Function at 0x401000
Capabilities:
Allocate thread local storage
Get common file path
Hide graphical window

Disassembly:
push 0xa8
push 0
push 0x59efb8
call sub.MSVCRT.dll_memset
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleA
mov dword [0x59efbc], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x59efb8], eax
mov eax, 0x4e86fc
mov dword [0x59efc8], eax
call fcn.00433ad0
call fcn.00432b40
call fcn.00432a18
call fcn.00431de0
call fcn.00431220
call fcn.00430f57
call fcn.00430d4a
call fcn.0042ec78
call fcn.0042d8e0
call fcn.0042d07c
call fcn.0042b7cc
call fcn.00428e0c
call fcn.00425c7e
call fcn.00425796
call fcn.004250db
call fcn.00424549
call fcn.0040d260
call fcn.0040d010
call fcn.0040bc18
call fcn.0040b919
call fcn.0040b704
lea eax, [0x405587]
push eax
pop dword [0x59efcc]
call fcn.00433b20
push eax
push eax
push 0x104
call fcn.0040c050
push 0x59efe4
call fcn.00433b60
push dword [0x59efe4]
push 0x104
call sub.KERNEL32.dll_GetCurrentDirectoryA
mov edx, dword [0x59efe4]
call fcn.00433b20
push eax
call fcn.00433bf0
mov edx, 0x4e7452
call fcn.00433bf0
push 0x59efe4
call fcn.00433b60
call fcn.00427640
call fcn.00427170
call fcn.00426d00
call fcn.00426110
call fcn.004268e0
push dword [0x59f058]
call fcn.004257b5
push 7
push 0x4e86d0
lea eax, [0x59f058]
push eax
push 8
call fcn.00425704
lea ebp, [0x59efc0]
mov dword [ebp], 8
mov dword [ebp + 4], 0x100
push 0x59efc0
call sub.COMCTL32.DLL_InitCommonControlsEx
call fcn.00426d00
call fcn.00428416
mov edx, str.Ragnarok_Online_2_Launcher___GBOX
lea ecx, [0x59efec]
call fcn.0040b008
mov dword [0x59eff0], 0
push str.gdi32.dll
push 0
call fcn.00425ca5
mov eax, 0x4e72a0
push eax
push 0
mov ebp, 0x599cd7
mov ebx, ebp
mov ebp, str.OTTO
sub ebx, ebp
push ebx
mov ebp, str.OTTO
push ebp
push str.AddFontMemResourceEx
push 0
call fcn.00425d07
push 0
call fcn.00425be7
push 0x10
push 0xa
push 0x4e84da
push 0x2f
call fcn.0042d090
push 0x10
push 8
push 0x4e84da
push 0x31
call fcn.0042d090
push 0x10
push 0xa
push 0x4e84da
push 0x30
call fcn.0042d090
mov ebp, 0x4eba22
push ebp
push 0x1e
call fcn.0043145d
and eax, eax
je 0x401b27
push 0x90000001
push str.Ragnarok_Online_2_Launcher___GBOX
push 0x1e
call fcn.00431474
push eax
push 0x1e
call fcn.00431492
push eax
push 0
push 0
push 0
call fcn.0042bb2e
and eax, eax
je 0x401b27
push 0xffffffec
push 0
call fcn.0042bb51
push eax
call sub.USER32.DLL_GetWindowLongA
mov ebx, eax
or ebx, 0x80000
push ebx
push 0xffffffec
push 0
call fcn.0042bb51
push eax
call sub.USER32.DLL_SetWindowLongA
push 0xff
push 0x1e
push 0
call fcn.00409be0
push 0
call fcn.0042bb51
push eax
push 0x90000001
push 0x4e701d
push 0x1e
call fcn.00431474
push eax
push 0x1e
call fcn.00431492
push eax
push 0
push 0
push 1
call fcn.0042b828
and eax, eax
je 0x401b27
push 0xff00ff
push 1
call fcn.0042bb6d
push 0xffffffec
push 1
call fcn.0042bb51
push eax
call sub.USER32.DLL_GetWindowLongA
mov ebx, eax
or ebx, 0x80000
push ebx
push 0xffffffec
push 1
call fcn.0042bb51
