Function at 0x40d470
Capabilities:
Contain obfuscated stackstrings
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4e60cd
mov eax, dword fs:[0]
push eax
sub esp, 0x378
mov eax, dword [0x520628]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
xor edi, edi
push edi
push 0x66
mov ecx, ebx
mov dword [ebp - 0x380], ebx
call fcn.00462b8d
mov dword [ebp - 4], edi
mov dword [ebx], vtable.CLinLauncherDlg.0
mov esi, vtable.CBitmap.0
mov dword [ebx + 0x8c], edi
mov dword [ebx + 0x88], esi
mov dword [ebx + 0x94], edi
mov dword [ebx + 0x90], esi
mov dword [ebx + 0x9c], edi
mov dword [ebx + 0x98], esi
mov dword [ebx + 0xa4], edi
mov dword [ebx + 0xa0], esi
mov dword [ebx + 0xac], edi
mov dword [ebx + 0xa8], esi
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], esi
mov dword [ebx + 0xbc], edi
mov dword [ebx + 0xb8], esi
mov dword [ebx + 0xc4], edi
mov dword [ebx + 0xc0], esi
mov dword [ebx + 0xcc], edi
mov dword [ebx + 0xc8], esi
push 0x446f10
push 0x447130
push 8
push 8
lea eax, [ebx + 0xd0]
push eax
mov byte [ebp - 4], 9
call fcn.00470e0d
mov dword [ebx + 0x114], edi
mov dword [ebx + 0x110], esi
mov dword [ebx + 0x11c], edi
mov dword [ebx + 0x118], esi
mov dword [ebx + 0x124], edi
mov dword [ebx + 0x120], esi
mov dword [ebx + 0x12c], edi
mov dword [ebx + 0x128], esi
mov dword [ebx + 0x134], edi
mov dword [ebx + 0x130], esi
mov dword [ebx + 0x13c], edi
mov dword [ebx + 0x138], esi
mov dword [ebx + 0x144], edi
mov dword [ebx + 0x140], esi
mov dword [ebx + 0x14c], edi
mov dword [ebx + 0x148], esi
mov dword [ebx + 0x154], edi
mov dword [ebx + 0x150], esi
mov dword [ebx + 0x15c], edi
mov dword [ebx + 0x158], esi
mov dword [ebx + 0x164], edi
mov dword [ebx + 0x160], esi
mov dword [ebx + 0x180], edi
mov dword [ebx + method.CFont.virtual_0], vtable.CFont.0
lea esi, [ebx + 0x19c]
mov ecx, esi
mov byte [ebp - 4], 0x16
call fcn.0045b2a3
mov dword [esi], vtable.CUpdateEdit.0
lea esi, [ebx + 0x1f0]
mov ecx, esi
mov byte [ebp - 4], 0x17
call fcn.0045b2a3
mov dword [esi], vtable.CExplorer1.0
mov byte [ebp - 4], 0x18
call fcn.0045780b
call fcn.0045780b
mov eax, dword [eax + 0xc]
push 0x80
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebx + 0x74], eax
call fcn.004404b0
lea ecx, [ebp - 0xb4]
push ecx
lea edx, [ebp - 0x28]
push edx
mov byte [ebp - 0x28], 0x77
mov byte [ebp - 0x27], 0x69
mov byte [ebp - 0x26], 0x6e
mov byte [ebp - 0x25], 0x69
mov byte [ebp - 0x24], 0x6e
mov byte [ebp - 0x23], 0x65
mov byte [ebp - 0x22], 0x74
mov byte [ebp - 0x21], 0x2e
mov byte [ebp - 0x20], 0x64
mov byte [ebp - 0x1f], 0x6c
mov byte [ebp - 0x1e], 0x6c
mov byte [ebp - 0x1d], 0
mov byte [ebp - 0xb4], 0x49
mov byte [ebp - 0xb3], 0x6e
mov byte [ebp - 0xb2], 0x74
mov byte [ebp - 0xb1], 0x65
mov byte [ebp - 0xb0], 0x72
mov byte [ebp - 0xaf], 0x6e
mov byte [ebp - 0xae], 0x65
mov byte [ebp - 0xad], 0x74
mov byte [ebp - 0xac], 0x4f
mov byte [ebp - 0xab], 0x70
mov byte [ebp - 0xaa], 0x65
mov byte [ebp - 0xa9], 0x6e
mov byte [ebp - 0xa8], 0x57
mov byte [ebp - 0xa7], 0
