Function at 0x419550
Capabilities:
Encode data using xor
Hide graphical window
Set console window title
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4759ef
mov eax, dword fs:[0]
push eax
sub esp, 0x138
mov eax, dword [0x487080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0xfc]
mov dword [ebp - 0xfc], 0x545d524f
mov dword [ebp - 0xf8], 0x60021473
mov dword [ebp - 0xf4], 0x48554b4b
mov dword [ebp - 0xf0], 0x1004c44
call fcn.0041a0c0
lea eax, [ebp - 0xfc]
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
push 4
push str.3.96
mov ecx, 0x487114
call fcn.0041dad0
call fcn.0046d070
test eax, eax
je 0x4195df
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x46d050
call fcn.0047351c
push 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
push eax
mov dword [ebp - 0x100], edx
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 0xc
mov dword [ebp - 0x104], 0
xorps xmm0, xmm0
mov dword [ebp - 0x100], 0
lea ecx, [ebp - 0x114]
movups xmmword [ebp - 0x114], xmm0
push 0x54
push str.http:__a104_125_3_135.deploy.static.akamaitechnologies.com_growtopia_server_data.php
call fcn.0041fb70
push ecx
lea eax, [ebp - 0x114]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0xe8]
call fcn.00407940
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x100]
cmp ecx, 0xf
jbe 0x41968b
mov edx, dword [ebp - 0x114]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419681
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419681
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00473531
add esp, 8
push 0x18
xorps xmm0, xmm0
mov dword [ebp - 0x104], 0
push str.Host:_www.growtopia1.com
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x100], 0xf
mov byte [ebp - 0x114], 0
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.0041fb70
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 3
push ecx
lea eax, [ebp - 0x10]
push eax
push ecx
lea ecx, [ebp - 0xf8]
call fcn.0041b5a0
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x144]
push 0x24
xorps xmm0, xmm0
mov dword [ebp - 0x134], 0
push str.version3.96protocol162platform0
movups xmmword [ebp - 0x144], xmm0
mov dword [ebp - 0x130], 0
call fcn.0041fb70
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x12c]
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x11c], 0
push str.POST
movups xmmword [ebp - 0x12c], xmm0
mov dword [ebp - 0x118], 0
call fcn.0041fb70
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0xf8]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x144]
push eax
lea eax, [ebp - 0x12c]
push eax
lea eax, [ebp - 0x6c]
push eax
lea ecx, [ebp - 0xe8]
call fcn.00407e90
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x118]
cmp ecx, 0xf
jbe 0x4197b0
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4197a6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4197fb
push ecx
push edx
call fcn.00473531
add esp, 8
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x130]
cmp ecx, 0xf
jbe 0x41980b
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x419801
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x419801
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00473531
add esp, 8
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
lea ecx, [ebp - 0xf8]
call fcn.0041d8f0
push fcn.0041c0b0
push 1
push 0x18
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb
push eax
call fcn.004731cb
sub esp, 0x18
mov dword [ebp - 0x30], 0
mov ecx, esp
xorps xmm0, xmm0
movq qword [ebp - 0x38], xmm0
push ecx
push dword [ebp - 0x40]
push dword [ebp - 0x44]
call fcn.0041ee90
lea ecx, [ebp - 0x38]
call fcn.00406880
add esp, 0x18
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xc
push eax
lea ecx, [ebp - 0x38]
call fcn.00406e20
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x4198b8
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4198ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4198ae
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00473531
add esp, 8
push 6
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.server
