Function at 0x4689a0
Capabilities:
Extract resource via kernel32 functions
Link many functions at runtime
Query or enumerate registry value

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2038
call fcn.0046fcb0
mov eax, dword [0x4abd08]
xor eax, ebp
mov dword [ebp - 4], eax
push 0x104
push 0x4ad558
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0x5c
push 0x4ad558
call fcn.00472009
add esp, 8
test eax, eax
jne 0x4689f1
mov eax, 1
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046c641
mov esp, ebp
pop ebp
ret 0x10
xor ecx, ecx
mov word [eax], cx
add eax, 2
mov edx, 0x4ad888
sub edx, eax
movzx ecx, word [eax]
mov word [edx + eax], cx
add eax, 2
test cx, cx
jne 0x468a00
push 0x104
push 0x4ad440
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
push 0x5c
push 0x4ad440
call fcn.0046ddd0
add esp, 8
test eax, eax
je 0x4689dc
mov byte [eax], 0
inc eax
mov edx, 0x4ad778
sub edx, eax
nop
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x468a40
push ebx
push esi
push edi
push 0x34
push 0
push 0x4ad408
call fcn.0046c140
add esp, 0xc
push 2
push 0
push str.kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryExW]
mov ebx, eax
test ebx, ebx
je 0x468acd
push 0x10
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
je 0x468ac6
push esi
push ebx
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push ebx
mov edi, eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
test eax, eax
je 0x468ac6
push esi
call dword [sym.imp.KERNEL32.dll_LockResource]
xor ecx, ecx
test edi, edi
je 0x468ac6
cmp dword [ecx + eax], 0xfeef04bd
je 0x468ab7
inc ecx
cmp ecx, edi
jb 0x468aa7
jmp 0x468ac6
lea esi, [ecx + eax]
mov ecx, 0xd
mov edi, 0x4ad408
rep movsd dword es:[edi], dword [esi]
push ebx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
cmp dword [0x4ad410], 0
jne 0x468c13
lea edx, [ebp - 8]
push edx
push 0x20019
push 0
push str.SOFTWAREMicrosoftWindows_NTCurrentVersion
push reloc.OLEAUT32.dll_SysReAllocString
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
xor eax, eax
push 0xffe
push eax
lea ecx, [ebp - 0x1012]
push ecx
mov word [ebp - 0x1014], ax
call fcn.0046c140
mov ebx, dword [sym.imp.ADVAPI32.dll_RegQueryValueExW]
add esp, 0xc
lea edx, [ebp - 0x201c]
push edx
mov edx, dword [ebp - 8]
lea eax, [ebp - 0x1014]
push eax
lea ecx, [ebp - 0x2018]
push ecx
push 0
push 0x49ff54
push edx
mov dword [ebp - 0x2018], 1
mov dword [ebp - 0x201c], 0x800
call ebx
lea eax, [ebp - 0x1014]
push 0x2e
push eax
call fcn.00471fe2
mov esi, eax
add esp, 8
test esi, esi
jne 0x468b6d
mov esi, 0x49ff50
jmp 0x468b70
add esi, 2
lea ecx, [ebp - 0x1014]
push ecx
call fcn.0047222f
mov edi, eax
push esi
shl edi, 0x10
call fcn.0047222f
add esp, 8
add eax, edi
lea edx, [ebp - 0x201c]
push edx
mov edx, dword [ebp - 8]
mov dword [0x4ad410], eax
lea eax, [ebp - 0x1014]
push eax
lea ecx, [ebp - 0x2018]
push ecx
push 0
push str.BuildLabEx
push edx
mov dword [ebp - 0x2018], 1
mov dword [ebp - 0x201c], 0x800
call ebx
lea eax, [ebp - 0x1014]
push 0x2e
push eax
call fcn.00471fe2
mov esi, eax
add esp, 8
test esi, esi
jne 0x468be5
mov esi, 0x49ff50
jmp 0x468be8
add esi, 2
lea ecx, [ebp - 0x1014]
push ecx
call fcn.0047222f
mov edi, eax
push esi
shl edi, 0x10
call fcn.0047222f
mov edx, dword [ebp - 8]
add esp, 8
add eax, edi
push edx
mov dword [0x4ad414], eax
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
push str.SetProcessDPIAware
push str.user32.dll
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov ebx, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call ebx
mov dword [0x4ada94], eax
push 0x1000
lea eax, [ebp - 0x2014]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea ecx, [ebp - 0x2014]
push 0
push ecx
call fcn.00464df0
lea edx, [ebp - 0x2014]
push edx
call fcn.0048c5d1
lea eax, [ebp - 0x2014]
add esp, 0xc
lea edx, [eax + 2]
jmp 0x468c70
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x468c70
sub eax, edx
sar eax, 1
add eax, eax
push eax
lea ecx, [ebp - 0x2014]
push ecx
call fcn.00443ca0
push str.BINDATA
push str.MAINRES
push 0
mov dword [ebp - 0x2018], eax
call dword [sym.imp.KERNEL32.dll_FindResourceW]
mov esi, eax
test esi, esi
je 0x468d46
push esi
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push esi
push 0
mov dword [ebp - 8], eax
call dword [sym.imp.KERNEL32.dll_LoadResource]
push eax
call dword [sym.imp.KERNEL32.dll_LockResource]
