Function at 0x40a780
Capabilities:
Contain obfuscated stackstrings
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cbe2d
mov eax, dword fs:[0]
push eax
sub esp, 0x378
mov eax, dword [0x504628]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, dword [ebp + 8]
xor edi, edi
push edi
push 0x66
mov ecx, ebx
mov dword [ebp - 0x380], ebx
call fcn.0044ea2f
mov dword [ebp - 4], edi
mov dword [ebx], vtable.CLinLauncherDlg.0
mov esi, vtable.CBitmap.0
mov dword [ebx + 0x8c], edi
mov dword [ebx + 0x88], esi
mov dword [ebx + 0x94], edi
mov dword [ebx + 0x90], esi
mov dword [ebx + 0x9c], edi
mov dword [ebx + 0x98], esi
mov dword [ebx + 0xa4], edi
mov dword [ebx + 0xa0], esi
mov dword [ebx + 0xac], edi
mov dword [ebx + 0xa8], esi
mov dword [ebx + 0xb4], edi
mov dword [ebx + 0xb0], esi
mov dword [ebx + 0xbc], edi
mov dword [ebx + 0xb8], esi
mov dword [ebx + 0xc4], edi
mov dword [ebx + 0xc0], esi
mov dword [ebx + 0xcc], edi
mov dword [ebx + 0xc8], esi
push 0x433240
push 0x433460
push 8
push 8
lea eax, [ebx + 0xd0]
push eax
mov byte [ebp - 4], 9
call fcn.0045cd2d
mov dword [ebx + 0x114], edi
mov dword [ebx + 0x110], esi
mov dword [ebx + 0x11c], edi
mov dword [ebx + 0x118], esi
mov dword [ebx + 0x124], edi
mov dword [ebx + 0x120], esi
mov dword [ebx + 0x12c], edi
mov dword [ebx + 0x128], esi
mov dword [ebx + 0x134], edi
mov dword [ebx + 0x130], esi
mov dword [ebx + 0x13c], edi
mov dword [ebx + 0x138], esi
mov dword [ebx + 0x144], edi
mov dword [ebx + 0x140], esi
mov dword [ebx + 0x14c], edi
mov dword [ebx + 0x148], esi
mov dword [ebx + 0x154], edi
mov dword [ebx + 0x150], esi
mov dword [ebx + 0x15c], edi
mov dword [ebx + 0x158], esi
mov dword [ebx + 0x164], edi
mov dword [ebx + 0x160], esi
mov dword [ebx + 0x180], edi
mov dword [ebx + method.CFont.virtual_0], vtable.CFont.0
lea esi, [ebx + 0x19c]
mov ecx, esi
mov byte [ebp - 4], 0x16
call fcn.00447274
mov dword [esi], vtable.CUpdateEdit.0
lea esi, [ebx + 0x1f0]
mov ecx, esi
mov byte [ebp - 4], 0x17
call fcn.00447274
mov dword [esi], vtable.CExplorer1.0
mov byte [ebp - 4], 0x18
call fcn.0044384a
call fcn.0044384a
mov eax, dword [eax + 0xc]
push 0x80
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [ebx + 0x74], eax
call fcn.0042e6a0
lea ecx, [ebp - 0xb4]
push ecx
lea edx, [ebp - 0x28]
push edx
mov byte [ebp - 0x28], 0x77
mov byte [ebp - 0x27], 0x69
mov byte [ebp - 0x26], 0x6e
mov byte [ebp - 0x25], 0x69
mov byte [ebp - 0x24], 0x6e
mov byte [ebp - 0x23], 0x65
mov byte [ebp - 0x22], 0x74
mov byte [ebp - 0x21], 0x2e
mov byte [ebp - 0x20], 0x64
mov byte [ebp - 0x1f], 0x6c
mov byte [ebp - 0x1e], 0x6c
mov byte [ebp - 0x1d], 0
mov byte [ebp - 0xb4], 0x49
mov byte [ebp - 0xb3], 0x6e
mov byte [ebp - 0xb2], 0x74
mov byte [ebp - 0xb1], 0x65
mov byte [ebp - 0xb0], 0x72
mov byte [ebp - 0xaf], 0x6e
mov byte [ebp - 0xae], 0x65
mov byte [ebp - 0xad], 0x74
mov byte [ebp - 0xac], 0x4f
mov byte [ebp - 0xab], 0x70
mov byte [ebp - 0xaa], 0x65
mov byte [ebp - 0xa9], 0x6e
mov byte [ebp - 0xa8], 0x57
mov byte [ebp - 0xa7], 0
call fcn.00472820
