Function at 0x438730
Capabilities:
Create process on windows
Link many functions at runtime

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43b245
mov eax, dword fs:[0]
push eax
sub esp, 0x1e8
mov eax, dword [0x44c7b8]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xe0], ecx
mov eax, dword [ebp - 0xe0]
mov dword [eax + 0x238], 0
push ecx
mov ecx, esp
mov dword [ebp - 0x24], esp
push str.http:__www.p2pzhongzi.com_www_
call fcn.00402790
mov dword [ebp - 0xe4], eax
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0xe0]
call fcn.004376c0
mov dword [ebp - 0xe8], eax
mov dword [ebp - 4], 0
push 0x44202c
lea edx, [ebp - 0x14]
push edx
call fcn.00401820
add esp, 8
movzx eax, al
test eax, eax
je 0x43892b
lea ecx, [ebp - 0x20]
call fcn.004031e0
mov byte [ebp - 4], 1
mov dword [ebp - 0x1c], 0
push 0x7c
mov ecx, dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x14]
call fcn.004021d0
push eax
lea edx, [ebp - 0x20]
push edx
call fcn.00411659
test eax, eax
je 0x43891f
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], 1
jne 0x438820
push str.Kass
lea ecx, [ebp - 0x20]
push ecx
call fcn.00401820
add esp, 8
movzx edx, al
test edx, edx
je 0x438820
jmp 0x43891f
cmp dword [ebp - 0x1c], 2
jne 0x438840
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0xe0]
add ecx, 0x22c
call fcn.00402f80
jmp 0x43891a
cmp dword [ebp - 0x1c], 3
jne 0x4388a6
push str.1.0.0.0
lea ecx, [ebp - 0x20]
push ecx
call fcn.00401820
add esp, 8
movzx edx, al
test edx, edx
je 0x4388a6
mov eax, dword [ebp - 0xe0]
add eax, 0x22c
push eax
push str.update.exe
lea ecx, [ebp - 0x28]
push ecx
call fcn.00401730
add esp, 0xc
mov dword [ebp - 0xec], eax
push 5
mov ecx, dword [ebp - 0xec]
call fcn.004021d0
push eax
call dword [sym.imp.KERNEL32.dll_WinExec]
lea ecx, [ebp - 0x28]
call fcn.00401250
push 0
call fcn.004228eb
jmp 0x43891a
cmp dword [ebp - 0x1c], 4
jne 0x4388c3
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0xe0]
add ecx, 0x230
call fcn.00402f80
jmp 0x43891a
cmp dword [ebp - 0x1c], 5
jne 0x4388e0
lea eax, [ebp - 0x20]
push eax
mov ecx, dword [ebp - 0xe0]
add ecx, 0x234
call fcn.00402f80
jmp 0x43891a
cmp dword [ebp - 0x1c], 6
jne 0x438905
lea ecx, [ebp - 0x20]
call fcn.004021d0
push eax
call fcn.00422999
add esp, 4
mov ecx, dword [ebp - 0xe0]
mov dword [ecx + 0x238], eax
jmp 0x43891a
lea edx, [ebp - 0x20]
push edx
mov ecx, dword [ebp - 0xe0]
add ecx, 0x23c
call fcn.00402390
jmp 0x4387cf
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.00401250
push 0x1f8
push 0
push 0x4504c0
call fcn.004229b0
add esp, 0xc
mov dword [0x4504c0], 0x1f8
mov dword [0x4504cc], 7
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x20]
mov dword [0x4504c4], ecx
mov dword [0x4504d0], 0x465
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x74]
mov dword [0x4504d4], eax
push 0x44204c
lea ecx, [ebp - 0x18]
call fcn.00402790
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x18]
call fcn.00402ed0
push eax
lea ecx, [ebp - 0x18]
call fcn.004021d0
push eax
push 0x4504d8
call fcn.00401cc0
add esp, 0xc
push 0x4504c0
push 0
call dword [sym.imp.SHELL32.dll_Shell_NotifyIconA]
push 0x88
mov ecx, dword [ebp - 0xe0]
add ecx, 0x128
call fcn.00402360
push 0x8d
mov ecx, dword [ebp - 0xe0]
add ecx, 0x130
call fcn.00402360
push 2
push 2
push 0x21
push 0x10
push 0x10
mov ecx, dword [ebp - 0xe0]
add ecx, 0x120
call fcn.0040607b
push 0x82
call fcn.004029a0
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0xe0]
add ecx, 0x120
call fcn.00402340
push 0x83
call fcn.004029a0
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x10], eax
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0xe0]
add ecx, 0x120
call fcn.00402340
