Function at 0x4103dc
Capabilities:
Extract resource via kernel32 functions
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 7
push 0
push 0
dec ecx
jne 0x4103e5
push ecx
xchg dword [ebp - 4], ecx
push ebx
push esi
mov byte [ebp - 6], cl
mov byte [ebp - 5], dl
mov dword [ebp - 4], eax
xor eax, eax
push ebp
push 0x4107f0
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 7], 0
mov byte [ebp - 0x1d], 0
mov eax, dword [0x4151a4]
cmp dword [eax], 0
jbe 0x4107c8
mov eax, dword [0x4151a4]
mov eax, dword [eax]
dec eax
test eax, eax
jl 0x4107c8
inc eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0
cmp byte [ebp - 5], 0
je 0x41044c
cmp dword [ebp - 4], 0xffffffff
jg 0x4107bc
jmp 0x410456
cmp dword [ebp - 4], 0xffffffff
je 0x4107bc
mov eax, dword [0x4151a4]
mov eax, dword [eax + 8]
mov edx, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
cmp eax, dword [ebp - 4]
jne 0x4107bc
cmp byte [ebp - 0x1d], 0
jne 0x4104a5
cmp byte [ebp - 6], 0
je 0x41049d
mov edx, dword [0x41518c]
mov dl, byte [edx]
mov eax, 0x410808
call fcn.0040cca4
mov edx, dword [0x41518c]
mov dl, byte [edx]
mov eax, 0x410824
call fcn.0040cca4
mov byte [ebp - 7], 1
mov byte [ebp - 0x1d], 1
mov dl, 1
mov eax, dword [0x409ac8]
call fcn.00402570
mov dword [ebp - 0xc], eax
xor eax, eax
push ebp
push 0x4107b5
push dword fs:[eax]
mov dword fs:[eax], esp
push 0xa
lea edx, [ebp - 0x2c]
mov eax, dword [ebp - 0x14]
inc eax
call fcn.00406370
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x28]
mov edx, 0x410840
call fcn.00402e70
mov eax, dword [ebp - 0x28]
call fcn.0040301c
push eax
mov eax, dword [0x416674]
push eax
call sub.kernel32.dll_FindResourceA
mov esi, eax
push esi
mov eax, dword [0x416674]
push eax
call sub.kernel32.dll_LoadResource
mov ebx, eax
test ebx, ebx
je 0x410537
push ebx
call sub.kernel32.dll_LockResource
mov dword [ebp - 0x10], eax
push esi
mov eax, dword [0x416674]
push eax
call sub.kernel32.dll_SizeofResource
mov ecx, eax
mov edx, dword [ebp - 0x10]
mov eax, dword [ebp - 0xc]
call fcn.00409ee0
mov eax, ebx
call fcn.004044cc
push ebx
call sub.kernel32.dll_FreeResource
lea eax, [ebp - 0x18]
call fcn.00402bd0
mov eax, dword [0x4151a4]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x14]
cmp dword [eax + edx*4], 0
jne 0x410580
lea edx, [ebp - 0x34]
xor eax, eax
call fcn.0040153c
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x30]
call fcn.004064e4
mov edx, dword [ebp - 0x30]
mov eax, dword [0x4151a4]
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0x14]
mov ecx, dword [eax + ecx*4]
lea eax, [ebp - 0x18]
call fcn.00402e70
jmp 0x4105cf
mov eax, dword [0x4151a4]
mov eax, dword [eax + 0xc]
mov edx, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
lea edx, [ebp - 0x18]
call fcn.0040fc38
lea edx, [ebp - 0x38]
mov eax, dword [ebp - 0x18]
call fcn.00405dd0
mov edx, dword [ebp - 0x38]
lea eax, [ebp - 0x18]
call fcn.00402c68
push dword [ebp - 0x18]
push 0x41084c