mov dword [0x50ed0c], eax
lea eax, [ebp - 0x68]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 0x68], 0x49
mov byte [ebp - 0x67], 0x6e
mov byte [ebp - 0x66], 0x74
mov byte [ebp - 0x65], 0x65
mov byte [ebp - 0x64], 0x72
mov byte [ebp - 0x63], 0x6e
mov byte [ebp - 0x62], 0x65
mov byte [ebp - 0x61], 0x74
mov byte [ebp - 0x60], 0x4f
mov byte [ebp - 0x5f], 0x70
mov byte [ebp - 0x5e], 0x65
mov byte [ebp - 0x5d], 0x6e
mov byte [ebp - 0x5c], 0x55
mov byte [ebp - 0x5b], 0x72
mov byte [ebp - 0x5a], 0x6c
mov byte [ebp - 0x59], 0x57
mov byte [ebp - 0x58], 0
call fcn.00472820
lea edx, [ebp - 0x68]
mov dword [0x50ed10], eax
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.00472820
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x28]
push edx
mov dword [0x50ed14], eax
mov byte [ebp - 0x7c], 0x49
mov byte [ebp - 0x7b], 0x6e
mov byte [ebp - 0x7a], 0x74
mov byte [ebp - 0x79], 0x65
mov byte [ebp - 0x78], 0x72
mov byte [ebp - 0x77], 0x6e
mov byte [ebp - 0x76], 0x65
mov byte [ebp - 0x75], 0x74
mov byte [ebp - 0x74], 0x4f
mov byte [ebp - 0x73], 0x70
mov byte [ebp - 0x72], 0x65
mov byte [ebp - 0x71], 0x6e
mov byte [ebp - 0x70], 0x55
mov byte [ebp - 0x6f], 0x72
mov byte [ebp - 0x6e], 0x6c
mov byte [ebp - 0x6d], 0x41
mov byte [ebp - 0x6c], 0
call fcn.00472820
mov dword [0x50ed28], eax
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp - 0x28]
push ecx
call fcn.00472820
lea edx, [ebp - 0xc4]
mov dword [0x50ed2c], eax
push edx
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 0xc4], 0x48
mov byte [ebp - 0xc3], 0x74
mov byte [ebp - 0xc2], 0x74
mov byte [ebp - 0xc1], 0x70
mov byte [ebp - 0xc0], 0x51
mov byte [ebp - 0xbf], 0x75
mov byte [ebp - 0xbe], 0x65
mov byte [ebp - 0xbd], 0x72
mov byte [ebp - 0xbc], 0x79
mov byte [ebp - 0xbb], 0x49
mov byte [ebp - 0xba], 0x6e
mov byte [ebp - 0xb9], 0x66
mov byte [ebp - 0xb8], 0x6f
mov byte [ebp - 0xb7], 0x57
mov byte [ebp - 0xb6], 0
call fcn.00472820
lea ecx, [ebp - 0x10c]
push ecx
lea edx, [ebp - 0x28]
push edx
mov dword [0x50ed18], eax
mov byte [ebp - 0x10c], 0x49
mov byte [ebp - 0x10b], 0x6e
mov byte [ebp - 0x10a], 0x74
mov byte [ebp - 0x109], 0x65
mov byte [ebp - 0x108], 0x72
mov byte [ebp - 0x107], 0x6e
mov byte [ebp - 0x106], 0x65
mov byte [ebp - 0x105], 0x74
mov byte [ebp - 0x104], 0x43
mov byte [ebp - 0x103], 0x6c
mov byte [ebp - 0x102], 0x6f
mov byte [ebp - 0x101], 0x73
mov byte [ebp - 0x100], 0x65
mov byte [ebp - 0xff], 0x48
mov byte [ebp - 0xfe], 0x61
mov byte [ebp - 0xfd], 0x6e
mov byte [ebp - 0xfc], 0x64
mov byte [ebp - 0xfb], 0x6c
mov byte [ebp - 0xfa], 0x65
mov byte [ebp - 0xf9], 0
call fcn.00472820
mov dword [0x50ed1c], eax
mov byte [ebp - 0xf8], 0x49
mov byte [ebp - 0xf7], 0x6e
lea eax, [ebp - 0xf8]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 0xf6], 0x74
mov byte [ebp - 0xf5], 0x65
mov byte [ebp - 0xf4], 0x72
mov byte [ebp - 0xf3], 0x6e
mov byte [ebp - 0xf2], 0x65
mov byte [ebp - 0xf1], 0x74
mov byte [ebp - 0xf0], 0x52
mov byte [ebp - 0xef], 0x65
mov byte [ebp - 0xee], 0x61
mov byte [ebp - 0xed], 0x64