mov edi, eax
test edi, edi
je 0x468d46
push 8
call fcn.0046c68a
add esp, 4
test eax, eax
je 0x468ced
push 0
mov ecx, eax
call fcn.00443a30
mov esi, eax
jmp 0x468cef
xor esi, esi
mov edx, dword [ebp - 8]
push edx
mov ecx, esi
call fcn.004439c0
mov eax, dword [esi + 4]
push eax
mov eax, dword [esi]
push edi
push eax
call fcn.0046ba50
push esi
call fcn.00444bc0
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff0
add esp, 0x10
cmp dword [esi + 4], ecx
jae 0x468d46
mov edx, dword [ebp - 0x2018]
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4adce0
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], esi
call fcn.00453800
push eax
lea ecx, [ebp - 0xc]
push ecx
mov ecx, 0x4adce0
call fcn.00450cd0
push str.wke.dll
call fcn.0045d9b0
add esp, 4
mov dword [ebp - 8], eax
test eax, eax
je 0x469292
push eax
call fcn.004454d0
mov esi, eax
lea edx, [esi + 4]
push edx
call fcn.0046d5d8
mov edi, eax
mov eax, dword [ebp - 8]
push esi
push edi
push eax
mov dword [ebp - 0x2018], edi
call fcn.00445570
mov ecx, dword [ebp - 8]
push ecx
call fcn.00445490
push edi
mov dword [esi + edi], 0
call fcn.0043ca30
mov esi, eax
add esp, 0x1c
test esi, esi
je 0x469036
push str.wkeInit
push esi
call fcn.0043c720
push str.wkeShutdown
push esi
mov dword [0x4ada98], eax
call fcn.0043c720
push str.wkeCreateWebView
push esi
mov dword [0x4ada9c], eax
call fcn.0043c720
push str.wkeDestroyWebView
push esi
mov dword [0x4adaa0], eax
call fcn.0043c720
push str.wkeSetFileSystem
push esi
mov dword [0x4adaa4], eax
call fcn.0043c720
push str.wkeSetClientHandler
push esi
mov dword [0x4adaa8], eax
call fcn.0043c720
push str.wkeToStringW
push esi
mov dword [0x4ad3f8], eax
call fcn.0043c720
push str.jsBindFunction
push esi
mov dword [0x4ad43c], eax
call fcn.0043c720
add esp, 0x40
push str.jsBindGetter
push esi
mov dword [0x4ad3e8], eax
call fcn.0043c720
push str.jsBindSetter
push esi
mov dword [0x4ad3bc], eax
call fcn.0043c720
push str.jsArg
push esi
mov dword [0x4ad3d8], eax
call fcn.0043c720
push str.jsArgCount
push esi
mov dword [0x4ad400], eax
call fcn.0043c720
push str.jsArgType
push esi
mov dword [0x4ad76c], eax
call fcn.0043c720
push str.jsTypeOf
push esi
mov dword [0x4ad3d4], eax
call fcn.0043c720
push str.jsIsNumber
push esi
mov dword [0x4ad774], eax
call fcn.0043c720
push str.jsIsUndefined
push esi
mov dword [0x4ad764], eax
call fcn.0043c720
add esp, 0x40
push str.jsToInt
push esi
mov dword [0x4ad3dc], eax
call fcn.0043c720
push str.jsToDouble
push esi
mov dword [0x4ad87c], eax
call fcn.0043c720
push str.jsToString
push esi
mov dword [0x4ad3f0], eax
call fcn.0043c720
push str.jsToStringW
push esi
mov dword [0x4ad3e0], eax
call fcn.0043c720
push str.jsUndefined
push esi
mov dword [0x4ad404], eax
call fcn.0043c720
push str.jsInt
push esi
mov dword [0x4ad544], eax
call fcn.0043c720
push str.jsDouble
push esi
mov dword [0x4ad3a8], eax
call fcn.0043c720
push str.jsString
push esi
mov dword [0x4ad3b0], eax
call fcn.0043c720
add esp, 0x40
push str.jsStringW
push esi
mov dword [0x4ad554], eax
call fcn.0043c720
push str.jsTrue
push esi
mov dword [0x4ad3ac], eax
call fcn.0043c720
push str.jsFalse
push esi
mov dword [0x4ad768], eax
call fcn.0043c720
push str.jsObject
push esi
mov dword [0x4ad3ec], eax
call fcn.0043c720
push str.jsGet
push esi
mov dword [0x4ad770], eax
call fcn.0043c720
push str.jsSet
push esi
mov dword [0x4ad54c], eax
call fcn.0043c720
push str.jsGetAt
push esi
mov dword [0x4ad548], eax
call fcn.0043c720
push str.jsSetAt
push esi
mov dword [0x4ad3cc], eax
call fcn.0043c720
add esp, 0x40
push str.jsGetGlobal
push esi
mov dword [0x4ad3c4], eax
call fcn.0043c720
push str.jsSetGlobal
push esi
mov dword [0x4ad3fc], eax
call fcn.0043c720
push str.jsGetLength
push esi
mov dword [0x4ad760], eax
call fcn.0043c720
push str.jsSetLength
push esi
mov dword [0x4ad3c8], eax
call fcn.0043c720
push str.jsGlobalObject
push esi
mov dword [0x4ad3b8], eax
call fcn.0043c720
push str.jsEval
push esi
mov dword [0x4ad3c0], eax
call fcn.0043c720
push str.jsCall
push esi
mov dword [0x4ad3d0], eax
call fcn.0043c720
push str.jsGetWebView
mov dword [0x4ad550], eax
push esi
call fcn.0043c720
add esp, 0x40
mov dword [0x4ad3e4], eax
jmp 0x46903b
mov eax, dword [0x4ad3e4]
xor edi, edi
cmp dword [0x4ada98], edi
jne 0x4692a7
push 0x4ad558
lea edx, [ebp - 0x1014]
push str._swke.dll