call fcn.00486d10
mov dword [0x52adb0], eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 0x68], 0x49
mov byte [ebp - 0x67], 0x6e
mov byte [ebp - 0x66], 0x74
mov byte [ebp - 0x65], 0x65
mov byte [ebp - 0x64], 0x72
mov byte [ebp - 0x63], 0x6e
mov byte [ebp - 0x62], 0x65
mov byte [ebp - 0x61], 0x74
mov byte [ebp - 0x60], 0x4f
mov byte [ebp - 0x5f], 0x70
mov byte [ebp - 0x5e], 0x65
mov byte [ebp - 0x5d], 0x6e
mov byte [ebp - 0x5c], 0x55
mov byte [ebp - 0x5b], 0x72
mov byte [ebp - 0x5a], 0x6c
mov byte [ebp - 0x59], 0x57
mov byte [ebp - 0x58], 0
call fcn.00486d10
lea edx, [ebp - 0x68]
mov dword [0x52adb4], eax
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.00486d10
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x28]
push edx
mov dword [0x52adb8], eax
mov byte [ebp - 0x7c], 0x49
mov byte [ebp - 0x7b], 0x6e
mov byte [ebp - 0x7a], 0x74
mov byte [ebp - 0x79], 0x65
mov byte [ebp - 0x78], 0x72
mov byte [ebp - 0x77], 0x6e
mov byte [ebp - 0x76], 0x65
mov byte [ebp - 0x75], 0x74
mov byte [ebp - 0x74], 0x4f
mov byte [ebp - 0x73], 0x70
mov byte [ebp - 0x72], 0x65
mov byte [ebp - 0x71], 0x6e
mov byte [ebp - 0x70], 0x55
mov byte [ebp - 0x6f], 0x72
mov byte [ebp - 0x6e], 0x6c
mov byte [ebp - 0x6d], 0x41
mov byte [ebp - 0x6c], 0
call fcn.00486d10
mov dword [0x52adcc], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x28]
push ecx
call fcn.00486d10
lea edx, [ebp - 0xc4]
mov dword [0x52add0], eax
push edx
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 0xc4], 0x48
mov byte [ebp - 0xc3], 0x74
mov byte [ebp - 0xc2], 0x74
mov byte [ebp - 0xc1], 0x70
mov byte [ebp - 0xc0], 0x51
mov byte [ebp - 0xbf], 0x75
mov byte [ebp - 0xbe], 0x65
mov byte [ebp - 0xbd], 0x72
mov byte [ebp - 0xbc], 0x79
mov byte [ebp - 0xbb], 0x49
mov byte [ebp - 0xba], 0x6e
mov byte [ebp - 0xb9], 0x66
mov byte [ebp - 0xb8], 0x6f
mov byte [ebp - 0xb7], 0x57
mov byte [ebp - 0xb6], 0
call fcn.00486d10
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x28]
push edx
mov dword [0x52adbc], eax
mov byte [ebp - 0x10c], 0x49
mov byte [ebp - 0x10b], 0x6e
mov byte [ebp - 0x10a], 0x74
mov byte [ebp - 0x109], 0x65
mov byte [ebp - 0x108], 0x72
mov byte [ebp - 0x107], 0x6e
mov byte [ebp - 0x106], 0x65
mov byte [ebp - 0x105], 0x74
mov byte [ebp - 0x104], 0x43
mov byte [ebp - 0x103], 0x6c
mov byte [ebp - 0x102], 0x6f
mov byte [ebp - 0x101], 0x73
mov byte [ebp - 0x100], 0x65
mov byte [ebp - 0xff], 0x48
mov byte [ebp - 0xfe], 0x61
mov byte [ebp - 0xfd], 0x6e
mov byte [ebp - 0xfc], 0x64
mov byte [ebp - 0xfb], 0x6c
mov byte [ebp - 0xfa], 0x65
mov byte [ebp - 0xf9], 0
call fcn.00486d10
mov dword [0x52adc0], eax
mov byte [ebp - 0xf8], 0x49
mov byte [ebp - 0xf7], 0x6e
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 0xf6], 0x74
mov byte [ebp - 0xf5], 0x65
mov byte [ebp - 0xf4], 0x72
mov byte [ebp - 0xf3], 0x6e
mov byte [ebp - 0xf2], 0x65
mov byte [ebp - 0xf1], 0x74
mov byte [ebp - 0xf0], 0x52
mov byte [ebp - 0xef], 0x65
mov byte [ebp - 0xee], 0x61
mov byte [ebp - 0xed], 0x64
