Function at 0x465890
Capabilities:
Contain obfuscated stackstrings
Create thread
Initialize winsock library
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5e19ed
mov eax, dword fs:[0]
push eax
sub esp, 0x378
mov eax, dword [0x66f040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0
push 0x66
mov dword [ebp - 0x380], edi
call fcn.004acf2c
mov dword [ebp - 4], 0
mov dword [edi], vtable.CLinLauncherDlg.0
mov dword [edi + 0xb0], 0
mov dword [edi + 0xac], vtable.CBitmap.0
mov dword [edi + 0xb8], 0
mov dword [edi + 0xb4], vtable.CBitmap.0
mov dword [edi + 0xc0], 0
mov dword [edi + 0xbc], vtable.CBitmap.0
mov dword [edi + 0xc8], 0
mov dword [edi + 0xc4], vtable.CBitmap.0
mov dword [edi + 0xd0], 0
mov dword [edi + 0xcc], vtable.CBitmap.0
mov dword [edi + 0xd8], 0
mov dword [edi + 0xd4], vtable.CBitmap.0
mov dword [edi + 0xe0], 0
mov dword [edi + 0xdc], vtable.CBitmap.0
mov dword [edi + 0xe8], 0
mov dword [edi + 0xe4], vtable.CBitmap.0
mov dword [edi + 0xf0], 0
mov dword [edi + 0xec], vtable.CBitmap.0
push fcn.0048fcd0
push 0x48fef0
push 8
push 8
lea eax, [edi + 0xf4]
mov byte [ebp - 4], 9
push eax
call fcn.005c3e99
mov dword [edi + 0x138], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x140], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x148], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x150], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x158], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x160], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x168], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x170], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x178], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x180], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x188], 0
mov dword [edi + method.CBitmap.virtual_0], vtable.CBitmap.0
mov dword [edi + 0x1a4], 0
mov dword [edi + method.CFont.virtual_0], vtable.CFont.0
mov byte [ebp - 4], 0x16
lea ecx, [edi + 0x1c0]
call fcn.004a2afb
mov dword [edi + method.CUpdateEdit.virtual_0], vtable.CUpdateEdit.0
lea ecx, [edi + 0x234]
mov byte [ebp - 4], 0x17
call fcn.004a2afb
mov dword [edi + method.CExplorer1.virtual_0], vtable.CExplorer1.0
mov byte [ebp - 4], 0x18
call fcn.004a03fe
call fcn.004a03fe
push 0x80
mov eax, dword [eax + 0xc]
push eax
call dword [sym.imp.USER32.dll_LoadIconW]
mov dword [edi + 0x98], eax
call fcn.0048b3b0
lea eax, [ebp - 0x64]
mov dword [ebp - 0x28], 0x696e6977
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x24], 0x2e74656e
push eax
mov dword [ebp - 0x20], 0x6c6c64
mov dword [ebp - 0x64], 0x65746e49
mov dword [ebp - 0x60], 0x74656e72
mov dword [ebp - 0x5c], 0x6e65704f
mov word [ebp - 0x58], 0x57
call fcn.00401240
movdqa xmm0, xmmword [0x64e280]
mov dword [0x680444], eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 0x1c0], 0
push eax
movdqu xmmword [ebp - 0x1d0], xmm0
call fcn.00401240
mov dword [0x680440], eax
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00401240
movdqa xmm0, xmmword [0x64e0d0]
mov dword [0x68043c], eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 0x1ac], 0
push eax
movdqu xmmword [ebp - 0x1bc], xmm0
call fcn.00401240
mov dword [0x680428], eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00401240
mov dword [0x680424], eax
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x74], 0x70747448
push eax
mov dword [ebp - 0x70], 0x72657551
mov dword [ebp - 0x6c], 0x666e4979
mov word [ebp - 0x68], 0x576f
mov byte [ebp - 0x66], 0
