Function at 0x403271
Capabilities:
Create process on windows
Create thread
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
cmp dword [ebp + 0xc], 0x400
jne 0x404d47
cmp dword [ebp + 0x10], 0xffffffff
jne 0x403361
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b58be
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40331c
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40332c
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff00ff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
jmp 0x404d42
cmp dword [ebp + 0x10], 0xfffffffe
jne 0x403515
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b58e3
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x4033be
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4033ce
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push dword [ebp + 0x14]
push 1
mov ebx, 0x168
call fcn.00481860
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x80000301
push 0
push dword [0x740595]
push 1
mov ebx, 0x168
call fcn.00481860
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push 0x4b590d
push dword [ebp - 0x28]
push 0x4b5919
mov ecx, 4
call fcn.0040106b
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403484
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403494
push ebx
call fcn.0047cbd4
add esp, 4
push 0x41
mov eax, 0x4b5949
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4034d0
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4034e0
push ebx
call fcn.0047cbd4
add esp, 4
cmp dword [ebp - 0x38], 1
je 0x40350b
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x404d51
call fcn.00404dee
jmp 0x404d42
cmp dword [ebp + 0x10], 1
jne 0x403e7a
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0x80ff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b594f
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x4035a2
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4035b2
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0x64
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
cmp dword [ebp + 0x14], 0
jne 0x4036ec
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5989
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x403628
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403638
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 1
push 0x64
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x4b5989
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4036d7
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4036e7
push ebx
call fcn.0047cbd4
add esp, 4
jmp 0x403e75
push 0
push dword [ebp + 0x14]
call fcn.00404dff
mov dword [ebp - 4], eax
fild dword [ebp + 0x14]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fadd qword [0x4b59aa]
fstp qword [ebp - 0x30]
push 0x80000301
push 0
push dword [ebp - 4]
fld qword [ebp - 0x30]
call fcn.00402256
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x910
call fcn.00482350
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x403751
push ebx
call fcn.0047cbd4
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push dword [ebp + 0x14]
push 1
mov ebx, 0x2c
mov eax, 0x48a6e0
call fcn.00481600
add esp, 0x10
lea eax, [ebp - 8]
push eax
call fcn.00404e63
mov ebx, dword [0x740599]
add ebx, 0x18
mov dword [ebp - 0x24], ebx
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00481e00
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call fcn.004031d4
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4037db
push ebx
call fcn.0047cbd4
add esp, 4
cmp dword [ebp - 0x2c], 0
je 0x403b0f
mov ebx, dword [0x740599]
add ebx, 0x18
mov dword [ebp - 0x24], ebx
push dword [ebp - 0x24]
call fcn.0040617a
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x133c6aa
jle 0x40381d
cmp dword [ebp - 0xc], 0x1348d2f
jge 0x40381d
mov eax, 1
jmp 0x40381f
xor eax, eax
test eax, eax
je 0x403b0f
mov dword [ebp - 0x24], esp
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x40384b
push 6
call fcn.0047cbda
add esp, 4
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x90
mov eax, 0x48a950
call fcn.00481600
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x30], eax
je 0x403b0f
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b59b2
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x4038cc
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4038dc
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff00
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov ebx, dword [0x740599]
add ebx, 0x18
mov dword [ebp - 0x24], ebx
push 1
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x24]
call fcn.00406446
test eax, eax
je 0x403aa9
push 0x4b59c8
push dword [0x740541]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x40395d
push ebx
call fcn.0047cbd4
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402588
test eax, eax
je 0x403998
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x403985
mov eax, 0x4b583b
push eax
push 1
mov ebx, 0x244
call fcn.004823a0
add esp, 0x10
push htons
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x4039ab
mov eax, 0x4b57eb
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4039bf
mov eax, 0x4b583b
push eax
push 2
mov ebx, 0x26c
call fcn.004823b0
add esp, 0x1c
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, 0x4b59d6
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.0040665c
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403a02
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x14]
push eax
call fcn.0040665c
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push 1
push 0
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x403a36
add eax, 8
push eax
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x403a41
add eax, 8
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
nop
nop
nop
cmp dword [ebp - 0x38], esp
je 0x403a63
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403a73
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x403a83
push ebx
call fcn.0047cbd4
add esp, 4
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x404d51
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x4b59db
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403aff
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403b0f
push ebx
call fcn.0047cbd4
add esp, 4
push 1
push 0
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push 0x80000301
push 0
push 0x104
push 1
mov ebx, 0x184