mov byte [ebp - 0xec], 0x46
mov byte [ebp - 0xeb], 0x69
mov byte [ebp - 0xea], 0x6c
mov byte [ebp - 0xe9], 0x65
mov byte [ebp - 0xe8], 0
call fcn.00486d10
lea edx, [ebp - 0xa4]
mov dword [0x52adc4], eax
push edx
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 0xa4], 0x49
mov byte [ebp - 0xa3], 0x6e
mov byte [ebp - 0xa2], 0x74
mov byte [ebp - 0xa1], 0x65
mov byte [ebp - 0xa0], 0x72
mov byte [ebp - 0x9f], 0x6e
mov byte [ebp - 0x9e], 0x65
mov byte [ebp - 0x9d], 0x74
mov byte [ebp - 0x9c], 0x43
mov byte [ebp - 0x9b], 0x6f
mov byte [ebp - 0x9a], 0x6e
mov byte [ebp - 0x99], 0x6e
mov byte [ebp - 0x98], 0x65
mov byte [ebp - 0x97], 0x63
mov byte [ebp - 0x96], 0x74
mov byte [ebp - 0x95], 0x57
mov byte [ebp - 0x94], 0
call fcn.00486d10
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x28]
push edx
mov dword [0x52add4], eax
call fcn.00486d10
mov dword [0x52add8], eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 0x90], 0x49
mov byte [ebp - 0x8f], 0x6e
mov byte [ebp - 0x8e], 0x74
mov byte [ebp - 0x8d], 0x65
mov byte [ebp - 0x8c], 0x72
mov byte [ebp - 0x8b], 0x6e
mov byte [ebp - 0x8a], 0x65
mov byte [ebp - 0x89], 0x74
mov byte [ebp - 0x88], 0x43
mov byte [ebp - 0x87], 0x6f
mov byte [ebp - 0x86], 0x6e
mov byte [ebp - 0x85], 0x6e
mov byte [ebp - 0x84], 0x65
mov byte [ebp - 0x83], 0x63
mov byte [ebp - 0x82], 0x74
mov byte [ebp - 0x81], 0x41
mov byte [ebp - 0x80], 0
call fcn.00486d10
lea edx, [ebp - 0x90]
mov dword [0x52addc], eax
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.00486d10
mov dword [0x52ade0], eax
mov al, 0x8b
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x19], al
mov ecx, 0x59
mov word [ebp - 0x1e4], cx
mov eax, 0x75
mov word [ebp - 0x1e0], ax
mov edx, 0x6f
mov word [ebp - 0x1e2], dx
mov ecx, 0x72
mov word [ebp - 0x1de], cx
mov edx, 0x20
mov word [ebp - 0x1dc], dx
mov word [ebp - 0x1d6], dx
mov eax, 0x50
mov word [ebp - 0x1da], ax
mov ecx, 0x43
mov word [ebp - 0x1d8], cx
mov eax, 0x6d
mov word [ebp - 0x1d4], ax
mov edx, 0x79
mov word [ebp - 0x1d0], dx
mov ecx, 0x61
mov word [ebp - 0x1d2], cx
mov eax, 0x20
mov word [ebp - 0x1ce], ax
mov edx, 0x61
mov word [ebp - 0x1ca], dx
mov ecx, 0x68
mov word [ebp - 0x1cc], cx
mov eax, 0x76
mov word [ebp - 0x1c8], ax
mov ecx, 0x65
mov edx, 0x20
mov word [ebp - 0x1c4], dx
mov edx, ecx
mov word [ebp - 0x1c6], cx
mov word [ebp - 0x1c0], cx
mov word [ebp - 0x1be], dx
mov eax, 0x62
mov word [ebp - 0x1c2], ax
mov eax, 0x6e
mov word [ebp - 0x1bc], ax
mov word [ebp - 0x1b6], ax
mov ecx, 0x20
mov word [ebp - 0x1ba], cx
mov edx, 0x69
mov word [ebp - 0x1b8], dx
mov edx, 0x65
mov eax, 0x63
mov word [ebp - 0x1b0], ax
mov ecx, 0x66
mov word [ebp - 0x1b4], cx
mov word [ebp - 0x1b2], dx
mov word [ebp - 0x1ac], dx
mov eax, 0x64
mov ecx, 0x74
mov word [ebp - 0x1aa], ax
mov edx, 0x62
mov word [ebp - 0x1ae], cx
mov ecx, 0x20
mov word [ebp - 0x1a6], dx
mov eax, 0x79
mov edx, 0x61
mov word [ebp - 0x1a4], ax
mov eax, ecx
mov word [ebp - 0x1a8], cx
mov word [ebp - 0x1a2], cx
