Function at 0x42aaa0
Capabilities:
Create thread
Initialize winsock library

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x28c
mov eax, dword [0x501040]
xor eax, esp
mov dword [esp + 0x288], eax
mov ecx, dword [ebp + 0x10]
lea edx, [esp + 0xbc]
xor eax, eax
mov dword [esp + 0xcc], 0
xorps xmm0, xmm0
mov dword [esp + 0xac], eax
movaps xmmword [esp + 0xbc], xmm0
mov word [esp + 0xbc], ax
movaps xmmword [esp + 0x9c], xmm0
mov word [esp + 0x9c], ax
movaps xmmword [esp + 0x7c], xmm0
mov dword [esp + 0x8c], eax
mov word [esp + 0x7c], ax
lea eax, [esp + 0x7c]
push esi
push eax
lea eax, [esp + 0xa4]
mov dword [esp + 0xd8], 7
push eax
mov dword [esp + 0xbc], 7
mov dword [esp + 0x9c], 7
call fcn.0042a4b0
add esp, 8
cmp dword [esp + 0xd0], 0
je 0x42ae2c
lea ecx, [esp + 0xc0]
call fcn.00424b30
cmp dword [esp + 0xb0], 0
je 0x42ac7a
cmp dword [esp + 0x90], 0
je 0x42ac7a
cmp byte [0x505b48], 0
jne 0x42ac7a
push 0x501bf4
call fcn.004747a4
add esp, 4
test eax, eax
jne 0x42ae93
mov eax, dword [0x501c20]
cmp eax, 0x7fffffff
je 0x42ae9a
cmp byte [0x505b48], 0
jne 0x42ac6d
lea ecx, [esp + 0xe0]
call fcn.00425d90
push 0x68
lea eax, [esp + 0x14]
push 0
push eax
call fcn.0049cfc0
add esp, 0xc
mov dword [esp + 0x30], 2
cmp dword [esp + 0xb4], 7
mov eax, 0x68
mov word [esp + 0x10], ax
lea eax, [esp + 0xa0]
cmova eax, dword [esp + 0xa0]
cmp dword [esp + 0xf4], 7
mov dword [esp + 0x14], eax
lea eax, [esp + 0xe0]
cmova eax, dword [esp + 0xe0]
or dword [esp + 0x44], 0x7fff
cmp dword [esp + 0x94], 7
mov dword [esp + 0x18], eax
lea eax, [esp + 0x80]
cmova eax, dword [esp + 0x80]
mov dword [esp + 0x24], eax
lea eax, [esp + 0x10]
push eax
mov dword [esp + 0x38], 1
mov dword [esp + 0x3c], 0xffffffff
call fcn.00480c90
lea ecx, [esp + 0xe0]
mov byte [0x505b48], 1
call fcn.004013c0
push 0x501bf4
call fcn.004747b5
add esp, 4
push 0x80
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
mov esi, dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push 1
call esi
push eax
call dword [sym.imp.KERNEL32.dll_SetThreadPriority]
call fcn.00477190
call esi
push eax
call fcn.00477660
mov eax, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0x45ac30
push 0x5049e0
mov dword [0x5049e0], eax
call fcn.00476a10
call fcn.004771f0
push 0x190
lea eax, [esp + 0xfc]
mov dword [0x5049a8], 1
push 0
push eax
call fcn.0049cfc0
add esp, 0xc
lea eax, [esp + 0xf8]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
call fcn.00427ef0
test al, al
je 0x42adb1
mov dword [0x5049a8], 2
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 4
mov dword [0x5056dc], eax
call fcn.00472d9c
add esp, 4
lea ecx, [esp + 0x7c]
mov dword [eax], 0x429ed0
push ecx
push 0
push eax
push 0x42cfe0
push 0
push 0
call fcn.004a0b8c
add esp, 0x18
mov dword [esp + 0x78], eax
test eax, eax
je 0x42ae81
call fcn.0042a100
cmp dword [esp + 0x7c], 0
je 0x42ae67
call sub.KERNEL32.dll_GetCurrentThreadId
mov ecx, dword [esp + 0x7c]
cmp ecx, eax
je 0x42ae6e
push 0
push ecx
push dword [esp + 0x80]
call fcn.00474a51
add esp, 0xc
test eax, eax
jne 0x42ae75
xorps xmm0, xmm0
mov dword [0x5049a8], 7
movlpd qword [esp + 0x78], xmm0
call fcn.00427d50
cmp dword [esp + 0x7c], 0
jne 0x42ae7c
call fcn.00477190
call esi
push eax
call fcn.00477660
push 0x45ac30
push 0x5049e0
call fcn.00476ea0
call fcn.004771f0
cmp byte [0x505b48], 0
mov dword [0x5049a8], 8
je 0x42ae2c
push 0x501bf4
call fcn.004747a4
add esp, 4
test eax, eax
jne 0x42ae93
mov eax, dword [0x501c20]
cmp eax, 0x7fffffff
je 0x42ae9a
cmp byte [0x505b48], 0
je 0x42ae1f
call fcn.00481210
mov byte [0x505b48], 0
push 0x501bf4
call fcn.004747b5
add esp, 4
lea ecx, [esp + 0x80]
call fcn.004013c0
lea ecx, [esp + 0xa0]
call fcn.004013c0
lea ecx, [esp + 0xc0]
call fcn.004013c0
mov ecx, dword [esp + 0x28c]
xor eax, eax
pop esi
xor ecx, esp
call fcn.00472b2a
mov esp, ebp
pop ebp
ret 0x10
push 1
call fcn.004740f8
push 5
call fcn.004740f8
push 2
call fcn.004740f8
call fcn.004a0c3d
push 6
mov dword [esp + 0x80], 0
call fcn.004740f8
push 5
call fcn.004740f8
dec eax
push 6
mov dword [0x501c20], eax
call fcn.004740f8
int3