Function at 0x411e10
Capabilities:
Check mutex on windows
Copy file
Write file on windows

Disassembly:
sub esp, 0x764
mov eax, dword [0x42f560]
xor eax, esp
mov dword [esp + 0x75c], eax
push ebx
push ebp
push esi
push edi
xor ebx, ebx
mov edi, ecx
push ebx
mov dword [esp + 0x14], edi
mov dword [esp + 0x68], ebx
mov dword [esp + 0x20], ebx
call dword [sym.imp.ole32.dll_CoInitialize]
xor eax, eax
cmp eax, 0x434a10
je 0x4129a1
cmp edi, ebx
je 0x4129a1
mov ebp, dword [edi + 0x1048]
call fcn.004148a0
test eax, eax
je 0x412930
mov esi, dword [sym.imp.KERNEL32.dll_CreateMutexW]
push str.GlobalK7TSInstallerV1
push 1
push ebx
call esi
mov dword [edi + 0x104c], eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0xb7
je 0x412930
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
lea ecx, [esp + 0x26c]
push str.K7Installer_08x
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea edx, [esp + 0x268]
push edx
push 1
push ebx
call esi
mov dword [edi + 0x1050], eax
lea eax, [ebp + 0x20c]
mov dword [edi + 0x1028], eax
mov esi, dword [ebp + 0x32c]
mov ebx, dword [ebp + 0x13f4]
add ebx, dword [ebp + 0x100]
mov ecx, dword [ebp + 0x334]
shl esi, 8
push esi
push ebx
push ecx
call fcn.0041a520
mov edx, dword [ebp + 0x330]
mov eax, dword [ebp + 0x334]
add esp, 0xc
push 0
add ebx, esi
shr esi, 2
push esi
push eax
mov dword [esp + 0x34], edx
mov dword [ebp + 0x330], 0
call fcn.00415090
mov dword [ebp + 0x330], eax
cmp dword [esp + 0x28], eax
je 0x411f5f
cmp dword [edi + 8], 0
je 0x411f3d
mov edi, str.K7IS_Install_Start
mov esi, str.CRC32_check_fails__DstDirNames__
call fcn.00412cb0
mov edi, dword [esp + 0x10]
push str.ERROR:_Data_Corruption_found_at_DstDirNames
add edi, 0xe20
push edi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 8
mov dword [esp + 0x14], 0
jmp 0x412934
mov edi, ebp
call fcn.0040eba0
test eax, eax
jne 0x411f73
mov dword [esp + 0x14], eax
jmp 0x412934
mov esi, dword [ebp + 0x350]
mov ecx, dword [ebp + 0x358]
shl esi, 8
push esi
push ebx
push ecx
call fcn.0041a520
mov edx, dword [ebp + 0x358]
mov edi, dword [ebp + 0x354]
add esp, 0xc
push 0
add ebx, esi
shr esi, 2
push esi
push edx
mov dword [ebp + 0x354], 0
call fcn.00415090
mov dword [ebp + 0x354], eax
cmp edi, eax
je 0x411fe9
mov eax, dword [esp + 0x10]
cmp dword [eax + 8], 0
je 0x411fd4
mov edi, str.K7IS_Install_Start
mov esi, str.CRC32_check_fails__pCustInstAct__
call fcn.00412cb0
mov ecx, dword [esp + 0x10]
push str.ERROR:_Data_Corruption_found_at_DstDirNames
add ecx, 0xe20
push ecx
jmp 0x411f49
mov esi, dword [ebp + 0x35c]
mov edx, dword [ebp + 0x364]
shl esi, 8
push esi
push ebx
push edx
call fcn.0041a520
add esp, 0xc
push 0
push ebp
add ebx, esi
call fcn.00410ac0
add esp, 8
mov dword [esp + 0x14], eax
test eax, eax
je 0x412934
mov eax, dword [esp + 0x10]
cmp dword [eax + 0x103c], 1
je 0x412934
mov esi, dword [ebp + 0x334]
xor edi, edi
mov dword [esp + 0x20], esi
mov dword [esp + 0x2c], edi
cmp dword [ebp + 0x32c], edi
jbe 0x41206f
push ebp
mov ecx, esi
call fcn.0040fa40
add esp, 4
test eax, eax
je 0x412286
inc edi
add esi, 0x100
cmp edi, dword [ebp + 0x32c]
jb 0x412045
mov dword [esp + 0x2c], edi
mov dword [esp + 0x20], esi
lea edx, [esp + 0x68]
push edx
push 0x42c63c
push ebp
call fcn.0040edf0
lea eax, [esp + 0x74]
add esp, 0xc
add eax, 0xfffffffe
lea esp, [esp]
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x412090