call fcn.00401240
movdqa xmm0, xmmword [0x64e500]
mov dword [0x680438], eax
lea eax, [ebp - 0x180]
push eax
lea eax, [ebp - 0x28]
mov dword [ebp - 0x170], 0x656c64
push eax
movdqu xmmword [ebp - 0x180], xmm0
call fcn.00401240
movdqa xmm0, xmmword [0x64e3c0]
mov dword [0x680434], eax
lea eax, [ebp - 0x1e4]
mov byte [ebp - 0x1d4], 0
push eax
lea eax, [ebp - 0x28]
push eax
movdqu xmmword [ebp - 0x1e4], xmm0
call fcn.00401240
movdqa xmm0, xmmword [0x64e290]
mov dword [0x680430], eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 0x184], 0
push eax
movdqu xmmword [ebp - 0x194], xmm0
call fcn.00401240
mov dword [0x680420], eax
lea eax, [ebp - 0x194]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00401240
movdqa xmm0, xmmword [0x64e0e0]
mov dword [0x68041c], eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x28]
mov byte [ebp - 0x198], 0
push eax
movdqu xmmword [ebp - 0x1a8], xmm0
call fcn.00401240
mov dword [0x680418], eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.00401240
mov dword [0x680414], eax
mov dword [ebp - 0x1c], 0x8b55ff8b
mov byte [ebp - 0x18], 0xec
mov word [ebp - 0x378], 0x246a
mov byte [ebp - 0x376], 0x68
mov dword [ebp - 0x16c], 0x6f0059
mov dword [ebp - 0x168], 0x720075
mov dword [ebp - 0x164], 0x500020
mov dword [ebp - 0x160], 0x200043
mov dword [ebp - 0x15c], 0x61006d
mov dword [ebp - 0x158], 0x200079
mov dword [ebp - 0x154], 0x610068
mov dword [ebp - 0x150], 0x650076
mov dword [ebp - 0x14c], 0x620020
mov dword [ebp - 0x148], 0x650065
mov dword [ebp - 0x144], 0x20006e
mov dword [ebp - 0x140], 0x6e0069
mov dword [ebp - 0x13c], 0x650066
mov dword [ebp - 0x138], 0x740063
mov dword [ebp - 0x134], 0x640065
mov dword [ebp - 0x130], 0x620020
mov dword [ebp - 0x12c], 0x200079
mov dword [ebp - 0x128], 0x200061
mov dword [ebp - 0x124], 0x690076
mov dword [ebp - 0x120], 0x750072
mov dword [ebp - 0x11c], 0x2e0073
mov dword [ebp - 0x118], 0xa000d
mov dword [ebp - 0x114], 0x610043
mov dword [ebp - 0x110], 0x730075
mov dword [ebp - 0x10c], 0x640065
mov dword [ebp - 0x108], 0x610020
mov dword [ebp - 0x104], 0x20006e
mov dword [ebp - 0x100], 0x630041
mov dword [ebp - 0xfc], 0x650063
mov dword [ebp - 0xf8], 0x730073
mov dword [ebp - 0xf4], 0x560020
mov dword [ebp - 0xf0], 0x6f0069
mov dword [ebp - 0xec], 0x61006c
mov dword [ebp - 0xe8], 0x690074
mov dword [ebp - 0xe4], 0x6e006f
mov dword [ebp - 0xe0], 0x690020
mov dword [ebp - 0xdc], 0x20006e
mov dword [ebp - 0xd8], 0x6f006d
mov dword [ebp - 0xd4], 0x750064
xor eax, eax
mov dword [ebp - 0xd0], 0x65006c
mov dword [ebp - 0xcc], 0x610020
mov dword [ebp - 0xc8], 0x200074
mov dword [ebp - 0xc4], 0x300030
mov dword [ebp - 0xc0], 0x330032
mov dword [ebp - 0xbc], 0x25003a
mov dword [ebp - 0xb8], 0x380030
mov dword [ebp - 0xb4], 0x2e0058
mov word [ebp - 0xb0], ax
mov dword [ebp - 0x8c], 0x690057
mov dword [ebp - 0x88], 0x4c006e
mov dword [ebp - 0x84], 0x630069
mov dword [ebp - 0x80], 0x6e0065
mov dword [ebp - 0x7c], 0x650073
mov word [ebp - 0x78], ax
call fcn.0045c7c0
mov ecx, dword [0x680444]
lea edx, [ebp - 0x1c]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x466869
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x466869
mov ecx, dword [0x680440]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x466849
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x466849
mov ecx, dword [0x680428]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x465f4b
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
je 0x465f6a