mov byte [ebp - 0xec], 0x46
mov byte [ebp - 0xeb], 0x69
mov byte [ebp - 0xea], 0x6c
mov byte [ebp - 0xe9], 0x65
mov byte [ebp - 0xe8], 0
call fcn.00472820
lea edx, [ebp - 0xa4]
mov dword [0x50ed20], eax
push edx
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 0xa4], 0x49
mov byte [ebp - 0xa3], 0x6e
mov byte [ebp - 0xa2], 0x74
mov byte [ebp - 0xa1], 0x65
mov byte [ebp - 0xa0], 0x72
mov byte [ebp - 0x9f], 0x6e
mov byte [ebp - 0x9e], 0x65
mov byte [ebp - 0x9d], 0x74
mov byte [ebp - 0x9c], 0x43
mov byte [ebp - 0x9b], 0x6f
mov byte [ebp - 0x9a], 0x6e
mov byte [ebp - 0x99], 0x6e
mov byte [ebp - 0x98], 0x65
mov byte [ebp - 0x97], 0x63
mov byte [ebp - 0x96], 0x74
mov byte [ebp - 0x95], 0x57
mov byte [ebp - 0x94], 0
call fcn.00472820
lea ecx, [ebp - 0xa4]
push ecx
lea edx, [ebp - 0x28]
push edx
mov dword [0x50ed30], eax
call fcn.00472820
mov dword [0x50ed34], eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0x28]
push ecx
mov byte [ebp - 0x90], 0x49
mov byte [ebp - 0x8f], 0x6e
mov byte [ebp - 0x8e], 0x74
mov byte [ebp - 0x8d], 0x65
mov byte [ebp - 0x8c], 0x72
mov byte [ebp - 0x8b], 0x6e
mov byte [ebp - 0x8a], 0x65
mov byte [ebp - 0x89], 0x74
mov byte [ebp - 0x88], 0x43
mov byte [ebp - 0x87], 0x6f
mov byte [ebp - 0x86], 0x6e
mov byte [ebp - 0x85], 0x6e
mov byte [ebp - 0x84], 0x65
mov byte [ebp - 0x83], 0x63
mov byte [ebp - 0x82], 0x74
mov byte [ebp - 0x81], 0x41
mov byte [ebp - 0x80], 0
call fcn.00472820
lea edx, [ebp - 0x90]
mov dword [0x50ed38], eax
push edx
lea eax, [ebp - 0x28]
push eax
call fcn.00472820
mov dword [0x50ed3c], eax
mov al, 0x8b
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x19], al
mov ecx, 0x59
mov word [ebp - 0x1e4], cx
mov eax, 0x75
mov word [ebp - 0x1e0], ax
mov edx, 0x6f
mov word [ebp - 0x1e2], dx
mov ecx, 0x72
mov word [ebp - 0x1de], cx
mov edx, 0x20
mov word [ebp - 0x1dc], dx
mov word [ebp - 0x1d6], dx
mov eax, 0x50
mov word [ebp - 0x1da], ax
mov ecx, 0x43
mov word [ebp - 0x1d8], cx
mov eax, 0x6d
mov word [ebp - 0x1d4], ax
mov edx, 0x79
mov word [ebp - 0x1d0], dx
mov ecx, 0x61
mov word [ebp - 0x1d2], cx
mov eax, 0x20
mov word [ebp - 0x1ce], ax
mov edx, 0x61
mov word [ebp - 0x1ca], dx
mov ecx, 0x68
mov word [ebp - 0x1cc], cx
mov eax, 0x76
mov word [ebp - 0x1c8], ax
mov ecx, 0x65
mov edx, 0x20
mov word [ebp - 0x1c4], dx
mov edx, ecx
mov word [ebp - 0x1c6], cx
mov word [ebp - 0x1c0], cx
mov word [ebp - 0x1be], dx
mov eax, 0x62
mov word [ebp - 0x1c2], ax
mov eax, 0x6e
mov word [ebp - 0x1bc], ax
mov word [ebp - 0x1b6], ax
mov ecx, 0x20
mov word [ebp - 0x1ba], cx
mov edx, 0x69
mov word [ebp - 0x1b8], dx
mov edx, 0x65
mov eax, 0x63
mov word [ebp - 0x1b0], ax
mov ecx, 0x66
mov word [ebp - 0x1b4], cx
mov word [ebp - 0x1b2], dx
mov word [ebp - 0x1ac], dx
mov eax, 0x64
mov ecx, 0x74
mov word [ebp - 0x1aa], ax
mov edx, 0x62
mov word [ebp - 0x1ae], cx
mov ecx, 0x20
mov word [ebp - 0x1a6], dx
mov eax, 0x79
mov edx, 0x61
mov word [ebp - 0x1a4], ax
mov eax, ecx
mov word [ebp - 0x1a8], cx
mov word [ebp - 0x1a2], cx
