Function at 0x410f6f
Capabilities:
Accept command line arguments
Check os version
Create process on windows
Set current directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa3c
push ebx
push esi
xor ebx, ebx
push edi
mov dword [ebp - 0x34], ebx
call fcn.00410f30
test eax, eax
jne 0x410ffa
mov edx, 0xff
lea edi, [ebp - 0x63a]
mov ecx, edx
mov word [ebp - 0x63c], bx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov ecx, edx
xor eax, eax
lea edi, [ebp - 0xa3a]
mov word [ebp - 0xa3c], bx
rep stosd dword es:[edi], eax
mov esi, dword [sym.imp.USER32.dll_LoadStringW]
stosw word es:[edi], ax
mov edi, 0x200
lea eax, [ebp - 0x63c]
push edi
push eax
push 0x46
push ebx
call esi
lea eax, [ebp - 0xa3c]
push edi
push eax
push 0x47
push ebx
call esi
lea eax, [ebp - 0x63c]
push 0x10
push eax
lea eax, [ebp - 0xa3c]
push eax
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
xor eax, eax
inc eax
jmp 0x411afc
mov eax, dword [ebp + 8]
mov dword [ebp - 0x23c], 0x94
mov dword [0x418bb0], eax
lea eax, [ebp - 0x23c]
push eax
call dword [sym.imp.KERNEL32.DLL_GetVersionExA]
test eax, eax
jne 0x411021
xor al, al
jmp 0x41102b
cmp dword [ebp - 0x22c], 2
sete al
mov byte [0x418bb4], al
call dword [sym.imp.COMCTL32.dll_InitCommonControls]
push 0xf
lea ecx, [ebp - 0xb4]
pop edi
mov dword [ebp - 0xb4], ebx
push edi
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0xac], ebx
call fcn.00407094
push edi
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], ebx
call fcn.00407094
push edi
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], ebx
call fcn.00407094
push edi
lea ecx, [ebp - 0x7c]
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
call fcn.00407094
call dword [sym.imp.KERNEL32.DLL_GetCommandLineW]
push eax
lea ecx, [ebp - 0x10]
call fcn.0040a9f9
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040a873
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
mov dword [ebp - 0x58], ebx
push edi
lea ecx, [ebp - 0x58]
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x50], ebx
call fcn.00407094
lea eax, [ebp - 0x58]
push eax
push dword [0x418bb0]
call fcn.0040bcee
lea ecx, [ebp - 0x30]
call fcn.0040ac20
lea ecx, [ebp - 0x30]
call fcn.0040abe5
push 0x41872c
lea ecx, [ebp - 0x20]
mov byte [ebp + 0xb], bl
call fcn.0040a9f9
mov esi, eax
lea eax, [ebp - 0x10]
push 2
push eax
lea ecx, [ebp - 0x30]
call fcn.0040ab4c
push dword [esi]
push dword [eax]
call fcn.0040af6b
push dword [ebp - 0x10]
neg eax
sbb al, al
inc al
mov byte [ebp - 1], al
call sub.MSVCRT.dll_free
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
cmp byte [ebp - 1], bl
pop ecx
pop ecx
je 0x411167
lea eax, [ebp - 0x10]
push 2
push eax
lea ecx, [ebp - 0x30]
mov byte [ebp + 0xb], 1
call fcn.0040aa7c
push eax
lea ecx, [ebp - 0x30]
call fcn.0040aa3e
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
lea ecx, [ebp - 0x30]
call fcn.0040ac20
lea ecx, [ebp - 0x30]
call fcn.0040abe5
push 0x418724
lea ecx, [ebp - 0x40]
mov byte [ebp - 0x24], 1
mov byte [ebp - 0x11], bl
call fcn.0040a9f9
mov esi, eax
lea eax, [ebp - 0xa8]
push 3
push eax
lea ecx, [ebp - 0x30]
call fcn.0040ab4c
push dword [esi]
push dword [eax]