push edx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x1014]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov edi, eax
test edi, edi
je 0x469284
push str.wkeInit
push edi
call ebx
push str.wkeShutdown
push edi
mov dword [0x4ada98], eax
call ebx
push str.wkeCreateWebView
push edi
mov dword [0x4ada9c], eax
call ebx
push str.wkeDestroyWebView
push edi
mov dword [0x4adaa0], eax
call ebx
push str.wkeSetFileSystem
push edi
mov dword [0x4adaa4], eax
call ebx
push str.wkeSetClientHandler
push edi
mov dword [0x4adaa8], eax
call ebx
push str.wkeToStringW
push edi
mov dword [0x4ad3f8], eax
call ebx
push str.jsBindFunction
push edi
mov dword [0x4ad43c], eax
call ebx
push str.jsBindGetter
push edi
mov dword [0x4ad3e8], eax
call ebx
push str.jsBindSetter
push edi
mov dword [0x4ad3bc], eax
call ebx
push str.jsArg
push edi
mov dword [0x4ad3d8], eax
call ebx
push str.jsArgCount
push edi
mov dword [0x4ad400], eax
call ebx
push str.jsArgType
push edi
mov dword [0x4ad76c], eax
call ebx
push str.jsTypeOf
push edi
mov dword [0x4ad3d4], eax
call ebx
push str.jsIsNumber
push edi
mov dword [0x4ad774], eax
call ebx
push str.jsIsUndefined
push edi
mov dword [0x4ad764], eax
call ebx
push str.jsToInt
push edi
mov dword [0x4ad3dc], eax
call ebx
push str.jsToDouble
push edi
mov dword [0x4ad87c], eax
call ebx
push str.jsToString
push edi
mov dword [0x4ad3f0], eax
call ebx
push str.jsToStringW
push edi
mov dword [0x4ad3e0], eax
call ebx
mov dword [0x4ad404], eax
push str.jsUndefined
push edi
call ebx
push str.jsInt
push edi
mov dword [0x4ad544], eax
call ebx
push str.jsDouble
push edi
mov dword [0x4ad3a8], eax
call ebx
push str.jsString
push edi
mov dword [0x4ad3b0], eax
call ebx
push str.jsStringW
push edi
mov dword [0x4ad554], eax
call ebx
push str.jsTrue
push edi
mov dword [0x4ad3ac], eax
call ebx
push str.jsFalse
push edi
mov dword [0x4ad768], eax
call ebx
push str.jsObject
push edi
mov dword [0x4ad3ec], eax
call ebx
push str.jsGet
push edi
mov dword [0x4ad770], eax
call ebx
push str.jsSet
push edi
mov dword [0x4ad54c], eax
call ebx
push str.jsGetAt
push edi
mov dword [0x4ad548], eax
call ebx
push str.jsSetAt
push edi
mov dword [0x4ad3cc], eax
call ebx
push str.jsGetGlobal
push edi
mov dword [0x4ad3c4], eax
call ebx
push str.jsSetGlobal
push edi
mov dword [0x4ad3fc], eax
call ebx
push str.jsGetLength
push edi
mov dword [0x4ad760], eax
call ebx
push str.jsSetLength
push edi
mov dword [0x4ad3c8], eax
call ebx
push str.jsGlobalObject
push edi
mov dword [0x4ad3b8], eax
call ebx
push str.jsEval
push edi
mov dword [0x4ad3c0], eax
call ebx
push str.jsCall
push edi
mov dword [0x4ad3d0], eax
call ebx
push str.jsGetWebView
push edi
mov dword [0x4ad550], eax
call ebx
mov dword [0x4ad3e4], eax
jmp 0x469289
mov eax, dword [0x4ad3e4]
cmp dword [0x4ada98], 0
jne 0x4692a7
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0046c641
mov esp, ebp
pop ebp
ret 0x10
lea ecx, [eax + 0xaa0]
lea edx, [eax + 0x75a380]
mov dword [0x4adbb8], ecx
add eax, 0x5d201d
mov dword [0x4ad3f4], edx
mov ecx, 0x4654a0
sub ecx, eax
lea edx, [ebp - 0xc]
push edx
mov dword [ebp - 0x13], ecx
push 5
lea ecx, [ebp - 0x14]
mov dword [0x4adbbc], eax
push ecx
add eax, 0xfffffffb
push eax
xor ebx, ebx
mov dword [0x4ad3b4], 0x459590
mov dword [0x4ad880], 0x4596d0
mov byte [ebp - 0x14], 0xe9
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
call dword [0x4ada98]
push 0x4455d0
push fcn.00445570
push fcn.004454d0
push fcn.00445490
push fcn.0045d9b0
call dword [0x4adaa8]
push ebx
push 0x460100
push str.GetCoreVersion
call dword [0x4ad3e8]
push 2
push 0x4654c0
push str.wke_FILE_add_path
call dword [0x4ad3e8]
push 1
push 0x458890
push str.WKELoadFile
call dword [0x4ad3e8]
push 2
push 0x458920
push str.wkeLoadFile
call dword [0x4ad3e8]
add esp, 0x44
push 2
push 0x458740
push str.wieLoadFile
call dword [0x4ad3e8]
push 2
push 0x458b30
push str.wkeRunJS
call dword [0x4ad3e8]
push 2
push 0x466640
push str.wke_curl_setopt
call dword [0x4ad3e8]
push 2
push 0x4589e0
push str.wkeSetClientHandler
call dword [0x4ad3e8]
push 4
push 0x4649c0
push str.curl_http_download
call dword [0x4ad3e8]
push 4
push 0x45f6c0
push str.unzip
call dword [0x4ad3e8]
add esp, 0x48
push 6
push 0x45fd10
push str.un7z
call dword [0x4ad3e8]
push 2
push 0x453e90
push str.dllexport_7zc
call dword [0x4ad3e8]
push 1
push 0x4489e0
push str.dllexport_7zc_get_progress
call dword [0x4ad3e8]
