Function at 0x41ce80
Capabilities:
Accept command line arguments
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dc0ff
mov eax, dword fs:[0]
push eax
sub esp, 0x234
mov eax, dword [0x51b7bc]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x10]
push 0
mov dword [ebp - 0x238], ebx
call dword [sym.imp.ole32.dll_CoInitialize]
push 0
push 0
push 0
push 0
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [ebp - 0x234]
mov dword [ebp - 0x234], 8
push eax
mov dword [ebp - 0x230], 4
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
call fcn.0042eee0
push 0x4e9d98
push 0
call fcn.00484171
add esp, 8
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
push 0x4e9d9c
call fcn.00421630
add esp, 8
mov ecx, 0x51e8e4
push 0
push dword [0x51e8d0]
push 0
call fcn.0041c7e0
lea ecx, [ebp - 0x240]
mov dword [ebp - 0x23c], 0
call fcn.00406890
mov dword [ebp - 4], 0
call fcn.0041c670
mov ecx, eax
call fcn.00453620
mov eax, dword [0x51e974]
test al, 1
jne 0x41cf82
or eax, 1
mov dword [0x51e974], eax
mov ecx, 0x51e970
mov byte [ebp - 4], 1
call fcn.00428cb0
push 0x4e4490
call fcn.00458a44
add esp, 4
mov byte [ebp - 4], 0
mov ecx, 0x51e970
call fcn.00428d00
push ebx
call fcn.00416070
mov ecx, eax
call fcn.00411940
push ebx
push str.lpstrCmdLine_s
call fcn.00421630
add esp, 8
call fcn.0042eee0
mov edi, eax
push edi
mov eax, dword [edi]
call dword [eax]
test eax, eax
jne 0x41d02c
mov eax, dword [edi]
lea ecx, [ebp - 0x218]
push ecx
push str.DLL_NETUL
push 0xcc
push dword [0x51e8d0]
push edi
call dword [eax + 8]
test eax, eax
jne 0x41cfe7
push str.InitCloudConfig_failed.
call fcn.00421630
add esp, 4
jmp 0x41d02c
push str.InitCloudConfig_success.
call fcn.00421630
lea eax, [ebp - 0x218]
mov dword [ebp - 0x220], esp
mov ecx, esp
push eax
call fcn.00403da0
mov byte [ebp - 4], 2
call fcn.00416070
mov ecx, eax
mov byte [ebp - 4], 0
call fcn.00411860
mov esi, dword [edi]
call fcn.00416070
mov ecx, eax
call fcn.00413d50
push eax
push edi
call dword [esi + 0x50]
call fcn.00416070
mov ecx, eax
call fcn.00413d50
push eax
call fcn.004284d0
call fcn.00416070
mov ecx, eax
call fcn.00413d50
push eax
call fcn.0042a220
mov ecx, 0x51e920
call fcn.00406fd0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
test eax, eax
jne 0x41d08a
push str.CheckSingleInstance_failed__exit
call fcn.00421630
add esp, 4
push 0
push 0x4e9e2c
push 0
call fcn.0042a230
jmp 0x41daa2
call fcn.00416070
mov ecx, eax
call fcn.004110c0
push eax
call fcn.0041c700
mov ecx, eax
call fcn.0040ae40
push str.installpkg
call fcn.0041c700
mov ecx, eax
call fcn.0040aeb0
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.004647d0
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push dword [0x51e8d0]
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x218]
push eax
call fcn.0041c700
mov ecx, eax
call fcn.0040adb0
push 0x208
lea eax, [ebp - 0x218]
mov dword [ebp - 0x21c], 1
push 0
push eax
mov dword [ebp - 0x224], 0x104
call fcn.004647d0
mov edi, dword [sym.imp.SHLWAPI.dll_SHGetValueW]
lea eax, [ebp - 0x224]
add esp, 0xc
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x21c]
push eax
push str.Setup_Path
push str.SOFTWAREJianDesk
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
jne 0x41d1be
mov ecx, dword [0x51e8cc]
test ecx, ecx
jne 0x41d1b1
push 0x51a280
call ebx
cmp dword [0x51e8cc], 0
jne 0x41d1a0
push 0x7c
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 3
test eax, eax
je 0x41d18a
mov ecx, eax
call fcn.0040f950
