Function at 0x42144e
Capabilities:
Create process on windows
Delete file
Get file size
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x1a4
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.004125e2
pop ecx
push ebx
call sub.ole32.dll_CoInitialize
push ebx
push dword [ebp + 0x70]
mov ecx, 0x4533e4
push ebx
call fcn.0041306d
push dword [ebp + 0x78]
lea ecx, [ebp + 0x70]
call fcn.00401af2
push 0x440f4c
lea ecx, [ebp + 0x48]
call fcn.00401af2
push ebx
push dword [ebp + 0x48]
lea ecx, [ebp + 0x70]
call fcn.00401d02
push 0x440f44
lea ecx, [ebp + 0x44]
mov esi, eax
call fcn.00401af2
mov edi, dword [ebp + 0x44]
push ebx
push edi
lea ecx, [ebp + 0x70]
call fcn.00401d02
cmp esi, ebx
jl 0x421565
push esi
lea eax, [ebp + 0x64]
push eax
lea ecx, [ebp + 0x70]
call fcn.00401c8c
mov eax, dword [ebp + 0x70]
mov eax, dword [eax - 8]
mov ecx, dword [ebp + 0x48]
sub eax, dword [ecx - 8]
lea ecx, [ebp + 0x70]
sub eax, esi
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.00401c28
push ecx
lea eax, [ebp + 0x78]
mov ecx, esp
push eax
call fcn.00401abf
push ecx
lea eax, [ebp + 0x64]
mov ecx, esp
push eax
call fcn.00401abf
lea ecx, [ebp - 0x13c]
call fcn.004103c0
push ebx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x13c]
call fcn.00415192
lea ecx, [ebp - 0x13c]
call fcn.00410579
mov ecx, dword [ebp + 0x78]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421549
call fcn.004013ad
mov ecx, dword [ebp + 0x64]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421ff9
call fcn.004013ad
jmp 0x421ff9
cmp eax, ebx
jl 0x4217d7
mov ecx, dword [ebp + 0x70]
mov ecx, dword [ecx - 8]
sub ecx, dword [edi - 8]
sub ecx, eax
push ecx
lea eax, [ebp + 0x60]
push eax
lea ecx, [ebp + 0x70]
call fcn.00401c28
push str..zip
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.00401dc3
push 2
push ebx
push dword [ebp + 0x5c]
call fcn.0042626a
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x4215da
mov ecx, dword [ebp + 0x5c]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x4215be
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x4217e5
call fcn.004013ad
jmp 0x4217e5
mov eax, dword [0x453170]
mov dword [ebp + 0x58], eax
lea eax, [ebp + 0x58]
push ebx
push eax
call fcn.00401a02
pop ecx
pop ecx
push str.ttplayer.xml
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp + 0x50]
push eax
call fcn.00401dc3
mov eax, dword [eax]
push 2
push ebx
push dword [ebp + 0x60]
push eax
push esi
call fcn.004271b0
mov ecx, dword [ebp + 0x50]
add esp, 0x14
test eax, eax
setne byte [ebp + 0x7b]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x42162b
call fcn.004013ad
cmp byte [ebp + 0x7b], bl
je 0x42164c
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x4215ab
call fcn.004013ad
jmp 0x4215ab
push esi
call fcn.0042725d
pop ecx
push ebx
push 0x80
push 3
push ebx
push ebx
push SysReAllocString
push dword [ebp + 0x5c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x4216b4
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421685
call fcn.004013ad
mov ecx, dword [ebp + 0x5c]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421698
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x422008
call fcn.004013ad
jmp 0x422008
mov eax, dword [0x453170]
push ebx
push edi