call fcn.0040af6b
test eax, eax
je 0x41123a
push str._ini
lea ecx, [ebp - 0x20]
call fcn.0040a9f9
mov esi, eax
lea eax, [ebp - 0x10]
push 4
push eax
lea ecx, [ebp - 0x30]
call fcn.0040ab4c
push dword [esi]
push dword [eax]
call fcn.0040af6b
push dword [ebp - 0x10]
neg eax
sbb al, al
inc al
mov byte [ebp - 1], al
call sub.MSVCRT.dll_free
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
cmp byte [ebp - 1], bl
pop ecx
pop ecx
jne 0x41123a
push 0x418710
lea ecx, [ebp - 0xcc]
call fcn.0040a9f9
mov esi, eax
lea eax, [ebp - 0xd8]
push 2
push eax
lea ecx, [ebp - 0x30]
call fcn.0040ab4c
push dword [esi]
push dword [eax]
call fcn.0040af6b
push dword [ebp - 0xd8]
neg eax
sbb al, al
inc al
mov byte [ebp - 1], al
call sub.MSVCRT.dll_free
push dword [ebp - 0xcc]
call sub.MSVCRT.dll_free
cmp byte [ebp - 1], bl
pop ecx
pop ecx
mov byte [ebp - 1], bl
je 0x41123e
mov byte [ebp - 1], 1
push dword [ebp - 0xa8]
call sub.MSVCRT.dll_free
push dword [ebp - 0x40]
call sub.MSVCRT.dll_free
cmp byte [ebp - 1], bl
pop ecx
pop ecx
jne 0x4112a6
push str._extractdir
lea ecx, [ebp - 0x20]
call fcn.0040a9f9
mov esi, eax
lea eax, [ebp - 0x10]
push 0xc
push eax
lea ecx, [ebp - 0x30]
call fcn.0040ab4c
push dword [esi]
push dword [eax]
call fcn.0040af6b
push dword [ebp - 0x10]
neg eax
sbb al, al
inc al
mov byte [ebp - 1], al
call sub.MSVCRT.dll_free
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
cmp byte [ebp - 1], bl
pop ecx
pop ecx
je 0x4112a9
mov byte [ebp + 0xb], 1
mov byte [ebp - 0x11], 1
mov byte [ebp - 0x24], bl
push edi
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
call fcn.0040affd
lea eax, [ebp - 0x88]
push eax
push str.___InstallEnd__
push str.___Install__UTF_8_
push dword [ebp - 0x58]
call fcn.00411cff
test al, al
jne 0x4112f9
cmp byte [ebp + 0xb], bl
jne 0x4112f1
push str.Cant_load_config_info
push ebx
call fcn.0040e2fc
xor ebx, ebx
inc ebx
jmp 0x411ac1
push 0x4186bc
lea ecx, [ebp - 0xec]
call fcn.0040a9f9
push edi
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
call fcn.00407094
cmp dword [ebp - 0x84], ebx
je 0x4115c1
lea ecx, [ebp - 0x9c]
call fcn.00411f4c
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0040b1da
test al, al
jne 0x41136c
cmp byte [ebp + 0xb], bl
jne 0x411359
push str.Config_failed
push ebx
call fcn.0040e2fc
lea ecx, [ebp - 0x9c]
call fcn.00411f67
xor ebx, ebx
inc ebx
jmp 0x411aac
push str.Title
lea ecx, [ebp - 0x10]
call fcn.0040a9f9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xd8]
push eax
call fcn.0040b525
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
lea ecx, [ebp - 0x10]
mov dword [esp], str.BeginPrompt
call fcn.0040a9f9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.0040b525
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
lea ecx, [ebp - 0x10]
mov dword [esp], 0x418668
call fcn.0040a9f9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0xcc]
push eax
call fcn.0040b525
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
lea ecx, [ebp - 0x10]
mov dword [esp], 0x418660
call fcn.0040a9f9
push dword [ebp - 0x10]
push dword [ebp - 0xcc]
call fcn.0040af6b
push dword [ebp - 0x10]
neg eax
sbb al, al
inc al