push 0x86
call fcn.004029a0
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
push eax
mov ecx, dword [ebp - 0xe0]
add ecx, 0x120
call fcn.00402340
push 0x87
call fcn.004029a0
push eax
call dword [sym.imp.USER32.dll_LoadIconA]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
push ecx
mov ecx, dword [ebp - 0xe0]
add ecx, 0x120
call fcn.00402340
push 1
mov edx, dword [ebp - 0xe0]
add edx, 0x120
push edx
mov ecx, dword [ebp - 0xe0]
add ecx, 0x78
call fcn.00402090
push 0xffffffffffffffff
push 0x29e
push 0
push 0x44205c
push 0
mov ecx, dword [ebp - 0xe0]
add ecx, 0x78
call fcn.00405c2c
push 0xffffffffffffffff
push 0x64
push 2
push 0x442064
push 1
mov ecx, dword [ebp - 0xe0]
add ecx, 0x78
call fcn.00405c2c
push 0xffffffffffffffff
push 0
push 0
push str.HASH
push 2
mov ecx, dword [ebp - 0xe0]
add ecx, 0x78
call fcn.00405c2c
push 0xffffffffffffffff
push 0
push 0
push str.ED2Kt
push 3
mov ecx, dword [ebp - 0xe0]
add ecx, 0x78
call fcn.00405c2c
mov ecx, dword [ebp - 0xe0]
add ecx, 0x78
call fcn.00402030
or eax, 0x20
push eax
mov ecx, dword [ebp - 0xe0]
add ecx, 0x78
call fcn.00402060
push 0x200
push 0x18e
push 0x31d
push 0xaa
push 1
push 0
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x98]
push ecx
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0x200
push 0x18e
push 0x31d
push 0xaa
push 1
push 0
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x158]
push eax
call dword [sym.imp.USER32.dll_SetWindowPos]
push 0
push 0
push 0
push 0
push str.http:__www.p2pzhongzi.com_www_1.html
mov ecx, dword [ebp - 0xe0]
add ecx, 0x138
call fcn.004013f0
push 0
push 0
push 0
push 0
push str.http:__www.p2pzhongzi.com_www_2.html
mov ecx, dword [ebp - 0xe0]
add ecx, 0x1b0
call fcn.004013f0
push str.P2PSearchar
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x20]
push edx
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0x441f3a
push 0x3e8
mov ecx, dword [ebp - 0xe0]
call fcn.0040c377
push str.Skin_Gui.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x4504b8], eax
push str.Skin_Create
mov eax, dword [0x4504b8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4504b4], eax
push 0x438050
push ecx
mov ecx, esp
mov dword [ebp - 0x2c], esp
push str._skin_bj.jpg
call fcn.00402790
mov dword [ebp - 0xf0], eax
push 0x258
push 0x320
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ecx + 0x98]
push edx
push 0x26
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0xec]
push ecx
mov edx, dword [ebp - 0xe0]
mov eax, dword [edx + 0x20]
push eax
call dword [0x4504b4]
push str.Skin_Static
mov ecx, dword [0x4504b8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4504b0], eax
push 0x10
push 0x190
push 5
push 0x19
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x30], esp
push 0x442114
call fcn.00402790
mov dword [ebp - 0xf4], eax
call dword [0x4504b0]
push 0x10
push 0xc8
push 0x240
push 0x19
push 0x218f4a
push ecx
mov ecx, esp
mov dword [ebp - 0x34], esp
push 0x44214c
call fcn.00402790
mov dword [ebp - 0xf8], eax
call dword [0x4504b0]
push 0x10
push 0xc8
push 0x240
push 0x19a
push 0x218f4a
push ecx
mov ecx, esp
mov dword [ebp - 0x38], esp
push 0x44215c
call fcn.00402790
mov dword [ebp - 0xfc], eax
call dword [0x4504b0]
push 0x10
push 0xc8
push 0x240
push 0x1ea
push 0x218f4a
push ecx
mov ecx, esp
mov dword [ebp - 0x3c], esp
push 0x442168
call fcn.00402790
mov dword [ebp - 0x100], eax
call dword [0x4504b0]
push 0x10
push 0xc8
push 0x240
push 0x23a
push 0x218f4a
push ecx
mov ecx, esp
mov dword [ebp - 0x40], esp
push 0x442174
call fcn.00402790
mov dword [ebp - 0x104], eax
call dword [0x4504b0]
push 0x10
push 0x50
push 0x240
push 0x28a
push 0x218f4a
push ecx
mov ecx, esp
