Function at 0x42124f
Capabilities:
Create process on windows
Delete file
Get file size
Read file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x68]
sub esp, 0x1a4
push ebx
push esi
push edi
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.USER32.dll_DefWindowProcW]
push 4
call fcn.004123c6
pop ecx
push ebx
call sub.ole32.dll_CoInitialize
push ebx
push dword [ebp + 0x70]
mov ecx, 0x4523e4
push ebx
call fcn.00412e51
push dword [ebp + 0x78]
lea ecx, [ebp + 0x70]
call fcn.00401b2d
push 0x43ff64
lea ecx, [ebp + 0x48]
call fcn.00401b2d
push ebx
push dword [ebp + 0x48]
lea ecx, [ebp + 0x70]
call fcn.00401d2a
push 0x43ff5c
lea ecx, [ebp + 0x44]
mov esi, eax
call fcn.00401b2d
mov edi, dword [ebp + 0x44]
push ebx
push edi
lea ecx, [ebp + 0x70]
call fcn.00401d2a
cmp esi, ebx
jl 0x421366
push esi
lea eax, [ebp + 0x64]
push eax
lea ecx, [ebp + 0x70]
call fcn.00401cb4
mov eax, dword [ebp + 0x70]
mov eax, dword [eax - 8]
mov ecx, dword [ebp + 0x48]
sub eax, dword [ecx - 8]
lea ecx, [ebp + 0x70]
sub eax, esi
push eax
lea eax, [ebp + 0x78]
push eax
call fcn.00401c50
push ecx
lea eax, [ebp + 0x78]
mov ecx, esp
push eax
call fcn.00401afa
push ecx
lea eax, [ebp + 0x64]
mov ecx, esp
push eax
call fcn.00401afa
lea ecx, [ebp - 0x13c]
call fcn.004101c6
push ebx
call dword [sym.imp.USER32.dll_GetActiveWindow]
push eax
lea ecx, [ebp - 0x13c]
call fcn.00414f90
lea ecx, [ebp - 0x13c]
call fcn.0041037f
mov ecx, dword [ebp + 0x78]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x42134a
call fcn.004013ad
mov ecx, dword [ebp + 0x64]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421e03
call fcn.004013ad
jmp 0x421e03
cmp eax, ebx
jl 0x4215d8
mov ecx, dword [ebp + 0x70]
mov ecx, dword [ecx - 8]
sub ecx, dword [edi - 8]
sub ecx, eax
push ecx
lea eax, [ebp + 0x60]
push eax
lea ecx, [ebp + 0x70]
call fcn.00401c50
push str..zip
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x5c]
push eax
call fcn.00401deb
push 2
push ebx
push dword [ebp + 0x5c]
call fcn.00425ffa
mov esi, eax
add esp, 0xc
cmp esi, ebx
jne 0x4213db
mov ecx, dword [ebp + 0x5c]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x4213bf
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x4215e6
call fcn.004013ad
jmp 0x4215e6
mov eax, dword [0x452170]
mov dword [ebp + 0x58], eax
lea eax, [ebp + 0x58]
push ebx
push eax
call fcn.00401a3d
pop ecx
pop ecx
push str.ttplayer.xml
lea eax, [ebp + 0x58]
push eax
lea eax, [ebp + 0x50]
push eax
call fcn.00401deb
mov eax, dword [eax]
push 2
push ebx
push dword [ebp + 0x60]
push eax
push esi
call fcn.00426f40
mov ecx, dword [ebp + 0x50]
add esp, 0x14
test eax, eax
setne byte [ebp + 0x7b]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x42142c
call fcn.004013ad
cmp byte [ebp + 0x7b], bl
je 0x42144d
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x4213ac
call fcn.004013ad
jmp 0x4213ac
push esi
call fcn.00426fed
pop ecx
push ebx
push 0x80
push 3
push ebx
push ebx
push SysReAllocStringLen
push dword [ebp + 0x5c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
jne 0x4214b5
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421486
call fcn.004013ad
mov ecx, dword [ebp + 0x5c]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421499
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421e12
call fcn.004013ad
jmp 0x421e12
mov eax, dword [0x452170]
push ebx