mov word [ebp - 0x1a0], dx
mov ecx, 0x76
mov edx, 0x69
mov word [ebp - 0x19e], ax
mov word [ebp - 0x19c], cx
mov word [ebp - 0x19a], dx
mov eax, 0x72
mov ecx, 0x75
mov edx, 0x73
mov byte [ebp - 0x1b], 0xff
mov byte [ebp - 0x1a], 0x55
mov byte [ebp - 0x18], 0xec
mov word [ebp - 0x198], ax
mov word [ebp - 0x196], cx
mov word [ebp - 0x194], dx
mov edx, 0xa
mov word [ebp - 0x18e], dx
mov eax, 0x2e
mov word [ebp - 0x192], ax
mov ecx, 0xd
mov word [ebp - 0x190], cx
mov edx, 0x75
mov word [ebp - 0x188], dx
mov eax, 0x43
mov word [ebp - 0x18c], ax
mov ecx, 0x61
mov word [ebp - 0x18a], cx
mov edx, 0x64
mov word [ebp - 0x182], dx
mov eax, 0x73
mov word [ebp - 0x186], ax
mov ecx, 0x65
mov word [ebp - 0x184], cx
mov edx, 0x6e
mov word [ebp - 0x17c], dx
mov eax, 0x20
mov word [ebp - 0x180], ax
mov word [ebp - 0x17a], ax
mov ecx, 0x61
mov word [ebp - 0x17e], cx
mov edx, 0x63
mov eax, edx
mov word [ebp - 0x176], dx
mov word [ebp - 0x174], ax
mov ecx, 0x41
mov word [ebp - 0x178], cx
mov edx, 0x73
mov eax, edx
mov word [ebp - 0x170], dx
mov word [ebp - 0x16e], ax
mov ecx, 0x65
mov word [ebp - 0x172], cx
mov ecx, 0x20
mov word [ebp - 0x16c], cx
mov edx, 0x56
mov word [ebp - 0x16a], dx
mov eax, 0x69
mov word [ebp - 0x168], ax
mov ecx, 0x6f
mov word [ebp - 0x166], cx
mov edx, 0x6c
mov word [ebp - 0x164], dx
mov eax, 0x61
mov word [ebp - 0x162], ax
mov ecx, 0x74
mov word [ebp - 0x160], cx
mov edx, 0x69
mov word [ebp - 0x15e], dx
mov eax, 0x6f
mov word [ebp - 0x15c], ax
mov ecx, 0x6e
mov edx, 0x20
mov eax, 0x69
mov word [ebp - 0x15a], cx
mov word [ebp - 0x158], dx
mov word [ebp - 0x156], ax
mov word [ebp - 0x154], cx
mov word [ebp - 0x152], dx
mov eax, 0x6d
mov ecx, 0x6f
mov edx, 0x64
mov word [ebp - 0x150], ax
mov word [ebp - 0x14e], cx
mov word [ebp - 0x14c], dx
mov eax, 0x75
mov ecx, 0x6c
mov edx, 0x65
mov word [ebp - 0x14a], ax
mov word [ebp - 0x148], cx
mov word [ebp - 0x146], dx
mov eax, 0x20
mov ecx, 0x61
mov edx, 0x74
mov word [ebp - 0x144], ax
mov word [ebp - 0x142], cx
mov word [ebp - 0x140], dx
mov word [ebp - 0x13e], ax
mov ecx, 0x30
mov edx, ecx
mov word [ebp - 0x13c], cx
mov word [ebp - 0x13a], dx
mov eax, 0x32
mov word [ebp - 0x138], ax
mov ecx, 0x33
mov word [ebp - 0x136], cx
mov edx, 0x3a
mov word [ebp - 0x134], dx
mov eax, 0x25
mov word [ebp - 0x132], ax
mov ecx, 0x30
mov word [ebp - 0x130], cx
mov edx, 0x38
mov word [ebp - 0x12e], dx
xor edx, edx
mov eax, 0x58
mov word [ebp - 0x12c], ax
mov ecx, 0x2e
mov word [ebp - 0x12a], cx
mov word [ebp - 0x128], dx
mov ecx, 0x69
mov eax, 0x57
mov edx, 0x6e
mov word [ebp - 0x124], ax
mov word [ebp - 0x122], cx
mov word [ebp - 0x120], dx
mov word [ebp - 0x11c], cx
mov eax, 0x4c
mov edx, 0x63
mov ecx, 0x6e
mov word [ebp - 0x11e], ax
mov word [ebp - 0x11a], dx
mov eax, 0x65
mov word [ebp - 0x116], cx
mov edx, 0x73
xor ecx, ecx
mov word [ebp - 0x118], ax
mov word [ebp - 0x114], dx
mov word [ebp - 0x112], ax
mov word [ebp - 0x110], cx
call fcn.00403080
mov eax, dword [0x50ed0c]
mov ecx, dword [ebp - 0x1c]
cmp dword [eax], ecx
jne 0x40bcaf