push 1
push 0x448a60
push str.dllexport_7zc_get_all_info
call dword [0x4ad3e8]
push 1
push 0x44ddd0
push str.dllexport_7zc_free
call dword [0x4ad3e8]
push 2
push 0x449360
push str.WriteUTF8File
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x4606f0
push str.ReadUTF8File
call dword [0x4ad3e8]
push 6
push 0x44b2c0
push str.CreateShortcut
call dword [0x4ad3e8]
push 2
push 0x44b410
push str.CreateMutex
call dword [0x4ad3e8]
push 1
push 0x44b490
push 0x49fbdc
call dword [0x4ad3e8]
push 2
push 0x44b4c0
push str.SetEnvironmentVariable
call dword [0x4ad3e8]
push 1
push 0x44b510
push str.GetEnvironmentVariable
call dword [0x4ad3e8]
add esp, 0x48
push ebx
push 0x44b5b0
push str.GetKernel32DllVersion
call dword [0x4ad3e8]
push ebx
push 0x44b860
push 0x49fb80
call dword [0x4ad3e8]
push ebx
push 0x44b890
push 0x49fb68
call dword [0x4ad3e8]
push ebx
push 0x44b8c0
push 0x49fb54
call dword [0x4ad3e8]
push 3
push 0x44b8f0
push str.CreateEvent
call dword [0x4ad3e8]
push 3
push 0x44b980
push str.OpenEvent
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x44ba30
push 0x49fb30
call dword [0x4ad3e8]
push 4
push 0x44baa0
push 0x49fb1c
call dword [0x4ad3e8]
push 1
push 0x44bb60
push 0x49fb10
call dword [0x4ad3e8]
push 2
push 0x44bbd0
push 0x49fb00
call dword [0x4ad3e8]
push 1
push 0x44bc80
push 0x49faf0
call dword [0x4ad3e8]
push 1
push 0x44bcf0
push 0x49fae0
call dword [0x4ad3e8]
add esp, 0x48
push 6
push 0x460da0
push str.CreateFileMapping
call dword [0x4ad3e8]
push 2
push 0x45c7d0
push str.ReadFileMapping
call dword [0x4ad3e8]
push 3
push 0x44bd60
push str.WriteFileMapping
call dword [0x4ad3e8]
push 1
push 0x458610
push str.CloseFileMapping
call dword [0x4ad3e8]
push 3
push 0x44be40
push str.OpenFileMapping
call dword [0x4ad3e8]
push 4
push 0x44bef0
push 0x49fa74
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x44c030
push 0x49fa64
call dword [0x4ad3e8]
push ebx
push 0x44c0b0
push 0x49e068
call dword [0x4ad3e8]
push 1
push 0x4586b0
push str.GetKeyString
call dword [0x4ad3e8]
push 2
push 0x4671d0
push str.SetKeyString
call dword [0x4ad3e8]
push 3
push 0x45c900
push str.wkeUpdateRenderFM
call dword [0x4ad3e8]
push ebx
push 0x448b60
push 0x49fa20
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x448bd0
push 0x49fa0c
call dword [0x4ad3e8]
push 5
push 0x4623a0
push str.wkeCreateWindow
call dword [0x4ad3e8]
push 5
push 0x45a9d0
push str.wieCreateWindow
call dword [0x4ad3e8]
push 2
push 0x448c00
push str.FindWindow
call dword [0x4ad3e8]
push 2
push 0x4542f0
push 0x49f9d4
call dword [0x4ad3e8]
push 2
push 0x454430
push 0x49f9c8
call dword [0x4ad3e8]
add esp, 0x48
push ebx
push 0x448c60
push 0x49f9b4
call dword [0x4ad3e8]
push 1
push 0x454570
push 0x49f9a4
call dword [0x4ad3e8]
push 1
push 0x4546f0
push 0x49f988
call dword [0x4ad3e8]
push 6
push 0x454840
push 0x49f97c
call dword [0x4ad3e8]
push 7
push 0x4549b0
push 0x49f96c
call dword [0x4ad3e8]
push 2
push 0x454d30
push str.SetWindowText
call dword [0x4ad3e8]
add esp, 0x48
push 2
push 0x454e30
push str.GetWindowLong
call dword [0x4ad3e8]
push 3
push 0x454f40
push str.SetWindowLong
call dword [0x4ad3e8]
push 1
push 0x455060
push 0x49f930
call dword [0x4ad3e8]
push 1
push 0x455140
push 0x49f924
call dword [0x4ad3e8]
push 6
push 0x448c90
push str.LoadImage
call dword [0x4ad3e8]
push 2
push 0x448db0
push str.LoadIcon
call dword [0x4ad3e8]
add esp, 0x48
push 3
push 0x448e30
push str.ExtractIcon
call dword [0x4ad3e8]
push 3
push 0x448ee0
push str.ExtractIconEx
call dword [0x4ad3e8]
push 1
push 0x448fd0
push 0x49f8e4
call dword [0x4ad3e8]
push ebx
push 0x449020
push str.EnumDisplaySettings
call dword [0x4ad3e8]
push ebx
push 0x449220
push str.SetProcessDPIAware
call dword [0x4ad3e8]
push 2
push 0x455350
push 0x49f8c4
call dword [0x4ad3e8]
add esp, 0x48
push 4
push 0x455470
push str.PostMessage
call dword [0x4ad3e8]
push 4
push 0x455600
push str.SendMessage
call dword [0x4ad3e8]
push 4
push 0x449240
push 0x49f8a0
call dword [0x4ad3e8]
push 1
push 0x455790
push 0x49f894
call dword [0x4ad3e8]
push 1
push 0x455880
push 0x49f888
call dword [0x4ad3e8]
push ebx
push 0x449330
push 0x49f878
call dword [0x4ad3e8]
add esp, 0x48
push 2
push 0x4601a0
push str.ShellNotifyIcon
call dword [0x4ad3e8]
push 4
push 0x455970
push str.MessageBoxTimeout
call dword [0x4ad3e8]
push 3
push 0x455220
push str.SetWindowMinTrackSize
