Function at 0x4116fc
Capabilities:
Create thread

Disassembly:
push ebp
sub esp, 0x334
lea ebp, [esp - 4]
mov eax, dword [0x4320cc]
xor eax, ebp
mov dword [ebp + 0x334], eax
push 0xf8
mov eax, 0x426ccb
call fcn.00419c2c
mov ecx, dword [ebp + 0x354]
mov eax, dword [ebp + 0x350]
mov esi, dword [ebp + 0x340]
mov ebx, dword [ebp + 0x344]
mov edi, dword [ebp + 0x348]
mov dword [ebp - 0x10], ecx
lea ecx, [ebp - 0xd4]
mov dword [ebp - 0x30], eax
mov byte [eax], 0
call fcn.0040401d
mov eax, dword [esi]
and dword [ebp - 4], 0
lea ecx, [ebp - 0x104]
push ecx
push eax
call fcn.0040bc3f
test al, al
jne 0x41177e
mov ecx, dword [ebp - 0x10]
push str.Can_not_find_archive_file
call fcn.0040a8c9
jmp 0x411b09
lea ecx, [ebp - 0xc4]
call fcn.004115eb
and dword [ebp - 0x44], 0
push edi
lea eax, [ebp - 0xc4]
push eax
push esi
mov byte [ebp - 4], 1
call fcn.0040e4ab
mov esi, eax
test esi, esi
je 0x4117b7
mov ecx, dword [ebp - 0x10]
push 0x428ad0
call fcn.0040a8c9
jmp 0x411f38
push ebx
lea ecx, [ebp - 0x2c]
call fcn.00404128
push 2
pop ebx
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], bl
call fcn.0040c056
push dword [ebp - 0x2c]
call fcn.0040b606
test al, al
jne 0x411b13
mov si, word [0x433450]
cmp si, word [0x431de0]
je 0x411ac9
xor edi, edi
push 0x268
lea eax, [ebp + 4]
push edi
push eax
mov dword [ebp], edi
call fcn.0041b700
movzx eax, si
mov ecx, 0x43f
add esp, 0xc
cmp eax, ecx
jg 0x411943
je 0x411939
sub eax, 0x401
cmp eax, 0x29
ja case.0x41182e.1033
jmp dword [eax*4 + 0x411f7c]
mov eax, 0x2840
jmp 0x411a8c
mov eax, 0x2872
jmp 0x411a8c
mov eax, 0x28a4
jmp 0x411a8c
mov eax, 0x2926
jmp 0x411a8c
mov eax, 0x2836
jmp 0x411a8c
mov eax, 0x2854
jmp 0x411a8c
mov eax, 0x2890
jmp 0x411a8c
mov eax, 0x28d6
jmp 0x411a8c
mov eax, 0x28fe
jmp 0x411a8c
mov eax, 0x293a
jmp 0x411a8c
mov eax, 0x28b8
jmp 0x411a8c
mov eax, 0x28ae
jmp 0x411a8c
mov eax, 0x280e
jmp 0x411a8c
mov eax, 0x2886
jmp 0x411a8c
mov eax, 0x2818
jmp 0x411a8c
mov eax, 0x2822
jmp 0x411a8c
mov eax, 0x2976
jmp 0x411a8c
mov eax, 0x294e
jmp 0x411a8c
mov eax, 0x2980
jmp 0x411a8c
mov eax, 0x298a
jmp 0x411a8c
mov eax, 0x28f4
jmp 0x411a8c
mov eax, 0x2912
jmp 0x411a8c
mov eax, 0x296c
jmp 0x411a8c
mov eax, 0x2930
jmp 0x411a8c
mov eax, 0x2958
jmp 0x411a8c
mov eax, 0x29a8
jmp 0x411a8c
mov eax, 0x2a7a
jmp 0x411a8c
mov ecx, 0x100c
cmp eax, ecx
jg 0x411a0c
je case.0x41182e.1036
mov ecx, 0x81a
cmp eax, ecx
jg 0x4119be
je 0x411a44
add ecx, 0xfffffff2
cmp eax, ecx
jg 0x411992
je case.0x41182e.1036
sub eax, 0x804
je 0x411988
sub eax, 3
je case.0x41182e.1031
sub eax, ebx
je case.0x41182e.1033
dec eax
jmp 0x411a81
mov eax, 0x502c
jmp 0x411a8c
sub eax, 0x813
je case.0x41182e.1043
dec eax
je case.0x41182e.1044
sub eax, ebx
jne case.0x41182e.1033
mov eax, 0x28e0
jmp 0x411a8c
mov eax, 0x28cc
jmp 0x411a8c
mov eax, 0x28c2
jmp 0x411a8c
sub eax, 0xc04
je case.0x41182e.1028
sub eax, 3
je case.0x41182e.1031
sub eax, ebx
je case.0x41182e.1033
dec eax
je case.0x41182e.1034
sub eax, 0x10
je 0x411a44
sub eax, 0x3ea
je case.0x41182e.1028
sub eax, 5
mov eax, 0x285e
jmp 0x411a8c
mov eax, 0x284a
jmp 0x411a8c
mov eax, 0x282c
jmp 0x411a8c
mov eax, 0x287c
jmp 0x411a8c
mov ecx, 0x280a
