Function at 0x422520
Capabilities:
Create process on windows
Receive data
Receive data on socket
Send data
Send data on socket
Set socket configuration

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44672f
mov eax, dword fs:[0]
push eax
sub esp, 0x168
mov eax, dword [0x455014]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x170], edi
mov dword [ebp - 0x174], 0
lea ecx, [ebp - 0x130]
mov dword [ebp - 4], 1
call fcn.00442540
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140.dll_Ordinal_316]
mov byte [ebp - 4], 3
lea eax, [ebp - 0x128]
push dword [0x457bb8]
mov esi, dword [sym.imp.mfc140.dll_Ordinal_4807]
push dword [ebp - 0x130]
push dword [ebp + 0xc]
push dword [ebp + 8]
push str.login__s__s__s__s_
push eax
call esi
add esp, 0x18
mov dword [ebp - 0x138], 0x1b58
lea eax, [ebp - 0x138]
mov dword [ebp - 0x134], 0
push 8
push eax
push 0x1006
push 0xffff
push dword [0x4572d8]
call dword [sym.imp.WS2_32.dll_setsockopt]
push 0x3ff
push 0
push 0x4576e0
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x128]
mov edx, 0x3ff
cmp dword [eax - 0xc], edx
cmovl edx, dword [eax - 0xc]
push edx
push eax
push 0x4576e0
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x18
push 0x10
push 0x4572c8
push 0
push 0x400
push 0x4576e0
push dword [0x4572d8]
call dword [sym.imp.WS2_32.dll_sendto]
cmp eax, 0xffffffff
jne 0x422650
push 0
push 0
push 0x449e5c
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_8713]
mov byte [ebp - 0x169], 0
jmp 0x422ae7
push 0x3ff
push 0
push 0x4572e0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [0x4572dc], 0x10
lea eax, [ebp - 0x164]
push 0x4572dc
push eax
push 0
push 0x400
push 0x4572e0
push dword [0x4572d8]
call dword [sym.imp.WS2_32.dll_recvfrom]
cmp eax, 0xffffffff
jne 0x4226b4
push 0
push 0
push 0x449e88
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_8713]
mov byte [ebp - 0x169], 0
jmp 0x422ae7
push 8
lea eax, [ebp - 0x138]
mov dword [ebp - 0x138], 0
push eax
push 0x1006
push 0xffff
push dword [0x4572d8]
mov dword [ebp - 0x134], 0
call dword [sym.imp.WS2_32.dll_setsockopt]
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push 0x4572e0
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 4
push 0x449ebc
push eax
call esi
add esp, 0xc
lea ecx, [ebp - 0x12c]
call dword [sym.imp.mfc140.dll_Ordinal_316]
push 0
push 0x449ec0
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140.dll_Ordinal_4656]
push eax
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push eax
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 6
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 5
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0x449ec0
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_4656]
inc eax
lea ecx, [ebp - 0x11c]
push eax
push 0
call dword [sym.imp.mfc140.dll_Ordinal_3839]
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_316]
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push 0
push 0x5f
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140.dll_Ordinal_4655]
test eax, eax
js 0x422808
push 0
push 0x5f
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_4655]
push eax
lea eax, [ebp - 0x168]
push eax
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push eax
lea ecx, [ebp - 0x11c]
mov byte [ebp - 4], 9
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push str.VerDiff
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x422a04
push 0x44b570
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 1
push 0x3e8
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_5401]
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_4468]
push 0
push 0
push dword [ebp - 0x124]
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_8713]
push 0x104
lea eax, [ebp - 0x114]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
lea eax, [ebp - 0x114]
push eax
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140.dll_Ordinal_310]
push 0x5c
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140.dll_Ordinal_12826]
inc eax
lea ecx, [ebp - 0x120]
push eax
lea eax, [ebp - 0x170]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push eax
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xb
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x170]
mov byte [ebp - 4], 0xa
call dword [sym.imp.mfc140.dll_Ordinal_1044]
xorps xmm0, xmm0
mov dword [ebp - 0x13c], 0
lea ecx, [ebp - 0x154]
movq qword [ebp - 0x144], xmm0
movups xmmword [ebp - 0x154], xmm0
call dword [sym.imp.mfc140.dll_Ordinal_503]
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xd
call dword [sym.imp.mfc140.dll_Ordinal_5898]
push eax
lea ecx, [ebp - 0x168]
call dword [sym.imp.mfc140.dll_Ordinal_305]
mov eax, dword [0x457bbc]
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x174], 1
push dword [eax - 0xc]
push eax
push dword [ecx - 0xc]
lea eax, [ebp - 0x168]
push ecx
push eax
call dword [sym.imp.mfc140.dll_Ordinal_3005]
add esp, 0x14
lea ecx, [ebp - 0x154]
push 0
push dword [ebp - 0x168]
call dword [sym.imp.mfc140.dll_Ordinal_4705]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0xc
mov esi, eax
call dword [sym.imp.mfc140.dll_Ordinal_1044]
cmp esi, 1
jne 0x4229d8
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xe
call dword [sym.imp.mfc140.dll_Ordinal_5898]
push eax
lea ecx, [ebp - 0x168]
call dword [sym.imp.mfc140.dll_Ordinal_305]
mov eax, dword [0x457bbc]
mov dword [ebp - 0x174], 2
push dword [eax - 0xc]
push eax
mov eax, dword [ebp - 0x120]
