Function at 0x41a2ad
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x459ccb
mov eax, dword fs:[0]
push eax
sub esp, 0x108
push ebx
push esi
push edi
mov eax, dword [0x477af4]
xor eax, esp
push eax
lea eax, [esp + 0x118]
mov dword fs:[0], eax
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
push edi
lea eax, [ebx + 0x24]
call fcn.004188f2
mov dword [esp + 0x14], eax
test eax, eax
jne 0x41aa7a
mov esi, dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [esp + 0x24]
push eax
call esi
and dword [esp + 0x120], 0
lea eax, [edi - 0x7d0]
cmp eax, 0xa
ja case.default.0x41a32b
movzx eax, byte [eax + 0x41aaa5]
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
jmp dword [eax*4 + 0x41aa95]
mov eax, dword [ebp + 0x1c]
test eax, eax
jne 0x41a34c
mov esi, 0x8002000f
lea eax, [esp + 0x24]
push eax
call edi
mov eax, esi
jmp 0x41aa7a
mov eax, dword [eax + 8]
cmp eax, 4
jae 0x41a35b
mov esi, 0x8002000e
jmp 0x41a33e
cmp eax, 5
ja 0x41a354
lea eax, [esp + 0x74]
push eax
call esi
lea eax, [esp + 0x54]
push eax
call esi
lea eax, [esp + 0x84]
push eax
call esi
lea eax, [esp + 0x64]
push eax
call esi
lea eax, [esp + 0x3c]
push eax
call esi
mov eax, dword [ebp + 0x1c]
mov byte [esp + 0x120], 5
cmp dword [eax + 8], 4
mov esi, eax
mov eax, dword [esi]
jne 0x41a3d2
add eax, 0x30
push eax
lea eax, [esp + 0x78]
push eax
call fcn.0041ad45
mov eax, dword [esi]
add eax, 0x20
push eax
lea eax, [esp + 0x58]
push eax
call fcn.0041ad45
mov eax, dword [esi]
add eax, 0x10
push eax
lea eax, [esp + 0x88]
push eax
call fcn.0041ad45
lea eax, [esp + 0x64]
jmp 0x41a417
add eax, 0x40
push eax
lea eax, [esp + 0x78]
push eax
call fcn.0041ad45
mov eax, dword [esi]
add eax, 0x30
push eax
lea eax, [esp + 0x58]
push eax
call fcn.0041ad45
mov eax, dword [esi]
add eax, 0x20
push eax
lea eax, [esp + 0x88]
push eax
call fcn.0041ad45
mov eax, dword [esi]
add eax, 0x10
push eax
lea eax, [esp + 0x68]
push eax
call fcn.0041ad45
lea eax, [esp + 0x3c]
push dword [esi]
push eax
call fcn.0041ad45
push 8
pop eax
mov ecx, eax
cmp cx, word [esp + 0x74]
je 0x41a45b
lea eax, [esp + 0x3c]
push eax
call edi
lea eax, [esp + 0x64]
push eax
call edi
lea eax, [esp + 0x84]
push eax
call edi
lea eax, [esp + 0x54]
push eax
call edi
lea eax, [esp + 0x74]
push eax
call edi
mov esi, 0x80020008
jmp 0x41a33e
mov ecx, eax
cmp cx, word [esp + 0x54]
jne 0x41a42b
cmp cx, word [esp + 0x84]
jne 0x41a42b
cmp ax, word [esp + 0x64]
jne 0x41a42b
cmp dword [esi + 8], 4
jbe 0x41a4bc
push 3
pop eax
cmp ax, word [esp + 0x3c]
jne 0x41a42b
cmp dword [esp + 0x44], 1
jge 0x41a4bc
lea eax, [esp + 0x3c]
push eax
call edi
lea eax, [esp + 0x64]
push eax
call edi
lea eax, [esp + 0x84]
push eax
call edi
lea eax, [esp + 0x54]
push eax
call edi
lea eax, [esp + 0x74]
push eax
call edi
mov esi, 0x80070057
jmp 0x41a33e
push dword [esp + 0x7c]
lea ecx, [esp + 0x1c]
call fcn.00401db9
mov byte [esp + 0x120], 6
mov eax, dword [esp + 0x18]
xor esi, esi
cmp dword [eax - 0xc], esi
jne 0x41a4e6
lea ecx, [eax - 0x10]
call fcn.004034fb
jmp 0x41a48c
push dword [esp + 0x5c]
lea ecx, [esp + 0x20]
call fcn.00401db9
mov byte [esp + 0x120], 7
mov eax, dword [esp + 0x1c]
cmp dword [eax - 0xc], esi
jne 0x41a515
lea ecx, [eax - 0x10]
call fcn.004034fb
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
jmp 0x41a4df
push dword [esp + 0x8c]
lea ecx, [esp + 0x24]
call fcn.00401db9
