c0]
sub eax, edi
call fcn.0041aecc
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b198
call fcn.0041b70e
fcompp
fnstsw ax
sahf
jbe 0x411619
fld dword [0x4218b0]
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 2
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b198
call fcn.0041b70e
fcompp
fnstsw ax
sahf
jae 0x4115fe
mov dword [0x41f8b8], 1
call fcn.00412256
xor eax, eax
mov ecx, 2
and ecx, dword [0x41f880]
cmp ecx, eax
je 0x411619
jmp 0x412234
mov eax, esi
push eax
call dword [sym.imp.KERNEL32.DLL_FreeResource]
fldcw word [ebp - 0x10]
jmp 0x41164f
mov dword [0x41f8b8], 1
call fcn.00412256
xor eax, eax
mov ecx, 2
and ecx, dword [0x41f880]
cmp ecx, eax
je 0x41164f
jmp 0x412234
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov eax, 1
mov ecx, 8
xchg ecx, eax
call fcn.004171ca
mov edx, 0x41fcfc
call fcn.0041d51f
call fcn.0041cd52
jne 0x411695
jmp 0x412234
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov eax, 1
mov ecx, 7
xchg ecx, eax
call fcn.004171ca
mov edx, 0x41fc04
call fcn.0041d51f
call fcn.0041cd52
jne 0x4116dd
lea ebx, [ebp - 0xcc]
push ebx
call fcn.00410042
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov eax, 1
mov ecx, 0xe
xchg ecx, eax
call fcn.004171ca
mov edx, 0x41fc2c
call fcn.0041d51f
call fcn.0041cd52
jne 0x411738
push 0
lea ebx, [ebp - 0xcc]
push ebx
call fcn.00410161
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jne 0x411733
jmp 0x412234
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov eax, 1
mov ecx, 6
xchg ecx, eax
call fcn.004171ca
mov edx, 0x41fd0c
call fcn.0041d51f
call fcn.0041cd52
jne 0x411be4
push 0
push 0
mov eax, 1
call fcn.0041413f
call fcn.004140d8
mov edx, 0x41fa70
call fcn.0041d51f
call fcn.0041ccbd
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
xor eax, eax
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 2
xchg ecx, eax
call fcn.0041b74a
cmp eax, ecx
jne 0x411834
mov edx, 0x41fd18
call fcn.0041d51f
mov edx, 0x41f8f8
call fcn.0041d51f
call fcn.0041ccbd
mov edx, 0x41fd5c
call fcn.0041d51f
call fcn.0041ccbd
mov eax, 0x10030
mov edx, 0x41fd8c
call fcn.0041d51f
call fcn.00414982
jmp 0x412234
push 0
push 0
mov eax, 0xa
call fcn.0041413f
call fcn.004140d8
mov edx, 0x41fa70
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 7
mov eax, 2
call fcn.004171ca
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 5
mov eax, 2
call fcn.004171ca
call fcn.0041ccbd
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 0xb
mov eax, 2
call fcn.004171ca
call fcn.0041ccbd
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 9
mov eax, 2
call fcn.004171ca
call fcn.0041ccbd
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 0xd
mov eax, 2
call fcn.004171ca
call fcn.0041ccbd
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov dword [ebp - 0xc0], 1
nop
mov edx, dword [ebp - 0xbc]
call fcn.0041d508
push 0
mov edx, 0x41fa98
call fcn.0041d51f
call fcn.0041b735
call fcn.0041c9c4
mov edx, 0x41fa90
call fcn.0041d51f
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, dword [ebp - 0xc0]
mov eax, 2
call fcn.004171ca
call fcn.0041ccbd
call fcn.0041b70e
call fcn.0041c9a1
fistp qword [ebp - 0x6c]
mov eax, dword [ebp - 0x6c]
call fcn.0041413f
call fcn.004140d8
call fcn.0041ccbd
lea ebx, [ebp - 0xbc]