call dword [0x4ad3e8]
push 1
push 0x456150
push str.CreateGlobalHWND
call dword [0x4ad3e8]
push ebx
push 0x4494a0
push str.DestroyGlobalHWND
call dword [0x4ad3e8]
push 2
push 0x456230
push str.UpdateGlobalHWND
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x4494c0
push str.GetGlobalHWND
call dword [0x4ad3e8]
push 1
push 0x449560
push str.SetForegroundGlobalHWND
call dword [0x4ad3e8]
push 1
push 0x456310
push 0x49f7c4
call dword [0x4ad3e8]
push 1
push 0x45ab90
push str.SetCurrentWindowFlag
call dword [0x4ad3e8]
push 2
push 0x455ad0
push str.SetWindowHitTestCallBack
call dword [0x4ad3e8]
push 1
push 0x455c00
push str.InitWindowHitTestData
call dword [0x4ad3e8]
add esp, 0x48
push 5
push 0x455d00
push str.SetWindowNoDragRect
call dword [0x4ad3e8]
push 5
push 0x455e70
push str.SetWindowDragRect
call dword [0x4ad3e8]
push 5
push 0x455fe0
push str.SetWindowThickFrame
call dword [0x4ad3e8]
push 2
push 0x45a890
push str.SetWinMsgProcRunJS
call dword [0x4ad3e8]
push 3
push 0x45b6c0
push str.RegQueryString
call dword [0x4ad3e8]
push 4
push 0x45b960
push str.RegWriteString
call dword [0x4ad3e8]
add esp, 0x48
push 3
push 0x45bce0
push str.RegQueryInfoKey
call dword [0x4ad3e8]
push 4
push 0x45c160
push str.RegDeleteKeyValue
call dword [0x4ad3e8]
push 3
push 0x45c460
push str.RegDeleteKeyEx
call dword [0x4ad3e8]
push 2
push 0x45c600
push str.RegDeleteTree
call dword [0x4ad3e8]
push 3
push 0x44b010
push str.GetPrivateProfileString
call dword [0x4ad3e8]
push 4
push 0x44b0e0
push str.WritePrivateProfileString
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x44b160
push 0x49f674
call dword [0x4ad3e8]
push ebx
push 0x457a50
push str.SHBrowseForFolder
call dword [0x4ad3e8]
push 2
push 0x457bf0
push str.SHFileOperation
call dword [0x4ad3e8]
push 1
push 0x4580e0
push str.GetOpenFileName
call dword [0x4ad3e8]
push 1
push 0x458300
push str.GetSaveFileName
call dword [0x4ad3e8]
push ebx
push 0x449710
push str.GetCommandLine
call dword [0x4ad3e8]
add esp, 0x48
push ebx
push 0x449730
push str.GetProcessPath
call dword [0x4ad3e8]
push ebx
push 0x4495f0
push str.GetTempPath
call dword [0x4ad3e8]
push 1
push 0x449670
push str.GetFullPathName
call dword [0x4ad3e8]
push ebx
push 0x4497b0
push str.GetCurrentDirectory
call dword [0x4ad3e8]
push 1
push 0x449830
push str.GetDiskFreeSpaceEx
call dword [0x4ad3e8]
push 3
push 0x449b90
push str.CopyFile
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x449bf0
push str.GetFileSize
call dword [0x4ad3e8]
push 3
push 0x449ca0
push str.MoveFileEx
call dword [0x4ad3e8]
push 1
push 0x449d80
push str.DeleteFile
call dword [0x4ad3e8]
push 1
push 0x449db0
push str.RemoveDirectory
call dword [0x4ad3e8]
push 1
push 0x456480
push str.DeleteDirectory
call dword [0x4ad3e8]
push 1
push 0x460b50
push str.GetFileCRC32
call dword [0x4ad3e8]
add esp, 0x48
push 3
push 0x465e20
push str.GetFileList
call dword [0x4ad3e8]
push 1
push 0x449de0
push str.IsPathExists
call dword [0x4ad3e8]
push 1
push 0x449e20
push str.IsFileExists
call dword [0x4ad3e8]
push 1
push 0x449e70
push str.IsFileBeLock
call dword [0x4ad3e8]
push 1
push 0x449ec0
push str.CreateDirectory
call dword [0x4ad3e8]
push 1
push 0x449ef0
push str.CreateFile
call dword [0x4ad3e8]
add esp, 0x48
push 4
push 0x456610
push 0x49f508
call dword [0x4ad3e8]
push 4
push 0x456940
push 0x49f4fc
call dword [0x4ad3e8]
push 3
push 0x44a250
push 0x49f4e8
call dword [0x4ad3e8]
push 1
push 0x44a380
push str.fopen
call dword [0x4ad3e8]
push 3
push 0x44a3e0
push str.fseek
call dword [0x4ad3e8]
push 1
push 0x44a480
push str.fclose
call dword [0x4ad3e8]
add esp, 0x48
push 5
push 0x44a4e0
push str.CreateProcess
call dword [0x4ad3e8]
push 3
push 0x44a710
push 0x49f4b4
call dword [0x4ad3e8]
push 1
push 0x44a7e0
push str.LoadLibrary
call dword [0x4ad3e8]
push 1
push 0x44a830
push 0x49f49c
call dword [0x4ad3e8]
push 2
push 0x44a880
push str.GetModuleHandle
call dword [0x4ad3e8]
push 2
push 0x44a980
push 0x49f47c
call dword [0x4ad3e8]
add esp, 0x48
push 2
push 0x44aa00
push str.GetModuleHandle64
call dword [0x4ad3e8]
push 2
push 0x44aa60
push str.GetProcAddress64
call dword [0x4ad3e8]
push 1
push 0x456c70
push str.CallFunction
call dword [0x4ad3e8]
push 1
push 0x44aae0
push str.SetLastErrorFromX64Call
call dword [0x4ad3e8]
push 2
push 0x44ab10
push str.GetModuleBaseName
call dword [0x4ad3e8]
push 2
push 0x44abd0
