Function at 0x4038d4
Capabilities:
Create process on windows
Create thread
Read file via mapping

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
cmp dword [ebp + 0xc], 0x400
jne 0x4055c8
cmp dword [ebp + 0x10], 0xffffffff
jne 0x4039c4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b598a
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x40397f
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x40398f
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff00ff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
jmp 0x4055c3
cmp dword [ebp + 0x10], 0xfffffffe
jne 0x403b78
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b59af
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x403a21
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403a31
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x80000301
push 0
push dword [ebp + 0x14]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0x28], eax
push 0x80000301
push 0
push dword [0x7406d0]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0x2c], eax
push dword [ebp - 0x2c]
push 0x4b59d9
push dword [ebp - 0x28]
push 0x4b59e5
mov ecx, 4
call fcn.0040106b
add esp, 0x10
mov dword [ebp - 0x30], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403ae7
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403af7
push ebx
call fcn.0047ee6b
add esp, 4
push 0x41
mov eax, 0x4b5a15
mov dword [ebp - 0x34], eax
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x30]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403b33
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x403b43
push ebx
call fcn.0047ee6b
add esp, 4
cmp dword [ebp - 0x38], 1
je 0x403b6e
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x4055d2
call fcn.0040566f
jmp 0x4055c3
cmp dword [ebp + 0x10], 1
jne 0x404562
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0x80ff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5a1b
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x403c05
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403c15
push ebx
call fcn.0047ee6b
add esp, 4
push 1
push 0x64
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
cmp dword [ebp + 0x14], 0
jne 0x403d4f
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5a55
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x403c8b
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403c9b
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 1
push 0x64
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x4b5a55
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x403d3a
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403d4a
push ebx
call fcn.0047ee6b
add esp, 4
jmp 0x40455d
push 0
push dword [ebp + 0x14]
call fcn.00405680
mov dword [ebp - 4], eax
fild dword [ebp + 0x14]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fadd qword [0x4b5a76]
fstp qword [ebp - 0x30]
push 0x80000301
push 0
push dword [ebp - 4]
fld qword [ebp - 0x30]
call fcn.00401a9c
push 0x80000301
push 0
push eax
push 2
mov ebx, 0x910
call fcn.004847b0
add esp, 0x1c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x403db4
push ebx
call fcn.0047ee6b
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x80000301
push 0
push dword [ebp + 0x14]
push 1
mov ebx, 0x2c
mov eax, 0x48cb00
call fcn.004838a0
add esp, 0x10
lea eax, [ebp - 8]
push eax
call fcn.004056ab
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x403e5e
push 0x74069c
lea eax, [ebp - 8]
push eax
call fcn.0040574e
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x403e14
push ebx
call fcn.0047ee6b
add esp, 4
pop eax
mov dword [ebp - 8], eax
lea eax, [ebp - 8]
push eax
call fcn.004056ab
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
jne 0x403e5e
push 0
push 0xffffffe1
push 0x400
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
jmp 0x4055d2
lea eax, [ebp - 8]
push eax
call fcn.0040649b
mov ebx, dword [0x7406d4]
add ebx, 0x18
mov dword [ebp - 0x24], ebx
push 0x80000101
push 0
push 0
push 1
mov ebx, 0x140
call fcn.00484290
add esp, 0x10
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call fcn.00403837
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x403ec3
push ebx
call fcn.0047ee6b
add esp, 4
cmp dword [ebp - 0x2c], 0
je 0x4041f7
mov ebx, dword [0x7406d4]
add ebx, 0x18
mov dword [ebp - 0x24], ebx
push dword [ebp - 0x24]
call fcn.00407845
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x133c6aa
jle 0x403f05
cmp dword [ebp - 0xc], 0x1348d2f
jge 0x403f05
mov eax, 1