movzx eax, word [ecx]
lea edx, [ebp - 0x378]
cmp ax, word [edx]
jne 0x466825
movzx eax, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x466825
mov ecx, dword [0x680438]
lea edx, [ebp - 0x1c]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x466801
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x466801
mov ecx, dword [0x680430]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4667da
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x4667da
mov ecx, dword [0x680420]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4667b3
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x4667b3
mov ecx, dword [0x680418]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x46678c
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x46678c
call fcn.00401c00
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00402430
push 0x464f50
push 0x68043c
call fcn.004024f0
push 0x465320
push 0x680428
call fcn.004024f0
push 0x4655a0
push 0x680420
call fcn.004024f0
push 0x4655d0
push 0x680418
call fcn.004024f0
call fcn.00401e70
test eax, eax
je 0x466045
mov ecx, edi
call fcn.0047b910
push 0
call fcn.005c35aa
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, 0x80000
mov ecx, eax
call fcn.0045b540
mov ecx, dword [0x680430]
push 0x20000
call fcn.0045ae00
mov ecx, dword [0x680430]
mov edx, eax
call fcn.0045b420
add esp, 4
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x680410], eax
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x68040c], eax
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x680408], eax
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x680404], eax
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x680400], eax
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x6803fc], eax
push 0xc
call fcn.0049a300
add esp, 4
mov dword [0x6803f8], eax
push 0xc
call fcn.0049a300
mov ecx, dword [0x680410]
add esp, 4
mov dword [0x6803f4], eax
call fcn.00494190
mov ecx, dword [0x68040c]
call fcn.00494190
mov ecx, dword [0x680408]
call fcn.00494190
mov ecx, dword [0x680404]
call fcn.00494190
mov ecx, dword [0x680400]
call fcn.00494190
mov ecx, dword [0x6803fc]
call fcn.00494190
mov ecx, dword [0x6803f8]
call fcn.00494190
mov ecx, dword [0x6803f4]
call fcn.00494190
mov ecx, dword [0x680410]
xor edx, edx
call fcn.00494110
mov ecx, dword [0x68040c]
xor edx, edx
call fcn.00494110
mov ecx, dword [0x680408]
xor edx, edx
call fcn.00494110
mov ecx, dword [0x680404]
xor edx, edx
call fcn.00494110
mov ecx, dword [0x680400]
xor edx, edx
call fcn.00494110
mov ecx, dword [0x6803fc]
xor edx, edx
call fcn.00494110
mov ecx, dword [0x6803f8]
xor edx, edx
call fcn.00494110
mov ecx, dword [0x6803f4]
xor edx, edx
call fcn.00494110
lea eax, [ebp - 0x40]
mov dword [ebp - 0x30], 0x5f327377
push eax
lea eax, [ebp - 0x30]
mov word [ebp - 0x2c], 0x3233
push eax
mov byte [ebp - 0x2a], 0
mov dword [ebp - 0x38], 0x76636572
mov byte [ebp - 0x34], 0
mov dword [ebp - 0x48], 0x6e6e6f63
mov dword [ebp - 0x44], 0x746365
mov dword [ebp - 0x40], 0x646e6573
mov byte [ebp - 0x3c], 0
call fcn.00401240
mov dword [0x6803e4], eax
lea eax, [ebp - 0x40]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00401240
mov dword [0x6803e0], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00401240
mov dword [0x6803ec], eax
lea eax, [ebp - 0x48]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00401240
mov dword [0x6803e8], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00401240