cmp eax, ecx
jg 0x411a52
je case.0x41182e.1034
sub eax, 0x101a
je case.0x41182e.1050
sub eax, 0x7ef
je case.0x41182e.1033
sub eax, 0x11
je 0x411a44
sub eax, 0x3ef
je case.0x41182e.1033
sub eax, 0x11
je 0x411a44
sub eax, 0x3f0
je case.0x41182e.1034
sub eax, 0x400
jmp 0x411a81
mov eax, 0x7908
jmp 0x411a8c
mov eax, 0x2908
jmp 0x411a8c
cmp eax, 0x2c0a
je case.0x41182e.1034
cmp eax, 0x300a
je case.0x41182e.1034
cmp eax, 0x340a
je case.0x41182e.1034
cmp eax, 0x380a
je case.0x41182e.1034
cmp eax, 0x3c0a
je case.0x41182e.1034
cmp eax, 0x400a
je case.0x41182e.1034
cmp eax, 0x500a
jne case.0x41182e.1033
mov eax, 0x2868
push 0x32
lea ecx, [ebp]
push ecx
push eax
push edi
call dword [sym.imp.USER32.dll_LoadStringW]
mov ecx, dword [ebp - 0x10]
lea eax, [ebp]
push eax
call fcn.0040a8c9
push 0x4289b8
lea ecx, [ebp - 0x1c]
call fcn.00409a48
mov ecx, dword [ebp - 0x10]
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 3
call fcn.0040e55e
jmp 0x411ae8
lea eax, [ebp - 0x2c]
push eax
push 0x285e
lea eax, [ebp - 0x1c]
push eax
call fcn.0040e630
mov ecx, dword [ebp - 0x10]
push eax
mov byte [ebp - 4], 4
call fcn.00409a7e
push dword [ebp - 0x1c]
call fcn.00409f4d
pop ecx
push dword [ebp - 0x2c]
call fcn.00409f4d
pop ecx
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0
call fcn.004116c6
mov esi, 0x80004005
jmp 0x411f47
push 0xe8
call fcn.00409f22
pop ecx
mov dword [ebp - 0x20], eax
xor edi, edi
mov byte [ebp - 4], 5
cmp eax, edi
je 0x411b34
mov ecx, eax
call fcn.0041149d
jmp 0x411b36
xor eax, eax
push eax
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], bl
mov dword [ebp - 0x48], eax
call fcn.004010b8
push 0x428bd4
lea ecx, [ebp - 0x1c]
call fcn.00409a48
mov byte [ebp - 4], 6
lea eax, [ebp - 0xc0]
cmp dword [ebp - 0xc0], edi
jne 0x411b6a
lea eax, [ebp - 0xc4]
mov eax, dword [eax]
push edi
lea ecx, [ebp - 0xf0]
push ecx
lea ecx, [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x2c]
push ecx
mov ecx, dword [ebp - 0x48]
push eax
call fcn.00410d97
push dword [ebp - 0x1c]
mov byte [ebp - 4], bl
call fcn.00409f4d
cmp byte [ebp + 0x34c], 0
pop ecx
je 0x411f03
lea eax, [ebp - 0x20]
push eax
push edi
lea eax, [ebp - 0xc4]
push eax
push 0x411389
push edi
push edi
mov byte [ebp - 4], 7
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x20], eax
cmp eax, edi
jne 0x411bd7
push 0x42d0e0
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x10], 0x425d0
call fcn.004197fa
lea ecx, [ebp - 0x1c]
call fcn.0040401d
mov si, word [0x433450]
mov byte [ebp - 4], 8
cmp si, word [0x431de0]
je 0x411eb6
push 0xc4
lea eax, [ebp + 0x270]
push edi
push eax
mov dword [ebp + 0x26c], edi
call fcn.0041b700
movzx eax, si
mov ecx, 0x43f
add esp, 0xc
cmp eax, ecx
jg 0x411d4b
je 0x411d41
sub eax, 0x401
cmp eax, 0x29
ja case.0x411c36.1033
jmp dword [eax*4 + 0x412024]
mov eax, 0x2841
jmp 0x411e94
mov eax, 0x2873
jmp 0x411e94
mov eax, 0x28a5
jmp 0x411e94
mov eax, 0x2927
jmp 0x411e94
mov eax, 0x2837
jmp 0x411e94
mov eax, 0x2855
jmp 0x411e94
mov eax, 0x2891
jmp 0x411e94
mov eax, 0x28d7
jmp 0x411e94
mov eax, 0x28ff
jmp 0x411e94
mov eax, 0x293b
jmp 0x411e94
mov eax, 0x28b9
jmp 0x411e94
mov eax, 0x28af
jmp 0x411e94