push edi
mov dword [ebp + 0x78], eax
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push ebx
lea ecx, [ebp + 0x54]
push ecx
push eax
mov dword [ebp + 0x40], eax
inc eax
push eax
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x54], ebx
call fcn.00401eb3
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0xea60
lea ecx, [ebp - 0x130]
call fcn.00402bd4
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1_
push ebx
lea ecx, [ebp - 0x130]
call fcn.00402c7a
test eax, eax
je 0x421573
mov eax, dword [0x452170]
mov dword [ebp + 0x64], eax
lea eax, [ebp + 0x50]
push eax
call fcn.00401939
push dword [eax]
lea eax, [ebp + 0x64]
push str.6.1.4
push str.http:__Mnetud.baidu.com_fileupload.fcgi_nameqqcfgfbver_smodulettplayer.xml_s
push eax
call fcn.00401d58
mov ecx, dword [ebp + 0x50]
add ecx, 0xfffffff4
add esp, 0x14
cmp ecx, dword [0x452174]
je 0x421544
call fcn.004013ad
mov eax, dword [ebp + 0x78]
mov esi, dword [ebp + 0x64]
push ebx
push 0x84000200
push 0xffffffffffffffff
push ebx
push dword [eax - 8]
lea ecx, [ebp - 0x130]
push eax
push esi
call fcn.0040ffe5
lea ecx, [esi - 0xc]
cmp ecx, dword [0x452174]
je 0x421573
call fcn.004013ad
push dword [ebp + 0x40]
lea ecx, [ebp + 0x78]
call fcn.00401ee8
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp + 0x5c]
push esi
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x130]
call fcn.00402c3d
mov ecx, dword [ebp + 0x78]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x4215ad
call fcn.004013ad
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x4215c0
call fcn.004013ad
lea ecx, [esi - 0xc]
cmp ecx, dword [0x452174]
je 0x4215d0
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
jmp 0x42134d
call fcn.00414979
mov esi, eax
cmp esi, ebx
mov dword [ebp - 0x18], esi
jne 0x4215ee
lea ecx, [edi - 0xc]
jmp 0x421e18
push esi
push 0x452838
call dword [sym.imp.KERNEL32.dll_InterlockedExchange]
lea ecx, [ebp - 0xb4]
mov dword [0x4523e0], esi
call fcn.004031d1
mov eax, dword [0x452170]
mov dword [ebp + 0x18], eax
mov dword [ebp + 0x1c], eax
mov dword [ebp + 0x20], eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp + 0x64]
push eax
lea eax, [ebp - 4]
push eax
push dword [ebp + 0x78]
mov dword [ebp + 0x64], ebx
call fcn.0041bed0
add esp, 0x10
push ebx
mov edi, eax
push str.TTPlayer_PlayerWnd
mov dword [ebp + 0x54], edi
mov dword [ebp - 0x50], 0x43ebbc
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
call dword [sym.imp.USER32.dll_FindWindowW]
mov ecx, dword [ebp + 0x64]
cmp ecx, 0xa
je 0x421ccc
jle 0x421dd1
cmp ecx, 0xc
jle 0x421c96
cmp ecx, 0xd
je 0x421bd3
cmp ecx, 0xe
jne 0x421dd1
cmp edi, ebx
jle 0x421849
mov eax, dword [0x452170]
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x4c], ebx
mov esi, 0x452448
mov eax, dword [esi]
push ebx
push eax
lea eax, [ebp - 0x10]
push eax
call fcn.00401535
add esp, 0xc
push eax
lea ecx, [ebp + 0x60]
call fcn.00401c38
mov ecx, dword [ebp - 0x10]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x4216d1
call fcn.004013ad
lea eax, [edi - 1]
cmp dword [ebp + 0x4c], eax
jge 0x4216e6
push 0x43fe90
lea ecx, [ebp + 0x60]
call fcn.00401c11
inc dword [ebp + 0x4c]
add esi, 0x1c
cmp dword [ebp + 0x4c], edi
jl 0x4216a5
mov eax, dword [0x452170]
mov dword [ebp + 0x4c], eax
lea eax, [ebp - 0xc]
push eax
call fcn.00401939
push dword [eax]
lea eax, [ebp + 0x4c]
push dword [ebp + 0x60]
push str.6.1.4
push str.http:__ttpack.qianqian.com_finish.html_ver_spk_inst_s_s
push eax
call fcn.00401d58
mov ecx, dword [ebp - 0xc]
add ecx, 0xfffffff4
add esp, 0x18
cmp ecx, dword [0x452174]
je 0x421730
call fcn.004013ad
push 0xea60
lea ecx, [ebp - 0xdc]
call fcn.004131c2
push str.Mozilla_4.0__compatible__MSIE_6.0__Windows_NT_5.1_
push ebx
lea ecx, [ebp - 0xdc]
call fcn.0041bd4c
test eax, eax
je 0x42178d
push ebx
push 0x84000200
push ebx
push ebx
push dword [ebp + 0x4c]
lea eax, [ebp + 0x50]
push eax
lea ecx, [ebp - 0xdc]
call fcn.0041be44
lea ecx, [ebp - 0xdc]
call fcn.00412eac
mov ecx, dword [ebp + 0x50]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x42178d
call fcn.004013ad
push dword [ebp + 0x78]
lea ecx, [ebp + 0x3c]
call fcn.00401b2d
push 0x5c
lea ecx, [ebp + 0x3c]
call fcn.00408b95
lea ecx, [ebp + 0x3c]
mov esi, eax
call fcn.004020d6
mov edi, dword [ebp + 0x3c]
lea eax, [ebp + 0x3c]
push eax
lea ecx, [ebp + 0x64]
mov word [edi + esi*2 + 2], bx
call fcn.00401afa
mov esi, dword [ebp + 0x64]
cmp dword [esi - 8], ebx
je 0x4217f8
push 0xec
call fcn.0042c8e6
cmp eax, ebx
pop ecx
je 0x4217e3
mov ecx, eax
call fcn.00428a5c
mov dword [ebp + 0x40], eax
jmp 0x4217e6
mov dword [ebp + 0x40], ebx
push ebx
push ebx
push 1
push ebx
call dword [sym.imp.KERNEL32.dll_CreateEventW]
cmp eax, ebx
mov dword [ebp + 0x38], eax
jne 0x421871
lea ecx, [esi - 0xc]
cmp ecx, dword [0x452174]
je 0x421808
call fcn.004013ad
lea ecx, [edi - 0xc]
cmp ecx, dword [0x452174]
je 0x421818
call fcn.004013ad
lea ecx, [ebp - 0xdc]
call fcn.004131fc
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421836
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421849
call fcn.004013ad
lea ecx, [ebp - 0x40]
call fcn.00412b4f
lea ecx, [ebp - 0x4c]
call fcn.00412b4f
lea ecx, [ebp - 4]
call fcn.004134f5
lea ecx, [ebp - 0xb4]
call fcn.0040321f
jmp 0x421e12
mov eax, dword [ebp + 0x54]
cmp eax, ebx
jle 0x421b67
mov dword [ebp + 0x5c], 0x452454
mov dword [ebp + 0x50], eax
mov ecx, dword [ebp + 0x5c]
push ebx
call fcn.0040e882
mov eax, dword [eax]
add eax, 8
push eax
lea ecx, [ebp + 0x78]
call fcn.00401afa
push ebx
push str.http:__
lea ecx, [ebp + 0x78]
call fcn.00401d11
mov ecx, eax
call fcn.00401d2a
test eax, eax
jne 0x421ab4
mov eax, dword [0x452170]
mov esi, dword [ebp + 0x5c]
mov dword [ebp + 0x58], eax
mov eax, dword [esi - 0xc]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 8]
push eax
call fcn.0040281e
push 0x43fe10
push dword [eax]
lea eax, [ebp + 0x58]
push str._s._s
push eax
call fcn.00401d58
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff4
add esp, 0x1c
cmp ecx, dword [0x452174]
je 0x4218ff
call fcn.004013ad
push dword [ebp + 0x58]
lea eax, [ebp + 0x78]
push dword [ebp + 0x64]
push str._s_s
push eax
call fcn.00401d58
mov ecx, dword [ebp + 0x40]
add esp, 0x10
push dword [ebp + 0x38]
lea eax, [ebp - 0xb4]
push 0x412ad2
push 2
push eax
push dword [ebp + 0x78]
push esi
call fcn.004297d3
mov edi, eax
cmp edi, ebx
je 0x42194e
push 0x927c0
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov edi, eax
neg edi
sbb edi, edi
inc edi
mov ecx, dword [ebp + 0x40]
call fcn.00428df6
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
cmp edi, ebx
je 0x421a85
mov eax, dword [esi - 8]
cmp dword [eax - 8], ebx
je 0x4219bf
mov eax, dword [0x452170]
push dword [ebp + 0x78]
mov dword [ebp + 0x54], eax
call fcn.00412658
push eax
lea eax, [ebp + 0x54]
push 0x43fdf4
push eax
call fcn.0040dcbe
push dword [esi - 8]
push dword [ebp + 0x54]
call fcn.0042e213
mov ecx, dword [ebp + 0x54]
add esp, 0x18
mov edi, eax
neg edi
sbb edi, edi
add ecx, 0xfffffff4
neg edi
cmp ecx, dword [0x452174]
je 0x4219b7
call fcn.004013ad
cmp edi, ebx
jne 0x421a7c
mov eax, dword [esi - 4]
cmp dword [eax - 8], ebx
je 0x421aa1
lea ecx, [ebp - 0x88]
call fcn.0040e917
mov esi, dword [0x452170]
push 0x80
push 3
push 1
push SysReAllocStringLen
push dword [ebp + 0x78]
lea ecx, [ebp - 0x88]
mov dword [ebp + 0x54], esi
call fcn.0040e933
test eax, eax
je 0x421a3c
cmp dword [ebp - 0x5c], ebx
je 0x421a09
mov esi, dword [ebp - 0x60]
jmp 0x421a16
lea ecx, [ebp - 0x88]
call fcn.00402978
mov esi, eax
push 0x40
push 0x40
lea ecx, [ebp + 0x54]
call fcn.00401eb3
push eax
push esi
push dword [ebp - 0x5c]
call fcn.0042aeed
add esp, 0x10
push 0xffffffffffffffff
lea ecx, [ebp + 0x54]
call fcn.00401ee8
mov esi, dword [ebp + 0x54]
mov eax, dword [ebp + 0x5c]
push dword [eax - 4]
push esi
call fcn.0042e213
mov edi, eax
neg edi
pop ecx
sbb edi, edi
pop ecx
lea ecx, [esi - 0xc]
neg edi
cmp ecx, dword [0x452174]
je 0x421a62
call fcn.004013ad
lea ecx, [ebp - 0x88]
call fcn.0040e9bd
lea ecx, [ebp - 0x88]
call fcn.00401710
cmp edi, ebx
je 0x421aa1
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421b41
call fcn.004013ad
jmp 0x421b41
mov ecx, dword [ebp + 0x58]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421ab4
call fcn.004013ad
push 0x10
pop ecx
xor eax, eax
lea edi, [ebp - 0x11c]
rep stosd dword es:[edi], eax
lea ecx, [ebp + 0x28]
push ecx
mov dword [ebp + 0x28], ebx
lea ecx, [ebp - 0x120]
push ecx
push ebx
lea edi, [ebp + 0x2c]
stosd dword es:[edi], eax
push ebx
stosd dword es:[edi], eax
push ebx
push ebx
stosd dword es:[edi], eax
mov eax, dword [ebp + 0x78]
push ebx
mov dword [ebp - 0x120], 0x44
mov dword [ebp - 0xf4], 1
mov word [ebp - 0xf0], 0xa
mov eax, dword [eax - 8]
push ebx
push eax
lea ecx, [ebp + 0x78]
call fcn.00401d6b
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
test eax, eax
je 0x421b41
push 0x927c0
push dword [ebp + 0x28]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp eax, 0x102
je 0x421b41
push dword [ebp + 0x2c]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
push dword [ebp + 0x28]
call esi
push dword [ebp + 0x78]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp + 0x78]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421b54
call fcn.004013ad
add dword [ebp + 0x5c], 0x1c
dec dword [ebp + 0x50]
jne 0x421886
mov esi, dword [ebp + 0x64]
mov edi, dword [ebp + 0x3c]
push dword [ebp + 0x38]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
lea ecx, [esi - 0xc]
cmp ecx, dword [0x452174]
je 0x421b89
call fcn.004013ad
lea ecx, [edi - 0xc]
cmp ecx, dword [0x452174]
je 0x421b99
call fcn.004013ad
lea ecx, [ebp - 0xdc]
call fcn.004131fc
mov ecx, dword [ebp + 0x4c]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421bb7
call fcn.004013ad
mov ecx, dword [ebp + 0x60]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421dd1
call fcn.004013ad
jmp 0x421dd1
push dword [0x452444]
call fcn.00401601
test eax, eax
pop ecx
je 0x421dd1
xor esi, esi
cmp dword [0x452424], ebx
mov dword [ebp + 0x78], ebx
jbe 0x421c2d
push esi
mov ecx, 0x452420
call fcn.00412bd2