jmp 0x41d18c
xor eax, eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x220]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e8cc], eax
push 0x51a280
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x51e8cc]
call fcn.00413210
test al, al
jne 0x41daa2
lea eax, [ebp - 0x224]
mov dword [ebp - 0x21c], 4
push eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0x224], 0x104
push eax
lea eax, [ebp - 0x21c]
xor bl, bl
push eax
push str.em_lds
push str.SOFTWAREJianDesk
push reloc.OLEAUT32.dll_SysReAllocString
call edi
mov esi, 1
cmp dword [ebp - 0x220], esi
jne 0x41d25b
push 0x208
lea eax, [ebp - 0x218]
mov dword [ebp - 0x224], esi
push 0
push eax
mov dword [ebp - 0x220], 0x104
call fcn.004647d0
add esp, 0xc
lea eax, [ebp - 0x220]
push eax
lea eax, [ebp - 0x218]
push eax
lea eax, [ebp - 0x224]
push eax
push str.Setup_Path
push str.SOFTWAREJianDesk
push reloc.OLEAUT32.dll_SysReAllocString
call edi
test eax, eax
movzx ebx, bl
cmove ebx, esi
call fcn.00404d10
mov ecx, eax
test ecx, ecx
je 0x41dc4e
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x228], eax
lea eax, [ebp - 0x228]
mov byte [ebp - 4], 4
push eax
call fcn.0041bdb0
add esp, 4
mov dword [ebp - 0x220], eax
test eax, eax
jle 0x41d825
test bl, bl
jne 0x41d825
call fcn.00404d10
mov ecx, eax
test ecx, ecx
je 0x41dc58
mov eax, dword [ecx]
call dword [eax + 0xc]
lea edi, [eax + 0x10]
mov dword [ebp - 0x224], edi
mov ecx, dword [0x51e8cc]
mov byte [ebp - 4], 8
test ecx, ecx
jne 0x41d329
mov eax, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x51a280
call eax
cmp dword [0x51e8cc], 0
jne 0x41d318
push 0x7c
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 9
test eax, eax
je 0x41d302
mov ecx, eax
call fcn.0040f950
jmp 0x41d304
xor eax, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x22c]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e8cc], eax
push 0x51a280
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x51e8cc]
call fcn.00411740
mov dword [ebp - 0x220], eax
mov eax, dword [eax]
mov ecx, dword [eax - 0x10]
test ecx, ecx
je 0x41d348
mov eax, dword [ecx]
call dword [eax + 0x10]
mov ecx, eax
test ecx, ecx
jne 0x41d35e
call fcn.00404d10
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x10]
mov ecx, eax
test ecx, ecx
je 0x41dc62
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x21c], eax
push 0x4e9844
lea ecx, [ebp - 0x21c]
mov byte [ebp - 4], 0xa
call fcn.004040e0
test al, al
jne 0x41d3fb
push 0
push 0
push 0xffffffffffffffff
push 0x4e9844
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
lea ebx, [eax - 1]
test ebx, ebx
jle 0x41d3f0
mov esi, dword [ebp - 0x21c]
mov ecx, 1
mov eax, dword [esi - 8]
sub ecx, dword [esi - 4]
sub eax, ebx
or eax, ecx
jge 0x41d3c9
push ebx
lea ecx, [ebp - 0x21c]
call fcn.004050a0
mov esi, dword [ebp - 0x21c]
push ebx
push esi
push 0xffffffffffffffff
push 0x4e9844
push 0
push 3
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
cmp ebx, dword [esi - 8]
jg 0x41dc80
xor eax, eax
mov dword [esi - 0xc], ebx
mov word [esi + ebx*2], ax
jmp 0x41d401
lea ecx, [ebp - 0x21c]
call fcn.00418cc0
mov esi, dword [ebp - 0x21c]
mov eax, dword [ebp - 0x220]
mov byte [ebp - 4], 8
mov eax, dword [eax]
test eax, eax
je 0x41dc6c
mov ecx, esi
mov dx, word [ecx]
cmp dx, word [eax]
jne 0x41d445
test dx, dx
je 0x41d439
mov dx, word [ecx + 2]
cmp dx, word [eax + 2]
jne 0x41d445
add ecx, 4
add eax, 4
test dx, dx
jne 0x41d417
mov dword [ebp - 0x21c], 0
jmp 0x41d450
sbb ecx, ecx
or ecx, 1
mov dword [ebp - 0x21c], ecx
or ebx, 0xffffffff
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41d46a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp dword [ebp - 0x21c], 0
je 0x41d5ef
mov eax, dword [0x51e8cc]
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0x21c], eax
test eax, eax
jne 0x41d4e9
push 0x51a280
call esi
cmp dword [0x51e8cc], 0
jne 0x41d4d3
push 0x7c
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 0xb
test eax, eax
je 0x41d4bd
mov ecx, eax
call fcn.0040f950
jmp 0x41d4bf
xor eax, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x22c]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e8cc], eax
push 0x51a280
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x51e8cc]
mov dword [ebp - 0x21c], eax
mov edi, eax
test edi, edi
jne 0x41d54b
push 0x51a280
call esi
cmp dword [0x51e8cc], edi
jne 0x41d535
push 0x7c
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x220], eax
mov byte [ebp - 4], 0xc
test eax, eax
je 0x41d51f
mov ecx, eax
call fcn.0040f950
jmp 0x41d521
xor eax, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x220]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e8cc], eax
push 0x51a280
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x51e8cc]
mov dword [ebp - 0x21c], eax
mov esi, eax
test esi, esi
jne 0x41d5b2
mov eax, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x51a280
call eax
cmp dword [0x51e8cc], esi
jne 0x41d59c
push 0x7c
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x21c], eax
mov byte [ebp - 4], 0xd
test eax, eax
je 0x41d586
mov ecx, eax
call fcn.0040f950
jmp 0x41d588
xor eax, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x230]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e8cc], eax
push 0x51a280
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x51e8cc]
mov dword [ebp - 0x21c], eax
mov ecx, edi
call fcn.00411400
mov ecx, esi
mov edi, eax
call fcn.004113f0
mov ecx, dword [ebp - 0x21c]
mov esi, eax
call fcn.00411740
push dword [edi]
push dword [esi]
push dword [eax]
lea eax, [ebp - 0x224]
push str.ex1_sex2_sval1_s
push eax
call fcn.0040c300
mov edi, dword [ebp - 0x224]
add esp, 0x14
mov eax, dword [0x51e8cc]
mov dword [ebp - 0x21c], eax
test eax, eax
jne 0x41d65f
push 0x51a280
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x51e8cc], 0
jne 0x41d649
push 0x7c
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x230], eax
mov byte [ebp - 4], 0xe
test eax, eax
je 0x41d633
mov ecx, eax
call fcn.0040f950
jmp 0x41d635
xor eax, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x230]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e8cc], eax
push 0x51a280
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov eax, dword [0x51e8cc]
mov dword [ebp - 0x21c], eax
mov esi, dword [0x51e96c]
test esi, esi
jne 0x41d6c4
push 0x51a43c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x51e96c], esi
jne 0x41d6b3
push 0x20
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 0xf
test eax, eax
je 0x41d69d
mov ecx, eax
call fcn.00409c20
jmp 0x41d69f
xor eax, eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x22c]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e96c], eax
push 0x51a43c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [0x51e96c]
mov ecx, dword [ebp - 0x21c]
call fcn.00410b30
push eax
mov ecx, esi
call fcn.0040ae40
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x230], esp
mov dword [eax + 0x24], 0
mov ecx, dword [0x51e96c]