mov word [ebp - 0x1a0], dx
mov ecx, 0x76
mov edx, 0x69
mov word [ebp - 0x19e], ax
mov word [ebp - 0x19c], cx
mov word [ebp - 0x19a], dx
mov eax, 0x72
mov ecx, 0x75
mov edx, 0x73
mov byte [ebp - 0x1b], 0xff
mov byte [ebp - 0x1a], 0x55
mov byte [ebp - 0x18], 0xec
mov word [ebp - 0x198], ax
mov word [ebp - 0x196], cx
mov word [ebp - 0x194], dx
mov edx, 0xa
mov word [ebp - 0x18e], dx
mov eax, 0x2e
mov word [ebp - 0x192], ax
mov ecx, 0xd
mov word [ebp - 0x190], cx
mov edx, 0x75
mov word [ebp - 0x188], dx
mov eax, 0x43
mov word [ebp - 0x18c], ax
mov ecx, 0x61
mov word [ebp - 0x18a], cx
mov edx, 0x64
mov word [ebp - 0x182], dx
mov eax, 0x73
mov word [ebp - 0x186], ax
mov ecx, 0x65
mov word [ebp - 0x184], cx
mov edx, 0x6e
mov word [ebp - 0x17c], dx
mov eax, 0x20
mov word [ebp - 0x180], ax
mov word [ebp - 0x17a], ax
mov ecx, 0x61
mov word [ebp - 0x17e], cx
mov edx, 0x63
mov eax, edx
mov word [ebp - 0x176], dx
mov word [ebp - 0x174], ax
mov ecx, 0x41
mov word [ebp - 0x178], cx
mov edx, 0x73
mov eax, edx
mov word [ebp - 0x170], dx
mov word [ebp - 0x16e], ax
mov ecx, 0x65
mov word [ebp - 0x172], cx
mov ecx, 0x20
mov word [ebp - 0x16c], cx
mov edx, 0x56
mov word [ebp - 0x16a], dx
mov eax, 0x69
mov word [ebp - 0x168], ax
mov ecx, 0x6f
mov word [ebp - 0x166], cx
mov edx, 0x6c
mov word [ebp - 0x164], dx
mov eax, 0x61
mov word [ebp - 0x162], ax
mov ecx, 0x74
mov word [ebp - 0x160], cx
mov edx, 0x69
mov word [ebp - 0x15e], dx
mov eax, 0x6f
mov word [ebp - 0x15c], ax
mov ecx, 0x6e
mov edx, 0x20
mov eax, 0x69
mov word [ebp - 0x15a], cx
mov word [ebp - 0x158], dx
mov word [ebp - 0x156], ax
mov word [ebp - 0x154], cx
mov word [ebp - 0x152], dx
mov eax, 0x6d
mov ecx, 0x6f
mov edx, 0x64
mov word [ebp - 0x150], ax
mov word [ebp - 0x14e], cx
mov word [ebp - 0x14c], dx
mov eax, 0x75
mov ecx, 0x6c
mov edx, 0x65
mov word [ebp - 0x14a], ax
mov word [ebp - 0x148], cx
mov word [ebp - 0x146], dx
mov eax, 0x20
mov ecx, 0x61
mov edx, 0x74
mov word [ebp - 0x144], ax
mov word [ebp - 0x142], cx
mov word [ebp - 0x140], dx
mov word [ebp - 0x13e], ax
mov ecx, 0x30
mov edx, ecx
mov word [ebp - 0x13c], cx
mov word [ebp - 0x13a], dx
mov eax, 0x32
mov word [ebp - 0x138], ax
mov ecx, 0x33
mov word [ebp - 0x136], cx
mov edx, 0x3a
mov word [ebp - 0x134], dx
mov eax, 0x25
mov word [ebp - 0x132], ax
mov ecx, 0x30
mov word [ebp - 0x130], cx
mov edx, 0x38
mov word [ebp - 0x12e], dx
xor edx, edx
mov eax, 0x58
mov word [ebp - 0x12c], ax
mov ecx, 0x2e
mov word [ebp - 0x12a], cx
mov word [ebp - 0x128], dx
mov ecx, 0x69
mov eax, 0x57
mov edx, 0x6e
mov word [ebp - 0x124], ax
mov word [ebp - 0x122], cx
mov word [ebp - 0x120], dx
mov word [ebp - 0x11c], cx
mov eax, 0x4c
mov edx, 0x63
mov ecx, 0x6e
mov word [ebp - 0x11e], ax
mov word [ebp - 0x11a], dx
mov eax, 0x65
mov word [ebp - 0x116], cx
mov edx, 0x73
xor ecx, ecx
mov word [ebp - 0x118], ax
mov word [ebp - 0x114], dx
mov word [ebp - 0x112], ax
mov word [ebp - 0x110], cx
call fcn.00403120
mov eax, dword [0x52adb0]
mov ecx, dword [ebp - 0x1c]