mov byte [ebp - 1], al
call sub.MSVCRT.dll_free
cmp byte [ebp - 1], bl
pop ecx
je 0x41142b
mov byte [ebp - 0x24], bl
push str.Directory
lea ecx, [ebp - 0x10]
call fcn.0040a9f9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.0040b4ef
push dword [ebp - 0x10]
mov esi, eax
call sub.MSVCRT.dll_free
cmp esi, ebx
pop ecx
jl 0x41146f
mov eax, dword [ebp - 0x90]
lea ecx, [ebp - 0xec]
mov eax, dword [eax + esi*4]
add eax, 0xc
push eax
call fcn.0040aa3e
cmp dword [ebp - 0xa4], ebx
je 0x4114ca
cmp byte [ebp + 0xb], bl
jne 0x4114ca
push 0x24
push dword [ebp - 0xd8]
push dword [ebp - 0xa8]
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x4114ca
push dword [ebp - 0xcc]
call sub.MSVCRT.dll_free
push dword [ebp - 0xa8]
call sub.MSVCRT.dll_free
push dword [ebp - 0xd8]
call sub.MSVCRT.dll_free
add esp, 0xc
lea ecx, [ebp - 0x9c]
call fcn.00411f67
jmp 0x411aac
push str.RunProgram
lea ecx, [ebp - 0x10]
call fcn.0040a9f9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040b525
push eax
lea ecx, [ebp - 0x4c]
call fcn.0040aa3e
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
pop ecx
push str.ExecuteFile
lea ecx, [ebp - 0x10]
call fcn.0040a9f9
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040b525
push eax
lea ecx, [ebp - 0x70]
call fcn.0040aa3e
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
pop ecx
push str.ExecuteParameters
lea ecx, [ebp - 0x10]
call fcn.0040a9f9
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x9c]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0040b525
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040ba29
push eax
lea ecx, [ebp - 0x7c]
call fcn.0040aa3e
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
push dword [ebp - 0x40]
call sub.MSVCRT.dll_free
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
push dword [ebp - 0xcc]
call sub.MSVCRT.dll_free
push dword [ebp - 0xa8]
call sub.MSVCRT.dll_free
push dword [ebp - 0xd8]
call sub.MSVCRT.dll_free
add esp, 0x18
lea ecx, [ebp - 0x9c]
call fcn.00411f67
lea ecx, [ebp - 0xfc]
call fcn.00411b03
cmp byte [ebp - 0x11], bl
jne 0x4115fe
push dword [0x41840c]
lea ecx, [ebp - 0xfc]
call fcn.0040c984
test al, al
jne 0x411614
cmp byte [ebp + 0xb], bl
jne 0x4115f6
push str.Can_not_create_temp_folder_archive
push ebx
call fcn.0040e2fc
xor ebx, ebx
inc ebx
jmp 0x411aa1
xor esi, esi
lea eax, [ebp - 0x20]
inc esi
push 0xc
push eax
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x34], esi
call fcn.0040aa7c
jmp 0x41162e
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x34], 2
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040bf29
xor esi, esi
inc esi
push eax
lea ecx, [ebp - 0xc0]
call fcn.00407137
test byte [ebp - 0x34], 2
je 0x41164d
push dword [ebp - 0x10]
and dword [ebp - 0x34], 0xfffffffd
call sub.MSVCRT.dll_free
pop ecx
test byte [ebp - 0x34], 1
je 0x41165c
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
pop ecx
push edi
lea ecx, [ebp - 0x64]
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xe0], 0x41490c
mov byte [ebp - 0x12], bl
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
call fcn.00407094
lea eax, [ebp - 0x64]
push eax
lea eax, [ebp - 0x12]
push eax