mov dword [0x6803dc], eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x30]
push eax
call fcn.00401240
mov ecx, dword [0x6803e0]
lea edx, [ebp - 0x1c]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [0x6803d8], eax
mov dword [0x68042c], 1
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x466280
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
je 0x466308
push 0x600
call fcn.0049a300
mov esi, eax
add esp, 4
test esi, esi
je 0x4662d5
push 0x750f4248
lea eax, [ebp - 0x16c]
push eax
push esi
call fcn.0045e930
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
lea eax, [esi + 0x400]
push eax
call fcn.0045e950
add esp, 8
push 0
push 0
push esi
push 0x45ad30
push 0
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x6803e0]
lea edx, [ebp - 0x1c]
push 5
call fcn.0048ff30
mov ecx, dword [0x6803e0]
lea edx, [ebp - 0x1c]
add esp, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4668c4
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x4668c4
mov ecx, dword [0x6803e8]
lea edx, [ebp - 0x1c]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x466324
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
je 0x4663ac
push 0x600
call fcn.0049a300
mov esi, eax
add esp, 4
test esi, esi
je 0x466379
push 0x750f4249
lea eax, [ebp - 0x16c]
push eax
push esi
call fcn.0045e930
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
lea eax, [esi + 0x400]
push eax
call fcn.0045e950
add esp, 8
push 0
push 0
push esi
push 0x45ad30
push 0
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x6803e8]
lea edx, [ebp - 0x1c]
push 5
call fcn.0048ff30
mov ecx, dword [0x6803e8]
lea edx, [ebp - 0x1c]
add esp, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4668c4
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x4668c4
mov ecx, dword [0x6803d8]
lea edx, [ebp - 0x1c]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4663c8
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
je 0x466450
push 0x600
call fcn.0049a300
mov esi, eax
add esp, 4
test esi, esi
je 0x46641d
push 0x750f424a
lea eax, [ebp - 0x16c]
push eax
push esi
call fcn.0045e930
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
lea eax, [esi + 0x400]
push eax
call fcn.0045e950
add esp, 8
push 0
push 0
push esi
push 0x45ad30
push 0
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x6803d8]
lea edx, [ebp - 0x1c]
push 5
call fcn.0048ff30
mov ecx, dword [0x6803d8]
lea edx, [ebp - 0x1c]
add esp, 4
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4668c4
movzx eax, byte [ecx + 4]
cmp al, byte [edx + 4]
jne 0x4668c4
call fcn.00401c00
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00402430
push 0x465600
push 0x6803dc
call fcn.004024f0
push 0x465720
push 0x6803e4
call fcn.004024f0
push 0x465630
push 0x6803ec
call fcn.004024f0
call fcn.00401e70
mov ecx, dword [0x6803d8]
push 0x40000
call fcn.0045ae00
mov ecx, dword [0x6803d8]
mov edx, eax
call fcn.0045b420
add esp, 4
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov edx, 0x100000
mov ecx, eax
call fcn.0045b540
call fcn.0045c7c0
call fcn.0045c7c0
push 0
push 0
push 0
push 0x45b6f0
push 0
push 0
call ebx
push 0x800
mov ecx, 0x464970
call fcn.0045ae00
mov edx, eax
mov ecx, 0x464970
call fcn.0045b420
movdqa xmm0, xmmword [0x64e660]
lea eax, [ebp - 0xac]
add esp, 4
mov dword [ebp - 0x54], 0x6c64746e
mov dword [ebp - 0x50], 0x6c642e6c
mov word [ebp - 0x4c], 0x6c
movdqu xmmword [ebp - 0xac], xmm0
push eax
lea eax, [ebp - 0x54]
mov dword [ebp - 0x9c], 0x74706563
push eax
mov dword [ebp - 0x98], 0x486e6f69