jmp 0x403f07
xor eax, eax
test eax, eax
je 0x4041f7
mov dword [ebp - 0x24], esp
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x403f33
push 6
call fcn.0047ee71
add esp, 4
push 0x80000301
push 0
push eax
push 1
mov ebx, 0x90
mov eax, 0x48cd70
call fcn.004838a0
add esp, 0x10
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x30], eax
je 0x4041f7
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5a7e
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x403fb4
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x403fc4
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff00
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov ebx, dword [0x7406d4]
add ebx, 0x18
mov dword [ebp - 0x24], ebx
push 1
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x24]
call fcn.00407b11
test eax, eax
je 0x404191
push str._NewLogin.exe
push dword [0x740678]
mov ecx, 2
call fcn.0040106b
add esp, 8
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x404045
push ebx
call fcn.0047ee6b
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
call fcn.00402df1
test eax, eax
je 0x404080
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x40406d
mov eax, 0x4b433b
push eax
push 1
mov ebx, 0x244
call fcn.00484800
add esp, 0x10
push htons
push 0
mov eax, dword [ebp - 0x10]
test eax, eax
jne 0x404093
mov eax, 0x4b4333
push eax
push reloc.WS2_32.dll_connect
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x4040a7
mov eax, 0x4b433b
push eax
push 2
mov ebx, 0x26c
call fcn.00483a60
add esp, 0x1c
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov eax, str.open
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
call fcn.00401ac3
mov dword [ebp - 0x2c], eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4040ea
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
lea eax, [ebp - 0x14]
push eax
call fcn.00401ac3
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], esp
push 1
push 0
push 0
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x40411e
add eax, 8
push eax
mov eax, dword [ebp - 0x2c]
test eax, eax
je 0x404129
add eax, 8
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
nop
nop
nop
nop
cmp dword [ebp - 0x38], esp
je 0x40414b
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x40415b
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40416b
push ebx
call fcn.0047ee6b
add esp, 4
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x4055d2
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
mov eax, 0x4b5aa2
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x2c]
test ebx, ebx
je 0x4041e7
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x4041f7
push ebx
call fcn.0047ee6b
add esp, 4
push 1
push 0
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push 0x80000301
push 0
push 0x104
push 1
mov ebx, 0x184
call fcn.00484810
add esp, 0x10
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x404245
push ebx
call fcn.0047ee6b
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], esp
push 0x104
push dword [ebp - 0x18]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameA]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404275
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [0x7406d8]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esp
push 0
push 0x80
push 3
push 0
push 0
push connect
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
nop
nop
nop
nop
cmp dword [ebp - 0x28], esp
je 0x4042be
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x7406d8]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], 0xffffffff
je 0x40453c
mov ebx, dword [0x7406d8]
add ebx, 4
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x7406d8]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0
push 2
push 0
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40432a
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x7406d8]
add ebx, 4
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], 0
je 0x40453c
mov ebx, dword [0x7406d8]
add ebx, 8
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x7406d8]
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], esp
push 2
push 0
push 0
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40438f
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x7406d8]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esp
push 0
push 0
push 0
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
nop
nop
nop
nop
cmp dword [ebp - 0x28], esp
je 0x4043d0
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [0x7406d8]
add ebx, 0xc
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x7406d8]
add ebx, 4
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], esp
push 0
push 0
push 0
push 4
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x404420
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x7406d8]
add ebx, 0xc
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x24]
cmp dword [ebx], 0
je 0x40453c
mov ebx, dword [0x7406d8]
add ebx, 0x10
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x7406d8]
add ebx, 0xc
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x28]
push dword [ebx]
call fcn.00407d27
mov ebx, dword [ebp - 0x24]
mov dword [ebx], eax
mov ebx, dword [0x7406d8]
add ebx, 0x10
mov dword [ebp - 0x24], ebx
mov ebx, dword [0x7406d8]
add ebx, 0xc
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x24]
fild dword [ebx]
fstp qword [ebp - 0x30]
fld qword [ebp - 0x30]
mov ebx, dword [ebp - 0x28]
fild dword [ebx]
fstp qword [ebp - 0x38]
fsub qword [ebp - 0x38]
fstp qword [ebp - 0x40]
mov ebx, dword [0x7406d8]
add ebx, 8
mov dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x44]
fild dword [ebx]
fstp qword [ebp - 0x4c]
fld qword [ebp - 0x40]
fsub qword [ebp - 0x4c]
ftst
fnstsw ax
test ah, 1
je 0x4044ba
fchs
fcomp qword [0x4b58d4]
fnstsw ax
test ah, 0x41
jne 0x40453c
mov dword [ebp - 0x24], esp
push 0
push 0
push 0
push 0x408bd4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404508
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x40452d
push 6
call fcn.0047ee71
add esp, 4
jmp 0x4055d2
push 0
push 0x19
push 0x400
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
jmp 0x4055c3
cmp dword [ebp + 0x10], 0x19
jne 0x4047b7
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0x80ff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [0x7406dc], 0
mov dword [0x7406e0], 0
mov dword [0x7406e4], 0
mov dword [0x7406e8], 0
mov dword [0x7406ec], 0
mov dword [0x7406f0], 0
mov dword [0x7406f4], 0
mov dword [0x7406f8], 0
mov dword [0x7406fc], 0
mov dword [0x740700], 0
mov dword [0x740704], 0
mov dword [0x740708], 0
mov dword [0x74070c], 0
mov dword [0x740710], 0
mov dword [0x740714], 0
mov dword [0x740718], 0
mov dword [0x74071c], 0
mov dword [0x740720], 0
cmp dword [0x740724], 0
je 0x40468b
push 0x80000301
push 0
push dword [0x740724]
push 1
mov ebx, 0x2c
mov eax, 0x48cb00
call fcn.004838a0
add esp, 0x10
mov dword [0x740724], 0
mov ebx, dword [0x7406d4]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
push reloc.WS2_32.dll_connect
push 0
mov ebx, dword [ebp - 0x24]
mov eax, dword [ebx]
test eax, eax
jne 0x4046ac
mov eax, 0x4b433b
push eax
push 1
mov ebx, 0x130
call fcn.00483bc0
add esp, 0x10
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0
jle 0x404791
push 1
push 0
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov ebx, dword [0x7406d4]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x28], esp
mov ebx, dword [ebp - 0x24]
push dword [ebx]
call dword [0x7408c8]
nop
nop
nop
nop
cmp dword [ebp - 0x28], esp
je 0x404715
push 6
call fcn.0047ee71
add esp, 4
mov ebx, dword [0x7406d4]
add ebx, 0x1c
mov dword [ebp - 0x24], ebx
push dword [ebp - 0x24]
call fcn.00407d6e
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push 0
push 0
push dword [ebp - 0x28]
push 0x40a1c9
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x404767
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x34], esp
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x34], esp
je 0x40478c
push 6
call fcn.0047ee71
add esp, 4
jmp 0x4047b2
push 0
push 5
push 0x400
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
jmp 0x4055c3
cmp dword [ebp + 0x10], 0xfffffffd
jne 0x404933
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5abb
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x404814
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x404824
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4048bf
push ebx
call fcn.0047ee6b
add esp, 4
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4048f8
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x404908
push ebx
call fcn.0047ee6b
add esp, 4
push 0x3e8
call fcn.00407d8a
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x740728], 1
jmp 0x4055c3
cmp dword [ebp + 0x10], 0xfffffffc
jne 0x404aaf
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5ad4
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x404990
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4049a0
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x404a3b
push ebx
call fcn.0047ee6b
add esp, 4
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x404a74
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x404a84
push ebx
call fcn.0047ee6b
add esp, 4
push 0x3e8
call fcn.00407d8a
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x740728], 1
jmp 0x4055c3
cmp dword [ebp + 0x10], 2
jne 0x404b89
mov dword [0x740708], 4
cmp dword [0x74072c], 0
jne 0x404b04
push 0x80000301
push 0
push 0x19
push ioctlsocket
push 0
push 0x40b123
push 2
mov ebx, 0x10
mov eax, 0x48ca60
call fcn.004838a0
add esp, 0x1c
mov dword [0x74072c], eax
push 0x80000301
push 0
push 5
push 1
mov ebx, 0x67c
call fcn.00484840
add esp, 0x10
mov dword [ebp - 0x24], esp
push 0
push 0
push 0
push 0x40b460
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404b5f
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x404b84
push 6
call fcn.0047ee71
add esp, 4
jmp 0x4055c3
cmp dword [ebp + 0x10], 0x14
jne 0x404c63
mov dword [0x740708], 4
cmp dword [0x74072c], 0
jne 0x404bde
push 0x80000301
push 0
push 0x19
push ioctlsocket
push 0
push 0x40b123
push 2
mov ebx, 0x10
mov eax, 0x48ca60
call fcn.004838a0
add esp, 0x1c
mov dword [0x74072c], eax
push 0x80000301
push 0
push 5
push 1
mov ebx, 0x67c
call fcn.00484840
add esp, 0x10
mov dword [ebp - 0x24], esp
push 0
push 0
push 1
push 0x40b460
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404c39
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x404c5e
push 6
call fcn.0047ee71
add esp, 4
jmp 0x4055c3
cmp dword [ebp + 0x10], 3
jne 0x404d5e
push 1
push 0
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov dword [0x740708], 1
cmp dword [0x740730], 0
jne 0x404cd1
push 0x80000301
push 0
push 0xa
push ioctlsocket
push 0
push 0x40cc59
push 2
mov ebx, 0x10
mov eax, 0x48ca60
call fcn.004838a0
add esp, 0x1c
mov dword [0x740730], eax
push 0x80000301
push 0
push 5
push 1
mov ebx, 0x67c
call fcn.00484840
add esp, 0x10
mov dword [0x740718], 0
mov dword [ebp - 0x24], esp
push 0
push 0
push dword [ebp + 0x14]
push 0x40cfb4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x404d34
push 6
call fcn.0047ee71
add esp, 4
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], esp
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop
nop
nop
nop
cmp dword [ebp - 0x2c], esp
je 0x404d59
push 6
call fcn.0047ee71
add esp, 4
jmp 0x4055c3
cmp dword [ebp + 0x10], 4
jne 0x404e3f
push 0x740734
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x64
jge 0x404e2b
fild dword [0x7406f8]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [0x7406f0]
fstp qword [ebp - 0x30]
fdiv qword [ebp - 0x30]
fstp qword [ebp - 0x38]
fld qword [ebp - 0x38]
fmul qword [0x4b5ae8]
fstp qword [ebp - 0x40]
fld qword [ebp - 0x40]
call fcn.00401a9c
mov dword [ebp - 0x1c], eax
push 0x80000301
push 0
push 0
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x28]
push 0x80000601
push dword [ebp - 0x24]
push dword [ebp - 0x28]
push 2
mov ebx, 0x68
call fcn.00484870
add esp, 0x1c
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], edx
fld qword [ebp - 0x38]
call fcn.00401a9c
mov dword [ebp - 0x1c], eax
push 1
push dword [ebp - 0x1c]
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
push 0x740734
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xc]
jmp 0x4055c3
cmp dword [ebp + 0x10], 5
jne 0x404f2a
mov dword [0x740708], 2
push 1
push 0x64
push 0x7406c0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb0]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5af0
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x404ebf
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x404ecf
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff00ff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x3e8
call fcn.00407d8a
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x740728], 1
jmp 0x4055c3
cmp dword [ebp + 0x10], 0xfffffff6
jne 0x4050a6
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5b08
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x404f87
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x404f97
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x405032
push ebx
call fcn.0047ee6b
add esp, 4
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x40506b
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x40507b
push ebx
call fcn.0047ee6b
add esp, 4
push 0x3e8
call fcn.00407d8a
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x740728], 1
jmp 0x4055c3
cmp dword [ebp + 0x10], 0xfffffff5
jne 0x405289
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5b22
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x405103
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x405113
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x34], eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x405199
push ebx
call fcn.0047ee6b
add esp, 4
push 0x80000301
push 0
push dword [ebp + 0x14]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0x38], eax
push 0x4b5b51
push dword [ebp - 0x38]
push 0x4b5b53
push dword [ebp - 0x34]
mov ecx, 4
call fcn.0040106b
add esp, 0x10
mov dword [ebp - 0x3c], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4051e8
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x4051f8
push ebx
call fcn.0047ee6b
add esp, 4
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x40520c
push ebx
call fcn.0047ee6b
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0x20]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x40525e
push ebx
call fcn.0047ee6b
add esp, 4
push 0x3e8
call fcn.00407d8a
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
mov dword [0x740728], 1
jmp 0x4055c3
cmp dword [ebp + 0x10], 0xffffffe2
jne 0x405456
push 0x80000301
push 0
push dword [ebp + 0x14]
push 1
mov ebx, 0x168
call fcn.00483d00
add esp, 0x10
mov dword [ebp - 0x24], eax
push 0x4b5b51
push dword [ebp - 0x24]
push 0x4b5b5f
mov ecx, 3
call fcn.0040106b
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x4052df
push ebx
call fcn.0047ee6b
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x4052f3
push ebx
call fcn.0047ee6b
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
lea eax, [ebp - 0x20]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x405342
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x4053dd
push ebx
call fcn.0047ee6b
add esp, 4
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x405416
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x405426
push ebx
call fcn.0047ee6b
add esp, 4
push 0x3e8
call fcn.00407d8a
push 0
push 0x19
push 0x400
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xd4]
jmp 0x4055c3
cmp dword [ebp + 0x10], 0xffffffe1
jne 0x4055c3
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
push 1
mov eax, 0x4b5b7f
mov dword [ebp - 0x30], eax
lea eax, [ebp - 0x30]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov ebx, eax
test ebx, ebx
je 0x4054b3
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x4054c3
push ebx
call fcn.0047ee6b
add esp, 4
mov dword [ebp - 0x24], 0
push 0
push dword [ebp - 0x24]
push 0xff
call fcn.0040366e
mov dword [ebp - 0x28], eax
push 1
push dword [ebp - 0x28]
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xb4]
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x80]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0
push 0
push dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0
push 0
push dword [ebp - 0x2c]
mov dword [ebp - 0x30], 0
push 0
push dword [ebp - 0x30]
mov dword [ebp - 0x34], 0
push 0
lea eax, [ebp - 0x34]
push eax
push 0x7406bc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0xac]
mov dword [ebp - 0x38], eax
mov ebx, dword [ebp - 0x34]
test ebx, ebx
je 0x40555e
push ebx
call fcn.0047ee6b
add esp, 4
push 0x10
mov eax, 0x4b5a15
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
lea eax, [ebp - 0x38]
push eax
push 1
push dword [ebp - 0x24]
push 0x7406cc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 8]
mov ebx, dword [ebp - 0x38]
test ebx, ebx
je 0x405597
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x4055a7
push ebx
call fcn.0047ee6b
add esp, 4
push 0x3e8
call fcn.00407d8a
push 0x7406b0
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x90]
jmp 0x4055d2
cmp dword [ebp + 0xc], 0x4a
jne 0x4055d2
jmp 0x4055e1
mov dword [ebp - 0x24], esp
push dword [ebp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
push dword [0x7406b4]
call dword [sym.imp.USER32.dll_CallWindowProcA]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x405612
push 6
call fcn.0047ee71
add esp, 4
jmp 0x405617
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x405628
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x405638
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x405648
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x405658
push ebx
call fcn.0047ee6b
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x405668
push ebx
call fcn.0047ee6b
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x10