cmp dword [eax], ecx
jne 0x40e99f
add eax, 4
cmp byte [eax], 0xec
jne 0x40e99f
mov eax, dword [0x52adb4]
cmp dword [eax], ecx
jne 0x40e970
add eax, 4
cmp byte [eax], 0xec
jne 0x40e970
mov edx, dword [0x52adcc]
mov eax, edx
cmp dword [eax], ecx
jne 0x40dfa1
add eax, 4
cmp byte [eax], 0xec
je 0x40dfbe
cmp byte [edx], 0x6a
jne 0x40e93d
cmp byte [edx + 1], 0x24
jne 0x40e93d
cmp byte [edx + 2], 0x68
jne 0x40e93d
mov eax, dword [0x52adbc]
cmp dword [eax], ecx
jne 0x40e91f
add eax, 4
cmp byte [eax], 0xec
jne 0x40e91f
mov eax, dword [0x52adc4]
cmp dword [eax], ecx
jne 0x40e8e9
add eax, 4
cmp byte [eax], 0xec
jne 0x40e8e9
mov eax, dword [0x52add4]
cmp dword [eax], ecx
jne 0x40e8b3
add eax, 4
cmp byte [eax], 0xec
jne 0x40e8b3
mov eax, dword [0x52addc]
cmp dword [eax], ecx
jne 0x40e892
add eax, 4
cmp byte [eax], 0xec
jne 0x40e892
call fcn.004876d0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00487f00
push 0x40c7e0
push 0x52adb8
call fcn.00487fc0
push 0x40cd90
push 0x52adcc
call fcn.00487fc0
push 0x40d120
push 0x52add4
call fcn.00487fc0
push 0x40d160
push 0x52addc
call fcn.00487fc0
call fcn.00487940
test eax, eax
je 0x40e085
mov eax, ebx
call fcn.0042b1f0
push edi
call fcn.004706ee
push 0x80000
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
call fcn.00401930
mov edi, dword [0x52adc4]
add esp, 4
push 0x20000
call fcn.00401290
push eax
mov ecx, edi
call fcn.004017a0
push 0xc
call fcn.004509b2
add esp, 0xc
push 0xc
mov dword [0x52ade4], eax
call fcn.004509b2
add esp, 4
push 0xc
mov dword [0x52ade8], eax
call fcn.004509b2
add esp, 4
push 0xc
mov dword [0x52adec], eax
call fcn.004509b2
add esp, 4
push 0xc
mov dword [0x52adf0], eax
call fcn.004509b2
add esp, 4
push 0xc
mov dword [0x52adf4], eax
call fcn.004509b2
add esp, 4
push 0xc
mov dword [0x52adf8], eax
call fcn.004509b2
add esp, 4
push 0xc
mov dword [0x52adfc], eax
call fcn.004509b2
mov esi, dword [0x52ade4]
add esp, 4
mov dword [0x52ae00], eax
call fcn.0044a6a0
mov esi, dword [0x52ade8]
call fcn.0044a6a0
mov esi, dword [0x52adec]
call fcn.0044a6a0
mov esi, dword [0x52adf0]
call fcn.0044a6a0
mov esi, dword [0x52adf4]
call fcn.0044a6a0
mov esi, dword [0x52adf8]
call fcn.0044a6a0
mov esi, dword [0x52adfc]
call fcn.0044a6a0
mov esi, dword [0x52ae00]
call fcn.0044a6a0
mov esi, dword [0x52ade4]
push 0
call fcn.0044a620
mov esi, dword [0x52ade8]
add esp, 4
push 0
call fcn.0044a620
mov esi, dword [0x52adec]
add esp, 4
push 0
call fcn.0044a620
mov esi, dword [0x52adf0]
add esp, 4
push 0
call fcn.0044a620
mov esi, dword [0x52adf4]
add esp, 4
push 0
call fcn.0044a620
add esp, 4
mov esi, dword [0x52adf8]
push 0
call fcn.0044a620
mov esi, dword [0x52adfc]
add esp, 4
push 0
call fcn.0044a620
mov esi, dword [0x52ae00]
add esp, 4
push 0
call fcn.0044a620
add esp, 4
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x30]
push ecx
mov byte [ebp - 0x30], 0x77
mov byte [ebp - 0x2f], 0x73
mov byte [ebp - 0x2e], 0x32
mov byte [ebp - 0x2d], 0x5f
mov byte [ebp - 0x2c], 0x33
mov byte [ebp - 0x2b], 0x32