mov dword [ebp + 0x78], eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push ebx
lea ecx, [ebp + 0x54]
push ecx
push eax
mov dword [ebp + 0x40], eax
inc eax
push eax
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x54], ebx
call fcn.00401e78
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0xea60
lea ecx, [ebp - 0x130]
call fcn.00402b23
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1_
push ebx
lea ecx, [ebp - 0x130]
call fcn.00402bc9
test eax, eax
je 0x421772
mov eax, dword [0x453170]
mov dword [ebp + 0x64], eax
lea eax, [ebp + 0x50]
push eax
call fcn.004018fe
push dword [eax]
lea eax, [ebp + 0x64]
push str.7.0.2
push str.http:__Mnetud.baidu.com_fileupload.fcgi_nameqqcfgfbver_smodulettplayer.xml_s
push eax
call fcn.00401d30
mov ecx, dword [ebp + 0x50]
add ecx, 0xfffffff4
add esp, 0x14
cmp ecx, dword [0x453174]
je 0x421743
call fcn.004013ad
mov eax, dword [ebp + 0x78]
mov esi, dword [ebp + 0x64]
push ebx
push 0x84000200
push 0xffffffffffffffff
push ebx
push dword [eax - 8]
lea ecx, [ebp - 0x130]
push eax
push esi
call fcn.004101df
lea ecx, [esi - 0xc]
cmp ecx, dword [0x453174]
je 0x421772
call fcn.004013ad
push dword [ebp + 0x40]
lea ecx, [ebp + 0x78]
call fcn.00401ead
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp + 0x5c]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x130]
call fcn.00402b8c
mov ecx, dword [ebp + 0x78]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x4217ac
call fcn.004013ad
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x4217bf
call fcn.004013ad
lea ecx, [esi - 0xc]
cmp ecx, dword [0x453174]
je 0x4217cf
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
jmp 0x42154c
call fcn.00414b7b
mov esi, eax
cmp esi, ebx
mov dword [ebp - 0x18], esi
jne 0x4217ed
lea ecx, [edi - 0xc]
jmp 0x42200e
push esi
push 0x453838
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
lea ecx, [ebp - 0xb4]
mov dword [0x4533e0], esi
call fcn.00403120
mov eax, dword [0x453170]
mov dword [ebp + 0x18], eax
mov dword [ebp + 0x1c], eax
mov dword [ebp + 0x20], eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp + 0x64]
push eax
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x78]
mov dword [ebp + 0x64], ebx
call fcn.0041c0dd
add esp, 0x10
push ebx
mov edi, eax
push str.TTPlayer_PlayerWnd
mov dword [ebp + 0x54], edi
mov dword [ebp - 0x50], 0x43fba4
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
call dword [sym.imp.USER32.dll_FindWindowW]
mov ecx, dword [ebp + 0x64]
cmp ecx, 0xa
je 0x421ec2
jle 0x421fc7
cmp ecx, 0xc
jle 0x421e8c
cmp ecx, 0xd
je 0x421dc9
cmp ecx, 0xe
jne 0x421fc7
cmp edi, ebx
jle 0x421a48
mov eax, dword [0x453170]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x4c], ebx
mov esi, 0x453448
mov eax, dword [esi]
push ebx
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.004014fa
add esp, 0xc
push eax
lea ecx, [ebp + 0x60]
call fcn.00401c10
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x4218d0
call fcn.004013ad
lea eax, [edi - 1]
cmp dword [ebp + 0x4c], eax
jge 0x4218e5
push 0x440e78
lea ecx, [ebp + 0x60]
call fcn.00401be9
inc dword [ebp + 0x4c]
add esi, 0x1c
cmp dword [ebp + 0x4c], edi
jl 0x4218a4
mov eax, dword [0x453170]
mov dword [ebp + 0x4c], eax
lea eax, [ebp - 0xc]
