Function at 0x419a86
Capabilities:
Extract resource via kernel32 functions

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x46e3f1
mov eax, dword fs:[0]
push eax
sub esp, 0x1c8
mov eax, dword [0x487ba4]
xor eax, esp
mov dword [esp + 0x1c0], eax
push ebx
push esi
push edi
mov eax, dword [0x487ba4]
xor eax, esp
push eax
lea eax, [esp + 0x1d8]
mov dword fs:[0], eax
lea eax, [esp + 0x74]
push eax
call fcn.0040d596
push 0x47a474
xor ebx, ebx
push 0x6a
push ebx
mov dword [esp + 0x1ec], ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
cmp esi, ebx
je 0x419b9b
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_LoadResource]
push esi
push ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_SizeofResource]
mov dword [esp + 0x14], eax
cmp edi, ebx
je 0x419b9b
cmp eax, ebx
je 0x419b9b
push eax
push edi
call fcn.0040f333
mov esi, eax
xor ecx, ecx
push 2
pop edx
lea eax, [esi + 1]
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.0044bd5e
add esp, 0xc
push dword [esp + 0x14]
mov ebx, eax
push edi
call fcn.0040f333
pop ecx
pop ecx
push esi
push ebx
lea eax, [esp + 0xf0]
call fcn.0040ddf1
push ebx
mov byte [esp + 0x1e4], 1
call fcn.0044c7ac
cmp dword [esp + 0x104], 8
mov eax, dword [esp + 0xf0]
pop ecx
jae 0x419b7d
lea eax, [esp + 0xec]
push eax
lea ebx, [esp + 0x78]
call fcn.0040eb21
test al, al
jne 0x419bd3
push 0
push 1
lea esi, [esp + 0xf0]
call fcn.00401e74
or dword [esp + 0x1e0], 0xffffffff
lea eax, [esp + 0x74]
push eax
call fcn.0040d5dc
xor al, al
mov ecx, dword [esp + 0x1d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1c0]
xor ecx, esp
call fcn.0044c18b
mov esp, ebp
pop ebp
ret
xor edi, edi
push ecx
mov eax, esp
mov dword [esp + 0xb0], edi
mov dword [esp + 0xb4], edi
mov dword [esp + 0xb8], edi
mov dword [esp + 0xc8], edi
mov dword [esp + 0xcc], edi
mov dword [esp + 0xc4], edi
lea esi, [esp + 0x78]
mov dword [esp + 0x18], esp
mov dword [eax], str.Product
call fcn.0040ee97
test al, al
jne 0x419c1f
push edi
jmp 0x419b8d
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductSkin
mov edi, 0x48b7c4
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov ebx, 0x48b7e0
push str.ProductBrand
mov edi, ebx
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push 0x47b28c
mov edi, 0x48b7fc
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductExe
mov edi, 0x48b818
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductArg
mov edi, 0x48b834
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
test al, al
jne 0x419cf2
push 0x479d3c
push 0x48b834
call fcn.00403f6b
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductInsCmple
mov edi, 0x48b850
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
test al, al
jne 0x419d2b
push 0x479d3c
push 0x48b850
call fcn.00403f6b
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push ebx
call fcn.00401bcf
lea edi, [esp + 0x3c]
call fcn.00416c67
add esp, 0x1c
push 0xffffffffffffffff
push 0x48bcac
xor ebx, ebx
mov byte [esp + 0x1e8], 2
call fcn.00401dec
push ebx
push 1
mov esi, edi
mov byte [esp + 0x1e8], 1
call fcn.00401e74
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
mov ebx, 0x48b888
push str.ProductID
mov edi, ebx
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
push str.WAE_DOWNTASK_
lea eax, [esp + 0x40]
push 0x48bcac
push eax
call fcn.00404545
add esp, 0xc
push ebx
push eax
lea eax, [esp + 0x60]
push eax
mov byte [esp + 0x1ec], 3
call fcn.00411c28
add esp, 0xc
push str..xml
push eax
lea eax, [esp + 0x28]
push eax
mov byte [esp + 0x1ec], 4
call fcn.00404545
add esp, 0xc
push 0xffffffffffffffff
push 0x48bcc8
xor ebx, ebx
mov byte [esp + 0x1e8], 5