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0041fb70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0x38]
call fcn.00406cc0
mov byte [ebp - 4], 0xc
mov esi, eax
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x419926
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x41991c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4199a6
push ecx
push edx
call fcn.00473531
add esp, 8
test esi, esi
je 0x4199b6
push 4
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
push str.port
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
call fcn.0041fb70
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x38]
call fcn.00406cc0
add eax, 0x24
cmp dword [eax + 0x14], 0xf
jbe 0x41996d
mov eax, dword [eax]
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov byte [ebp - 4], 0xc
add esp, 4
mov ecx, dword [ebp - 0x14]
mov dword [0x4896ec], eax
cmp ecx, 0xf
jbe 0x4199b6
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4199ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4199ac
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00473531
add esp, 8
movaps xmm0, xmmword [0x480e30]
xor ecx, ecx
movaps xmm2, xmmword [0x480a40]
movaps xmm1, xmmword [0x480a00]
movd eax, xmm0
movups xmmword [ebp - 0xfc], xmm0
mov word [ebp - 0xec], 0
mov dword [ebp - 0x108], 0x7e7b755f
mov dword [ebp - 0x104], 0x466f0154
mov dword [ebp - 0x100], 0x100504a
movd xmm0, eax
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
movd xmm0, dword [ebp - 0xf8]
andps xmm1, xmm2
punpcklbw xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0xfc], xmm1
movaps xmm1, xmmword [str._______]
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
movd xmm0, dword [ebp - 0xf4]
andps xmm1, xmm2
punpcklbw xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0xf8], xmm1
movaps xmm1, xmmword [0x480a20]
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
movd xmm0, dword [ebp - 0xf0]
andps xmm1, xmm2
punpcklbw xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0xf4], xmm1
movaps xmm1, xmmword [0x480a30]
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
andps xmm1, xmm2
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0xf0], xmm1
nop dword [eax]
lea eax, [ecx + 0x1c]
xor byte [ebp + ecx - 0x108], al
inc ecx
cmp ecx, 0xa
jb 0x419ac0
push 0
mov byte [ebp - 0xfd], 0
mov dword [0x489678], 0x30
mov dword [0x48967c], 0x40
mov dword [0x489680], 0x412580
mov dword [0x489684], 0
mov dword [0x489688], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov dword [0x48968c], eax
xorps xmm0, xmm0
lea eax, [ebp - 0xfc]
mov dword [0x4896a4], 0
push 0x489678
movups xmmword [0x489690], xmm0
mov dword [0x4896a0], eax
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x48968c]
lea eax, [ebp - 0x108]
push 0
push 0
push 0x168
push 0x24e
push 0x64
push 0x64
push closesocket
push eax
lea eax, [ebp - 0xfc]
push eax
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 0xa
push eax
mov dword [0x489670], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x489670]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov byte [ebp - 4], 0xf
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x48966c], ecx
test ecx, ecx
je 0x419c32
push 0x489674
push 0x4896ac
push 0x40
push dword [0x489670]
xorps xmm0, xmm0
mov dword [0x4896c0], 0
push 1
movlpd qword [0x4896ac], xmm0
movlpd qword [0x4896b8], xmm0
mov dword [0x4896c8], 0
movlpd qword [0x4896d8], xmm0
mov dword [0x4896cc], 1
mov dword [0x4896c4], 1
mov dword [0x4896b4], 0
mov dword [0x4896d0], 1
mov dword [0x4896d4], 0x50
mov dword [0x4896e0], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
call fcn.004128f0
cmp byte [0x4870e8], 0
je 0x419de3
mov esi, dword [sym.imp.USER32.dll_PeekMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov dword [ebp - 0x104], 0xa
mov dword [ebp - 0x100], 0
cmp byte [0x4896a9], 0
je 0x419c7c
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
push eax
call esi
test eax, eax
je 0x419cb4
lea eax, [ebp - 0x2c]
push eax
call edi