mov eax, 0x280f
jmp 0x411e94
mov eax, 0x2887
jmp 0x411e94
mov eax, 0x2819
jmp 0x411e94
mov eax, 0x2823
jmp 0x411e94
mov eax, 0x2977
jmp 0x411e94
mov eax, 0x294f
jmp 0x411e94
mov eax, 0x2981
jmp 0x411e94
mov eax, 0x298b
jmp 0x411e94
mov eax, 0x28f5
jmp 0x411e94
mov eax, 0x2913
jmp 0x411e94
mov eax, 0x296d
jmp 0x411e94
mov eax, 0x2931
jmp 0x411e94
mov eax, 0x2959
jmp 0x411e94
mov eax, 0x29a9
jmp 0x411e94
mov eax, 0x2a7b
jmp 0x411e94
mov ecx, 0x100c
cmp eax, ecx
jg 0x411e14
je case.0x411c36.1036
mov ecx, 0x81a
cmp eax, ecx
jg 0x411dc6
je 0x411e4c
add ecx, 0xfffffff2
cmp eax, ecx
jg 0x411d9a
je case.0x411c36.1036
sub eax, 0x804
je 0x411d90
sub eax, 3
je case.0x411c36.1031
sub eax, ebx
je case.0x411c36.1033
dec eax
jmp 0x411e89
mov eax, 0x502d
jmp 0x411e94
sub eax, 0x813
je case.0x411c36.1043
dec eax
je case.0x411c36.1044
sub eax, ebx
jne case.0x411c36.1033
mov eax, 0x28e1
jmp 0x411e94
mov eax, 0x28cd
jmp 0x411e94
mov eax, 0x28c3
jmp 0x411e94
sub eax, 0xc04
je case.0x411c36.1028
sub eax, 3
je case.0x411c36.1031
sub eax, ebx
je case.0x411c36.1033
dec eax
je case.0x411c36.1034
sub eax, 0x10
je 0x411e4c
sub eax, 0x3ea
je case.0x411c36.1028
sub eax, 5
mov eax, 0x285f
jmp 0x411e94
mov eax, 0x284b
jmp 0x411e94
mov eax, 0x282d
jmp 0x411e94
mov eax, 0x287d
jmp 0x411e94
mov ecx, 0x280a
cmp eax, ecx
jg 0x411e5a
je case.0x411c36.1034
sub eax, 0x101a
je case.0x411c36.1050
sub eax, 0x7ef
je case.0x411c36.1033
sub eax, 0x11
je 0x411e4c
sub eax, 0x3ef
je case.0x411c36.1033
sub eax, 0x11
je 0x411e4c
sub eax, 0x3f0
je case.0x411c36.1034
sub eax, 0x400
jmp 0x411e89
mov eax, 0x7909
jmp 0x411e94
mov eax, 0x2909
jmp 0x411e94
cmp eax, 0x2c0a
je case.0x411c36.1034
cmp eax, 0x300a
je case.0x411c36.1034
cmp eax, 0x340a
je case.0x411c36.1034
cmp eax, 0x380a
je case.0x411c36.1034
cmp eax, 0x3c0a
je case.0x411c36.1034
cmp eax, 0x400a
je case.0x411c36.1034
cmp eax, 0x500a
jne case.0x411c36.1033
mov eax, 0x2869
push 0x64
lea ecx, [ebp + 0x26c]
push ecx
push eax
push edi
call dword [sym.imp.USER32.dll_LoadStringW]
lea eax, [ebp + 0x26c]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0040a8c9
jmp 0x411ede
push 0x285f
lea eax, [ebp - 0x3c]
push eax
call fcn.0040c244
push eax
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 9
call fcn.00409a7e
push dword [ebp - 0x3c]
mov byte [ebp - 4], 8
call fcn.00409f4d
pop ecx
mov ecx, dword [ebp - 0x48]
lea eax, [ebp - 0x1c]
push eax
call fcn.004113de
push dword [ebp - 0x1c]
mov esi, dword [ebp - 0x40]
call fcn.00409f4d
pop ecx
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], bl
call fcn.0040669f
jmp 0x411f10
lea ecx, [ebp - 0xc4]
call fcn.00411338
mov esi, eax
mov eax, dword [ebp - 0x48]
mov ecx, dword [ebp - 0x10]
add eax, 0xdc
push eax
call fcn.00409a7e
mov eax, dword [ebp - 0x48]
mov al, byte [eax + 0xd8]
mov ecx, dword [ebp - 0x30]
push dword [ebp - 0x2c]
mov byte [ecx], al
call fcn.00409f4d
pop ecx
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 0
call fcn.004116c6
push dword [ebp - 0xd4]
call fcn.00409f4d
mov eax, esi
pop ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x334]
xor ecx, ebp
call fcn.004197eb
add ebp, 0x338
leave
ret 0x18