Function at 0x4022e0
Capabilities:
Create thread
Resume thread

Disassembly:
mov eax, dword [esp + 4]
sub esp, 8
test eax, eax
jle 0x4025fa
mov ecx, dword [esp + 0x10]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push ebp
mov ebp, dword [sym.imp.KERNEL32.dll_OpenProcess]
push esi
push edi
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
mov edx, dword [esp + 0x1c]
mov eax, dword [edx]
mov cl, byte [eax]
cmp cl, 0x2d
je 0x402321
cmp cl, 0x2f
jne 0x4025dc
lea edi, [eax + 1]
push 4
push str.url:
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x40236b
mov al, byte [edi + 4]
add edi, 4
test al, al
je 0x4025dc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x460024
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4025dc
push 5
push str.xada:
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x402481
mov al, byte [edi + 0xa]
add edi, 0xa
test al, al
je 0x4025dc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x460024
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
xor edx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, 0x460024
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x40240e
mov al, byte [edx + 0x460024]
cmp al, 0x33
jne 0x4023d5
mov byte [edx + 0x460024], 0x3d
jmp 0x4023fa
cmp al, 0x3d
jne 0x4023e2
mov byte [edx + 0x460024], 0x33
jmp 0x4023fa
cmp al, 0x32
jne 0x4023ef
mov byte [edx + 0x460024], 0x35
jmp 0x4023fa
cmp al, 0x35
jne 0x4023fa
mov byte [edx + 0x460024], 0x32
mov edi, 0x460024
or ecx, 0xffffffff
xor eax, eax
inc edx
repne scasb al, byte es:[edi]
not ecx
dec ecx
cmp edx, ecx
jb 0x4023c2
lea eax, [esp + 0x10]
mov edi, 0x460024
push eax
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push 0x460024
call fcn.00402600
mov edi, eax
or ecx, 0xffffffff
xor eax, eax
add esp, 0xc
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x460024
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call ebx
push eax
push 0
push 0x1f0fff
call ebp
mov esi, eax
push 0x40
push esi
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 1
call fcn.00403e20
add esp, 8
jmp 0x4025dc
push 4
push str.ref:
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x4024c8
mov al, byte [edi + 4]
add edi, 4
test al, al
je 0x4025dc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x460824
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4025dc
push 3
push 0x457148
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x40250f
mov al, byte [edi + 3]
add edi, 3
test al, al
je 0x4025dc
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov edx, ecx
mov esi, edi
mov edi, 0x461024
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x4025dc
push 4
push str.win:
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x402544
mov al, byte [edi + 4]
add edi, 4
test al, al
je 0x4025dc
push edi
call fcn.00439ca7
add esp, 4
mov dword [0x461824], eax
jmp 0x4025dc
push 6
push str.delay:
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x402590
mov al, byte [edi + 6]
add edi, 6
test al, al
je 0x4025dc
push edi
call fcn.00439ca7
add esp, 4
lea ecx, [esp + 0x14]
mov dword [0x461828], eax
push ecx
push 0
push eax
push 0x4022c0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_ResumeThread]
jmp 0x4025dc
push 3
push 0x457134
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x4025be
mov al, byte [edi + 3]
add edi, 3
test al, al
je 0x4025dc
push edi
call fcn.00439ca7
add esp, 4
mov dword [0x46182c], eax
jmp 0x4025dc
push 3
push 0x457130
push edi
call fcn.0044c030
add esp, 0xc
test eax, eax
jne 0x4025dc
mov dword [0x461830], 1
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
add ecx, 4
dec eax
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x20], eax
jne 0x40230b
pop edi
pop esi
pop ebp
pop ebx
add esp, 8
ret