push eax
lea ecx, [ebp + 0x2c]
call fcn.0041873c
push dword [ebp + 0x34]
push dword [ebp + 0x30]
push dword [ebp + 0x2c]
call fcn.0041c980
add esp, 0xc
lea ecx, [ebp + 0x2c]
mov dword [ebp + 0x78], eax
call fcn.0041d47d
inc esi
cmp esi, dword [0x452424]
jb 0x421bf4
xor edi, edi
cmp dword [0x4527cc], ebx
jbe 0x421c76
push edi
mov ecx, 0x4527c8
call fcn.004273f2
push eax
lea ecx, [ebp + 0x50]
call fcn.00401afa
mov esi, dword [ebp + 0x50]
push esi
call fcn.0041833f
pop ecx
lea ecx, [esi - 0xc]
cmp ecx, dword [0x452174]
mov dword [ebp + 0x64], eax
je 0x421c68
call fcn.004013ad
inc edi
cmp edi, dword [0x4527cc]
jb 0x421c37
cmp dword [ebp + 0x64], ebx
jne 0x421c7f
cmp dword [ebp + 0x78], ebx
je 0x421dd1
push ebx
push ebx
push 0x2000
push 0x8000000
call dword [sym.imp.SHELL32.dll_SHChangeNotify]
jmp 0x421dd1
push ebx
push dword [ebp + 0x14]
lea ecx, [ebp - 0x90]
push dword [ebp + 0x10]
push dword [ebp + 0x24]
push dword [ebp + 8]
push dword [ebp + 4]
push dword [ebp + 0xc]
push eax
push SysReAllocString
push 0x68
push dword [ebp + 0x20]
push dword [ebp + 0x1c]
call fcn.00413717
push 0x4523a8
jmp 0x421dac
xor edi, edi
inc edi
cmp dword [ebp - 4], edi
jne 0x421d5a
push 0xd4
call fcn.0042c8e6
cmp eax, ebx
pop ecx
je 0x421cf2
mov ecx, eax
call fcn.00411cf9
mov esi, eax
jmp 0x421cf4
xor esi, esi
cmp esi, ebx
je 0x421dd1
push ebx
lea eax, [ebp + 0x28]
push eax
push ebx
push 0x30
call dword [sym.imp.USER32.dll_SystemParametersInfoW]
mov eax, dword [ebp + 0x30]
sub eax, 4
mov dword [ebp + 0x30], eax
sub eax, dword [ebp + 0x10]
push edi
mov dword [ebp + 0x28], eax
mov eax, dword [ebp + 0x34]
sub eax, dword [ebp + 0x14]
push edi
push dword [ebp]
mov dword [ebp + 0x2c], eax
push dword [ebp + 0x18]
lea eax, [ebp + 0x28]
push eax
push ebx
mov ecx, esi
call fcn.00412059
test eax, eax
jl 0x421d4f
push dword [esi + 4]
call dword [sym.imp.USER32.dll_IsWindow]
test eax, eax
je 0x421d4f
lea ecx, [ebp - 0x50]
call fcn.00412dcf
lea eax, [esi + 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x421dd1
cmp dword [ebp - 4], 2
jne 0x421dd1
mov esi, dword [ebp]
cmp esi, ebx
jne 0x421d6c
mov esi, SysReAllocString
push 0x43fdf0
lea ecx, [ebp - 0x14]
call fcn.00401b2d
push edi
push dword [ebp + 0x14]
lea ecx, [ebp - 0x90]
push dword [ebp + 0x10]
push edi
push ebx
push ebx
push ebx
push ebx
push esi
push 0x68
push dword [ebp + 0x18]
push dword [eax]
call fcn.00413717
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421dab
call fcn.004013ad
push ebx
lea eax, [ebp - 0x90]
push eax
call fcn.004211d0
test eax, eax
pop ecx
pop ecx
je 0x421dc6
lea ecx, [ebp - 0x50]
call fcn.00412dcf
lea ecx, [ebp - 0x90]
call fcn.00413482
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
lea ecx, [ebp - 0x40]
mov dword [0x4523e0], ebx
call fcn.00412b4f
lea ecx, [ebp - 0x4c]
call fcn.00412b4f
lea ecx, [ebp - 4]
call fcn.004134f5
lea ecx, [ebp - 0xb4]
call fcn.0040321f
mov ecx, 0x4523e4
call fcn.0041389d
call sub.ole32.dll_CoUninitialize
mov ecx, dword [ebp + 0x44]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421e25
call fcn.004013ad
mov ecx, dword [ebp + 0x48]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421e38
call fcn.004013ad
mov ecx, dword [ebp + 0x70]
add ecx, 0xfffffff4
cmp ecx, dword [0x452174]
je 0x421e4b
call fcn.004013ad
pop edi
pop esi
xor eax, eax
pop ebx
add ebp, 0x68
leave
ret 0x10