mov byte [esp + 0x120], 8
mov eax, dword [esp + 0x20]
cmp dword [eax - 0xc], esi
jne 0x41a547
lea ecx, [eax - 0x10]
call fcn.004034fb
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
jmp 0x41a507
push dword [esp + 0x6c]
lea ecx, [esp + 0x54]
call fcn.00401db9
mov byte [esp + 0x120], 9
mov eax, dword [esp + 0x50]
cmp dword [eax - 0xc], esi
jne 0x41a576
lea ecx, [eax - 0x10]
call fcn.004034fb
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
jmp 0x41a539
cmp dword [ebx + 0x198], esi
jne 0x41a591
lea esi, [ebx + 0x88]
call fcn.00425fc8
mov dword [esp + 0x14], eax
test eax, eax
jne 0x41a5fc
mov eax, dword [ebp + 0x1c]
cmp dword [eax + 8], 4
jbe 0x41a5dc
mov esi, dword [ebx + 0x13c]
mov ecx, dword [esp + 0x44]
mov eax, dword [esp + 0x44]
mov dword [esp + 0x14], eax
cmp esi, ecx
jae 0x41a5d1
lea eax, [ebx + 0x180]
mov edi, ecx
call fcn.0040d39d
test eax, eax
lea eax, [ebx + 0x130]
jne 0x41a5cd
mov ecx, dword [esp + 0x14]
jmp 0x41a5d7
mov ecx, esi
jmp 0x41a5d7
lea eax, [ebx + 0x130]
call fcn.00427782
push dword [esp + 0x50]
lea eax, [ebx + 0x88]
push dword [esp + 0x24]
push dword [esp + 0x24]
push dword [esp + 0x24]
push eax
call fcn.00425a8a
mov dword [esp + 0x14], eax
mov ecx, dword [esp + 0x50]
add ecx, 0xfffffff0
call fcn.004034fb
mov ecx, dword [esp + 0x20]
add ecx, 0xfffffff0
call fcn.004034fb
mov ecx, dword [esp + 0x1c]
add ecx, 0xfffffff0
call fcn.004034fb
mov ecx, dword [esp + 0x18]
add ecx, 0xfffffff0
call fcn.004034fb
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
lea eax, [esp + 0x3c]
push eax
call esi
lea eax, [esp + 0x64]
push eax
call esi
lea eax, [esp + 0x84]
push eax
call esi
lea eax, [esp + 0x54]
push eax
call esi
mov byte [esp + 0x120], 0
lea eax, [esp + 0x74]
jmp 0x41aa62
cmp dword [ebp + 0x20], 0
jne 0x41a685
mov eax, dword [ebp + 0x24]
lea esi, [esp + 0xa0]
mov dword [esp + 0xa0], eax
call fcn.00419145
mov esi, eax
jmp 0x41a33e
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x41a339
cmp dword [eax + 8], 1
jne 0x41a354
push dword [eax]
lea ecx, [esp + 0xb8]
call fcn.00415bf3
push 8
pop eax
mov byte [esp + 0x120], 0xa
cmp ax, word [esp + 0xb4]
je 0x41a6c9
lea eax, [esp + 0xb4]
jmp 0x41a44e
push dword [esp + 0xbc]
lea ecx, [esp + 0x3c]
call fcn.00401db9
mov byte [esp + 0x120], 0xb
mov eax, dword [esp + 0x38]
cmp dword [eax - 0xc], 0
jne 0x41a6ff
lea ecx, [eax - 0x10]
call fcn.004034fb
lea eax, [esp + 0xb4]
jmp 0x41a4af
lea ecx, [ebx + 0x88]
push eax
push ecx
call fcn.0042601f
cmp dword [ebp + 0xc], 0x7d1
mov esi, eax
jne 0x41a795
push 3
pop eax
mov word [esp + 0x24], ax
cmp byte [esi], 0
jne 0x41a790
and dword [esp + 0x2c], 0
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.004034fb
lea eax, [esp + 0xb4]
mov byte [esp + 0x120], 0
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call esi
xor eax, eax
cmp ax, word [esp + 0x24]
je 0x41a780
lea eax, [esp + 0x24]
push eax
push dword [ebp + 0x20]
call dword [sym.imp.OLEAUT32.dll_VariantCopyInd]
cmp dword [esp + 0x14], 0
je 0x41a780
push dword [ebp + 0xc]
mov ecx, dword [ebp + 0x1c]
push dword [esp + 0x18]
push ebx
call fcn.00418f95
and dword [esp + 0x14], 0
lea eax, [esp + 0x24]
push eax
call esi
mov eax, dword [esp + 0x14]
jmp 0x41aa7a
mov eax, dword [esi + 0x18]
jmp 0x41a7b6
mov eax, dword [ebp + 0xc]
cmp eax, 0x7d2
jne 0x41a7c1
push 3
pop eax
mov word [esp + 0x24], ax
cmp byte [esi], 0