mov dword [ebp - 0x44], esp
push 0x442180
call fcn.00402790
mov dword [ebp - 0x108], eax
call dword [0x4504b0]
push 0x10
push 0x50
push 0x240
push 0x2da
push 0x218f4a
push ecx
mov ecx, esp
mov dword [ebp - 0x48], esp
push 0x44218c
call fcn.00402790
mov dword [ebp - 0x10c], eax
call dword [0x4504b0]
push str.Skin_Picture
mov edx, dword [0x4504b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4504ac], eax
push 0x10
push 0x10
push 5
push 5
push ecx
mov ecx, esp
mov dword [ebp - 0x4c], esp
push str._skinicon.png
call fcn.00402790
mov dword [ebp - 0x110], eax
call dword [0x4504ac]
push 0x37
push 0xe6
push 0x19
push 0x212
push ecx
mov ecx, esp
mov dword [ebp - 0x50], esp
push str._skinlogo.png
call fcn.00402790
mov dword [ebp - 0x114], eax
call dword [0x4504ac]
push 0x14
push 0x14
push 0x23c
push 5
push ecx
mov ecx, esp
mov dword [ebp - 0x54], esp
push str._skinclient.png
call fcn.00402790
mov dword [ebp - 0x118], eax
call dword [0x4504ac]
push str.Skin_Shadow
mov eax, dword [0x4504b8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4504a8], eax
push 0x32
push 0x8080
push 0x32
push 0x1d6
push 0x1e
push 0x19
call dword [0x4504a8]
push 0xfe
push 0xffffff
push 0x21
push 0xa
push 0x27
push 0x28
call dword [0x4504a8]
push str.Skin_Gjx
mov ecx, dword [0x4504b8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450484], eax
push str.Skin_Xxk_Hold
mov edx, dword [0x4504b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x45048c], eax
push str.Skin_Xxk_Title
mov eax, dword [0x4504b8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450488], eax
push str.Skin_Xxk
mov ecx, dword [0x4504b8]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450490], eax
push 0x438020
push 0x32
push 0x80
push 0x8c
push 0x1e
push 0x82
push 0x8c
push 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x58], esp
push 0x442220
call fcn.00402790
mov dword [ebp - 0x11c], eax
call dword [0x450490]
push str.Skin_Xxk_Button
mov edx, dword [0x4504b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4504a4], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x5c], esp
push str._skinxx3.png
call fcn.00402790
mov dword [ebp - 0x120], eax
mov eax, dword [ebp - 0x120]
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 3
push ecx
mov ecx, esp
mov dword [ebp - 0x60], esp
push str._skinxx2.png
call fcn.00402790
mov dword [ebp - 0x128], eax
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x12c], ecx
mov byte [ebp - 4], 4
push ecx
mov ecx, esp
mov dword [ebp - 0x64], esp
push str._skinxx1.png
call fcn.00402790
mov dword [ebp - 0x130], eax
push 0x8c
push 0x10
push 0x10
push 0x92
push 0x78
mov byte [ebp - 4], 2
call dword [0x4504a4]
push str.Skin_Xxk_Z_Button
mov edx, dword [0x4504b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x4504a0], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x68], esp
push str._skinxxz3.png
call fcn.00402790
mov dword [ebp - 0x134], eax
mov eax, dword [ebp - 0x134]
mov dword [ebp - 0x138], eax
mov byte [ebp - 4], 5
push ecx
mov ecx, esp
mov dword [ebp - 0x6c], esp
push str._skinxxz2.png
call fcn.00402790
mov dword [ebp - 0x13c], eax
mov ecx, dword [ebp - 0x13c]
mov dword [ebp - 0x140], ecx
mov byte [ebp - 4], 6
push ecx
mov ecx, esp
mov dword [ebp - 0x70], esp
push str._skinxxz1.png
call fcn.00402790
mov dword [ebp - 0x144], eax
push 0x18
push 0x18
push 0x5c
push 0x2da
mov byte [ebp - 4], 2
call dword [0x4504a0]
push str.Skin_Xxk_Y_Button
mov edx, dword [0x4504b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x45049c], eax
push ecx
mov ecx, esp
mov dword [ebp - 0x74], esp
push str._skinxxy3.png
call fcn.00402790
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