push eax
call sub.USER32.DLL_SetWindowLongA
push 1
push 0
push 0xff00ff
push 1
call fcn.0042bb51
push eax
call sub.USER32.DLL_SetLayeredWindowAttributes
push 0x4e701d
push 1
push 1
push 0
push 0
push 0xf
call fcn.00429f76
push 1
push 0xf
call fcn.00429f96
push 0xffffffeb
push 0xf
call fcn.00429fd4
push eax
call sub.USER32.DLL_GetWindowLongA
mov dword [0x59f020], eax
push 1
mov eax, dword [0x59f020]
push eax
mov eax, dword [eax]
call dword [eax + 0xf0]
mov ebp, 0x503e68
push ebp
push 0x21
call fcn.0043145d
push 0x21
call fcn.004314b0
push eax
push 0x1a
push 0x1a
push 0xb0
push 0xae
push 0xc
call fcn.0042a500
mov ebp, 0x5043a9
push ebp
push 0x22
call fcn.0043145d
push 0x22
call fcn.004314b0
push eax
push 0x1a
push 0x1a
push 0xb0
push 0xc5
push 0xd
call fcn.0042a500
push 0x4e701d
push 0x17
push 0x87
push 0xd7
push 0x8e
push 9
call fcn.0042a75b
push 0x30
call fcn.0042d174
push eax
push 9
call fcn.0042a77b
push 0x20
push 0x4e701d
push 0x17
push 0x87
push 0xf3
push 0x8e
push 0xa
call fcn.0042a642
mov ebp, 0x5049f7
push ebp
push 0x23
call fcn.0043145d
push 0x23
call fcn.004314b0
push eax
push 0x1b
push 0x5a
push 0x113
push 0x8e
push 0xb
call fcn.0042a500
mov ebp, 0x505300
push ebp
push 0x24
call fcn.0043145d
push 0x24
call fcn.004314b0
push eax
push 0x1b
push 0x1b
push 0x113
push 0xf5
push 0xe
call fcn.0042a500
mov ebp, 0x503973
push ebp
push 0x1f
call fcn.0043145d
push 0x1f
call fcn.004314b0
push eax
push 0x2a
push 0x96
push 0x17
push 0x97
push 8
call fcn.0042a500
push str.Please_wait
call fcn.00409701
call fcn.00433b20
push eax
push eax
call fcn.00433b20
push eax
call fcn.0042d190
mov edx, str.GLIBTMPT.G
call fcn.00433bf0
call fcn.00433c62
add dword [esp], edx
call fcn.0042d1d0
call fcn.00433c80
call fcn.00433b20
push eax
push eax
call fcn.00433b20
push eax
call fcn.0042d190
mov edx, str.GLIBTM_
call fcn.00433bf0
call fcn.00433c62
add dword [esp], edx
call fcn.0042d1e2
call fcn.00433c80
call fcn.00433b20
push eax
push eax
call fcn.00433b20
push eax
call fcn.0042d190
mov edx, str.GLIBTMPT.G
call fcn.00433bf0
call fcn.00433cd0
push 0
call fcn.00433c62
add dword [esp + 4], edx
call fcn.0042da80
call fcn.00433c80
and eax, eax
je 0x401669
mov ebp, 0x508d6e
mov ebx, ebp
mov ebp, str.GIF89an
sub ebx, ebp
push ebx
mov ebp, str.GIF89an
push ebp
push 0
call fcn.0042dcb0
push 0
call fcn.0042d860
call fcn.00433b20
push eax
push 1
call fcn.00433b20
push eax
push eax
call fcn.0042d190
mov edx, str.GLIBTMPT.G
call fcn.00433bf0
call fcn.00433cd0
push 0x6b
push 0x6e
push 0xfffffff6
push 0x168
push 0x1b
push 5
call fcn.00433c62
add dword [esp + 0x18], edx
call fcn.0040905d
call fcn.00433c80
push 1
call fcn.0042bb51
push eax
push 0x10000001
push dword [0x59efec]
push 0x190
push 0x258
push 0
push 0
push 2
call fcn.0042b828
and eax, eax
je 0x401b27
push 0x190
push 0x258
push 0
push 0
push 0x11
call fcn.0042aa8a
push str.https:__loginro2sg.playpark.net_ro2_main.aspx
push 0x190
push 0x271
push 0
push 0
push 0x10
call fcn.00429f76
