Function at 0x416a80
Capabilities:
Create thread

Disassembly:
push 0xffffffffffffffff
push 0x42bdc8
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ecx
push ebp
push esi
push edi
mov edi, ecx
xor esi, esi
mov dword [esp + 0x18], 0
or ebp, 0xffffffff
movsx eax, si
shl eax, 3
cmp word [eax + 0x434908], 0
jne 0x416acc
mov eax, dword [eax + 0x43490c]
lea ecx, [esp + 0x20]
push eax
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
jne 0x416b2c
inc esi
cmp si, 0x21
jb 0x416aa8
mov ecx, dword [0x437114]
test ecx, ecx
je 0x416bc2
mov eax, dword [0x437110]
xor esi, esi
test eax, eax
jle 0x416bc2
xor eax, eax
cmp word [ecx + eax*8], 0
jne 0x416b19
mov eax, dword [ecx + eax*8 + 4]
test eax, eax
je 0x416b19
push eax
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
jne 0x416baf
mov ecx, dword [0x437114]
mov edx, dword [0x437110]
inc esi
movsx eax, si
cmp eax, edx
jl 0x416af2
jmp 0x416bc2
cmp si, 1
jne 0x416b9d
push str.fsonline
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416b5b
mov esi, 0xf
movsx ecx, si
mov word [ecx*8 + 0x434908], 1
jmp 0x416d06
push str.jxonline
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416b82
mov esi, 1
movsx ecx, si
mov word [ecx*8 + 0x434908], si
jmp 0x416d06
push str.xlqy
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416d06
mov esi, 0x1b
movsx ecx, si
mov word [ecx*8 + 0x434908], 1
jmp 0x416d06
mov eax, dword [0x437114]
movsx edx, si
mov word [eax + edx*8], 1
jmp 0x416d06
mov al, byte [edi + 4]
test al, al
jne 0x416d06
test byte [edi + 0x1c], 1
je 0x416bf1
push str.iexplore.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416bf1
and dword [edi + 0x1c], 0xfe
jmp 0x416d06
test byte [edi + 0x1c], 2
je 0x416c16
push str.qq.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416c16
mov eax, dword [edi + 0x1c]
and eax, 0xfc
jmp 0x416cd3
test byte [edi + 0x1c], 4
je 0x416c3b
push str.popo.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416c3b
mov eax, dword [edi + 0x1c]
and eax, 0xfa
jmp 0x416cd3
test byte [edi + 0x1c], 8
je 0x416c5d
push str.wmplayer.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416c5d
mov eax, dword [edi + 0x1c]
and eax, 0xf6
jmp 0x416cd3
test byte [edi + 0x1c], 0x10
je 0x416c91
push str.msmsgs.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
jne 0x416c87
push str.msnmsgr.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416c91
mov eax, dword [edi + 0x1c]
and eax, 0xee
jmp 0x416cd3
test byte [edi + 0x1c], 0x20
je 0x416cb3
push str.realplay.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416cb3
mov eax, dword [edi + 0x1c]
and eax, 0xde
jmp 0x416cd3
test byte [edi + 0x1c], 0x40
je 0x416d06
push str.icq.exe
lea ecx, [esp + 0x24]
call sub.MFC42.DLL_CString::Find_1
cmp eax, ebp
je 0x416d06
mov eax, dword [edi + 0x1c]
and eax, 0xbe
mov ecx, dword [edi + 0x18]
mov dword [edi + 0x1c], eax
inc ecx
mov eax, ecx
mov dword [edi + 0x18], ecx
cmp eax, 2
jl 0x416ce8
mov byte [edi + 4], 1
lea ecx, [esp + 0xc]
push ecx
push 0
push edi
push 0x4167f0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x20]
mov dword [esp + 0x18], ebp
call sub.MFC42.DLL_CString::CString
mov ecx, dword [esp + 0x10]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
add esp, 0x10
ret 4