mov dword [ebp - 0x14c], eax
mov byte [ebp - 4], 7
push ecx
mov ecx, esp
mov dword [ebp - 0x78], esp
push str._skinxxy2.png
call fcn.00402790
mov dword [ebp - 0x150], eax
mov ecx, dword [ebp - 0x150]
mov dword [ebp - 0x154], ecx
mov byte [ebp - 4], 8
push ecx
mov ecx, esp
mov dword [ebp - 0x7c], esp
push str._skinxxy1.png
call fcn.00402790
mov dword [ebp - 0x158], eax
push 0x18
push 0x18
push 0x5c
push 0x2f8
mov byte [ebp - 4], 2
call dword [0x45049c]
push str.Skin_Button_Id
mov edx, dword [0x4504b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450494], eax
push str.Skin_Button
mov eax, dword [0x4504b8]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450498], eax
push 0x438590
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0x80], esp
push str._skingb3.png
call fcn.00402790
mov dword [ebp - 0x15c], eax
mov ecx, dword [ebp - 0x15c]
mov dword [ebp - 0x160], ecx
mov byte [ebp - 4], 9
push ecx
mov ecx, esp
mov dword [ebp - 0x84], esp
push str._skingb2.png
call fcn.00402790
mov dword [ebp - 0x164], eax
mov edx, dword [ebp - 0x164]
mov dword [ebp - 0x168], edx
mov byte [ebp - 4], 0xa
push ecx
mov ecx, esp
mov dword [ebp - 0x88], esp
push str._skingb1.png
call fcn.00402790
mov dword [ebp - 0x16c], eax
push 0x14
push 0x27
push 0
push 0x2f7
mov byte [ebp - 4], 2
call dword [0x450498]
push 0x438590
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x8c], esp
push str._skin_sx3.png
call fcn.00402790
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x170]
mov dword [ebp - 0x174], eax
mov byte [ebp - 4], 0xb
push ecx
mov ecx, esp
mov dword [ebp - 0x90], esp
push str._skin_sx2.png
call fcn.00402790
mov dword [ebp - 0x178], eax
mov ecx, dword [ebp - 0x178]
mov dword [ebp - 0x17c], ecx
mov byte [ebp - 4], 0xc
push ecx
mov ecx, esp
mov dword [ebp - 0x94], esp
push str._skin_sx1.png
call fcn.00402790
mov dword [ebp - 0x180], eax
push 0x14
push 0x1c
push 0
push 0x2db
mov byte [ebp - 4], 2
call dword [0x450498]
push 0x438590
push 2
push ecx
mov ecx, esp
mov dword [ebp - 0x98], esp
push str._skin_so3.png
call fcn.00402790
mov dword [ebp - 0x184], eax
mov edx, dword [ebp - 0x184]
mov dword [ebp - 0x188], edx
mov byte [ebp - 4], 0xd
push ecx
mov ecx, esp
mov dword [ebp - 0x9c], esp
push str._skin_so2.png
call fcn.00402790
mov dword [ebp - 0x18c], eax
mov eax, dword [ebp - 0x18c]
mov dword [ebp - 0x190], eax
mov byte [ebp - 4], 0xe
push ecx
mov ecx, esp
mov dword [ebp - 0xa0], esp
push str._skin_so1.png
call fcn.00402790
mov dword [ebp - 0x194], eax
push 0x21
push 0x46
push 0x27
push 0x198
mov byte [ebp - 4], 2
call dword [0x450498]
mov ecx, dword [ebp - 0xe0]
mov dword [ecx + 0x228], 1
push str.Skin_Radio
mov edx, dword [0x4504b8]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450480], eax
push 0x436f10
push 1
push 0xe
push 0xe
push 0x23f
push 0x18b
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0xa4], esp
push 0x4423ac
call fcn.00402790
mov dword [ebp - 0x198], eax
mov eax, dword [ebp - 0x198]
mov dword [ebp - 0x19c], eax
mov byte [ebp - 4], 0xf
push ecx
mov ecx, esp
mov dword [ebp - 0xa8], esp
push 0x4423bc
call fcn.00402790
mov dword [ebp - 0x1a0], eax
mov byte [ebp - 4], 2
call dword [0x450480]
push 0x436f10
push 5
push 0xe
push 0xe
push 0x23f
push 0x1db
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xac], esp
push 0x4423cc
call fcn.00402790
mov dword [ebp - 0x1a4], eax
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x1a8], ecx
mov byte [ebp - 4], 0x10
push ecx
mov ecx, esp
mov dword [ebp - 0xb0], esp
push 0x4423dc
call fcn.00402790
mov dword [ebp - 0x1ac], eax
mov byte [ebp - 4], 2
call dword [0x450480]
push 0x436f10
push 0x14
push 0xe
push 0xe
push 0x23f