call fcn.00482450
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x403b5d
push ebx
call fcn.0047cbd4
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], esp
push 0x104
push dword [ebp - 0x18]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x403b8d
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [0x74059d]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esp
push 0
push 0x80
push 3
push 0
push 0
push connect
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
nop
nop
nop
nop
cmp dword [ebp - 0x28], esp
je 0x403bd6
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x74059d]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], 0xffffffff
je 0x403e54
mov ebx, dword [0x74059d]
add ebx, 4
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x74059d]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0
push 2
push 0
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x403c42
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x74059d]
add ebx, 4
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], 0
je 0x403e54
mov ebx, dword [0x74059d]
add ebx, 8
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x74059d]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], esp
push 2
push 0
push 0
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x403ca7
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x74059d]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
nop
nop
nop
nop
cmp dword [ebp - 0x28], esp
je 0x403ce8
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [0x74059d]
add ebx, 0xc
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x74059d]
add ebx, 4
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0
push 4
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x403d38
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x74059d]
add ebx, 0xc
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], 0
je 0x403e54
mov ebx, dword [0x74059d]
add ebx, 0x10
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x74059d]
add ebx, 0xc
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call fcn.004067f4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x74059d]
add ebx, 0x10
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x74059d]
add ebx, 0xc
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fsub qword [ebp - 0x38]
fstp qword [ebp - 0x40]
mov ebx, dword [0x74059d]
add ebx, 8
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
fild dword [ebx]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x40]
fsub qword [ebp - 0x4c]
ftst
fnstsw ax
test ah, 1
je 0x403dd2
fchs
fcomp qword [0x4b57fb]
fnstsw ax
test ah, 0x41
jne 0x403e54
mov dword [ebp - 0x24], esp
push 0
push 0
push 0
push 0x407699
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x403e20
push 6
call fcn.0047cbda
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x403e45
push 6
call fcn.0047cbda
add esp, 4
jmp 0x404d51
push 0
push 0x19
push 0x400
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
jmp 0x404d42
cmp dword [ebp + 0x10], 0x19
jne 0x4040cf
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0x80ff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [0x7405a1], 0
mov dword [0x7405a5], 0
mov dword [0x7405a9], 0
mov dword [0x7405ad], 0
mov dword [0x7405b1], 0
mov dword [0x7405b5], 0
mov dword [0x7405b9], 0
mov dword [0x7405bd], 0
mov dword [0x7405c1], 0
mov dword [0x7405c5], 0
mov dword [0x7405c9], 0
mov dword [0x7405cd], 0
mov dword [0x7405d1], 0
mov dword [0x7405d5], 0
mov dword [0x7405d9], 0
mov dword [0x7405dd], 0
mov dword [0x7405e1], 0
mov dword [0x7405e5], 0
cmp dword [0x7405e9], 0
je 0x403fa3
push 0x80000301
push 0
push dword [0x7405e9]
push 1
mov ebx, 0x2c
mov eax, 0x48a6e0
call fcn.00481600
add esp, 0x10
mov dword [0x7405e9], 0
mov ebx, dword [0x740599]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x403fc4
mov eax, 0x4b583b
push eax
push 1
mov ebx, 0x130
call fcn.00481df0
add esp, 0x10
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jle 0x4040a9
push 1
push 0
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, dword [0x740599]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esp
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call dword [0x74078d]
nop
nop
nop
nop
cmp dword [ebp - 0x28], esp
je 0x40402d
push 6
call fcn.0047cbda
add esp, 4
mov ebx, dword [0x740599]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
push dword [ebp - 0x24]
call fcn.0040683b
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push 0
push 0
push dword [ebp - 0x28]
push 0x408c8e
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40407f
push 6
call fcn.0047cbda
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x4040a4
push 6
call fcn.0047cbda
add esp, 4
jmp 0x4040ca
push 0
push 5
push 0x400
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
jmp 0x404d42
cmp dword [ebp + 0x10], 0xfffffffd
jne 0x40424b
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b59f4
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40412c
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40413c
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4041d7
push ebx
call fcn.0047cbd4
add esp, 4
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x404210
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x404220
push ebx
call fcn.0047cbd4
add esp, 4
push 0x3e8
call fcn.00406857
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x7405ed], 1
jmp 0x404d42
cmp dword [ebp + 0x10], 0xfffffffc
jne 0x4043c7
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5a0d
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x4042a8
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4042b8
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x404353
push ebx
call fcn.0047cbd4
add esp, 4
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40438c
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40439c
push ebx
call fcn.0047cbd4
add esp, 4
push 0x3e8
call fcn.00406857
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x7405ed], 1
jmp 0x404d42
cmp dword [ebp + 0x10], 2
jne 0x4044a1
mov dword [0x7405cd], 4
cmp dword [0x7405f1], 0
jne 0x40441c
push 0x80000301
push 0
push 0x19
push ioctlsocket
push 0
push 0x409be7
push 2
mov ebx, 0x10
mov eax, 0x48a640
call fcn.00481600
add esp, 0x1c
mov dword [0x7405f1], eax
push 0x80000301
push 0
push 5
push 1
mov ebx, 0x67c
call fcn.00482480
add esp, 0x10