add eax, 4
cmp byte [eax], 0xec
jne 0x40bcaf
mov eax, dword [0x50ed10]
cmp dword [eax], ecx
jne 0x40bc80
add eax, 4
cmp byte [eax], 0xec
jne 0x40bc80
mov edx, dword [0x50ed28]
mov eax, edx
cmp dword [eax], ecx
jne 0x40b2b1
add eax, 4
cmp byte [eax], 0xec
je 0x40b2ce
cmp byte [edx], 0x6a
jne 0x40bc4d
cmp byte [edx + 1], 0x24
jne 0x40bc4d
cmp byte [edx + 2], 0x68
jne 0x40bc4d
mov eax, dword [0x50ed18]
cmp dword [eax], ecx
jne 0x40bc2f
add eax, 4
cmp byte [eax], 0xec
jne 0x40bc2f
mov eax, dword [0x50ed20]
cmp dword [eax], ecx
jne 0x40bbf9
add eax, 4
cmp byte [eax], 0xec
jne 0x40bbf9
mov eax, dword [0x50ed30]
cmp dword [eax], ecx
jne 0x40bbc3
add eax, 4
cmp byte [eax], 0xec
jne 0x40bbc3
mov eax, dword [0x50ed38]
cmp dword [eax], ecx
jne 0x40bba2
add eax, 4
cmp byte [eax], 0xec
jne 0x40bba2
call fcn.004731e0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00473a10
push 0x409b30
push 0x50ed14
call fcn.00473ad0
push 0x40a0e0
push 0x50ed28
call fcn.00473ad0
push 0x40a470
push 0x50ed30
call fcn.00473ad0
push 0x40a4b0
push 0x50ed38
call fcn.00473ad0
call fcn.00473450
test eax, eax
je 0x40b395
mov eax, ebx
call fcn.004235f0
push edi
call fcn.0045c60e
push 0x80000
lea edx, [ebp - 0x28]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
call fcn.004018a0
mov edi, dword [0x50ed20]
add esp, 4
push 0x20000
call fcn.00401200
push eax
mov ecx, edi
call fcn.00401710
push 0xc
call fcn.0043c9d2
add esp, 0xc
push 0xc
mov dword [0x50ed40], eax
call fcn.0043c9d2
add esp, 4
push 0xc
mov dword [0x50ed44], eax
call fcn.0043c9d2
add esp, 4
push 0xc
mov dword [0x50ed48], eax
call fcn.0043c9d2
add esp, 4
push 0xc
mov dword [0x50ed4c], eax
call fcn.0043c9d2
add esp, 4
push 0xc
mov dword [0x50ed50], eax
call fcn.0043c9d2
add esp, 4
push 0xc
mov dword [0x50ed54], eax
call fcn.0043c9d2
add esp, 4
push 0xc
mov dword [0x50ed58], eax
call fcn.0043c9d2
mov esi, dword [0x50ed40]
add esp, 4
mov dword [0x50ed5c], eax
call fcn.00436970
mov esi, dword [0x50ed44]
call fcn.00436970
mov esi, dword [0x50ed48]
call fcn.00436970
mov esi, dword [0x50ed4c]
call fcn.00436970
mov esi, dword [0x50ed50]
call fcn.00436970
mov esi, dword [0x50ed54]
call fcn.00436970
mov esi, dword [0x50ed58]
call fcn.00436970
mov esi, dword [0x50ed5c]
call fcn.00436970
mov esi, dword [0x50ed40]
push 0
call fcn.004368f0
mov esi, dword [0x50ed44]
add esp, 4
push 0
call fcn.004368f0
mov esi, dword [0x50ed48]
add esp, 4
push 0
call fcn.004368f0
mov esi, dword [0x50ed4c]
add esp, 4
push 0
call fcn.004368f0
mov esi, dword [0x50ed50]
add esp, 4
push 0
call fcn.004368f0
add esp, 4
mov esi, dword [0x50ed54]
push 0
call fcn.004368f0
mov esi, dword [0x50ed58]
add esp, 4
push 0
call fcn.004368f0
mov esi, dword [0x50ed5c]
add esp, 4
push 0
call fcn.004368f0
add esp, 4
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x30]
push ecx
mov byte [ebp - 0x30], 0x77
mov byte [ebp - 0x2f], 0x73
mov byte [ebp - 0x2e], 0x32
mov byte [ebp - 0x2d], 0x5f
mov byte [ebp - 0x2c], 0x33
mov byte [ebp - 0x2b], 0x32
mov byte [ebp - 0x2a], 0