push str.GetModuleFileNameEx
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x45b410
push str.GetProcessImageFileName
call dword [0x4ad3e8]
push 1
push 0x44ac90
push 0x49f3d8
call dword [0x4ad3e8]
push 1
push 0x44add0
push 0x49f3cc
call dword [0x4ad3e8]
push 2
push 0x44ae20
push 0x49f3bc
call dword [0x4ad3e8]
push ebx
push 0x4527f0
push str.exit
call dword [0x4ad3e8]
push 3
push 0x456fe0
push 0x49f3a0
call dword [0x4ad3e8]
add esp, 0x48
push 5
push 0x457240
push str.ShellExecute
call dword [0x4ad3e8]
push 5
push 0x44af20
push 0x49f380
call dword [0x4ad3e8]
push 6
push 0x4577a0
push str.ShellExecuteEx
call dword [0x4ad3e8]
push 1
push 0x44afc0
push 0x49f368
call dword [0x4ad3e8]
push 2
push 0x4499e0
push str.GetPEFileVerInfo
call dword [0x4ad3e8]
push 9
push 0x460900
push str.SetPEFileVerInfo
call dword [0x4ad3e8]
add esp, 0x48
push 2
push 0x45ca30
push 0x49f32c
call dword [0x4ad3e8]
push 1
push 0x44c0e0
push str.OutputDebugString
call dword [0x4ad3e8]
push 3
push 0x461030
push str.PlaySound
call dword [0x4ad3e8]
push ebx
push 0x458520
push str.ChooseFont
call dword [0x4ad3e8]
push 2
push 0x44c110
push str.my_EncodeFileData
call dword [0x4ad3e8]
push 2
push 0x468780
push str.Handware_Info
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x45cb70
push str.GetHWID
call dword [0x4ad3e8]
push 2
push 0x44c240
push str.GetRunTimeState
call dword [0x4ad3e8]
push 3
push 0x44c2f0
push str.SetHOSTDNS
call dword [0x4ad3e8]
push 2
push 0x458bf0
push str.GetSteamIDUint64
call dword [0x4ad3e8]
push 3
push 0x461370
push str.module_control_startup
call dword [0x4ad3e8]
push 3
push 0x44c430
push str.module_control
call dword [0x4ad3e8]
add esp, 0x48
push 2
push 0x44c4d0
push str.module_control_immediately
call dword [0x4ad3e8]
push 2
push 0x45cc30
push str.RegisterGlobalJSCallback
call dword [0x4ad3e8]
push 2
push 0x458df0
push str.CallGlobalJSCallback
call dword [0x4ad3e8]
push 1
push 0x458f80
push str.RegJSCB_WM_CLOSE
call dword [0x4ad3e8]
push 1
push 0x459000
push str.RegJSCB_WM_SYSCOMMAND
call dword [0x4ad3e8]
push 1
push 0x459080
push str.RegJSCB_WM_GETMINMAXINFO
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x459100
push str.RegJSCB_WM_DROPFILES
call dword [0x4ad3e8]
push 3
push 0x459ba0
push str.RegWMCallback
call dword [0x4ad3e8]
push 1
push 0x445d50
push str.malloc
call dword [0x4ad3e8]
push 1
push 0x445db0
push str.free
call dword [0x4ad3e8]
push 2
push 0x445e00
push str.realloc
call dword [0x4ad3e8]
push 3
push 0x445ea0
push str.memcpy
call dword [0x4ad3e8]
add esp, 0x48
push 2
push 0x445f80
push str.memset
call dword [0x4ad3e8]
push 3
push 0x446020
push str.memmove
call dword [0x4ad3e8]
push 3
push 0x4460f0
push str.memcmp
call dword [0x4ad3e8]
push 1
push 0x446220
push str.GetMemoryAddress
call dword [0x4ad3e8]
push 5
push 0x446320
push 0x49f1dc
call dword [0x4ad3e8]
push 4
push 0x446450
push 0x49f1cc
call dword [0x4ad3e8]
add esp, 0x48
push 5
push 0x446550
push 0x49f1b8
call dword [0x4ad3e8]
push 2
push 0x4466d0
push 0x49f1a8
call dword [0x4ad3e8]
push 5
push 0x446940
push str.VirtualAllocEx64
call dword [0x4ad3e8]
push 4
push 0x446a70
push str.VirtualFreeEx64
call dword [0x4ad3e8]
push 5
push 0x446b50
push str.VirtualProtectEx64
call dword [0x4ad3e8]
push 2
push 0x446cc0
push str.VirtualQueryEx64
call dword [0x4ad3e8]
add esp, 0x48
push 4
push 0x446ff0
push 0x49f148
call dword [0x4ad3e8]
push 5
push 0x447170
push 0x49f134
call dword [0x4ad3e8]
push 5
push 0x466f00
push str.memaobscan
call dword [0x4ad3e8]
push 1
push 0x4473f0
push str.BT_session_create
call dword [0x4ad3e8]
push 1
push 0x4476d0
push str.BT_session_destroy
call dword [0x4ad3e8]
push 4
push 0x447730
push str.BT_session_listen
call dword [0x4ad3e8]
add esp, 0x48
push 7
push 0x447ad0
push str.BT_session_add_torrent
call dword [0x4ad3e8]
push 3
push 0x447c30
push str.BT_session_remove_torrent
call dword [0x4ad3e8]
push 1
push 0x4477f0
push str.BT_session_use_dht
call dword [0x4ad3e8]
push 1
push 0x447860
push str.BT_session_disable_dht
call dword [0x4ad3e8]
push 1
push 0x4478d0
push str.BT_session_get_rate_limit
call dword [0x4ad3e8]
push 2
push 0x4479b0
push str.BT_session_set_rate_limit
call dword [0x4ad3e8]
add esp, 0x48
push 3
push 0x447d10
push str.BT_torrent_connect_peer
call dword [0x4ad3e8]
push 2
push 0x447da0
push str.BT_torrent_add_url_seed
call dword [0x4ad3e8]