call fcn.0041c9f9
add dword [ebp - 0xc0], 2
cmp dword [ebp - 0xc0], 0xa
jle 0x411930
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fda0
call fcn.0041d51f
call fcn.00414d96
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x411a7f
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b0c7
lea ebx, [ebp - 0xc4]
call fcn.0041c9f9
mov edx, dword [ebp - 0xbc]
call fcn.0041d508
call fcn.0041b70e
mov edx, dword [ebp - 0xc4]
call fcn.0041d508
call fcn.0041b70e
fcompp
fnstsw ax
sahf
je 0x411a7f
lea ebx, [ebp - 0xb8]
push ebx
call fcn.00410042
jmp 0x412234
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fda8
call fcn.0041d51f
call fcn.00414d96
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x411b2f
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b0c7
lea ebx, [ebp - 0xc4]
call fcn.0041c9f9
mov edx, dword [ebp - 0xbc]
call fcn.0041d508
call fcn.0041b70e
mov edx, dword [ebp - 0xc4]
call fcn.0041d508
call fcn.0041b70e
fcompp
fnstsw ax
sahf
jb 0x411b2f
lea ebx, [ebp - 0xb8]
push ebx
call fcn.00410042
jmp 0x412234
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fdb0
call fcn.0041d51f
call fcn.00414d96
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x411bdf
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b0c7
lea ebx, [ebp - 0xc4]
call fcn.0041c9f9
mov edx, dword [ebp - 0xbc]
call fcn.0041d508
call fcn.0041b70e
mov edx, dword [ebp - 0xc4]
call fcn.0041d508
call fcn.0041b70e
fcompp
fnstsw ax
sahf
ja 0x411bdf
lea ebx, [ebp - 0xb8]
push ebx
call fcn.00410042
jmp 0x412234
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov eax, 1
mov ecx, 9
xchg ecx, eax
call fcn.004171ca
mov edx, 0x41fdb8
call fcn.0041d51f
call fcn.0041cd52
jne 0x411d6e
push 0
push 0
mov eax, 0xa
call fcn.0041413f
call fcn.004140d8
mov edx, 0x41fdc8
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
push 0
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
mov edx, 0x41f8f8
call fcn.0041d51f
call fcn.0041b0c7
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0041048b
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
mov dword [ebp - 0xc8], eax
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
mov edx, 0x41fda8
call fcn.0041d51f
call fcn.00414d96
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
test eax, eax
je 0x411d69
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov eax, 1
add eax, dword [ebp - 0xc0]
mov ecx, eax
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b0c7
lea ebx, [ebp - 0xc4]
call fcn.0041c9f9
push dword [ebp - 0xc8]
lea ebx, [ebp - 0xc4]
push ebx
call fcn.0041048b
pop dword [ebp - 0x30]
cmp eax, dword [ebp - 0x30]
jl 0x411d69
lea ebx, [ebp - 0xb8]
push ebx
call fcn.00410042
jmp 0x412234
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov eax, 1
mov ecx, 9
xchg ecx, eax
call fcn.004171ca
mov edx, 0x41fde4
call fcn.0041d51f
call fcn.0041cd52
jne 0x411fd1
push 0
push 0
mov eax, 0xe
call fcn.0041413f
call fcn.004140d8
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 2
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b198
call fcn.0041b70e
mov eax, 1
add eax, edi
mov ecx, eax
mov eax, dword [0x41f8c0]
sub eax, edi
call fcn.0041aecc
mov eax, 1
mov edx, 0x41fda8
call fcn.0041d51f
call fcn.0041b198
call fcn.0041b70e
fcompp
fnstsw ax
sahf
jb 0x411fcc
push 0
push 0
mov eax, 6
call fcn.0041413f
call fcn.004140d8
mov edx, 0x41fdf4
call fcn.0041d51f
call fcn.0041ccbd
push 0
mov eax, 1
call fcn.0041413f
call fcn.004140d8
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
push 0
push 0
mov eax, 0xff
call fcn.0041413f
call fcn.004140d8
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
mov eax, 0x1f4
call fcn.0041a4fe
mov ebx, 0x41f8d8
push ebx
call sym.download.exe_CLOSECOM
push 0
call fcn.0040e65b
push 0
push 0
mov eax, 0xe
call fcn.0041413f
call fcn.004140d8
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
lea ebx, [ebp - 0xb8]
call fcn.0041c9f9
mov edx, dword [ebp - 0xb8]
call fcn.0041d508
mov ecx, 2
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f900
call fcn.0041d51f
call fcn.0041b198
call fcn.0041b70e
mov eax, 1
add eax, edi
mov ecx, eax
mov eax, dword [0x41f8c0]
sub eax, edi
call fcn.0041aecc
mov eax, 1
mov edx, 0x41fda8
call fcn.0041d51f
call fcn.0041b198
call fcn.0041b70e
fcompp
fnstsw ax
sahf
jb 0x411fcc
mov edx, 0x41fe14
call fcn.0041d51f
mov eax, 0x12000
mov edx, 0x41fe50
call fcn.0041d51f
call fcn.00414982
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
xor eax, eax
call fcn.00416019
mov eax, 1
mov ecx, 5
xchg ecx, eax
call fcn.004171ca
mov edx, 0x41fe5c
call fcn.0041d51f
call fcn.0041cd52
jne 0x41213c
push 0
push 0
mov eax, 1
call fcn.0041413f
call fcn.004140d8
mov edx, 0x41fe68
call fcn.0041d51f
call fcn.0041ccbd
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
mov ecx, 2
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041b0c7
lea ebx, [ebp - 0xe0]
call fcn.0041c9f9
nop
nop
nop
nop
nop
nop
mov edx, dword [ebp - 0xe0]
call fcn.0041d508
mov edx, 0x41fa68
call fcn.0041d51f
call fcn.0041cd52
je 0x412137
push 0
push 0
mov eax, 2
call fcn.0041413f
call fcn.004140d8
mov edx, 0x41fe68
call fcn.0041d51f
call fcn.0041ccbd
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041ccbd
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041d536
mov ecx, 2
mov eax, 0x7fffffff
call fcn.004171ca
mov eax, 1
mov edx, 0x41f8e8
call fcn.0041d51f
call fcn.0041b0c7
lea ebx, [ebp - 0xe0]
call fcn.0041c9f9
jmp 0x412090
jmp 0x41222a
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
push 0
mov eax, 0xff
call fcn.0041413f
call fcn.004140d8
call fcn.0041cd52
jne 0x4121a8
mov dword [0x41f8b0], 1
push 0
push 0
mov eax, 0xff
call fcn.0041413f
call fcn.004140d8
lea ebx, [esp]
push ebx
call fcn.0041c9f9
call fcn.0040f4d0
push eax
mov ebx, esp
mov eax, dword [ebx + 4]
call fcn.0041aec4
pop eax
add esp, 4
call fcn.0041aec4
jmp 0x41222a
xor eax, eax
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
mov ecx, 1
mov edx, 0x41fc10
call fcn.0041d51f
xchg ecx, eax
call fcn.00414d96
cmp eax, ecx
je 0x4121f9
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
mov edx, 0x41fc10
call fcn.0041d51f
mov eax, dword [0x41f884]
call fcn.0041bbfc
lea ebx, [ebp - 0xcc]
call fcn.0041c9f9
mov edx, dword [ebp - 0xcc]
call fcn.0041d508
mov edx, 0x41fa68
call fcn.0041d51f
call fcn.0041cd52
je 0x41222a
lea ebx, [ebp - 0xcc]
push ebx
call fcn.0040f4d0
call fcn.0041aec4
mov dword [ebp - 0x98], 0xffffffff
call fcn.0041d3f9
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop edi
pop esi
pop ebx
pop ebp
ret 4