call fcn.00401dec
push ebx
push 1
lea esi, [esp + 0x28]
call fcn.00401e74
push ebx
push 1
lea esi, [esp + 0x60]
call fcn.00401e74
push ebx
push 1
lea esi, [esp + 0x44]
mov byte [esp + 0x1e8], 1
call fcn.00401e74
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.AppID
mov edi, 0x48b8a4
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
mov edi, 0x48b8c0
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Channel
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
xor eax, eax
cmp dword [esp + 0xb0], ebx
push ecx
setne al
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0x18], esp
mov dword [esp + 0xc4], eax
mov eax, esp
mov dword [eax], str.Downurl
mov eax, edi
call fcn.0040eeec
cmp al, bl
je 0x419f0b
mov eax, edi
call fcn.0040f4f3
test al, al
je 0x419f0b
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.OnlyUseLocalUrl
mov edi, 0x48b8f8
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Url_Down
mov edi, 0x48b914
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
mov eax, edi
call fcn.0040f525
xor eax, eax
cmp dword [esp + 0xb0], ebx
mov dword [esp + 0xb4], ebx
setne al
mov dword [esp + 0xc4], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xc0], eax
call fcn.00416da8
test eax, eax
je 0x419fb6
push ecx
mov eax, esp
mov dword [eax], str.Downurl_x64
lea eax, [esp + 0x78]
mov dword [esp + 0x18], esp
call fcn.0040eeec
cmp al, bl
je 0x419fb6
lea eax, [esp + 0x74]
call fcn.0040f4f3
test al, al
je 0x419fb6
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.OnlyUseLocalUrl
mov edi, 0x48b930
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Url_Down
mov edi, 0x48b94c
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
mov eax, edi
call fcn.0040f525
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.InstallTime
mov edi, 0x48ba10
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
xor eax, eax
cmp dword [esp + 0xb0], ebx
push ecx
setne al
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0x18], esp
mov dword [esp + 0xc4], eax
mov eax, esp
mov dword [eax], str.Installurl
mov eax, edi
call fcn.0040eeec
cmp al, bl
je 0x41a07a
mov eax, edi
call fcn.0040f4f3
test al, al
je 0x41a07a
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.OnlyUseLocalUrl
mov edi, 0x48b9a0
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Url_Install
mov edi, 0x48b9bc
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
mov eax, edi
call fcn.0040f525
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Url_License
mov edi, 0x48b9f4
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
cmp dword [0x48ba08], ebx
jne 0x41a0b7
push str.http:__pop.wondershare.com_license.html
push 0x48b9f4
call fcn.00403f6b
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Languages
mov edi, 0x48b9d8
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
cmp dword [0x48b9ec], ebx
jne 0x41a0f4
push str.English_Deutsch_Fran
push 0x48b9d8
call fcn.00403f6b
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Dotnetminver
mov edi, 0x48b968
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Dotneturl
mov edi, 0x48b984
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.AgreeUserLicense
mov edi, 0x48ba2c
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.StartupProduct
mov edi, 0x48ba48
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
xor eax, eax
cmp dword [esp + 0xb0], ebx
push ecx
setne al
mov dword [esp + 0xb8], ebx
mov dword [esp + 0xc8], ebx
mov dword [esp + 0xcc], ebx
mov dword [esp + 0x18], esp
mov dword [esp + 0xc4], eax
mov eax, esp
mov dword [eax], str.Dependent
mov eax, edi
call fcn.0040eeec
cmp al, bl
je 0x41a404
mov eax, edi
call fcn.0040f4f3
test al, al
je 0x41a404
push ecx
mov eax, esp
mov dword [eax], str.item
lea eax, [esp + 0x78]
mov dword [esp + 0x18], esp
call fcn.0040eeec
cmp al, bl
lea eax, [esp + 0x74]
je 0x41a3ff
call fcn.0040f4f3
test al, al
je 0x41a1df
xor eax, eax
lea esi, [esp + 0x120]
mov dword [esp + 0x11c], 7
mov dword [esp + 0x118], ebx
mov word [esp + 0x108], ax
call fcn.00401bbc
lea esi, [esp + 0x13c]
call fcn.00401bbc
lea esi, [esp + 0x158]
call fcn.00401bbc
lea esi, [esp + 0x174]
call fcn.00401bbc
lea esi, [esp + 0x190]
call fcn.00401bbc
lea esi, [esp + 0x1ac]
call fcn.00401bbc
sub esp, 0x1c
mov byte [esp + 0x1fc], 6
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductID
lea edi, [esp + 0x124]
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push 0x47b28c
lea edi, [esp + 0x140]
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductExe
lea edi, [esp + 0x15c]
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Url_Down
lea edi, [esp + 0x1b0]
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.Url_Downx64
lea edi, [esp + 0x1cc]
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductArg
mov edi, 0x48b834
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
cmp al, bl
jne 0x41a377
push 0x479d3c
push 0x48b834
call fcn.00403f6b
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x30], esp
push str.ProductInsCmple
mov edi, 0x48b850
call fcn.004070da
mov ecx, edi
lea edi, [esp + 0x90]
call fcn.0041ca16
cmp al, bl
jne 0x41a3b0
push 0x479d3c
push 0x48b850
call fcn.00403f6b
cmp dword [esp + 0x118], ebx
je 0x41a3dd
cmp dword [esp + 0x1a4], ebx
jne 0x41a3cb
cmp dword [esp + 0x1c0], ebx
je 0x41a3dd
lea eax, [esp + 0x104]
push eax
mov esi, 0x48ba64
call fcn.0041caf8
lea eax, [esp + 0x74]
call fcn.0040f525
lea edi, [esp + 0x104]
mov byte [esp + 0x1e0], 1
call fcn.0041a58e
jmp 0x41a1df
call fcn.0040f525
cmp dword [0x48b8a0], 8
mov eax, dword [0x48b88c]
jae 0x41a417
mov eax, 0x48b88c
push ecx
mov ecx, esp
mov dword [esp + 0x18], esp
push eax
push ecx
call fcn.0040266c
cmp dword [0x48b8d8], 8
mov eax, dword [0x48b8c4]
jae 0x41a438
mov eax, 0x48b8c4
cmp dword [0x48b8bc], 8
mov ecx, dword [0x48b8a8]
jae 0x41a44c
mov ecx, 0x48b8a8
push eax
call fcn.0041db2e
sub esp, 0x14
mov esi, esp
mov dword [esp + 0x30], esp
push 0x48b888
call fcn.00401bcf
sub esp, 0x1c
mov byte [esp + 0x218], 7
mov esi, esp
mov dword [esp + 0x50], esp
push 0x47ab10
call fcn.004070da
mov byte [esp + 0x218], 1
call fcn.00413ca3
sub esp, 0x1c
mov edi, esp
mov dword [esp + 0x34], esp
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x4c], esp
push 0x48b7e0
call fcn.00401bcf
mov ecx, edi
call fcn.00417181
mov byte [esp + 0x218], 8
mov esi, esp
mov dword [esp + 0x4c], esp
push 0x47ab28
call fcn.004070da
mov byte [esp + 0x218], 1
call fcn.00413ca3
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x34], esp
push 0x48b8c0
call fcn.00401bcf
sub esp, 0x1c
mov byte [esp + 0x218], 9
mov esi, esp
mov dword [esp + 0x4c], esp
push str.channel
call fcn.004070da
mov byte [esp + 0x218], 1
call fcn.00413ca3
lea ecx, [esp + 0x14]
call fcn.0041dcf4
sub esp, 0x1c
mov byte [esp + 0x1fc], 0xa
mov eax, dword [eax]
mov esi, esp
mov dword [esp + 0x34], esp
push eax
call fcn.004070da
sub esp, 0x1c
mov esi, esp
mov dword [esp + 0x54], esp
push str.defchannel
mov byte [esp + 0x21c], 0xb
call fcn.004070da
mov byte [esp + 0x218], 0xa
call fcn.00413ca3
mov eax, dword [esp + 0x14]
add eax, 0xfffffff0
call fcn.004026ee
push ebx
push 1
lea esi, [esp + 0xf0]
call fcn.00401e74
or dword [esp + 0x1e0], 0xffffffff
lea eax, [esp + 0x74]
push eax
call fcn.0040d5dc
mov al, 1
jmp 0x419baf