mov eax, dword [0x4151a4]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x14]
push dword [eax + edx*4]
lea eax, [ebp - 0x18]
mov edx, 3
call fcn.00402ee4
mov eax, dword [ebp - 0x18]
call fcn.00406590
test al, al
je 0x41062a
mov eax, dword [0x4151a4]
mov eax, dword [eax + 0x10]
mov edx, dword [ebp - 0x14]
cmp byte [eax + edx], 0
je 0x41061d
push 0x34
mov eax, dword [0x4151a4]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
call fcn.0040301c
mov ecx, eax
mov edx, 0x410850
mov eax, dword [0x415198]
mov eax, dword [eax]
call fcn.0040cce4
cmp eax, 7
je 0x41079f
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
call fcn.0040a118
jmp 0x410635
mov edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc]
call fcn.0040a118
mov eax, dword [0x4151a4]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov edx, dword [eax + edx*4]
lea eax, [ebp - 0x3c]
mov ecx, 0x410890
call fcn.00402e70
mov eax, dword [ebp - 0x3c]
mov edx, dword [0x41518c]
mov dl, byte [edx]
call fcn.0040cca4
mov eax, dword [0x4151a4]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x14]
mov ebx, dword [eax + edx*4]
test ebx, ebx
jle 0x410760
mov eax, dword [0x4151a4]
push ebx
mov eax, dword [ebp - 0x18]
call fcn.0040301c
push eax
call sub.kernel32.dll_SetFileAttributesA
test eax, eax
je 0x410760
mov eax, dword [0x4151a4]
mov eax, dword [eax + 0x1c]
mov edx, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
cmp eax, 7
ja case.0x4106a9.0
jmp dword [eax*4 + 0x4106b0]
lea eax, [ebp - 0x1c]
mov edx, 0x4108a4
call fcn.00402c68
jmp case.0x4106a9.0
lea eax, [ebp - 0x1c]
mov edx, 0x4108bc
call fcn.00402c68
jmp case.0x4106a9.0
lea eax, [ebp - 0x1c]
mov edx, 0x4108d0
call fcn.00402c68
jmp case.0x4106a9.0
lea eax, [ebp - 0x1c]
mov edx, 0x4108f0
call fcn.00402c68
jmp case.0x4106a9.0
lea eax, [ebp - 0x1c]
mov edx, 0x410904
call fcn.00402c68
jmp case.0x4106a9.0
lea eax, [ebp - 0x1c]
mov edx, 0x410924
call fcn.00402c68
jmp case.0x4106a9.0
lea eax, [ebp - 0x1c]
mov edx, 0x410944
call fcn.00402c68
mov eax, dword [0x4151a4]
mov eax, dword [eax + 4]
mov edx, dword [ebp - 0x14]
mov edx, dword [eax + edx*4]
lea eax, [ebp - 0x40]
mov ecx, dword [ebp - 0x1c]
call fcn.00402e70
mov eax, dword [ebp - 0x40]
mov edx, dword [0x41518c]
mov dl, byte [edx]
call fcn.0040cca4
mov eax, dword [0x4151a4]
mov eax, dword [eax + 0x14]
mov edx, dword [ebp - 0x14]
cmp byte [eax + edx], 0
je 0x41079f
mov eax, dword [0x4151a4]
mov eax, dword [eax + 0x18]
mov edx, dword [ebp - 0x14]
mov eax, dword [eax + edx*4]
call fcn.0040301c
push eax
push 0
push 1
mov eax, dword [ebp - 0x18]
call fcn.0040301c
mov ecx, eax
mov edx, 0x410964
xor eax, eax
call fcn.004063ec
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4107bc
mov eax, dword [ebp - 0xc]
call fcn.004025a0
ret
inc dword [ebp - 0x14]
dec dword [ebp - 0x24]
jne 0x41043a
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4107f7
lea eax, [ebp - 0x40]
mov edx, 7
call fcn.00402bf4
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00402bf4
ret