mov byte [ebp - 4], 0x10
test ecx, ecx
jne 0x41d753
push 0x51a43c
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x51e96c], 0
jne 0x41d742
push 0x20
call fcn.0042ad10
add esp, 4
mov dword [ebp - 0x22c], eax
mov byte [ebp - 4], 0x11
test eax, eax
je 0x41d72c
mov ecx, eax
call fcn.00409c20
jmp 0x41d72e
xor eax, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x230]
xor edx, edx
lock or dword [ecx], edx
mov dword [0x51e96c], eax
push 0x51a43c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [0x51e96c]
push 0
push edi
push 0x4e9f38
mov byte [ebp - 4], 8
call fcn.0040aaa0
call fcn.0041c9e0
test eax, eax
jne 0x41d7c7
mov ecx, 0x51e920
call fcn.004075f0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xbb8
call esi
mov byte [ebp - 4], 4
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x41d79f
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x228]
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x41da9c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41da9c
call fcn.0041cc30
test eax, eax
jne 0x41d7ef
mov byte [ebp - 4], 4
add edi, 0xfffffff0
mov eax, ebx
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x41da77
mov ecx, dword [edi]
push edi
jmp 0x41da72
push dword [ebp + 0x14]
push dword [ebp - 0x238]
call fcn.0041f170
add esp, 8
mov dword [ebp - 0x23c], eax
mov byte [ebp - 4], 4
add edi, 0xfffffff0
mov ecx, ebx
lock xadd dword [edi + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x41da77
mov ecx, dword [edi]
push edi
jmp 0x41da72
call fcn.00404d10
mov ecx, eax
test ecx, ecx
je 0x41dc76
mov eax, dword [ecx]
call dword [eax + 0xc]
lea esi, [eax + 0x10]
mov dword [ebp - 0x224], esi
mov byte [ebp - 4], 5
call fcn.00416070
mov ecx, eax
call fcn.00411740
push eax
push 0x4e9844
call fcn.0041b210
add esp, 8
test al, al
je 0x41d8ac
call fcn.00416070
mov ecx, eax
call fcn.00411400
mov edi, eax
call fcn.00416070
mov ecx, eax
call fcn.004113f0
mov esi, eax
call fcn.00416070
mov ecx, eax
call fcn.00411740
push dword [edi]
push dword [esi]
push dword [eax]
lea eax, [ebp - 0x224]
push str.ex1_sex2_sval1_s
push eax
call fcn.0040c300
mov esi, dword [ebp - 0x224]
add esp, 0x14
sub esp, 0x28
mov eax, esp
mov dword [ebp - 0x230], esp
mov dword [eax + 0x24], 0
push 0
push esi
push str.exist
mov byte [ebp - 4], 6
call fcn.0041c700
mov ecx, eax
mov byte [ebp - 4], 5
call fcn.0040aaa0
cmp dword [ebp - 0x220], 0
jge 0x41d8f5
test bl, bl
jne 0x41d8f5
push 0
push 0x4e9e84
push 0
call fcn.0042a230
call fcn.00416070
mov ecx, eax
call fcn.00411260
mov edi, eax
lea eax, [ebp - 0x21c]
push eax
call fcn.00416070
mov ecx, eax
call fcn.00411430
mov byte [ebp - 4], 7
test edi, edi
je 0x41da38
call fcn.0042eee0
lea ecx, [ebp - 0x228]
push ecx
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0x54]
call fcn.0042eee0
push ecx
mov ecx, esp
mov edi, eax
push 0x4e9ea0
lea eax, [ebp - 0x228]
push eax
push ecx
call fcn.0041b380
mov eax, dword [edi]
add esp, 0xc
mov ecx, edi
call dword [eax + 0x58]
push dword [ebp - 0x21c]
push str.RunApp_cmdLine:__s
call fcn.00421630
mov eax, dword [ebp - 0x21c]
mov ecx, str.___frominst_new_ver
sub ecx, eax
sar ecx, 1
push 0x14
mov ebx, dword [eax - 0xc]
push str.___frominst_new_ver
mov dword [ebp - 0x238], ecx
call fcn.00480d7a
mov ecx, SysReAllocString
mov dword [ebp - 0x220], eax
sub ecx, eax
add esp, 0x10
cmp ecx, ebx
jl 0x41dc80
lea edi, [ebx + eax]
test edi, edi
js 0x41dc8a
mov eax, dword [ebp - 0x21c]
mov edx, 1
mov ecx, dword [eax - 8]