push 1
push 0x447e10
push str.BT_torrent_remove_all_tracker
call dword [0x4ad3e8]
push 2
push 0x447e70
push str.BT_torrent_add_tracker
call dword [0x4ad3e8]
push 2
push 0x447ee0
push str.BT_torrent_set_seed_mode
call dword [0x4ad3e8]
push 1
push 0x447f70
push str.BT_torrent_get_status
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x4481f0
push str.BT_torrent_is_finished
call dword [0x4ad3e8]
push 1
push 0x448260
push str.BT_torrent_is_valid
call dword [0x4ad3e8]
push 1
push 0x4482d0
push str.BT_torrent_pause
call dword [0x4ad3e8]
push 1
push 0x448340
push str.BT_torrent_resume
call dword [0x4ad3e8]
push 2
push 0x4483b0
push str.BT_torrent_set_ratio
call dword [0x4ad3e8]
push 1
push 0x4484a0
push str.BT_torrent_get_upload_limit
call dword [0x4ad3e8]
add esp, 0x48
push 2
push 0x448430
push str.BT_torrent_set_upload_limit
call dword [0x4ad3e8]
push 1
push 0x448580
push str.BT_torrent_get_download_limit
call dword [0x4ad3e8]
push 2
push 0x448510
push str.BT_torrent_set_download_limit
call dword [0x4ad3e8]
push 1
push 0x4485f0
push str.BT_torrent_is_sequential
call dword [0x4ad3e8]
push 2
push 0x448660
push str.BT_torrent_set_sequential
call dword [0x4ad3e8]
push 1
push 0x4486e0
push str.BT_torrent_get_files_count
call dword [0x4ad3e8]
add esp, 0x48
push 1
push 0x448760
push str.BT_torrent_get_priorities
call dword [0x4ad3e8]
push 2
push 0x4487e0
push str.BT_torrent_set_priorities
call dword [0x4ad3e8]
push ebx
push 0x4539f0
push 0x49ee34
call dword [0x4ad3e8]
push ebx
push 0x45a0b0
push str.GetDI8KeyboardStatus
call dword [0x4ad3e8]
push str.exe.zip.index.html
call fcn.0045d9b0
add esp, 0x34
cmp eax, ebx
je 0x46a542
push eax
call fcn.00445490
add esp, 4
push ebx
mov dword [0x4adb58], 0x30
mov dword [0x4adb5c], ebx
mov dword [0x4adb60], 0x464150
mov dword [0x4adb64], ebx
mov dword [0x4adb68], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push str.IDR_MAINFRAM
push eax
mov dword [0x4adb6c], eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov edx, dword [str.my_wke_engine_v1]
push 0x4adb58
mov dword [0x4adb70], eax
mov dword [0x4adb74], ebx
mov dword [0x4adb78], ebx
mov dword [0x4adb7c], ebx
mov dword [0x4adb80], edx
call dword [sym.imp.USER32.dll_RegisterClassExW]
push ebx
mov dword [0x4adb88], 0x30
mov dword [0x4adb8c], ebx
mov dword [0x4adb90], 0x459840
mov dword [0x4adb94], ebx
mov dword [0x4adb98], ebx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
mov dword [0x4adb9c], eax
mov eax, dword [0x4adb6c]
push str.IDR_MAINFRAM
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov ecx, dword [0x4ab984]
push 0x4adb88
mov dword [0x4adba0], eax
mov dword [0x4adba4], ebx
mov dword [0x4adba8], ebx
mov dword [0x4adbac], ebx
mov dword [0x4adbb0], ecx
call dword [sym.imp.USER32.dll_RegisterClassExW]
push 0x18
push str.FuKuanResult
call fcn.00443ca0
push ebx
lea edx, [ebp - 0xc]
push edx
mov ecx, 0x4add90
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], fcn.004268f0
call fcn.00453800
push eax
lea eax, [ebp - 0xc]
push eax
mov ecx, 0x4add90
call fcn.00450cd0
lea ecx, [ebp - 8]
push ecx
call fcn.00462310
add esp, 4
cmp dword [ebp - 8], ebx
je 0x46a4a8
mov ecx, dword [ebp - 8]
push ebx
push ebx
push SysReAllocString
push 0x49edc4
call fcn.0045a340
mov ecx, dword [ebp - 8]
push 0x49edc4
call fcn.00445890
xor eax, eax
mov dword [ebp - 0x2038], eax
mov dword [ebp - 0x2034], eax
mov dword [ebp - 0x2030], eax
mov dword [ebp - 0x202c], eax
mov dword [ebp - 0x2028], eax
mov dword [ebp - 0x2024], eax
mov dword [ebp - 0x2020], eax
cmp eax, 0x12
je 0x46a542
lea esp, [esp]
push 1
push ebx
push ebx
push ebx
lea edx, [ebp - 0x2038]
push edx
call dword [sym.imp.USER32.dll_PeekMessageW]
test eax, eax
je 0x46a512
lea eax, [ebp - 0x2038]
push eax
call dword [sym.imp.USER32.dll_TranslateMessage]
lea ecx, [ebp - 0x2038]
push ecx
call dword [sym.imp.USER32.dll_DispatchMessageW]
jmp 0x46a529
cmp dword [0x4add18], ebx
jne 0x46a521
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp byte [0x4ada91], 1
jne 0x46a539
push ebx
call dword [sym.imp.USER32.dll_PostQuitMessage]
cmp dword [ebp - 0x2034], 0x12
jne 0x46a4e0
mov ecx, dword [0x4add14]
mov eax, dword [ecx]
mov dword [ebp - 8], eax
cmp eax, ecx
je 0x46a57b
mov ebx, dword [eax + 0x10]
test ebx, ebx
je 0x46a568
mov ecx, ebx
call fcn.00462010
push ebx
call fcn.0046ba37
add esp, 4
lea ecx, [ebp - 8]