push eax
call fcn.004018fe
push dword [eax]
lea eax, [ebp + 0x4c]
push dword [ebp + 0x60]
push str.7.0.2
push str.http:__ttpack.qianqian.com_finish.html_ver_spk_inst_s_s
push eax
call fcn.00401d30
mov ecx, dword [ebp - 0xc]
add ecx, 0xfffffff4
add esp, 0x18
cmp ecx, dword [0x453174]
je 0x42192f
call fcn.004013ad
push 0xea60
lea ecx, [ebp - 0xdc]
call fcn.004133de
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1_
push ebx
lea ecx, [ebp - 0xdc]
call fcn.0041bf59
test eax, eax
je 0x42198c
push ebx
push 0x84000200
push ebx
push ebx
push dword [ebp + 0x4c]
lea eax, [ebp + 0x50]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0041c051
lea ecx, [ebp - 0xdc]
call fcn.004130c8
mov ecx, dword [ebp + 0x50]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x42198c
call fcn.004013ad
push dword [ebp + 0x78]
lea ecx, [ebp + 0x3c]
call fcn.00401af2
push 0x5c
lea ecx, [ebp + 0x3c]
call fcn.00408c46
lea ecx, [ebp + 0x3c]
mov esi, eax
call fcn.0040209b
mov edi, dword [ebp + 0x3c]
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp + 0x64]
mov word [edi + esi*2 + 2], bx
call fcn.00401abf
mov esi, dword [ebp + 0x64]
cmp dword [esi - 8], ebx
je 0x4219f7
push 0xec
call fcn.0042cb56
cmp eax, ebx
pop ecx
je 0x4219e2
mov ecx, eax
call fcn.00428cce
mov dword [ebp + 0x40], eax
jmp 0x4219e5
mov dword [ebp + 0x40], ebx
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
cmp eax, ebx
mov dword [ebp + 0x38], eax
jne 0x421a70
lea ecx, [esi - 0xc]
cmp ecx, dword [0x453174]
je 0x421a07
call fcn.004013ad
lea ecx, [edi - 0xc]
cmp ecx, dword [0x453174]
je 0x421a17
call fcn.004013ad
lea ecx, [ebp - 0xdc]
call fcn.00413418
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421a35
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421a48
call fcn.004013ad
lea ecx, [ebp - 0x40]
call fcn.00412d09
lea ecx, [ebp - 0x4c]
call fcn.00412d09
lea ecx, [ebp - 4]
call fcn.004136f7
lea ecx, [ebp - 0xb4]
call fcn.0040316e
jmp 0x422008
mov eax, dword [ebp + 0x54]
cmp eax, ebx
jle 0x421d5d
mov dword [ebp + 0x5c], 0x453454
mov dword [ebp + 0x50], eax
mov ecx, dword [ebp + 0x5c]
push ebx
call fcn.00402484
mov eax, dword [eax]
add eax, 8
push eax
lea ecx, [ebp + 0x78]
call fcn.00401abf
push ebx
push str.http:__
lea ecx, [ebp + 0x78]
call fcn.00401ce9
mov ecx, eax
call fcn.00401d02
test eax, eax
jne 0x421cb3
mov eax, dword [0x453170]
mov esi, dword [ebp + 0x5c]
mov dword [ebp + 0x58], eax
mov eax, dword [esi - 0xc]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040276d
push 0x440df8
push dword [eax]
lea eax, [ebp + 0x58]
push str._s._s
push eax
call fcn.00401d30
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff4
add esp, 0x1c
cmp ecx, dword [0x453174]
je 0x421afe
call fcn.004013ad
push dword [ebp + 0x58]
lea eax, [ebp + 0x78]
push dword [ebp + 0x64]
push str._s_s
push eax
call fcn.00401d30
mov ecx, dword [ebp + 0x40]
add esp, 0x10
push dword [ebp + 0x38]
lea eax, [ebp - 0xb4]
push 0x412cee
push 2
push eax
push dword [ebp + 0x78]
push esi
call fcn.00429a45
mov edi, eax
cmp edi, ebx
je 0x421b4d
push 0x927c0
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov ecx, dword [ebp + 0x40]
call fcn.00429068
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
cmp edi, ebx
je 0x421c84