mov byte [ebp - 0x2a], 0
mov byte [ebp - 0x40], 0x72
mov byte [ebp - 0x3f], 0x65
mov byte [ebp - 0x3e], 0x63
mov byte [ebp - 0x3d], 0x76
mov byte [ebp - 0x3c], 0
mov byte [ebp - 0x48], 0x63
mov byte [ebp - 0x47], 0x6f
mov byte [ebp - 0x46], 0x6e
mov byte [ebp - 0x45], 0x6e
mov byte [ebp - 0x44], 0x65
mov byte [ebp - 0x43], 0x63
mov byte [ebp - 0x42], 0x74
mov byte [ebp - 0x41], 0
mov byte [ebp - 0x38], 0x73
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x36], 0x6e
mov byte [ebp - 0x35], 0x64
mov byte [ebp - 0x34], 0
call fcn.00486d10
lea edx, [ebp - 0x38]
mov dword [0x52ae10], eax
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00486d10
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x30]
push edx
mov dword [0x52ae14], eax
call fcn.00486d10
mov dword [0x52ae08], eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00486d10
lea edx, [ebp - 0x40]
mov dword [0x52ae0c], eax
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00486d10
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x30]
push edx
mov dword [0x52ae18], eax
call fcn.00486d10
mov dword [0x52ae1c], eax
mov eax, dword [0x52ae14]
mov ecx, dword [eax]
mov dword [0x52adc8], 1
cmp ecx, dword [ebp - 0x1c]
jne 0x40e2f8
add eax, 4
cmp byte [eax], 0xec
je 0x40e39b
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
test esi, esi
je 0x40e352
lea edx, [ebp - 0x1e4]
push 0x750f4248
push edx
mov edx, esi
call fcn.00405390
lea eax, [ebp - 0x124]
push eax
lea edx, [esi + 0x400]
call fcn.004053b0
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
add esp, 0xc
push 0
push 0
push esi
push 0x4011e0
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40e358
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [0x52ae14]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 5
call fcn.00447140
mov eax, dword [0x52ae14]
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp dword [eax], edx
jne 0x40e385
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
je 0x40e3a1
push 0
push 0
push 0
push 0x40d450
push 0
push 0
call edi
jmp 0x40ea01
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x52ae0c]
mov edx, dword [ebp - 0x1c]
cmp dword [eax], edx
jne 0x40e3bb
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
je 0x40e442
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
test esi, esi
je 0x40e40d
lea edx, [ebp - 0x1e4]
push 0x750f4249
push edx
mov edx, esi
call fcn.00405390
lea eax, [ebp - 0x124]
push eax
lea edx, [esi + 0x400]
call fcn.004053b0
add esp, 0xc
push 0
push 0
push esi
push 0x4011e0
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x52ae0c]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 5
call fcn.00447140
mov eax, dword [0x52ae0c]
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp dword [eax], edx
jne 0x40e385
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
jne 0x40e385
mov eax, dword [0x52ae1c]
mov edx, dword [ebp - 0x1c]
cmp dword [eax], edx
jne 0x40e45c
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
je 0x40e4e3
