Function at 0x401a20
Capabilities:
Create thread
Delete registry key
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
push esi
call fcn.004019d0
cmp dword [ebp + 8], 5
mov esi, eax
mov dword [ebp - 0xc], esi
je 0x401a7f
push esi
push str.Useage:__s_pid_p0_p1_protocol_r_n
call fcn.0040cd8b
push str.pid:_parent_process_id_r_n
call fcn.0040cd8b
push str.p0:_port_for_listener_r_n
call fcn.0040cd8b
push str.p1:_port_for_transfer_r_n
call fcn.0040cd8b
push str.protocol:_TCP__TCP_HTTP___UDP_r_n
call fcn.0040cd8b
add esp, 0x18
push 0x1388
call dword [sym.imp.KERNEL32.dll_Sleep]
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret
push ebx
mov ebx, dword [ebp + 0xc]
push edi
mov edi, dword [ebx + 4]
lea edx, [ebp + 8]
call fcn.00404030
test eax, eax
je 0x401aae
push str.pid:_error__r_n
call fcn.0040cd8b
add esp, 4
mov eax, esi
call fcn.00401980
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
cmp dword [ebp + 8], 0
jne 0x401abd
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp + 8], eax
mov edi, dword [ebx + 8]
lea edx, [ebp - 8]
call fcn.00404030
test eax, eax
je 0x401ae7
push str.p0:_error__r_n
call fcn.0040cd8b
add esp, 4
mov eax, esi
call fcn.00401980
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov edi, dword [ebx + 0xc]
lea edx, [ebp - 4]
call fcn.00404030
test eax, eax
je 0x401b11
push str.p1:_error__r_n
call fcn.0040cd8b
add esp, 4
mov eax, esi
call fcn.00401980
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov eax, dword [ebx + 0x10]
mov al, byte [eax]
cmp al, 0x55
je 0x401b39
cmp al, 0x54
je 0x401b39
push str.protocol:_error__r_n
call fcn.0040cd8b
add esp, 4
mov eax, esi
call fcn.00401980
pop edi
pop ebx
pop esi
mov esp, ebp
pop ebp
ret
mov esi, dword [ebp - 4]
mov edi, dword [ebp - 8]
mov ecx, dword [ebp - 0xc]
push esi
push edi
push ecx
push str._s_PORT__d__TO_PORT__d__SUCCESS__r_n
call fcn.0040cd8b
add esp, 0x10
push str.SoftwareSafeGuiSAI
push reloc.WS2_32.dll_accept
mov word [0x41cf54], di
mov word [0x41cf50], si
call dword [sym.imp.ADVAPI32.dll_RegDeleteKeyW]
test eax, eax
je 0x401b7a
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, dword [ebx + 0x10]
cmp byte [edx], 0x54
mov eax, 0x401340
je 0x401b8c
mov eax, 0x401720
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
lea ecx, [ebp - 0x10]
push ecx
push 0
push 0
push eax
push 0
push 0
call esi
lea edx, [ebp - 0x10]
push edx
push 0
push 0
push 0x401130
push 0
push 0
mov dword [ebp - 0x1c], eax
call esi
mov dword [ebp - 0x18], eax
mov eax, dword [ebp + 8]
push eax
push 0
push 0x100000
call dword [sym.imp.KERNEL32.dll_OpenProcess]
push 0xffffffffffffffff
push 0
lea ecx, [ebp - 0x1c]
push ecx
push 3
mov dword [ebp - 0x14], eax
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
test eax, eax
je 0x401c2a
push 0x14b
push str.FastProxy.cpp
push str.FALSE
push str.code:__s_r_nfile:__s_r_nline:__d_r_n
push 0x448d40
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
push 0x200000
push str.DBG_ASSERT
push 0x448d40
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
pop edi
pop ebx
xor eax, eax
pop esi
mov esp, ebp
pop ebp
ret