je 0x41a724
push esi
call fcn.004257f0
xor edx, edx
mov ecx, 0x3e8
div ecx
jmp 0x41a7dc
cmp eax, 0x7d9
jne 0x41a7e5
push 3
pop eax
mov word [esp + 0x24], ax
cmp byte [esi], 0
je 0x41a724
mov eax, dword [esi + 0x3c]
mov dword [esp + 0x2c], eax
jmp 0x41a729
cmp eax, 0x7d3
jne 0x41a858
call fcn.004256ad
push eax
lea ecx, [esp + 0xa0]
call fcn.0041ad1f
mov edi, dword [esi + 4]
mov eax, dword [esp + 0x9c]
add eax, 4
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
dec edi
je 0x41a834
dec edi
lea esi, [esp + 0x24]
je 0x41a82d
dec edi
je 0x41a826
push str.suspended
jmp 0x41a84e
push str.completed
jmp 0x41a84e
push str.failed
jmp 0x41a84e
push esi
call fcn.004257f0
lea esi, [esp + 0x24]
test eax, eax
jne 0x41a849
push str.starting
jmp 0x41a84e
push str.downloading
call fcn.004075d9
jmp 0x41a729
cmp eax, 0x7da
jne 0x41a729
push dword [esp + 0x38]
lea eax, [esp + 0xd8]
push eax
lea eax, [ebx + 0x88]
push eax
call fcn.00425f29
mov byte [esp + 0x120], 0xc
push dword [ebx + 0xc]
and dword [esp + 0x9c], 0
lea eax, [esp + 0xd8]
push eax
lea ecx, [esp + 0xa0]
call fcn.0041a0b7
mov ebx, eax
pop ecx
pop ecx
test ebx, ebx
jne 0x41a8c7
mov esi, dword [esp + 0x98]
test esi, esi
je 0x41a8bb
mov eax, dword [esi]
push esi
call dword [eax + 4]
mov eax, dword [ebp + 0x20]
push 9
pop ecx
mov word [eax], cx
mov dword [eax + 8], esi
lea esi, [esp + 0xd4]
call fcn.00425754
mov ecx, dword [esp + 0x38]
add ecx, 0xfffffff0
call fcn.004034fb
lea eax, [esp + 0xb4]
push eax
call edi
mov esi, ebx
jmp 0x41a33e
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x41a339
cmp dword [eax + 8], 1
jne 0x41a354
push dword [eax]
lea ecx, [esp + 0xc8]
call fcn.00415bf3
push 8
pop eax
mov byte [esp + 0x120], 0xd
cmp ax, word [esp + 0xc4]
je 0x41a934
lea eax, [esp + 0xc4]
jmp 0x41a44e
cmp dword [ebp + 0xc], 0x7d4
jne 0x41a947
mov dword [esp + 0x14], 0x80004001
jmp 0x41a9a8
cmp dword [ebp + 0xc], 0x7d5
jne 0x41a9a8
push dword [esp + 0xcc]
lea ecx, [esp + 0x50]
call fcn.00401db9
push str.normal
lea eax, [esp + 0x50]
push eax
mov byte [esp + 0x128], 0xe
xor esi, esi
call fcn.00401e56
test eax, eax
jne 0x41a980
inc esi
jmp 0x41a996
push str.aggressive
lea eax, [esp + 0x50]
push eax
call fcn.00401e56
test eax, eax
jne 0x41a996
push 2
pop esi
mov ecx, dword [esp + 0x4c]
add ecx, 0xfffffff0
mov dword [ebx + 0x130], esi
call fcn.004034fb
mov byte [esp + 0x120], 0
lea eax, [esp + 0xc4]
jmp 0x41aa5c
mov eax, dword [ebp + 0x1c]
test eax, eax
je 0x41a339
cmp dword [eax + 8], 1
jne 0x41a354
push dword [eax]
lea ecx, [esp + 0xa8]
call fcn.00415bf3
push 9
pop eax
cmp ax, word [esp + 0xa4]
je 0x41aa00
lea eax, [esp + 0xa4]
push eax
call edi
mov esi, 0x80020005
jmp 0x41a33e
cmp dword [ebp + 0xc], 0x7d6
jne 0x41aa19
lea eax, [esp + 0xa4]
push eax
lea eax, [ebx + 0x1c0]
jmp 0x41aa49
cmp dword [ebp + 0xc], 0x7d7
jne 0x41aa32
lea eax, [esp + 0xa4]
push eax
lea eax, [ebx + 0x1c4]
jmp 0x41aa49
cmp dword [ebp + 0xc], 0x7d8
jne 0x41aa55
lea eax, [esp + 0xa4]
push eax
lea eax, [ebx + 0x1c8]
push eax
call fcn.0041a13e
pop ecx
pop ecx
mov dword [esp + 0x14], eax
lea eax, [esp + 0xa4]
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call esi
jmp 0x41a764
lea eax, [esp + 0x24]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov eax, 0x80020003
mov ecx, dword [esp + 0x118]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24