mov eax, dword [esi - 8]
cmp dword [eax - 8], ebx
je 0x421bbe
mov eax, dword [0x453170]
push dword [ebp + 0x78]
mov dword [ebp + 0x54], eax
call fcn.00412874
push eax
lea eax, [ebp + 0x54]
push 0x440ddc
push eax
call fcn.0040df03
push dword [esi - 8]
push dword [ebp + 0x54]
call fcn.0042e477
mov ecx, dword [ebp + 0x54]
add esp, 0x18
mov edi, eax
neg edi
sbb edi, edi
add ecx, 0xfffffff4
neg edi
cmp ecx, dword [0x453174]
je 0x421bb6
call fcn.004013ad
cmp edi, ebx
jne 0x421c7b
mov eax, dword [esi - 4]
cmp dword [eax - 8], ebx
je 0x421ca0
lea ecx, [ebp - 0x88]
call fcn.0040eb2b
mov esi, dword [0x453170]
push 0x80
push 3
push 1
push SysReAllocString
push dword [ebp + 0x78]
lea ecx, [ebp - 0x88]
mov dword [ebp + 0x54], esi
call fcn.0040eb47
test eax, eax
je 0x421c3b
cmp dword [ebp - 0x5c], ebx
je 0x421c08
mov esi, dword [ebp - 0x60]
jmp 0x421c15
lea ecx, [ebp - 0x88]
call fcn.004028c7
mov esi, eax
push 0x40
push 0x40
lea ecx, [ebp + 0x54]
call fcn.00401e78
push eax
push esi
push dword [ebp - 0x5c]
call fcn.0042b15f
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0x54]
call fcn.00401ead
mov esi, dword [ebp + 0x54]
mov eax, dword [ebp + 0x5c]
push dword [eax - 4]
push esi
call fcn.0042e477
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea ecx, [esi - 0xc]
neg edi
cmp ecx, dword [0x453174]
je 0x421c61
call fcn.004013ad
lea ecx, [ebp - 0x88]
call fcn.0040ebd1
lea ecx, [ebp - 0x88]
call fcn.004016d5
cmp edi, ebx
je 0x421ca0
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421d37
call fcn.004013ad
jmp 0x421d37
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421cb3
call fcn.004013ad
push 0x10
pop ecx
xor eax, eax
lea edi, [ebp - 0x11c]
rep stosd dword es:[edi], eax
lea ecx, [ebp + 0x28]
push ecx
mov dword [ebp + 0x28], ebx
lea ecx, [ebp - 0x120]
push ecx
push ebx
lea edi, [ebp + 0x2c]
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
push ebx
push ebx
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x78]
push ebx
mov dword [ebp - 0x120], 0x44
mov dword [ebp - 0xf4], 1
mov word [ebp - 0xf0], 0xa
mov eax, dword [eax - 8]
push ebx
push eax
lea ecx, [ebp + 0x78]
call fcn.00401d43
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x421d37
push 0x927c0
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x421d37
push dword [ebp + 0x2c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp + 0x28]
call esi
mov ecx, dword [ebp + 0x78]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421d4a
call fcn.004013ad
add dword [ebp + 0x5c], 0x1c
dec dword [ebp + 0x50]
jne 0x421a85
mov esi, dword [ebp + 0x64]
mov edi, dword [ebp + 0x3c]
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x453174]
je 0x421d7f
call fcn.004013ad
lea ecx, [edi - 0xc]
cmp ecx, dword [0x453174]
je 0x421d8f
call fcn.004013ad
lea ecx, [ebp - 0xdc]
call fcn.00413418
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421dad
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421fc7
call fcn.004013ad
jmp 0x421fc7
push dword [0x453444]
call fcn.004015c6
test eax, eax
pop ecx
je 0x421fc7
xor esi, esi
cmp dword [0x453424], ebx
mov dword [ebp + 0x78], ebx
jbe 0x421e23
push esi
mov ecx, 0x453420
call fcn.00412dee
push eax
lea ecx, [ebp + 0x2c]
call fcn.0041894d