lea eax, [ebp - 0x2c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x2c]
push eax
call esi
test eax, eax
jne 0x419c92
mov eax, dword [0x4896f8]
test eax, eax
je 0x419cc5
mov ecx, dword [eax + 0xc8]
jmp 0x419cc7
xor ecx, ecx
cmp dword [ecx + 0xc], 0
jne 0x419ce5
test eax, eax
je 0x419ce5
mov eax, dword [eax + 0xc8]
test eax, eax
je 0x419ce5
cmp dword [eax], 0
je 0x419ce5
call fcn.004508f0
call fcn.00450e90
call fcn.004309f0
call fcn.00415130
mov byte [ebp - 4], 0x11
call fcn.00433330
mov eax, dword [0x489674]
push 0
push 7
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x489674]
push 0
push 0x1b
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x489674]
push 0
push 0xae
push eax
mov ecx, dword [eax]
call dword [ecx + 0xe4]
mov eax, dword [0x489674]
push 0
mov ecx, dword [eax]
push ecx
mov dword [esp], 0x3f800000
push 0xff000000
push 3
push 0
push 0
push eax
call dword [ecx + 0xac]
mov eax, dword [0x489674]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x419d9a
call fcn.004336c0
mov eax, dword [0x4896f8]
xor ecx, ecx
mov eax, dword [eax + 0x1d4c]
mov eax, dword [eax]
add eax, 0x34
cmp byte [eax], cl
cmovne ecx, eax
call fcn.00450440
mov eax, dword [0x489674]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov eax, dword [0x489674]
push 0
push 0
push 0
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x44]
cmp eax, 0x88760868
jne 0x419dcb
mov eax, dword [0x489674]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x419dcb
call fcn.00412760
lea ecx, [ebp - 0x104]
call fcn.0041f3a0
cmp byte [0x4870e8], 0
jne 0x419c64
mov byte [ebp - 4], 0x12
mov ecx, dword [0x4896f8]
test ecx, ecx
je 0x419df9
mov edi, dword [ecx + 0xc8]
jmp 0x419dfb
xor edi, edi
lea esi, [ecx + 8]
mov dword [ebp - 0x100], esi
test ecx, ecx
je 0x419e78
mov esi, dword [ecx + 0xc8]
test esi, esi
je 0x419e72
cmp dword [esi], 0
je 0x419e72
mov edx, dword [esi + 4]
test edx, edx
je 0x419e31
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4896f8]
mov dword [esi + 4], 0
mov edx, dword [esi + 8]
test edx, edx
je 0x419e4b
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4896f8]
mov dword [esi + 8], 0
mov edx, dword [esi + 0xc]
test edx, edx
je 0x419e72
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4896f8]
mov dword [esi + 0xc], 0
mov eax, dword [ecx + 0x98]
mov dword [eax + 4], 0
mov esi, dword [ebp - 0x100]
mov edx, dword [edi]
test edx, edx
je 0x419e8a
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x4896f8]
mov dword [esi + 0xb8], 0
mov dword [esi + 0xc0], 0
test ecx, ecx
je 0x419ea8
dec dword [ecx + 0x36c]
push edi
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call edi
mov eax, dword [0x4896f8]
add esp, 4
test eax, eax
je 0x419ec5
mov esi, dword [eax + 0xc4]
jmp 0x419ec7
xor esi, esi
mov edx, dword [esi + 0x28]
lea ecx, [eax + 8]
mov dword [ebp - 0x100], ecx
test edx, edx
je 0x419ee9
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x4896f8]
mov ecx, dword [ebp - 0x100]
mov dword [ecx + 0xb4], 0
mov dword [ecx + 0xbc], 0
test eax, eax
je 0x419f07
dec dword [eax + 0x36c]
push esi
call edi
mov esi, dword [0x4896f8]
add esp, 4
mov ecx, esi
call fcn.00432170
cmp dword [0x4896f8], esi
jne 0x419f2c
mov dword [0x4896f8], 0
test esi, esi
je 0x419f4c
mov ecx, esi
call fcn.004409f0
mov eax, dword [0x4896f8]
test eax, eax
je 0x419f46
dec dword [eax + 0x36c]
push esi
call edi
add esp, 4
mov byte [ebp - 4], 0x13
mov ecx, dword [0x489674]
test ecx, ecx
je 0x419f6a
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x489674], 0
mov ecx, dword [0x48966c]
test ecx, ecx
je 0x419f84
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x48966c], 0
push dword [0x489670]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x48968c]
push dword [0x4896a0]
call dword [sym.imp.USER32.dll_UnregisterClassW]
lea ecx, [ebp - 0x38]
call fcn.0041d460
lea ecx, [ebp - 0x6c]
call fcn.004098a0
lea ecx, [ebp - 0xe8]
call fcn.0040be90
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00472ead
mov esp, ebp
pop ebp
ret