mov ecx, dword [str.Temp_]
mov edx, dword [0x42c664]
mov dword [eax], ecx
mov ecx, dword [0x42c668]
mov dword [eax + 4], edx
mov dx, word [0x42c66c]
mov dword [eax + 8], ecx
mov word [eax + 0xc], dx
mov eax, dword [esp + 0x10]
add eax, 0x220
mov edx, eax
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x4120d0
lea edi, [esp + 0x68]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x4120e4
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x368]
push eax
and ecx, 3
push 0x42b25c
push ebp
rep movsb byte es:[edi], byte [esi]
call fcn.0040edf0
lea edi, [esp + 0x374]
add esp, 0xc
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x412120
mov eax, dword [esp + 0x10]
mov ecx, dword [0x42b220]
add eax, 0x220
mov dword [edi], ecx
mov edx, eax
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x412140
lea edi, [esp + 0x368]
sub eax, edx
add edi, 0xfffffffe
jmp 0x412160
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x412160
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
push 0
mov ecx, eax
lea edx, [esp + 0x36c]
push edx
lea eax, [esp + 0x70]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
jne 0x4121b8
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 8], eax
je 0x4121b0
mov esi, ecx
mov edi, str.Failed_to_copy_Resource_File_into__INSTALLER_
add esi, 0x220
call fcn.00412cb0
mov dword [esp + 0x14], 0
lea edx, [esp + 0x68]
push edx
push 0x42c63c
push ebp
call fcn.0040edf0
lea eax, [esp + 0x74]
add esp, 0xc
add eax, 0xfffffffe
mov cx, word [eax + 2]
add eax, 2
test cx, cx
jne 0x4121d2
mov ecx, dword [str.Fonts_]
mov edx, dword [0x42c6d0]
mov dword [eax], ecx
mov ecx, dword [0x42c6d4]
mov dword [eax + 4], edx
mov edx, dword [0x42c6d8]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edx
mov eax, dword [esp + 0x10]
add eax, 0x420
mov edx, eax
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x412210
lea edi, [esp + 0x68]
sub eax, edx
add edi, 0xfffffffe
mov cx, word [edi + 2]
add edi, 2
test cx, cx
jne 0x412224
mov ecx, eax
shr ecx, 2
mov esi, edx
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
lea eax, [esp + 0x68]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call dword [sym.imp.GDI32.dll_AddFontResourceW]
test eax, eax
jne 0x4122ab
mov edi, dword [esp + 0x10]
lea esi, [edi + 0xe20]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea ecx, [esp + 0x6c]
push ecx
push str.Failed_to_add_font_resource__s____Error:__d_
push esi
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
cmp dword [edi + 8], 0
je 0x4122bc
mov edi, str.FAILURE__K7IS_FONT_Registration
call fcn.00412cb0
jmp 0x4122bc
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 8], 0
je 0x411f52
mov edi, str.K7IS_Parser_Start__K7IS_Parser_Set_Directory_
call fcn.00412cb0
mov dword [esp + 0x14], 0
jmp 0x412934
push 0
push 0
push 0x1d
push 0xffff
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp + 0x35c]
add eax, dword [ebp + 0x32c]
mov ecx, dword [ebp + 0x104]
add eax, dword [ebp + 0x350]
xor esi, esi
shl eax, 8
add eax, dword [ebp + 0x100]
mov edx, 1
mov dword [esp + 0x38], eax
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], ecx
mov dword [esp + 0x48], ecx
xor ecx, ecx
xor edi, edi
mov dword [esp + 0x60], esi
mov dword [esp + 0x24], esi
mov dword [esp + 0x18], esi
mov dword [esp + 0x28], esi
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], edx
mov dword [esp + 0x40], esi
mov dword [esp + 0x50], ebx
mov dword [esp + 0x44], edx
mov dword [esp + 0x54], ecx
cmp dword [eax + 0x103c], edx
je 0x412816
mov eax, dword [esp + 0x40]
cmp eax, edx
jne 0x412416
cmp ecx, edx
je 0x412816
cmp dword [esp + 0x24], edx
jne 0x412356
cmp eax, edi
jne 0x412352
sub edx, dword [esp + 0x18]
mov dword [esp + 0x18], edx
cmp dword [ebp + 0x680], 4
jne 0x41236e
mov ecx, dword [ebp + 0x688]
push 0xffffffffffffffff
push ecx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edx, esi
imul edx, edx, 0x354
lea eax, [edx + ebp]
mov dword [esp + 0x58], eax
cmp dword [eax + 0x9e8], edi
jne 0x41271b
mov ebx, eax
mov eax, dword [esp + 0x18]
lea eax, [eax + eax*4]
add eax, eax
add eax, eax
mov edx, dword [esp + eax + 0x3c]
add ebx, 0x69c
push 0
mov esi, edx
mov ecx, 0xcd
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0x31c]
push 0xcd
add edx, 0x334
push ebx
mov dword [esp + 0x68], eax
mov dword [esp + eax + 0x48], edx
mov dword [ebx + 0x31c], 0
call fcn.00415090
mov dword [ebx + 0x31c], eax
cmp esi, eax
jne 0x4124dc
mov ecx, str.K7IS001:Module_Tag__C_K7_Computing_Pvt_Ltd
lea eax, [ebx + 4]
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x41242b
test dx, dx
je 0x412412
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x41242b
add eax, 4
add ecx, 4
test dx, dx
jne 0x4123f0
xor eax, eax
jmp 0x412430
cmp ecx, edx
jne 0x412344
mov dword [esp + 0x24], edi
mov dword [esp + 0x18], edi
jmp 0x412356
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x412746
mov eax, dword [esp + 0x5c]
add dword [esp + eax + 0x38], 0x334
cmp dword [esp + 0x18], 0
lea eax, [esp + eax + 0x38]
je 0x412524
mov eax, dword [ebx + 0x308]
cmp eax, 4
je 0x412524
cmp eax, 3
je 0x412524
cmp eax, 6
je 0x412524
mov eax, dword [ebx + 0x304]
add dword [esp + 0x4c], eax
add dword [esp + 0x50], eax
mov eax, dword [esp + 0x44]
inc eax
mov dword [esp + 0x44], eax
cmp eax, dword [esp + 0x48]
ja 0x41251c
mov edx, dword [esp + 0x5c]
mov eax, dword [esp + edx + 0x3c]
push 0
mov esi, eax
mov ecx, 0xcd
mov edi, ebx
rep movsd dword es:[edi], dword [esi]
mov esi, dword [ebx + 0x31c]
push 0xcd
add eax, 0x334
push ebx
mov dword [esp + edx + 0x48], eax
mov dword [ebx + 0x31c], 0
call fcn.00415090
mov dword [ebx + 0x31c], eax
cmp esi, eax
je 0x4123e4
mov ebx, dword [esp + 0x10]
cmp dword [ebx + 8], 0
je 0x4124f5
mov edi, str.K7IS_Parser_Start
mov esi, str.Break_3
call fcn.00412cb0
mov edx, dword [esp + 0x2c]
push edx
push str.ParserStart:_Data_Corruption___Module_Header___d_
add ebx, 0xe20
push ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
mov dword [esp + 0x14], 0
jmp 0x412934
mov dword [esp + 0x54], 1
cmp dword [esp + 0x14], 0
je 0x412934
cmp dword [esp + 0x18], 0
jne 0x412640
mov eax, dword [ebx + 0x308]
mov edi, 1
cmp eax, edi
je 0x412589
test eax, eax
je 0x41258d
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x38]
mov dword [esi + 0x9e0], eax
lea eax, [ebp + 0x680]
push eax
mov dword [esi + 0x9d4], edi
mov dword [esi + 0x9e8], edi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov ecx, dword [esi + 0x9e4]
push 0
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
jmp 0x41261b
test eax, eax
jne 0x4125b8
cmp dword [ebp + 0x680], 0
je 0x4125b4
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea esp, [esp]
mov edx, dword [ebp + 0x688]
push 0xffffffffffffffff
push edx
call esi
cmp dword [ebp + 0x680], 0
jne 0x4125a0
mov dword [esp + 0x24], edi
mov edi, dword [ebp + 0x318]
mov eax, dword [esp + 0x3c]
mov ecx, 0xcd
mov esi, ebx
rep movsd dword es:[edi], dword [esi]
push eax
mov eax, 4
mov ecx, ebp
call fcn.00410f10
add esp, 4
test eax, eax
je 0x411f52
cmp dword [esp + 0x24], 1
jne 0x41261b
push 4
lea edx, [esp + 0x56c]
mov ecx, ebp
call fcn.0040fc20
add esp, 4
test eax, eax
je 0x412770
lea ecx, [esp + 0x568]
push ecx
call dword [sym.imp.KERNEL32.dll_SetDllDirectoryW]
test eax, eax
je 0x412799
mov eax, dword [esp + 0x10]
lea edx, [ebx + 0x284]
mov dword [eax + 0x1024], edx
mov ecx, dword [ebp + 0x678]
mov edx, dword [eax + 0x102c]
push eax
push ecx
call edx
add esp, 8
jmp 0x412687
cmp dword [esp + 0x54], 0
jne 0x412687
mov esi, dword [esp + 0x58]
mov eax, dword [esp + 0x4c]
mov dword [esi + 0x9e0], eax
lea eax, [ebp + 0x680]
push eax
mov dword [esi + 0x9d4], 2
mov dword [esi + 0x9e8], 1
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov ecx, dword [esi + 0x9e4]
push 0
push 1
push ecx
call dword [sym.imp.KERNEL32.dll_ReleaseSemaphore]
mov esi, dword [esp + 0x5c]
cmp dword [esp + esi + 0x40], 0
lea edi, [esp + esi + 0x40]
jne 0x4126a4
mov eax, dword [ebx + 0x304]
add dword [esp + esi + 0x38], eax
add dword [esp + esi + 0x3c], eax
cmp dword [esp + 0x18], 0
jne 0x412705
cmp dword [ebp + 0x31c], 0
je 0x412705
push 0
push 0xcd
push ebx
mov dword [ebx + 0x31c], 0
call fcn.00415090
push 0
lea edx, [esp + 0x68]
push edx
push 0x334
mov dword [ebx + 0x31c], eax
mov eax, dword [ebp + 0x31c]
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4127c2
cmp dword [esp + 0x64], 0x334
jne 0x4127ec
inc dword [esp + 0x60]
inc dword [esp + esi + 0x30]
mov eax, dword [esp + esi + 0x30]
cmp eax, dword [esp + esi + 0x34]
jbe 0x412723
mov dword [edi], 1
jmp 0x412723
inc esi
and esi, 3
mov dword [esp + 0x28], esi
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 0x103c], 1
je 0x412816
mov esi, dword [esp + 0x28]
mov ecx, dword [esp + 0x54]
xor edi, edi
lea edx, [edi + 1]
jmp 0x412330
mov eax, dword [esp + 0x10]
cmp dword [eax + 8], 0
je 0x411f52
mov edi, str.K7IS_Parser_Start
mov esi, str.Break_4
call fcn.00412cb0
mov dword [esp + 0x14], 0
jmp 0x412934
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 8], 0
je 0x411f52
mov esi, dword [esp + 0x20]
mov edi, str.K7IS_Parser_Start__K7IS_Parser_Get_DllDirectory_
call fcn.00412cb0
mov dword [esp + 0x14], 0
jmp 0x412934
mov edx, dword [esp + 0x10]
cmp dword [edx + 8], 0
je 0x411f52
mov esi, dword [esp + 0x20]
mov edi, str.K7IS_Parser_Start__K7IS_Parser_Set_DllDirectory_
call fcn.00412cb0
mov dword [esp + 0x14], 0
jmp 0x412934
mov eax, dword [esp + 0x10]
cmp dword [eax + 8], 0
je 0x411f52
mov edi, str.K7IS_Parser_Start
mov esi, str.Break_5
call fcn.00412cb0
mov dword [esp + 0x14], 0
jmp 0x412934
mov ecx, dword [esp + 0x10]
cmp dword [ecx + 8], 0
je 0x411f52
mov edi, str.K7IS_Parser_Start
mov esi, str.Break_6
call fcn.00412cb0
mov dword [esp + 0x14], 0
jmp 0x412934
xor ebx, ebx
cmp dword [esp + 0x14], ebx
je 0x412934
mov edx, dword [esp + 0x10]
cmp dword [edx + 0x103c], 1
je 0x412934
cmp dword [ebp + 0x680], ebx
je 0x412854
mov esi, dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp + 0x688]
push 0xffffffffffffffff
push eax
call esi
cmp dword [ebp + 0x680], ebx
jne 0x412841
cmp dword [ebp + 0x104], ebx
je 0x412911
mov esi, dword [ebp + 0x338]
mov ecx, dword [esp + 0x60]
mov edx, dword [ebp + 0x320]
mov edi, dword [sym.imp.KERNEL32.dll_WriteFile]
push ebx
lea eax, [esp + 0x20]
push eax
mov dword [ebp + 0x104], ecx
mov ecx, dword [esp + 0x44]
shl esi, 8
push esi
mov dword [ebp + 0x100], edx
mov edx, dword [ebp + 0x31c]
push ecx
push edx
call edi
test eax, eax
je 0x412930
cmp esi, dword [esp + 0x1c]
jne 0x412930
mov eax, dword [esp + 0x3c]
mov edx, dword [ebp + 0x31c]
add eax, esi
mov esi, dword [ebp + 0x344]
push ebx
lea ecx, [esp + 0x20]
push ecx
shl esi, 8
push esi
push eax
push edx
call edi
test eax, eax
je 0x412930
cmp esi, dword [esp + 0x1c]
jne 0x412930
push ebx
push 0x4fe
push ebp
mov dword [ebp + 0x314], ebx
call fcn.00415090
mov ecx, dword [ebp + 0x31c]
push ebx
mov dword [ebp + 0x314], eax
lea eax, [esp + 0x20]
push eax
push 0x13f8
push ebp
push ecx
call edi
test eax, eax
je 0x412930
cmp dword [esp + 0x1c], 0x13f8
jne 0x412930
mov edx, dword [esp + 0x14]
mov eax, dword [ebp + 0x31c]
push edx
call fcn.0040e7f0
add esp, 4
mov dword [esp + 0x14], eax
mov dword [ebp + 0x31c], ebx
jmp 0x412934
mov dword [esp + 0x14], ebx
mov edi, dword [esp + 0x10]
test ebp, ebp
je 0x4129a5
cmp dword [edi + 8], 0
je 0x412955
mov edi, str.K7IS_Parser_Start
mov esi, str.CLEANUP::K7IS_Close_Threads
call fcn.00412cb0
mov edi, dword [esp + 0x10]
push ebp
call fcn.0040ec80
add esp, 4
test eax, eax
jne 0x412966
xor ebx, ebx
jmp 0x41296a
mov ebx, dword [esp + 0x14]
cmp dword [ebp + 0x31c], 0
je 0x4129a9
cmp dword [edi + 8], 0
je 0x41298c
mov edi, str.K7IS_Parser_Start
mov esi, str.CLEANUP::K7IS_FileClose
call fcn.00412cb0
mov edi, dword [esp + 0x10]
mov ebp, dword [ebp + 0x31c]
test ebp, ebp
je 0x4129a9
push ebp
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x4129a9
xor ebx, ebx
jmp 0x4129a9
mov ebx, dword [esp + 0x14]
mov ebp, dword [edi + 0x1048]
test ebp, ebp
je 0x412acc
cmp dword [edi + 0x103c], 0
jne 0x4129f6
cmp dword [edi + 0x1038], 0
jne 0x4129f6
cmp ebx, 1
jne 0x4129ed
cmp dword [edi + 8], 0
je 0x4129e3
mov edi, str.K7IS_Parser_Start
mov esi, str.RETURN::TRUE
call fcn.00412cb0
mov eax, 1
jmp 0x412ace
mov dword [edi + 0x10], 1
jmp 0x4129fd
mov eax, ebp
call fcn.0040f5f0
cmp dword [edi + 8], 0
je 0x412a16
mov edi, str.K7IS_Parser_Start
mov esi, str.CLEANUP::UnmapViewOfFile
call fcn.00412cb0
mov edi, dword [esp + 0x10]
mov eax, dword [ebp + 0x13f4]
push eax
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov ecx, dword [ebp + 0x13f0]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ecx
call esi
mov edx, dword [ebp + 0x13ec]
push edx
call esi
cmp dword [edi + 8], 0
je 0x412a50
mov edi, str.K7IS_Parser_Start
mov esi, str.CLEANUP::K7IS_FreeResource
call fcn.00412cb0
mov ebx, ebp
call fcn.0040e970
mov ebx, dword [esp + 0x10]
cmp dword [ebx + 8], 0
mov dword [ebx + 0x1048], 0
je 0x412a7a
mov edi, str.K7IS_Parser_Start
mov esi, str.CLEANUP::CloseMutex
call fcn.00412cb0
mov eax, dword [ebx + 0x1050]
test eax, eax
je 0x412a8b
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebx + 0x104c]
test eax, eax
je 0x412a9c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp dword [ebx + 0x103c], 1
jne 0x412ab7
mov eax, dword [ebx + 0x1030]
push ebx
call eax
add esp, 4
cmp dword [ebx + 8], 0
je 0x412acc
mov edi, str.K7IS_Parser_Start
mov esi, str.RETURN::FALSE
call fcn.00412cb0
xor eax, eax
mov ecx, dword [esp + 0x76c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.00416a72
add esp, 0x764
ret