mov dword [ebp - 0x24], esp
push 0
push 0
push 0
push 0x409f24
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404477
push 6
call fcn.0047cbda
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40449c
push 6
call fcn.0047cbda
add esp, 4
jmp 0x404d42
cmp dword [ebp + 0x10], 0x14
jne 0x40457b
mov dword [0x7405cd], 4
cmp dword [0x7405f1], 0
jne 0x4044f6
push 0x80000301
push 0
push 0x19
push ioctlsocket
push 0
push 0x409be7
push 2
mov ebx, 0x10
mov eax, 0x48a640
call fcn.00481600
add esp, 0x1c
mov dword [0x7405f1], eax
push 0x80000301
push 0
push 5
push 1
mov ebx, 0x67c
call fcn.00482480
add esp, 0x10
mov dword [ebp - 0x24], esp
push 0
push 0
push 1
push 0x409f24
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404551
push 6
call fcn.0047cbda
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x404576
push 6
call fcn.0047cbda
add esp, 4
jmp 0x404d42
cmp dword [ebp + 0x10], 3
jne 0x404676
push 1
push 0
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov dword [0x7405cd], 1
cmp dword [0x7405f5], 0
jne 0x4045e9
push 0x80000301
push 0
push 0xa
push ioctlsocket
push 0
push 0x40b71d
push 2
mov ebx, 0x10
mov eax, 0x48a640
call fcn.00481600
add esp, 0x1c
mov dword [0x7405f5], eax
push 0x80000301
push 0
push 5
push 1
mov ebx, 0x67c
call fcn.00482480
add esp, 0x10
mov dword [0x7405dd], 0
mov dword [ebp - 0x24], esp
push 0
push 0
push dword [ebp + 0x14]
push 0x40ba78
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x40464c
push 6
call fcn.0047cbda
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x404671
push 6
call fcn.0047cbda
add esp, 4
jmp 0x404d42
cmp dword [ebp + 0x10], 4
jne 0x404757
push 0x7405f9
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x64
jge 0x404743
fild dword [0x7405bd]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [0x7405b5]
fstp qword [ebp - 0x30]
fdiv qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fmul qword [0x4b5a21]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.00402256
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push 0
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 2
mov ebx, 0x68
call fcn.004824b0
add esp, 0x1c
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
fld qword [ebp - 0x38]
call fcn.00402256
mov dword [ebp - 0x1c], eax
push 1
push dword [ebp - 0x1c]
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push 0x7405f9
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x404d42
cmp dword [ebp + 0x10], 5
jne 0x404842
mov dword [0x7405cd], 2
push 1
push 0x64
push 0x740581
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5a29
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x4047d7
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4047e7
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff00ff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x3e8
call fcn.00406857
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x7405ed], 1
jmp 0x404d42
cmp dword [ebp + 0x10], 0xfffffff6
jne 0x4049be
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5a41
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40489f
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4048af
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40494a
push ebx
call fcn.0047cbd4
add esp, 4
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x404983
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x404993
push ebx
call fcn.0047cbd4
add esp, 4
push 0x3e8
call fcn.00406857
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x7405ed], 1
jmp 0x404d42
cmp dword [ebp + 0x10], 0xfffffff5
jne 0x404b96
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5a5b
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x404a1b
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x404a2b
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x404ab1
push ebx
call fcn.0047cbd4
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0x14]
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
jne 0x404ace
mov eax, 0x4b583b
push eax
push reloc.WS2_32.dll_connect
push 0
push 0x4b5a8a
push 3
mov ebx, 0x150
mov eax, 0x48b5b0
call fcn.00481600
add esp, 0x28
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x404b05
push ebx
call fcn.0047cbd4
add esp, 4
mov eax, dword [ebp - 0x38]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x404b19
push ebx
call fcn.0047cbd4
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x20]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x404b6b
push ebx
call fcn.0047cbd4
add esp, 4
push 0x3e8
call fcn.00406857
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x7405ed], 1
jmp 0x404d42
cmp dword [ebp + 0x10], 0xffffffe2
jne 0x404d42
push 0x80000301
push 0
push dword [ebp + 0x14]
push reloc.WS2_32.dll_connect
push 0
push 0x4b5a9b
push 2
mov ebx, 0x150
mov eax, 0x48b5b0
call fcn.00481600
add esp, 0x1c
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x404be4
push ebx
call fcn.0047cbd4
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
lea eax, [ebp - 0x20]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x404c33
push ebx
call fcn.0047cbd4
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040300b
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x74057d
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x404cce
push ebx
call fcn.0047cbd4
add esp, 4
push 0x10
mov eax, 0x4b5949
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x740591
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x404d07
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x404d17
push ebx
call fcn.0047cbd4
add esp, 4
push 0x3e8
call fcn.00406857
push 0
push 0x19
push 0x400
push 0x740571
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
jmp 0x404d51
cmp dword [ebp + 0xc], 0x4a
jne 0x404d51
jmp 0x404d60
mov dword [ebp - 0x24], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [0x740575]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404d91
push 6
call fcn.0047cbda
add esp, 4
jmp 0x404d96
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x404da7
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x404db7
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x404dc7
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x404dd7
push ebx
call fcn.0047cbd4
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x404de7
push ebx
call fcn.0047cbd4
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10