lea eax, [ebp - 0xe0]
push dword [ebp - 0x24]
push eax
lea eax, [ebp - 0xc0]
push eax
lea eax, [ebp - 0x58]
push eax
call fcn.0041064e
cmp eax, ebx
je 0x41170c
cmp byte [ebp + 0xb], bl
jne 0x411705
cmp eax, esi
je 0x4116b5
cmp byte [ebp - 0x12], bl
je 0x4116d7
lea eax, [ebp - 0x10]
push 8
push eax
call fcn.0040d7a0
push eax
lea ecx, [ebp - 0x64]
call fcn.0040aa3e
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
mov eax, 0x80004005
cmp eax, 0x80004004
je 0x411705
cmp dword [ebp - 0x60], ebx
je 0x411705
lea eax, [ebp - 0x10]
push 7
push eax
call fcn.0040d7a0
push 0x10
push dword [eax]
push dword [ebp - 0x64]
push ebx
call dword [sym.imp.USER32.dll_MessageBoxW]
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
mov ebx, esi
jmp 0x411a8c
push edi
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
call fcn.0040affd
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x58]
sub esp, 0xc
mov ecx, esp
mov dword [ebp - 0x24], esp
push eax
call fcn.00407137
call fcn.00411b50
test al, al
je 0x4117d5
lea ecx, [ebp - 0x11c]
call fcn.00411ebf
lea eax, [ebp - 0xc0]
lea ecx, [ebp - 0x11c]
push eax
call fcn.0040d442
push str.postSigningData
lea ecx, [ebp - 0x10]
call fcn.0040a9f9
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x110]
push eax
call fcn.0040a94e
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
lea ecx, [ebp - 0x20]
call fcn.00411f3f
lea eax, [ebp - 0x10]
lea ecx, [ebp - 0x11c]
push eax
call fcn.0040d50c
push esi
lea ecx, [ebp - 0x20]
push dword [eax]
call fcn.0040d2e8
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x20]
push dword [ebp - 0x3c]
mov dword [ebp - 0x24], ebx
push dword [ebp - 0x40]
call fcn.0040d368
lea ecx, [ebp - 0x20]
call fcn.0040e72c
lea ecx, [ebp - 0x11c]
call fcn.00411ef0
push dword [ebp - 0x40]
call sub.MSVCRT.dll_free
cmp byte [ebp - 0x11], bl
pop ecx
jne 0x411a8c
lea ecx, [ebp - 0x164]
call fcn.00411e6e
push dword [ebp - 0xf8]
call dword [sym.imp.KERNEL32.DLL_SetCurrentDirectoryA]
test eax, eax
jne 0x411809
mov ebx, esi
jmp 0x411a81
cmp dword [ebp - 0x6c], ebx
mov edi, dword [sym.imp.KERNEL32.DLL_CloseHandle]
je 0x4118e6
lea eax, [ebp - 0x70]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040bb87
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x2c], ebx
mov dword [ebp - 0x158], 0x3c
mov dword [ebp - 0x154], 0x140
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x148], eax
je 0x41185f
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x7c]
push eax
call fcn.0040b9f3
lea eax, [ebp - 0x7c]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0040bb87
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x140], ebx
neg eax
sbb eax, eax
mov dword [ebp - 0x13c], esi
and eax, dword [ebp - 0x40]
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x144], eax
lea eax, [ebp - 0x158]
push eax
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
cmp dword [ebp - 0x138], 0x20
jg 0x4118ca
cmp byte [ebp + 0xb], bl
jne 0x4118b4
push str.Can_not_open_file
push ebx
call fcn.0040e2fc
push dword [ebp - 0x40]
call sub.MSVCRT.dll_free
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
pop ecx
jmp 0x411a54
push dword [ebp - 0x40]
mov esi, dword [ebp - 0x120]
call sub.MSVCRT.dll_free
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
pop ecx
jmp 0x411a70
cmp dword [ebp - 0x48], ebx
jne 0x41193e
push str.setup.exe
lea ecx, [ebp - 0x4c]
call fcn.0040bdbc
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040bb87
push dword [eax]
call fcn.0040cf6d
push dword [ebp - 0x20]
neg al
sbb al, al
inc al
mov byte [ebp - 1], al
call sub.MSVCRT.dll_free
cmp byte [ebp - 1], bl
pop ecx
je 0x41193b
cmp byte [ebp + 0xb], bl
jne 0x411933
push str.Can_not_find_setup.exe
push ebx
call fcn.0040e2fc
xor ebx, ebx
inc ebx
jmp 0x411a81
xor esi, esi
inc esi
lea eax, [ebp - 0xc0]
lea ecx, [ebp - 0x20]
push eax
call fcn.00407137
lea eax, [ebp - 0x20]
push eax
call fcn.0040d3f6
push str.__T_
lea ecx, [ebp - 0x40]
call fcn.0040a9f9
lea eax, [ebp - 0x20]
lea ecx, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x40]
push eax
call fcn.0040fe52
push dword [ebp - 0x40]
call sub.MSVCRT.dll_free
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
pop ecx
pop ecx
push 0x418514
lea ecx, [ebp - 0x20]
call fcn.0040a9f9
lea eax, [ebp - 0xc0]
lea ecx, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040fe52
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
cmp dword [ebp - 0x2c], ebx
pop ecx
je 0x4119c9
push 0x20
lea ecx, [ebp - 0x4c]
call fcn.00406c5d
lea eax, [ebp - 0x30]
lea ecx, [ebp - 0x4c]
push eax
call fcn.0040b9f3
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x1a8], 0x44
push eax
lea eax, [ebp - 0xec]
push eax
lea eax, [ebp - 0x20]
push eax
mov dword [ebp - 0x1a4], ebx
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x19c], ebx
mov dword [ebp - 0x17c], ebx
mov word [ebp - 0x176], bx
mov dword [ebp - 0x174], ebx
call fcn.0040ba29
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.0040bb87
push dword [ebp - 0x20]
call sub.MSVCRT.dll_free
pop ecx
lea eax, [ebp - 0x10c]
push eax
lea eax, [ebp - 0x1a8]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
push dword [ebp - 0x10]
push ebx
call dword [sym.imp.KERNEL32.DLL_CreateProcessA]
test eax, eax
jne 0x411a5a
cmp byte [ebp + 0xb], bl
jne 0x411a4c
push ebx
call fcn.0040e399
push dword [ebp - 0x10]
call sub.MSVCRT.dll_free
pop ecx
jmp 0x411802
push dword [ebp - 0x108]
call edi
push dword [ebp - 0x10]
mov esi, dword [ebp - 0x10c]
call sub.MSVCRT.dll_free
cmp esi, ebx
pop ecx
je 0x411a81
push 0xffffffffffffffff
push esi
call dword [sym.imp.KERNEL32.DLL_WaitForSingleObject]
push esi
call edi
lea ecx, [ebp - 0x164]
call fcn.00411eaa
push dword [ebp - 0x64]
call sub.MSVCRT.dll_free
push dword [ebp - 0xc0]
call sub.MSVCRT.dll_free
pop ecx
pop ecx
lea ecx, [ebp - 0xfc]
call fcn.00411b20
push dword [ebp - 0x4c]
call sub.MSVCRT.dll_free
push dword [ebp - 0xec]
call sub.MSVCRT.dll_free
pop ecx
pop ecx
push dword [ebp - 0x88]
call sub.MSVCRT.dll_free
push dword [ebp - 0x58]
call sub.MSVCRT.dll_free
push dword [ebp - 0x7c]
call sub.MSVCRT.dll_free
push dword [ebp - 0x70]
call sub.MSVCRT.dll_free
push dword [ebp - 0x30]
call sub.MSVCRT.dll_free
push dword [ebp - 0xb4]
call sub.MSVCRT.dll_free
add esp, 0x18
mov eax, ebx
pop edi
pop esi
pop ebx
leave
ret 0x10