Function at 0x4267f0
Capabilities:
Acquire debug privileges
Create thread

Disassembly:
sub esp, 0x3c
push ebx
push ebp
push esi
push edi
call fcn.00426d70
push 0
call dword [0x46c614]
mov esi, dword [sym.imp.USER32.dll_LoadStringA]
push 0x64
mov ebp, dword [esp + 0x54]
push 0x48c3f4
push 0x67
push ebp
call esi
push 0x64
push 0x48c390
push 0x6d
push ebp
call esi
push 0
push ebp
call fcn.00433c20
mov ebx, dword [esp + 0x60]
push 0x480cfc
push ebx
call fcn.00441f40
add esp, 0x10
test eax, eax
je 0x426859
push ebp
call fcn.0042d300
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret 0x10
mov edi, str.1.1.1.20
or ecx, 0xffffffff
xor eax, eax
push ebp
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, 0x480348
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
call fcn.0042d440
add esp, 4
test eax, eax
je 0x426897
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret 0x10
push ebp
call fcn.00428f30
add esp, 4
push 0x6d
push ebp
call dword [sym.imp.USER32.dll_LoadAcceleratorsA]
mov ecx, dword [esp + 0x5c]
mov dword [esp + 0x50], eax
push ecx
push ebp
call fcn.0042b310
add esp, 8
test eax, eax
jne 0x4268c9
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret 0x10
push str.atl.DLL
call dword [0x46c200]
test eax, eax
mov dword [esp + 0x58], eax
je 0x4268f3
push str.AtlAxWinInit
push eax
call dword [0x46c1fc]
test eax, eax
mov dword [0x48bcd4], eax
je 0x4268f3
call eax
push 1
push 0x4ff
call dword [0x46c2c4]
push str.SeDebugPrivilege
call fcn.00404a10
push 0x480ce0
push ebx
call fcn.00441f40
add esp, 0xc
test eax, eax
je 0x426928
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret 0x10
push str.lpCmdLine
push ebx
call fcn.0042ce90
call fcn.0042c4a0
lea edx, [esp + 0x18]
push edx
call fcn.00416910
mov esi, dword [0x46c634]
mov edi, eax
add esp, 0xc
mov eax, dword [edi + 8]
mov ebp, eax
cmp esi, ebp
jae 0x426958
mov ebp, esi
cmp edi, 0x48bdb0
jne 0x4269db
cmp dword [0x48bdb8], ebp
jae 0x42696d
call fcn.00452087
mov ecx, 0x48bdb0
call fcn.00409390
mov eax, dword [0x48bdb8]
mov ecx, eax
sub ecx, ebp
cmp ecx, esi
jae 0x426986
mov esi, ecx
test esi, esi
jbe 0x4269c8
mov ecx, dword [0x48bdb4]
sub eax, esi
add ecx, ebp
sub eax, ebp
push eax
lea edx, [ecx + esi]
push edx
push ecx
call fcn.00441aa0
mov edi, dword [0x48bdb8]
add esp, 0xc
sub edi, esi
mov ecx, 0x48bdb0
push 0
push edi
call fcn.00407310
test al, al
je 0x4269c8
push edi
mov ecx, 0x48bdb0
call fcn.004072f0
push 0
push 0
mov ecx, 0x48bdb0
call fcn.00411720
jmp 0x426a6c
test ebp, ebp
jbe 0x426a2e
cmp ebp, eax
jne 0x426a2e
mov eax, dword [edi + 4]
test eax, eax
jne 0x4269ef
mov eax, 0x46c630
cmp byte [eax - 1], 0xfe
jae 0x426a2e
push 1
mov ecx, 0x48bdb0
call fcn.00405c50
mov eax, dword [edi + 4]
test eax, eax
jne 0x426a0d
mov eax, 0x46c630
mov dword [0x48bdb4], eax
mov ecx, dword [edi + 8]
mov dword [0x48bdb8], ecx
mov edx, dword [edi + 0xc]
mov dword [0x48bdbc], edx
mov cl, byte [eax - 1]
inc cl
mov byte [eax - 1], cl
jmp 0x426a6c
push 1
push ebp
mov ecx, 0x48bdb0
call fcn.00407310
test al, al
je 0x426a6c
mov esi, dword [edi + 4]
test esi, esi
jne 0x426a4b
mov esi, 0x46c630
mov edi, dword [0x48bdb4]
mov ecx, ebp
mov eax, ecx
push ebp
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov ecx, 0x48bdb0
call fcn.004072f0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x426a91
lea ecx, [eax - 1]
mov al, byte [eax - 1]
test al, al
je 0x426a88
cmp al, 0xff
je 0x426a88
dec al
mov byte [ecx], al
jmp 0x426a91
push ecx
call fcn.00460f37
add esp, 4
call fcn.00428fc0
test ebx, ebx
je 0x426b20
push str._restart
push ebx