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_3005]
add esp, 0x14
push esi
push 0
push str.Updat2t_378
push dword [ebp - 0x168]
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x168]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x154]
call dword [sym.imp.mfc140.dll_Ordinal_1142]
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0
push 0x10
push dword [edi + 0x20]
call dword [sym.imp.USER32.dll_PostMessageA]
jmp 0x422ab0
push str.fail
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x422b34
push 0x449f0c
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 0
push 0x5f
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_4655]
test eax, eax
js 0x422a75
push 0
push 0x5f
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_4655]
inc eax
lea ecx, [ebp - 0x118]
push eax
push 0
call dword [sym.imp.mfc140.dll_Ordinal_3839]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_1692]
push 1
push 0x3e8
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_5401]
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_4468]
push 0
push 0
push dword [ebp - 0x124]
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_8713]
push 0x7d0
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, edi
call fcn.004221e0
mov byte [ebp - 0x169], 0
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x12c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x128]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp - 0x130]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp + 8]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
lea ecx, [ebp + 0xc]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov al, byte [ebp - 0x169]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00443559
mov esp, ebp
pop ebp
ret 8
push str.expr
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x422b8d
push 0x449f34
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_1529]
push 1
push 0x3e8
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_5401]
mov ecx, eax
call dword [sym.imp.mfc140.dll_Ordinal_4468]
push 0
push 0
push dword [ebp - 0x124]
mov ecx, edi
call dword [sym.imp.mfc140.dll_Ordinal_8713]
push 0xbb8
jmp 0x422aa3
push str.chrg
lea ecx, [ebp - 0x11c]
call dword [sym.imp.mfc140.dll_Ordinal_2986]
test eax, eax
jne 0x422aa9
push 0x44b5b4
lea ecx, [ebp - 0x124]
call dword [sym.imp.mfc140.dll_Ordinal_1529]
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x120]
call dword [sym.imp.mfc140.dll_Ordinal_300]
push 0
push str.MemberGrade
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140.dll_Ordinal_4656]
add eax, 0xb
lea ecx, [ebp - 0x120]
push eax
push 0
call dword [sym.imp.mfc140.dll_Ordinal_3839]
push dword [ebp - 0x120]
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov dword [0x455024], eax
lea eax, [ebp - 0x118]
mov ecx, 0x457be0
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1526]
push 5
push 0
mov ecx, 0x457be0
call dword [sym.imp.mfc140.dll_Ordinal_3839]
push 8
lea eax, [ebp - 0x168]
mov ecx, 0x457be0
push eax
call dword [sym.imp.mfc140.dll_Ordinal_8322]
push eax
mov ecx, 0x457be0
mov byte [ebp - 4], 0x10
call dword [sym.imp.mfc140.dll_Ordinal_1526]
lea ecx, [ebp - 0x168]
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, 0x457be0
mov byte [ebp - 4], 0x11
call dword [sym.imp.mfc140.dll_Ordinal_5898]
push eax
lea ecx, [ebp - 0x168]
call dword [sym.imp.mfc140.dll_Ordinal_305]
mov eax, dword [0x457be0]
push 0x15
push 0x44b5d0
mov dword [ebp - 0x174], 4
push dword [eax - 0xc]
push eax
lea eax, [ebp - 0x168]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_3005]
add esp, 0x14
lea eax, [ebp - 0x168]
lea ecx, [ebp - 0x124]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
push 0x5f
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_4655]
test eax, eax
js 0x422cf5
push 0
push 0x5f
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_4655]
inc eax
lea ecx, [ebp - 0x118]
push eax
push 0
call dword [sym.imp.mfc140.dll_Ordinal_3839]
push 0
push 0x5f
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_4655]
test eax, eax
js 0x422d98
push 0
push 0x5f
lea ecx, [ebp - 0x118]
call dword [sym.imp.mfc140.dll_Ordinal_4655]
inc eax
lea ecx, [ebp - 0x118]
push eax
push 0
call dword [sym.imp.mfc140.dll_Ordinal_3839]
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x12
call dword [sym.imp.mfc140.dll_Ordinal_5898]
push eax
lea ecx, [ebp - 0x168]
call dword [sym.imp.mfc140.dll_Ordinal_305]
mov eax, dword [ebp - 0x118]
mov dword [ebp - 0x174], 8
push dword [eax - 0xc]
push eax
push 0x14
lea eax, [ebp - 0x168]
push str._r
push eax
call dword [sym.imp.mfc140.dll_Ordinal_3005]
add esp, 0x14
lea eax, [ebp - 0x168]
lea ecx, [ebp - 0x124]
push eax
call dword [sym.imp.mfc140.dll_Ordinal_1692]
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 0xf
call dword [sym.imp.mfc140.dll_Ordinal_1044]
push 0
mov ecx, edi
mov edi, dword [sym.imp.mfc140.dll_Ordinal_5401]
push 0x3e8
call edi
mov esi, dword [sym.imp.mfc140.dll_Ordinal_4468]
mov ecx, eax
call esi
mov ecx, dword [ebp - 0x170]
push 0
push 0x3f7
call edi
mov ecx, eax
call esi
mov ecx, dword [ebp - 0x170]
push 0
push 0x3f8
call edi
mov ecx, eax
call esi
lea ecx, [ebp - 0x120]
mov byte [ebp - 4], 8
call dword [sym.imp.mfc140.dll_Ordinal_1044]
mov ecx, dword [ebp - 0x170]
call fcn.004221e0
push str.PASS__sb_36__Ds
mov ecx, 0x457bd4
call dword [sym.imp.mfc140.dll_Ordinal_1529]
mov byte [ebp - 0x169], 1
jmp 0x422ab7