Function at 0x41d610
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x508fc0
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x178
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
mov edx, ecx
mov dword [ebp - 0x184], edx
mov ecx, 0xf2
xor eax, eax
mov edi, dword [ebp + 0xc]
rep stosd dword es:[edi], eax
mov dword [ebp - 0x14], 1
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 4], ebx
cmp dword [edx + 4], ebx
je 0x41d670
push 2
push ebx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov esi, eax
mov dword [ebp - 0x1c], esi
jmp 0x41d6d9
mov byte [ebp - 0x144], 0
mov ecx, 0x40
xor eax, eax
lea edi, [ebp - 0x143]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
stosb byte es:[edi], al
push 0x104
lea ecx, [ebp - 0x144]
push ecx
push 0xffffffffffffffff
mov edx, dword [ebp + 8]
push edx
call fcn.0041a160
add esp, 0x10
test eax, eax
jne 0x41d6c4
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x160], eax
push 0x52b250
lea eax, [ebp - 0x160]
push eax
call fcn.0043553a
push 2
push ebx
lea ecx, [ebp - 0x144]
push ecx
call dword [sym.imp.KERNEL32.dll_LoadLibraryExA]
mov dword [ebp - 0x1c], eax
mov esi, eax
cmp esi, ebx
jne 0x41d6fa
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x164], eax
push 0x52b250
lea edx, [ebp - 0x164]
push edx
call fcn.0043553a
mov dword [ebp - 0x2c], ebx
lea eax, [ebp - 0x2c]
push eax
push 0x41db60
push 1
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesW]
mov ecx, dword [ebp - 0x2c]
push ecx
push 1
push 0x10
push esi
call dword [sym.imp.KERNEL32.dll_FindResourceExW]
mov edi, eax
mov dword [ebp - 0x30], edi
cmp edi, ebx
jne 0x41d779
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x148], eax
cmp eax, 0x714
je 0x41d75a
cmp eax, 0x715
je 0x41d75a
mov dword [ebp - 0x168], eax
push 0x52b250
lea edx, [ebp - 0x168]
push edx
call fcn.0043553a
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8
push edi
push esi
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov ebx, eax
mov dword [ebp - 0x38], ebx
push edi
push esi
call dword [sym.imp.KERNEL32.dll_LoadResource]
mov dword [ebp - 0x20], eax
test eax, eax
jne 0x41d7b2
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x16c], eax
push 0x52b250
lea eax, [ebp - 0x16c]
push eax
call fcn.0043553a
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
mov dword [ebp - 0x24], edi
test edi, edi
jne 0x41d7df
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x170], eax
push 0x52b250
lea ecx, [ebp - 0x170]
push ecx
call fcn.0043553a
add ebx, edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x34], edi
push ebx
mov ecx, edi
call fcn.0041dc40
test eax, eax
jne 0x41d80e
mov dword [ebp - 0x174], 0xffffffff
push 0x52cd68
lea edx, [ebp - 0x174]
push edx
call fcn.0043553a
push ebx
mov ecx, edi
call fcn.0041dbc0
mov dword [ebp - 0x3c], eax
cmp word [edi + 2], 0xc
jb 0x41d828
mov ecx, dword [eax + 8]
mov edx, dword [ebp + 0xc]
mov dword [edx], ecx
cmp word [edi + 2], 0x10
jb 0x41d838
mov eax, dword [eax + 0xc]
mov ecx, dword [ebp + 0xc]
mov dword [ecx + 4], eax
push ebx
mov ecx, edi
call fcn.0041dc20
mov edi, eax
mov dword [ebp - 0x28], edi
push ebx
mov ecx, edi
call fcn.0041dce0
test eax, eax
jne 0x41d86c
mov dword [ebp - 0x178], 0xffffffff
push 0x52cd68
lea edx, [ebp - 0x178]
push edx
call fcn.0043553a
push 0x5431a8
mov ecx, edi
call fcn.0041dca0
push eax
call fcn.00435619
add esp, 8
test eax, eax
jne 0x41db36
push ebx
mov ecx, edi
call fcn.0041dcb0
mov esi, eax
mov dword [ebp - 0x14c], esi
push ebx
mov ecx, esi
call fcn.0041dd70
test eax, eax
jne 0x41d8c0
mov dword [ebp - 0x17c], 0xffffffff
push 0x52cd68
lea eax, [ebp - 0x17c]
push eax
call fcn.0043553a
push ebx
mov ecx, esi
call fcn.0041dd40
mov edi, eax
mov dword [ebp - 0x150], edi
push ebx
mov ecx, edi
call fcn.0041de40
test eax, eax
jne 0x41d8f7
mov dword [ebp - 0x180], 0xffffffff
push 0x52cd68
lea ecx, [ebp - 0x180]
push ecx
call fcn.0043553a
xor eax, eax
mov ax, word [esi]
mov dword [ebp - 0x154], eax
test eax, eax
jle 0x41db33
push ebx
mov ecx, edi
call fcn.0041de40
test eax, eax
je 0x41db33
push ebx
mov ecx, edi
call fcn.0041de00
mov si, ax
and esi, 0xffff
mov dword [ebp - 0x158], esi
push str.CompanyName
mov ecx, edi
call fcn.0041ddc0
push eax
call fcn.00435619
add esp, 8
test eax, eax
jne 0x41d977
test esi, esi
jbe 0x41d977
cmp esi, 0x50
jb 0x41d95e
mov esi, 0x4f
mov dword [ebp - 0x158], esi
push esi
push ebx
mov ecx, edi
call fcn.0041ddd0
push eax
mov edx, dword [ebp + 0xc]
add edx, 0x288
push edx
jmp 0x41dac8
push 0x543170
mov ecx, edi
call fcn.0041ddc0
push eax
call fcn.00435619
add esp, 8
test eax, eax
jne 0x41d9ba
test esi, esi
jbe 0x41d9ba
cmp esi, 0x50
jb 0x41d9a4
mov esi, 0x4f
mov dword [ebp - 0x158], esi
push esi
push ebx
mov ecx, edi
call fcn.0041ddd0
push eax
mov eax, dword [ebp + 0xc]
add eax, 8
push eax
jmp 0x41dac8
push 0x543154
mov ecx, edi
call fcn.0041ddc0
push eax
call fcn.00435619
add esp, 8
test eax, eax
jne 0x41d9ff
test esi, esi
jbe 0x41d9ff
cmp esi, 0x50
jb 0x41d9e7
mov esi, 0x4f
mov dword [ebp - 0x158], esi
push esi
push ebx
mov ecx, edi
call fcn.0041ddd0
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x148
jmp 0x41dac7
push 0x543134
mov ecx, edi
call fcn.0041ddc0
push eax
call fcn.00435619
add esp, 8
test eax, eax
jne 0x41da45
test esi, esi
jbe 0x41da45
cmp esi, 0x50
jb 0x41da2c
mov esi, 0x4f
mov dword [ebp - 0x158], esi
push esi
push ebx
mov ecx, edi
call fcn.0041ddd0
push eax
mov edx, dword [ebp + 0xc]
add edx, 0x328
push edx
jmp 0x41dac8
push 0x543110
mov ecx, edi
call fcn.0041ddc0
push eax
call fcn.00435619
add esp, 8
test eax, eax
jne 0x41da87
test esi, esi
jbe 0x41da87
cmp esi, 0x50
jb 0x41da72
mov esi, 0x4f
mov dword [ebp - 0x158], esi
push esi
push ebx
mov ecx, edi
call fcn.0041ddd0
push eax
mov eax, dword [ebp + 0xc]
add eax, 0xa8
push eax
jmp 0x41dac8
push 0x5430f8
mov ecx, edi
call fcn.0041ddc0
push eax
call fcn.00435619
add esp, 8
test eax, eax
jne 0x41dad0
test esi, esi
jbe 0x41dad0
cmp esi, 0x50
jb 0x41dab4
mov esi, 0x4f
mov dword [ebp - 0x158], esi
push esi
push ebx
mov ecx, edi
call fcn.0041ddd0
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x1e8
push ecx
call fcn.004353c4
add esp, 0xc
xor edx, edx
mov dx, word [edi]
add edx, 3
and edx, 0xfffffffc
sub dword [ebp - 0x154], edx
mov ecx, edi
call fcn.0041de30
mov edi, eax
mov dword [ebp - 0x150], edi
mov eax, dword [ebp - 0x154]
jmp 0x41d902
mov esi, dword [ebp - 0x1c]
mov dword [ebp - 4], 0xffffffff
test esi, esi
je 0x41db48
push esi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 8