call fcn.00441f40
add esp, 8
test eax, eax
je 0x426b04
mov ecx, 8
xor eax, eax
lea edi, [esp + 0x10]
lea edx, [esp + 0x10]
rep stosd dword es:[edi], eax
mov edi, 0x480cbc
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov edi, ecx
or ecx, 0xffffffff
add edi, ebx
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x10]
mov byte [esp + 0x12], 0
push ecx
call fcn.004429fd
add esp, 4
mov dword [0x48caf4], eax
push str.runfirst
push ebx
call fcn.00441f40
add esp, 8
mov dword [0x48d160], 1
test eax, eax
jne 0x426b2a
mov dword [0x48d160], 0
call fcn.0045fd96
mov ecx, 0x48c338
call fcn.00438ef0
test ebx, ebx
je 0x426b81
push str._irs
push ebx
call fcn.00441f40
add esp, 8
test eax, eax
je 0x426b81
mov edx, str.su1.researchchina.cn
mov edi, str.10.10.12.38:8082
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, ecx
mov esi, edi
mov edi, edx
add edx, 0x20
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
cmp edx, 0x47faa4
rep movsb byte es:[edi], byte [esi]
jl 0x426b54
call fcn.0041a410
mov ecx, dword [0x48c388]
mov esi, dword [sym.imp.USER32.dll_SetTimer]
xor edi, edi
push edi
push 0xbb8
push 0xa
push ecx
call esi
mov edx, dword [0x48c388]
push edi
push 0x1388
push 0x7d1
push edx
call esi
mov eax, dword [0x48c388]
push edi
push 0x3e8
push 0x48e
push eax
call esi
call fcn.0042d2f0
call fcn.004284b0
mov ecx, 0x48bdc0
call fcn.00411e80
mov cl, byte [esp + 0x50]
sub esp, 0x10
mov ebp, esp
xor eax, eax
mov dword [esp + 0x6c], esp
mov byte [ebp], cl
mov dword [ebp + 4], edi
mov dword [ebp + 8], edi
mov dword [ebp + 0xc], edi
mov edi, str.iClickStart.exe
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
dec ecx
mov ebx, ecx
cmp ebx, 0xfffffffd
jbe 0x426c0e
call fcn.00451e5b
mov ecx, dword [ebp + 4]
test ecx, ecx
je 0x426c33
mov al, byte [ecx - 1]
test al, al
je 0x426c33
cmp al, 0xff
je 0x426c33
test ebx, ebx
jne 0x426c57
dec al
push ebx
mov byte [ecx - 1], al
mov ecx, ebp
call fcn.00405c50
jmp 0x426c81
test ebx, ebx
jne 0x426c42
push 1
mov ecx, ebp
call fcn.00405c50
jmp 0x426c81
mov eax, dword [ebp + 0xc]
cmp eax, 0x1f
ja 0x426c4e
cmp eax, ebx
jae 0x426c5f
push 1
mov ecx, ebp
call fcn.00405c50
push ebx
mov ecx, ebp
call fcn.00409280
mov edi, dword [ebp + 4]
mov ecx, ebx
mov edx, ecx
mov esi, str.iClickStart.exe
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [ebp + 4]
mov dword [ebp + 8], ebx
mov byte [ebx + eax], 0
call fcn.00401b30
push 0
push 0
push 0x41d7d0
call fcn.00443238
push 0
push 0
push 0x402570
call fcn.00443238
push 0
push 0
push 0x440130
call fcn.00443238
add esp, 0x34
call fcn.0042da40
cmp dword [0x48c38c], 2
je 0x426cd7
mov ecx, dword [0x48c388]
push 0
push ecx
call fcn.0042c200
add esp, 8
call fcn.0042d670
mov ecx, 0x48c350
call fcn.0043c5a0
push str.AppStartup
push str.All_Ready_to_Run
call fcn.0042ce90
mov esi, dword [sym.imp.USER32.dll_GetMessageA]
add esp, 8
lea edx, [esp + 0x30]
push 0
push 0
push 0
push edx
call esi
test eax, eax
je 0x426d50
mov edi, dword [sym.imp.USER32.dll_TranslateAcceleratorA]
mov ebx, dword [sym.imp.USER32.dll_TranslateMessage]
mov ebp, dword [sym.imp.USER32.dll_DispatchMessageA]
mov ecx, dword [esp + 0x50]
mov edx, dword [esp + 0x30]
lea eax, [esp + 0x30]
push eax
push ecx
push edx
call edi
test eax, eax
jne 0x426d3f
lea eax, [esp + 0x30]
push eax
call ebx
lea ecx, [esp + 0x30]
push ecx
call ebp
push 0
push 0
lea edx, [esp + 0x38]
push 0
push edx
call esi
test eax, eax
jne 0x426d1c
mov eax, dword [esp + 0x58]
push eax
call dword [0x46c1f8]
pop edi
pop esi
mov eax, dword [esp + 0x30]
pop ebp
pop ebx
add esp, 0x3c
ret 0x10