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
test esi, esi
je 0x40e4ae
lea edx, [ebp - 0x1e4]
push 0x750f424a
push edx
mov edx, esi
call fcn.00405390
lea eax, [ebp - 0x124]
push eax
lea edx, [esi + 0x400]
call fcn.004053b0
add esp, 0xc
push 0
push 0
push esi
push 0x4011e0
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x52ae1c]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 5
call fcn.00447140
mov eax, dword [0x52ae1c]
mov edx, dword [eax]
add esp, 4
cmp edx, dword [ebp - 0x1c]
jne 0x40e385
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
jne 0x40e385
call fcn.004876d0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00487f00
push 0x40d1a0
push 0x52ae18
call fcn.00487fc0
push 0x40d310
push 0x52ae10
call fcn.00487fc0
push 0x40d1d0
push 0x52ae08
call fcn.00487fc0
call fcn.00487940
mov edi, dword [0x52ae1c]
push 0x40000
call fcn.00401290
push eax
mov ecx, edi
call fcn.004017a0
add esp, 8
push 0x100000
lea edx, [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
call fcn.00401930
add esp, 4
call fcn.00403120
call fcn.00403120
xor esi, esi
push esi
push esi
push esi
push 0x4019a0
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x800
mov edi, 0x40c110
call fcn.00401290
push eax
mov ecx, 0x40c110
call fcn.004017a0
add esp, 8
mov byte [ebp - 0x54], 0x6e
mov byte [ebp - 0x53], 0x74
mov byte [ebp - 0x52], 0x64
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x6c
mov byte [ebp - 0x4f], 0x2e
mov byte [ebp - 0x4e], 0x64
mov byte [ebp - 0x4d], 0x6c
mov byte [ebp - 0x4c], 0x6c
mov byte [ebp - 0x4b], 0
mov byte [ebp - 0xe4], 0x52
mov byte [ebp - 0xe3], 0x74
mov byte [ebp - 0xe2], 0x6c
mov byte [ebp - 0xe1], 0x41
mov byte [ebp - 0xe0], 0x64
mov byte [ebp - 0xdf], 0x64
mov byte [ebp - 0xde], 0x56
mov byte [ebp - 0xdd], 0x65
mov byte [ebp - 0xdc], 0x63
mov byte [ebp - 0xdb], 0x74
mov byte [ebp - 0xda], 0x6f
mov byte [ebp - 0xd9], 0x72
mov byte [ebp - 0xd8], 0x65
mov byte [ebp - 0xd7], 0x64
mov byte [ebp - 0xd6], 0x45
mov byte [ebp - 0xd5], 0x78
mov byte [ebp - 0xd4], 0x63
mov byte [ebp - 0xd3], 0x65
mov byte [ebp - 0xd2], 0x70
mov byte [ebp - 0xd1], 0x74
mov byte [ebp - 0xd0], 0x69
mov byte [ebp - 0xcf], 0x6f
mov byte [ebp - 0xce], 0x6e
mov byte [ebp - 0xcd], 0x48
mov byte [ebp - 0xcc], 0x61
mov byte [ebp - 0xcb], 0x6e
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov byte [ebp - 0xca], 0x64
mov byte [ebp - 0xc9], 0x6c
mov byte [ebp - 0xc8], 0x65
mov byte [ebp - 0xc7], 0x72
mov byte [ebp - 0xc6], 0
call fcn.00486d10
lea edx, [ebp - 0xe4]
mov dword [0x52ae20], eax
push edx
lea eax, [ebp - 0x54]
push eax
call fcn.00486d10
mov edi, eax
cmp dword [0x52ae20], esi
je 0x40e6e8
call fcn.004876d0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00487f00
push 0x40c6f0
push 0x52ae20
call fcn.00487fc0
call fcn.00487940
push 0x200000
call fcn.00401290
push eax
mov ecx, edi
call fcn.004017a0
add esp, 8
call fcn.004023a0
call fcn.00402040
mov eax, 0x52bf54
call fcn.0040b2b0
mov eax, 0x52bf6c
call fcn.0040b3b0