mov dword [ebp - 0x94], 0x6c646e61
mov word [ebp - 0x90], 0x7265
mov byte [ebp - 0x8e], 0
call fcn.00401240
mov dword [0x6803d4], eax
lea eax, [ebp - 0xac]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00401240
cmp dword [0x6803d4], 0
mov esi, eax
je 0x4665a9
call fcn.00401c00
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
push eax
call fcn.00402430
push 0x464e70
push 0x6803d4
call fcn.004024f0
call fcn.00401e70
push 0x200000
mov ecx, esi
call fcn.0045ae00
mov edx, eax
mov ecx, esi
call fcn.0045b420
add esp, 4
call fcn.0045c130
call fcn.0045be30
mov eax, dword [0x680ca4]
mov dword [0x680ca8], eax
mov eax, dword [0x680d80]
mov dword [0x680d84], eax
mov dword [edi + 0x9c], 0
mov dword [edi + 0xa0], 0
mov dword [edi + 0xa4], 0
mov dword [edi + 0xa8], 0
mov dword [edi + 0x18c], 0
mov dword [edi + 0x190], 0
mov dword [edi + 0x194], 0
mov dword [edi + 0x198], 0
mov dword [edi + 0x19c], 0
mov word [edi + 0x1a8], 0x100
mov dword [edi + 0x1ac], 0
mov dword [edi + 0x1b0], 0xffffffff
mov dword [edi + 0x2cc], 0
mov dword [edi + 0x2d0], 0
mov dword [edi + 0x2d4], 0
mov dword [edi + 0x2d8], 0
mov dword [edi + 0x2dc], 0
mov dword [0x68067c], 0
mov dword [edi + 0x2e0], 0
mov dword [edi + 0x2e4], 0
mov dword [edi + 0x2e8], 0
call fcn.0048b780
push ecx
xor bl, bl
call fcn.00493180
add esp, 4
test eax, eax
jne 0x4666d9
push 0x10
push str.Error
push 0x64bb54
mov ecx, edi
mov bl, 1
call fcn.004a5003
call fcn.0040c1e0
lea eax, [ebp - 0x37c]
push 4
push eax
call fcn.0040ca90
add esp, 8
cmp eax, 1
je 0x466709
push 0x10
push str.Error
push 0x64bb70
mov ecx, edi
mov bl, 1
call fcn.004a5003
mov esi, dword [ebp - 0x37c]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0xc
xor esi, eax
call fcn.0049a300
add esp, 4
mov dword [0x6803f0], eax
mov ecx, eax
call fcn.00494190
mov ecx, dword [0x6803f0]
mov edx, esi
call fcn.00494110
lea eax, [ebp - 0x374]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
test eax, eax
je 0x466767
push 0x10
push str.Error
push 0x64bb8c
mov ecx, edi
mov bl, 1
call fcn.004a5003
jmp 0x466771
mov dword [0x680458], 1
call fcn.00465750
test bl, bl
je 0x4668d5
mov ecx, edi
call fcn.0047b910
push 0
call fcn.005c35aa
push 0x600
call fcn.0049a300
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x4668c4
push 0x750f4247
jmp 0x466887
push 0x600
call fcn.0049a300
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x4668c4
push 0x750f4246
jmp 0x466887
push 0x600
call fcn.0049a300
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x4668c4
push 0x750f4245
jmp 0x466887
push 0x600
call fcn.0049a300
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x4668c4
push 0x750f4244
jmp 0x466887
push 0x600
call fcn.0049a300
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x4668c4
push 0x750f4243
jmp 0x466887
push 0x600
call fcn.0049a300
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x4668c4
push 0x750f4242
jmp 0x466887
push 0x600
call fcn.0049a300
mov ebx, dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
add esp, 4
test esi, esi
je 0x4668c4
push 0x750f4241
lea eax, [ebp - 0x16c]
push eax
push esi
call fcn.0045e930
add esp, 0xc
lea eax, [ebp - 0x8c]
push eax
lea eax, [esi + 0x400]
push eax
call fcn.0045e950
add esp, 8
push 0
push 0
push esi
push 0x45ad30
push 0
push 0
call ebx
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push 0
push 0x465870
push 0
push 0
call ebx
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005c02df
mov esp, ebp
pop ebp
ret 4