sub edx, dword [eax - 4]
sub ecx, edi
or ecx, edx
jge 0x41d9db
push edi
lea ecx, [ebp - 0x21c]
call fcn.004050a0
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x238]
lea edx, [eax + ecx*2]
cmp ecx, ebx
jbe 0x41d9ed
mov edx, str.___frominst_new_ver
mov ecx, dword [ebp - 0x220]
lea eax, [eax + ebx*2]
add ecx, ecx
push ecx
push edx
push ecx
push eax
call fcn.00420110
mov eax, dword [ebp - 0x21c]
add esp, 0x10
cmp edi, dword [eax - 8]
jg 0x41dc80
mov dword [eax - 0xc], edi
xor ecx, ecx
mov eax, dword [ebp - 0x21c]
mov word [eax + edi*2], cx
call fcn.0042eee0
push dword [ebp - 0x21c]
push 0x4e9f1c
mov ecx, dword [eax]
push eax
call dword [ecx + 0x3c]
mov edx, dword [ebp - 0x21c]
or ebx, 0xffffffff
mov byte [ebp - 4], 5
add edx, 0xfffffff0
mov eax, ebx
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x41da5c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 4
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x41da77
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x228]
mov byte [ebp - 4], 0
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x41da96
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
mov ebx, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [0x51e974]
test al, 1
jne 0x41dad2
or eax, 1
mov dword [0x51e974], eax
mov ecx, 0x51e970
mov byte [ebp - 4], 0x12
call fcn.00428cb0
push 0x4e4490
call fcn.00458a44
add esp, 4
mov byte [ebp - 4], 0
mov ecx, 0x51e970
call fcn.004291e0
call fcn.0041c670
mov ecx, eax
call fcn.00453790
call fcn.0042f760
push 0x5dc
call esi
mov ecx, 0x51e920
call fcn.004075f0
mov edi, dword [0x51e94c]
add edi, 0x10
push edi
call ebx
mov esi, dword [0x51e91c]
test esi, esi
je 0x41db5c
cmp dword [esi + 4], 0
jle 0x41db2a
mov eax, dword [esi]
push dword [eax]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov esi, dword [0x51e91c]
test esi, esi
je 0x41db5c
mov eax, dword [esi]
test eax, eax
je 0x41db43
push eax
call fcn.00481b8b
add esp, 4
mov dword [esi], 0
push 0xc
push esi
mov dword [esi + 4], 0
mov dword [esi + 8], 0
call fcn.00458649
add esp, 8
push edi
mov dword [0x51e91c], 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov esi, dword [0x51e918]
test esi, esi
je 0x41dbb5
mov eax, dword [esi]
test eax, eax
je 0x41db8c
push eax
call fcn.00481b8b
add esp, 4
mov dword [esi], 0
mov eax, dword [esi + 4]
test eax, eax
je 0x41dba3
push eax
call fcn.00481b8b
add esp, 4
mov dword [esi + 4], 0
push 0xc
push esi
mov dword [esi + 8], 0
call fcn.00458649
add esp, 8
mov esi, dword [0x51e910]
test esi, esi
je 0x41dbe7
cmp dword [esi], 0
je 0x41dbe7
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x41dbd1
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [esi + 0x20]
push 0
mov dword [esi + 0x10], 0
call eax
add esi, 0x24
cmp dword [esi], 0
jne 0x41dbc4
mov esi, dword [0x51a418]
mov ecx, dword [0x51a41c]
cmp esi, ecx
jae 0x41dc11
mov eax, dword [esi]
test eax, eax
je 0x41dc0a
mov eax, dword [eax + 0x1c]
push 0
call eax
mov ecx, dword [0x51a41c]
add esi, 4
cmp esi, ecx
jb 0x41dbf7
mov ecx, 0x51e8e4
call fcn.0041f690
call dword [sym.imp.ole32.dll_CoUninitialize]
lea ecx, [ebp - 0x240]
call fcn.004068d0
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00458638
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.004040c0
push 0x80004005
call fcn.004040c0
push 0x80004005
call fcn.004040c0
push 0x80004005
call fcn.004040c0
push 0x80004005
call fcn.004040c0
push 0x80070057
call fcn.004040c0
push 0x80070057
call fcn.004040c0
int3