call fcn.0044c780
mov eax, dword [ebp - 8]
cmp eax, dword [0x4add14]
jne 0x46a551
mov eax, dword [0x4adc70]
mov ebx, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x46a597
push eax
call ebx
mov dword [0x4adc70], 0
call dword [0x4ad544]
call dword [0x4ada9c]
test edi, edi
je 0x46a5ae
push edi
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
test esi, esi
je 0x46a5bb
push esi
call fcn.0043c800
add esp, 4
mov eax, dword [ebp - 0x2018]
test eax, eax
je 0x46a5ce
push eax
call fcn.0046c650
add esp, 4
mov eax, dword [0x4adcf4]
mov esi, dword [eax]
cmp esi, eax
je 0x46a62f
mov edi, dword [sym.imp.KERNEL32.dll_FreeLibrary]
nop
mov edx, dword [esi + 0x10]
push edx
call edi
cmp byte [esi + 0x15], 0
jne 0x46a627
mov eax, dword [esi + 8]
cmp byte [eax + 0x15], 0
jne 0x46a60c
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x15], 0
jne 0x46a627
nop
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x15], 0
je 0x46a600
jmp 0x46a627
mov eax, dword [esi + 4]
cmp byte [eax + 0x15], 0
jne 0x46a625
cmp esi, dword [eax + 8]
jne 0x46a625
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0x15], 0
je 0x46a615
mov esi, eax
cmp esi, dword [0x4adcf4]
jne 0x46a5e0
mov eax, dword [0x4add34]
mov esi, dword [eax]
cmp esi, eax
je 0x46a69a
mov edi, dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
mov eax, dword [esi + 0x20]
push eax
call edi
mov ecx, dword [esi + 0x18]
push ecx
call ebx
cmp byte [esi + 0x31], 0
jne 0x46a692
mov eax, dword [esi + 8]
cmp byte [eax + 0x31], 0
jne 0x46a671
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x31], 0
jne 0x46a692
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x31], 0
je 0x46a665
jmp 0x46a692
mov eax, dword [esi + 4]
cmp byte [eax + 0x31], 0
jne 0x46a690
lea ebx, [ebx]
cmp esi, dword [eax + 8]
jne 0x46a690
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0x31], 0
je 0x46a680
mov esi, eax
cmp esi, dword [0x4add34]
jne 0x46a640
mov eax, dword [0x4adce4]
mov esi, dword [eax]
cmp esi, eax
je 0x46a721
mov edi, dword [esi + 0x10]
test edi, edi
je 0x46a6d1
mov eax, dword [edi]
test eax, eax
je 0x46a6bb
push eax
call fcn.0046c650
add esp, 4
push edi
mov dword [edi], 0
mov dword [edi + 4], 0
call fcn.0046ba37
add esp, 4
cmp byte [esi + 0x15], 0
mov dword [esi + 0x10], 0
jne 0x46a718
mov eax, dword [esi + 8]
cmp byte [eax + 0x15], 0
jne 0x46a6fd
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x15], 0
jne 0x46a718
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x15], 0
je 0x46a6f1
jmp 0x46a718
mov eax, dword [esi + 4]
cmp byte [eax + 0x15], 0
jne 0x46a716
cmp esi, dword [eax + 8]
jne 0x46a716
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0x15], 0
je 0x46a706
mov esi, eax
mov eax, dword [0x4adce4]
cmp esi, eax
jne 0x46a6a5
mov esi, dword [eax]
cmp esi, eax
je 0x46a7a2
mov edi, dword [esi + 0x10]
test edi, edi
je 0x46a753
mov eax, dword [edi]
test eax, eax
je 0x46a73d
push eax
call fcn.0046c650
add esp, 4
push edi
mov dword [edi], 0
mov dword [edi + 4], 0
call fcn.0046ba37
add esp, 4
cmp byte [esi + 0x15], 0
mov dword [esi + 0x10], 0
jne 0x46a79a
mov eax, dword [esi + 8]
cmp byte [eax + 0x15], 0
jne 0x46a77f
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x15], 0
jne 0x46a79a
mov esi, eax
mov eax, dword [esi]
cmp byte [eax + 0x15], 0
je 0x46a773
jmp 0x46a79a
mov eax, dword [esi + 4]
cmp byte [eax + 0x15], 0
jne 0x46a798
cmp esi, dword [eax + 8]
jne 0x46a798
mov esi, eax
mov eax, dword [eax + 4]
cmp byte [eax + 0x15], 0
je 0x46a788
mov esi, eax
cmp esi, dword [0x4adce4]
jne 0x46a727
mov eax, dword [0x4adc80]
test eax, eax
je 0x46a7bc
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x4adc80], 0
mov eax, dword [0x4adc5c]
test eax, eax
je 0x46a7d6
push eax
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov dword [0x4adc5c], 0
mov eax, dword [0x4adbc4]
test eax, eax
je 0x46a7fe
mov edx, dword [eax]
push eax
mov eax, dword [edx + 0x20]
call eax
mov eax, dword [0x4adbc4]
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [0x4adbc4], 0
mov eax, dword [0x4adbc0]
test eax, eax
je 0x46a819
mov ecx, dword [eax]
mov edx, dword [ecx + 8]
push eax
call edx
mov dword [0x4adbc0], 0
mov eax, dword [0x4adb6c]
mov ecx, dword [str.my_wke_engine_v1]
push eax
push ecx
call dword [sym.imp.USER32.dll_UnregisterClassW]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.0046c641
mov esp, ebp
pop ebp
ret 0x10