mov byte [ebp - 0x40], 0x72
mov byte [ebp - 0x3f], 0x65
mov byte [ebp - 0x3e], 0x63
mov byte [ebp - 0x3d], 0x76
mov byte [ebp - 0x3c], 0
mov byte [ebp - 0x48], 0x63
mov byte [ebp - 0x47], 0x6f
mov byte [ebp - 0x46], 0x6e
mov byte [ebp - 0x45], 0x6e
mov byte [ebp - 0x44], 0x65
mov byte [ebp - 0x43], 0x63
mov byte [ebp - 0x42], 0x74
mov byte [ebp - 0x41], 0
mov byte [ebp - 0x38], 0x73
mov byte [ebp - 0x37], 0x65
mov byte [ebp - 0x36], 0x6e
mov byte [ebp - 0x35], 0x64
mov byte [ebp - 0x34], 0
call fcn.00472820
lea edx, [ebp - 0x38]
mov dword [0x50ed6c], eax
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00472820
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x30]
push edx
mov dword [0x50ed70], eax
call fcn.00472820
mov dword [0x50ed64], eax
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x30]
push ecx
call fcn.00472820
lea edx, [ebp - 0x40]
mov dword [0x50ed68], eax
push edx
lea eax, [ebp - 0x30]
push eax
call fcn.00472820
lea ecx, [ebp - 0x40]
push ecx
lea edx, [ebp - 0x30]
push edx
mov dword [0x50ed74], eax
call fcn.00472820
mov dword [0x50ed78], eax
mov eax, dword [0x50ed70]
mov ecx, dword [eax]
mov dword [0x50ed24], 1
cmp ecx, dword [ebp - 0x1c]
jne 0x40b608
add eax, 4
cmp byte [eax], 0xec
je 0x40b6ab
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
test esi, esi
je 0x40b662
lea edx, [ebp - 0x1e4]
push 0x750f4248
push edx
mov edx, esi
call fcn.00404780
lea eax, [ebp - 0x124]
push eax
lea edx, [esi + 0x400]
call fcn.004047a0
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
add esp, 0xc
push 0
push 0
push esi
push 0x401150
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x40b668
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov edx, dword [0x50ed70]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 5
call fcn.00433470
mov eax, dword [0x50ed70]
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp dword [eax], edx
jne 0x40b695
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
je 0x40b6b1
push 0
push 0
push 0
push 0x40a760
push 0
push 0
call edi
jmp 0x40bd11
mov edi, dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, dword [0x50ed68]
mov edx, dword [ebp - 0x1c]
cmp dword [eax], edx
jne 0x40b6cb
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
je 0x40b752
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
test esi, esi
je 0x40b71d
lea edx, [ebp - 0x1e4]
push 0x750f4249
push edx
mov edx, esi
call fcn.00404780
lea eax, [ebp - 0x124]
push eax
lea edx, [esi + 0x400]
call fcn.004047a0
add esp, 0xc
push 0
push 0
push esi
push 0x401150
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x50ed68]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 5
call fcn.00433470
mov eax, dword [0x50ed68]
mov edx, dword [ebp - 0x1c]
add esp, 4
cmp dword [eax], edx
jne 0x40b695
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
jne 0x40b695
mov eax, dword [0x50ed78]
mov edx, dword [ebp - 0x1c]
cmp dword [eax], edx
jne 0x40b76c
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
je 0x40b7f3
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