push 0x22b
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xb4], esp
push 0x4423ec
call fcn.00402790
mov dword [ebp - 0x1b0], eax
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x1b4], edx
mov byte [ebp - 4], 0x11
push ecx
mov ecx, esp
mov dword [ebp - 0xb8], esp
push 0x4423fc
call fcn.00402790
mov dword [ebp - 0x1b8], eax
mov byte [ebp - 4], 2
call dword [0x450480]
push 0x436f10
push 0x32
push 0xe
push 0xe
push 0x23f
push 0x27b
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xbc], esp
push 0x44240c
call fcn.00402790
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebp - 0x1bc]
mov dword [ebp - 0x1c0], eax
mov byte [ebp - 4], 0x12
push ecx
mov ecx, esp
mov dword [ebp - 0xc0], esp
push 0x44241c
call fcn.00402790
mov dword [ebp - 0x1c4], eax
mov byte [ebp - 4], 2
call dword [0x450480]
push 0x436f10
push 0xc8
push 0xe
push 0xe
push 0x23f
push 0x2cb
push 0
push ecx
mov ecx, esp
mov dword [ebp - 0xc4], esp
push str._skindx2.png
call fcn.00402790
mov dword [ebp - 0x1c8], eax
mov ecx, dword [ebp - 0x1c8]
mov dword [ebp - 0x1cc], ecx
mov byte [ebp - 4], 0x13
push ecx
mov ecx, esp
mov dword [ebp - 0xc8], esp
push str._skindx1.png
call fcn.00402790
mov dword [ebp - 0x1d0], eax
mov byte [ebp - 4], 2
call dword [0x450480]
push str.KadSearch.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [0x45047c], eax
push str.Kad_Config
mov edx, dword [0x45047c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450478], eax
push str.Kad_Fun
mov eax, dword [0x45047c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450474], eax
push str.Kad_Search
mov ecx, dword [0x45047c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450470], eax
push str.Kad_GetData
mov edx, dword [0x45047c]
push edx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x45046c], eax
push str.Kad_Delete
mov eax, dword [0x45047c]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450468], eax
push str.Create_Class
mov ecx, dword [0x45047c]
push ecx
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x450464], eax
push ecx
mov ecx, esp
mov dword [ebp - 0xcc], esp
push str.60_97_32_104_114_101_102_61_34_101_100_50_107_58_47_47_92_124_102_105_108_101_92_124_40_46_42_63_41_92_124_47_34_62_69_68_50_75_60_47_97_62
call fcn.00402790
mov dword [ebp - 0x1d4], eax
mov edx, dword [ebp - 0x1d4]
mov dword [ebp - 0x1d8], edx
mov byte [ebp - 4], 0x14
push ecx
mov ecx, esp
mov dword [ebp - 0xd0], esp
push str.60_100_105_118_32_105_100_61_34_115_101_97_114_99_104_95_116_104_117_109_98_34_62
call fcn.00402790
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebp - 0x1dc]
mov dword [ebp - 0x1e0], eax
mov byte [ebp - 4], 0x15
push 5
push ecx
mov ecx, esp
mov dword [ebp - 0xd4], esp
push str.38_109_111_100_101_61_116_104_117_109_98
call fcn.00402790
mov dword [ebp - 0x1e4], eax
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x1e8], ecx
mov byte [ebp - 4], 0x16
push ecx
mov ecx, esp
mov dword [ebp - 0xd8], esp
push str.63_112_97_103_101_61
call fcn.00402790
mov dword [ebp - 0x1ec], eax
mov edx, dword [ebp - 0x1ec]
mov dword [ebp - 0x1f0], edx
mov byte [ebp - 4], 0x17
push ecx
mov ecx, esp
mov dword [ebp - 0xdc], esp
push str.104_116_116_112_58_47_47_119_119_119_46_100_111_110_107_101_121_52_117_46_99_111_109_47_47_115_101_97_114_99_104_47
call fcn.00402790
mov dword [ebp - 0x1f4], eax
mov eax, dword [ebp - 0xe0]
mov ecx, dword [eax + 0x20]
push ecx
mov byte [ebp - 4], 2
call dword [0x450478]
push 0x437f70
call dword [0x450474]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x18]
call fcn.00401250
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.00401250
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret