Function at 0x406200
Capabilities:
Get common file path
Initialize winsock library

Disassembly:
push 0xffffffffffffffff
push 0x4a95d7
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x3c8
push ebx
push ebp
push esi
push edi
mov ecx, 5
mov esi, str.www.360.cn
lea edi, [esp + 0x24]
lea eax, [esp + 0x24]
rep movsd dword es:[edi], dword [esi]
push eax
movsw word es:[edi], word [esi]
call dword [sym.imp.MSVCRT.dll_wcslen]
lea ecx, [esp + 0x28]
push eax
push ecx
call fcn.00442640
add esp, 0xc
lea edx, [esp + 0x248]
push edx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
mov esi, eax
neg esi
sbb esi, esi
xor ebp, ebp
push ebp
inc esi
call dword [sym.imp.ole32.dll_CoInitialize]
push ebp
push ebp
push ebp
push ebp
call dword [sym.imp.USER32.dll_DefWindowProcW]
lea eax, [esp + 0x1c]
push eax
mov dword [esp + 0x20], 8
mov dword [esp + 0x24], 0x404
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
push ebp
mov ecx, dword [esp + 0x3ec]
push ecx
push ebp
mov ecx, 0x4d1b50
call fcn.00406630
cmp eax, ebp
jl 0x4062e4
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0xc
mov dword [0x4d1bd4], eax
mov dword [0x4d1bd8], ebp
call sub.MSVCRT.dll_void____cdecl_operator_new_unsigned_int_
add esp, 4
cmp eax, ebp
je 0x4062d3
mov dword [eax], ebp
mov dword [eax + 4], ebp
mov dword [eax + 8], ebp
jmp 0x4062d5
xor eax, eax
cmp eax, ebp
mov dword [0x4d1bd8], eax
je 0x4062e4
mov dword [0x4d1bdc], ebp
mov ecx, 0x4d1ad0
call fcn.00404130
mov ecx, 0x4d1ad0
call fcn.004019e0
call fcn.00406620
test eax, eax
je 0x40636f
mov ecx, 0x4d1ad0
call fcn.00402ef0
test eax, eax
jne 0x406368
mov ecx, 0x4d1ad0
call fcn.0047ee50
mov ecx, eax
call fcn.0043c810
mov edx, dword [0x4c2080]
mov esi, dword [eax + 4]
add eax, 4
mov dword [esp + 0x1c], edx
push 0xb0
lea ecx, [esp + 0x20]
mov dword [esp + 0x3e4], ebp
call fcn.00405320
push 0x40
push esi
mov eax, dword [esp + 0x24]
push eax
push ebp
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x1c]
mov dword [esp + 0x3e0], 0xffffffff
call fcn.004056c0
xor eax, eax
jmp 0x4065df
mov ecx, 0x82
xor eax, eax
lea edi, [esp + 0x3e]
mov word [esp + 0x3c], bp
rep stosd dword es:[edi], eax
lea ecx, [esp + 0x3c]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
push ebp
lea edx, [esp + 0x40]
push 0x6400000
push edx
call fcn.0040a700
add esp, 0xc
test eax, eax
jne 0x40654d
push 0x28
mov ecx, 0x4d1ad0
call fcn.00403890
lea eax, [esp + 0x3c]
lea ecx, [esp + 0x10]
push eax
push ecx
call fcn.0040a760
add esp, 8
mov ebx, 1
lea edx, [esp + 0x14]
push ebx
push edx
lea ecx, [esp + 0x18]
mov dword [esp + 0x3e8], ebx
call fcn.004068a0
mov esi, eax
mov eax, dword [esi]
mov ecx, dword [esp + 0x10]
cmp ecx, eax
mov byte [esp + 0x3e0], 2
je 0x406439
cmp dword [ecx - 0xc], ebp
jge 0x40640b
mov edx, dword [0x4c2084]
add ecx, 0xfffffff4
cmp ecx, edx
jne 0x406410
cmp dword [eax - 0xc], ebp
jge 0x406420
push eax
mov eax, dword [eax - 8]
push eax
lea ecx, [esp + 0x18]
call fcn.00405750
jmp 0x406439
lea ecx, [esp + 0x10]
call fcn.00405a90
mov esi, dword [esi]
mov dword [esp + 0x10], esi
add esi, 0xfffffff4
push esi
call dword [sym.imp.KERNEL32.dll_InterlockedIncrement]
mov eax, dword [esp + 0x14]
mov edx, dword [0x4c2084]
mov edi, dword [sym.imp.KERNEL32.dll_InterlockedDecrement]
mov byte [esp + 0x3e0], bl
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x406471
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x406471
mov edx, dword [esp + 0x14]
lea eax, [edx - 0xc]
push eax
call fcn.00442ac0
add esp, 4
mov ecx, 0x4d1ad0
call fcn.00402ef0
test eax, eax
jne 0x40651b
mov eax, dword [0x4c2080]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x10]
push 0x64
push ecx
lea edx, [esp + 0x20]
mov bl, 3
push 0xca
push edx
mov byte [esp + 0x3f0], bl
call fcn.00406a10
mov eax, dword [0x4c2080]
mov esi, dword [esp + 0x28]
add esp, 0x10
mov dword [esp + 0x14], eax
push 0x83
lea ecx, [esp + 0x18]
mov byte [esp + 0x3e4], 4
call fcn.00405320
push 0x40
mov ecx, dword [esp + 0x18]
push ecx
push esi
push ebp
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x14]
mov byte [esp + 0x3e0], bl
call fcn.004056c0
mov eax, dword [esp + 0x18]
mov ecx, dword [0x4c2084]
lea edx, [eax - 0xc]
cmp edx, ecx
je 0x40651b
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x40651b
mov eax, dword [esp + 0x18]
add eax, 0xfffffff4
push eax
call fcn.00442ac0
add esp, 4
mov eax, dword [esp + 0x10]
mov edx, dword [0x4c2084]
lea ecx, [eax - 0xc]
cmp ecx, edx
je 0x406546
add eax, 0xfffffff4
push eax
call edi
test eax, eax
jg 0x406546
mov edx, dword [esp + 0x10]
add edx, 0xfffffff4
push edx
call fcn.00442ac0
add esp, 4
xor eax, eax
jmp 0x4065df
mov ecx, 0x4d1ad0
call fcn.00401340
test eax, eax
jne 0x40656f
mov ecx, 0x4d1ad0
call fcn.00401c40
call fcn.00406600
or eax, 0xffffffff
jmp 0x4065df
mov eax, dword [esp + 0x3f4]
mov ecx, dword [esp + 0x3f0]
push eax
push ecx
mov ecx, 0x4d1ad0
call fcn.00403130
mov ebx, eax
call fcn.00406600
mov ecx, 0x4d1ad0
call fcn.00401c40
mov ecx, 0x4d1b50
call fcn.004067d0
mov edi, dword [0x4d1bd8]
cmp edi, ebp
je 0x4065be
mov ecx, edi
call fcn.00406860
push edi
call fcn.00442ac0
add esp, 4
push 0x4d1b50
call fcn.00406700
cmp esi, ebp
je 0x4065d2
call dword [sym.imp.WS2_32.dll_WSACleanup]
call fcn.0041e990
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, ebx
mov ecx, dword [esp + 0x3d8]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x3d4
ret 0x10