test esi, esi
je 0x40b7be
lea edx, [ebp - 0x1e4]
push 0x750f424a
push edx
mov edx, esi
call fcn.00404780
lea eax, [ebp - 0x124]
push eax
lea edx, [esi + 0x400]
call fcn.004047a0
add esp, 0xc
push 0
push 0
push esi
push 0x401150
push 0
push 0
call edi
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [0x50ed78]
lea ecx, [ebp - 0x1c]
push ecx
mov ecx, 5
call fcn.00433470
mov eax, dword [0x50ed78]
mov edx, dword [eax]
add esp, 4
cmp edx, dword [ebp - 0x1c]
jne 0x40b695
mov cl, byte [ebp - 0x18]
add eax, 4
cmp cl, byte [eax]
jne 0x40b695
call fcn.004731e0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00473a10
push 0x40a4f0
push 0x50ed74
call fcn.00473ad0
push 0x40a660
push 0x50ed6c
call fcn.00473ad0
push 0x40a520
push 0x50ed64
call fcn.00473ad0
call fcn.00473450
mov edi, dword [0x50ed78]
push 0x40000
call fcn.00401200
push eax
mov ecx, edi
call fcn.00401710
add esp, 8
push 0x100000
lea edx, [ebp - 0x30]
push edx
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edi, eax
call fcn.004018a0
add esp, 4
call fcn.00403080
call fcn.00403080
xor esi, esi
push esi
push esi
push esi
push 0x401900
push esi
push esi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push 0x800
mov edi, 0x409460
call fcn.00401200
push eax
mov ecx, 0x409460
call fcn.00401710
add esp, 8
mov byte [ebp - 0x54], 0x6e
mov byte [ebp - 0x53], 0x74
mov byte [ebp - 0x52], 0x64
mov byte [ebp - 0x51], 0x6c
mov byte [ebp - 0x50], 0x6c
mov byte [ebp - 0x4f], 0x2e
mov byte [ebp - 0x4e], 0x64
mov byte [ebp - 0x4d], 0x6c
mov byte [ebp - 0x4c], 0x6c
mov byte [ebp - 0x4b], 0
mov byte [ebp - 0xe4], 0x52
mov byte [ebp - 0xe3], 0x74
mov byte [ebp - 0xe2], 0x6c
mov byte [ebp - 0xe1], 0x41
mov byte [ebp - 0xe0], 0x64
mov byte [ebp - 0xdf], 0x64
mov byte [ebp - 0xde], 0x56
mov byte [ebp - 0xdd], 0x65
mov byte [ebp - 0xdc], 0x63
mov byte [ebp - 0xdb], 0x74
mov byte [ebp - 0xda], 0x6f
mov byte [ebp - 0xd9], 0x72
mov byte [ebp - 0xd8], 0x65
mov byte [ebp - 0xd7], 0x64
mov byte [ebp - 0xd6], 0x45
mov byte [ebp - 0xd5], 0x78
mov byte [ebp - 0xd4], 0x63
mov byte [ebp - 0xd3], 0x65
mov byte [ebp - 0xd2], 0x70
mov byte [ebp - 0xd1], 0x74
mov byte [ebp - 0xd0], 0x69
mov byte [ebp - 0xcf], 0x6f
mov byte [ebp - 0xce], 0x6e
mov byte [ebp - 0xcd], 0x48
mov byte [ebp - 0xcc], 0x61
mov byte [ebp - 0xcb], 0x6e
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x54]
push ecx
mov byte [ebp - 0xca], 0x64
mov byte [ebp - 0xc9], 0x6c
mov byte [ebp - 0xc8], 0x65
mov byte [ebp - 0xc7], 0x72
mov byte [ebp - 0xc6], 0
call fcn.00472820
lea edx, [ebp - 0xe4]
mov dword [0x50ed7c], eax
push edx
lea eax, [ebp - 0x54]
push eax
call fcn.00472820
mov edi, eax
cmp dword [0x50ed7c], esi
je 0x40b9f8
call fcn.004731e0
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00473a10
push 0x409a40
push 0x50ed7c
call fcn.00473ad0
call fcn.00473450
push 0x200000
call fcn.00401200
push eax
mov ecx, edi
call fcn.00401710
add esp, 8
call fcn.00402300
call fcn.00401fa0
mov eax, 0x50fe9c
call fcn.004087d0
mov eax, 0x50feb4