mov dword [ebx + 0x78], esi
mov dword [ebx + 0x7c], esi
mov dword [ebx + 0x80], esi
mov dword [ebx + 0x84], esi
mov dword [ebx + 0x168], esi
mov dword [ebx + 0x16c], esi
mov dword [ebx + 0x170], esi
mov dword [ebx + 0x174], esi
mov dword [ebx + 0x178], esi
mov byte [ebx + 0x184], 0
mov byte [ebx + 0x185], 1
mov dword [ebx + 0x188], esi
mov dword [ebx + 0x18c], 0xffffffff
mov dword [ebx + 0x268], esi
mov dword [ebx + 0x26c], esi
mov dword [ebx + 0x270], esi
mov dword [ebx + 0x274], esi
mov dword [ebx + 0x278], esi
mov dword [0x52a514], esi
mov dword [ebx + 0x27c], esi
mov dword [ebx + 0x280], esi
mov dword [ebx + 0x284], esi
call fcn.00440910
mov byte [ebp - 0x375], 0
call fcn.00448ff0
test eax, eax
jne 0x40e7ce
push 0x10
push 0x5116a4
push 0x5116b0
mov ecx, ebx
mov byte [ebp - 0x375], 1
call fcn.0045b50e
call fcn.00491fe0
lea ecx, [ebp - 0x37c]
push 4
push ecx
call fcn.00492890
add esp, 8
cmp eax, 1
je 0x40e803
push 0x10
push 0x5116a4
push 0x5116cc
mov ecx, ebx
mov byte [ebp - 0x375], 1
call fcn.0045b50e
mov edi, dword [ebp - 0x37c]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0xc
xor edi, eax
call fcn.004509b2
add esp, 4
mov esi, eax
mov dword [0x52ae04], eax
call fcn.0044a6a0
mov esi, dword [0x52ae04]
push edi
call fcn.0044a620
add esp, 4
lea edx, [ebp - 0x374]
push edx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x40e868
push 0x10
push 0x5116a4
push 0x5116e8
mov ecx, ebx
mov byte [ebp - 0x375], 1
call fcn.0045b50e
jmp 0x40e872
mov dword [0x52ad9c], 1
call fcn.0040d340
cmp byte [ebp - 0x375], 0
je 0x40ea01
mov eax, ebx
call fcn.0042b1f0
push 0
call fcn.004706ee
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40e9f1
push 0x750f4247
jmp 0x40e9b7
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40e9f1
lea edx, [ebp - 0x1e4]
push 0x750f4246
push edx
mov edx, esi
call fcn.00405390
lea eax, [ebp - 0x124]
push eax
jmp 0x40e9cc
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40e9f1
lea ecx, [ebp - 0x1e4]
push 0x750f4245
push ecx
mov edx, esi
call fcn.00405390
lea edx, [ebp - 0x124]
push edx
jmp 0x40e9cc
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40e9f1
push 0x750f4244
jmp 0x40e9b7
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40e9f1
lea edx, [ebp - 0x1e4]
push 0x750f4243
push edx
mov edx, esi
call fcn.00405390
lea eax, [ebp - 0x124]
push eax
jmp 0x40e9cc
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40e9f1
lea ecx, [ebp - 0x1e4]
push 0x750f4242
push ecx
mov edx, esi
call fcn.00405390
lea edx, [ebp - 0x124]
push edx
jmp 0x40e9cc
push 0x600
call fcn.004509b2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40e9f1
push 0x750f4241
lea eax, [ebp - 0x1e4]
push eax
mov edx, esi
call fcn.00405390
lea ecx, [ebp - 0x124]
push ecx
lea edx, [esi + 0x400]
call fcn.004053b0
add esp, 0xc
push edi
push edi
push esi
push 0x4011e0
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
push edi
push edi
push 0x40d450
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0046e186
mov esp, ebp
pop ebp
ret 4