push dword [ebp + 0x34]
push dword [ebp + 0x30]
push dword [ebp + 0x2c]
call fcn.0041cb8d
add esp, 0xc
lea ecx, [ebp + 0x2c]
mov dword [ebp + 0x78], eax
call fcn.0041d68a
inc esi
cmp esi, dword [0x453424]
jb 0x421dea
xor edi, edi
cmp dword [0x4537cc], ebx
jbe 0x421e6c
push edi
mov ecx, 0x4537c8
call fcn.0042764a
push eax
lea ecx, [ebp + 0x50]
call fcn.00401abf
mov esi, dword [ebp + 0x50]
push esi
call fcn.00418550
pop ecx
lea ecx, [esi - 0xc]
cmp ecx, dword [0x453174]
mov dword [ebp + 0x64], eax
je 0x421e5e
call fcn.004013ad
inc edi
cmp edi, dword [0x4537cc]
jb 0x421e2d
cmp dword [ebp + 0x64], ebx
jne 0x421e75
cmp dword [ebp + 0x78], ebx
je 0x421fc7
push ebx
push ebx
push 0x2000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
jmp 0x421fc7
push ebx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x90]
push dword [ebp + 0x10]
push dword [ebp + 0x24]
push dword [ebp + 8]
push dword [ebp + 4]
push dword [ebp + 0xc]
push eax
push SysReAllocString
push 0x68
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
call fcn.00413919
push 0x4533a8
jmp 0x421fa2
xor edi, edi
inc edi
cmp dword [ebp - 4], edi
jne 0x421f50
push 0xd4
call fcn.0042cb56
cmp eax, ebx
pop ecx
je 0x421ee8
mov ecx, eax
call fcn.00411f15
mov esi, eax
jmp 0x421eea
xor esi, esi
cmp esi, ebx
je 0x421fc7
push ebx
lea eax, [ebp + 0x28]
push eax
push ebx
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [ebp + 0x30]
sub eax, 4
mov dword [ebp + 0x30], eax
sub eax, dword [ebp + 0x10]
push edi
mov dword [ebp + 0x28], eax
mov eax, dword [ebp + 0x34]
sub eax, dword [ebp + 0x14]
push edi
push dword [ebp]
mov dword [ebp + 0x2c], eax
push dword [ebp + 0x18]
lea eax, [ebp + 0x28]
push eax
push ebx
mov ecx, esi
call fcn.00412275
test eax, eax
jl 0x421f45
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x421f45
lea ecx, [ebp - 0x50]
call fcn.00412feb
lea eax, [esi + 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x421fc7
cmp dword [ebp - 4], 2
jne 0x421fc7
mov esi, dword [ebp]
cmp esi, ebx
jne 0x421f62
mov esi, SysReAllocString
push 0x440dd8
lea ecx, [ebp - 0x14]
call fcn.00401af2
push edi
push dword [ebp + 0x14]
lea ecx, [ebp - 0x90]
push dword [ebp + 0x10]
push edi
push ebx
push ebx
push ebx
push ebx
push esi
push 0x68
push dword [ebp + 0x18]
push dword [eax]
call fcn.00413919
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x421fa1
call fcn.004013ad
push ebx
lea eax, [ebp - 0x90]
push eax
call fcn.004213cf
test eax, eax
pop ecx
pop ecx
je 0x421fbc
lea ecx, [ebp - 0x50]
call fcn.00412feb
lea ecx, [ebp - 0x90]
call fcn.00413684
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x40]
mov dword [0x4533e0], ebx
call fcn.00412d09
lea ecx, [ebp - 0x4c]
call fcn.00412d09
lea ecx, [ebp - 4]
call fcn.004136f7
lea ecx, [ebp - 0xb4]
call fcn.0040316e
mov ecx, 0x4533e4
call fcn.00413a9f
call sub.ole32.dll_CoUninitialize
mov ecx, dword [ebp + 0x44]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x42201b
call fcn.004013ad
mov ecx, dword [ebp + 0x48]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x42202e
call fcn.004013ad
mov ecx, dword [ebp + 0x70]
add ecx, 0xfffffff4
cmp ecx, dword [0x453174]
je 0x422041
call fcn.004013ad
pop edi
pop esi
xor eax, eax
pop ebx
add ebp, 0x68
leave
ret 0x10