call fcn.00408900
mov dword [ebx + 0x78], esi
mov dword [ebx + 0x7c], esi
mov dword [ebx + 0x80], esi
mov dword [ebx + 0x84], esi
mov dword [ebx + 0x168], esi
mov dword [ebx + 0x16c], esi
mov dword [ebx + 0x170], esi
mov dword [ebx + 0x174], esi
mov dword [ebx + 0x178], esi
mov byte [ebx + 0x184], 0
mov byte [ebx + 0x185], 1
mov dword [ebx + 0x188], esi
mov dword [ebx + 0x18c], 0xffffffff
mov dword [ebx + 0x268], esi
mov dword [ebx + 0x26c], esi
mov dword [ebx + 0x270], esi
mov dword [ebx + 0x274], esi
mov dword [ebx + 0x278], esi
mov dword [0x50e474], esi
mov dword [ebx + 0x27c], esi
mov dword [ebx + 0x280], esi
mov dword [ebx + 0x284], esi
call fcn.0042e860
mov byte [ebp - 0x375], 0
call fcn.004352e0
test eax, eax
jne 0x40bade
push 0x10
push 0x4f72f4
push 0x4f7300
mov ecx, ebx
mov byte [ebp - 0x375], 1
call fcn.004474df
call fcn.00478510
lea ecx, [ebp - 0x37c]
push 4
push ecx
call fcn.00478dc0
add esp, 8
cmp eax, 1
je 0x40bb13
push 0x10
push 0x4f72f4
push 0x4f731c
mov ecx, ebx
mov byte [ebp - 0x375], 1
call fcn.004474df
mov edi, dword [ebp - 0x37c]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0xc
xor edi, eax
call fcn.0043c9d2
add esp, 4
mov esi, eax
mov dword [0x50ed60], eax
call fcn.00436970
mov esi, dword [0x50ed60]
push edi
call fcn.004368f0
add esp, 4
lea edx, [ebp - 0x374]
push edx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x40bb78
push 0x10
push 0x4f72f4
push 0x4f7338
mov ecx, ebx
mov byte [ebp - 0x375], 1
call fcn.004474df
jmp 0x40bb82
mov dword [0x50ecf8], 1
call fcn.0040a690
cmp byte [ebp - 0x375], 0
je 0x40bd11
mov eax, ebx
call fcn.004235f0
push 0
call fcn.0045c60e
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40bd01
push 0x750f4247
jmp 0x40bcc7
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40bd01
lea edx, [ebp - 0x1e4]
push 0x750f4246
push edx
mov edx, esi
call fcn.00404780
lea eax, [ebp - 0x124]
push eax
jmp 0x40bcdc
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40bd01
lea ecx, [ebp - 0x1e4]
push 0x750f4245
push ecx
mov edx, esi
call fcn.00404780
lea edx, [ebp - 0x124]
push edx
jmp 0x40bcdc
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40bd01
push 0x750f4244
jmp 0x40bcc7
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40bd01
lea edx, [ebp - 0x1e4]
push 0x750f4243
push edx
mov edx, esi
call fcn.00404780
lea eax, [ebp - 0x124]
push eax
jmp 0x40bcdc
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40bd01
lea ecx, [ebp - 0x1e4]
push 0x750f4242
push ecx
mov edx, esi
call fcn.00404780
lea edx, [ebp - 0x124]
push edx
jmp 0x40bcdc
push 0x600
call fcn.0043c9d2
mov esi, eax
add esp, 4
cmp esi, edi
je 0x40bd01
push 0x750f4241
lea eax, [ebp - 0x1e4]
push eax
mov edx, esi
call fcn.00404780
lea ecx, [ebp - 0x124]
push ecx
lea edx, [esi + 0x400]
call fcn.004047a0
add esp, 0xc
push edi
push edi
push esi
push 0x401150
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
push edi
push edi
push 0x40a760
push edi
push edi
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045a0a2
mov esp, ebp
pop ebp
ret 4