call fcn.0042aaa7
lea eax, [0x409bba]
push eax
push 3
push 0x10
call fcn.0042aac6
push 0xffffffeb
push 0x10
call fcn.00429fd4
push eax
call sub.USER32.DLL_GetWindowLongA
mov dword [0x59f024], eax
push 0
call sub.OLE32.DLL_CoInitialize
push 0x59f028
mov ebp, 0x599cd7
push ebp
push 1
push 0
mov ebp, 0x599ce7
push ebp
call sub.OLE32.DLL_CoCreateInstance
push 1
lea eax, [0x409f8b]
push eax
call fcn.0042bbdb
push 0
push 0
call fcn.0042bc9c
push 0
push 1
call fcn.0042bc9c
push 1
call fcn.004092de
push 1
push 6
call fcn.0042bc9c
push 1
push 7
call fcn.0042bc9c
call fcn.0042be36
mov dword [0x59f02c], eax
call fcn.0042be3e
mov dword [0x59f030], eax
push dword [0x59f02c]
mov ebx, 0x332c
cmp ebx, dword [esp]
jne 0x4019e0
push dword [0x59f030]
mov ebx, 0x1b
cmp ebx, dword [esp]
jne 0x40181c
push 6
push 0x1b
call fcn.0042aaf1
mov ebx, eax
and ebx, ebx
jne 0x401817
call fcn.00433b20
push eax
push eax
call fcn.00433b20
push eax
call fcn.0042d190
mov edx, str.GLIBTMPT.G
call fcn.00433bf0
call fcn.00433c62
add dword [esp], edx
call fcn.0042d1d0
call fcn.00433c80
jmp 0x4019da
mov ebx, 0xf
cmp ebx, dword [esp]
jne 0x40182b
jmp 0x4019da
mov ebx, 0xb
cmp ebx, dword [esp]
jne 0x40183f
call fcn.00409225
jmp 0x4019da
mov ebx, 0xe
cmp ebx, dword [esp]
jne 0x401853
call fcn.00409483
jmp 0x4019da
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x40188a
push 0x10
call fcn.0042ab20
and eax, eax
je 0x401885
push 6
push 0x10
call fcn.0042aaf1
mov ebx, eax
and ebx, ebx
jne 0x401885
call fcn.00401ef3
jmp 0x4019da
mov ebx, 8
cmp ebx, dword [esp]
jne 0x4018a8
push 0
push 2
call fcn.0042bc9c
jmp 0x4019da
mov ebx, 0xc
cmp ebx, dword [esp]
jne 0x4018ec
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x4018e7
push 6
push 1
call fcn.0042bb51
push eax
call sub.USER32.DLL_ShowWindow
push 6
push 0
call fcn.0042bb51
push eax
call sub.USER32.DLL_ShowWindow
jmp 0x4019da
mov ebx, 0xd
cmp ebx, dword [esp]
jne 0x401908
add esp, 8
jmp 0x401b27
mov ebx, 0x12
cmp ebx, dword [esp]
jne 0x401927
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x401922
call fcn.0040707e
jmp 0x4019da
mov ebx, 0x13
cmp ebx, dword [esp]
jne 0x401946
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x401941
call fcn.00409859
jmp 0x4019da
mov ebx, 0x14
cmp ebx, dword [esp]
jne 0x401962
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x401960
call fcn.0040707e
jmp 0x4019da
mov ebx, 0x15
cmp ebx, dword [esp]
jne 0x40197e
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x40197c
call fcn.0040707e
jmp 0x4019da
mov ebx, 0x16
cmp ebx, dword [esp]
jne 0x4019a4
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x4019a2
push str.Thanks_to_GOD__Ricky_Ozwell___Kaskus__Diemas___Kaskus_and_everybody_who_make_this_happens._r_n_r_nDONT_USE_THIS_FOR_SOMETHING_BAD__SUPPORT_THE_DEVELOPER_AND_PUBLISHER_BY_BUYING_SOME_CASH_SHOP_AND_BUILD_GREAT_COMMUNITY_r_n_r_nYou_can_buy_Proxifier_Portable_Edition___39.95__:_http:__www.proxifier.com_order.htm_r_n_r_nCreated_by_oStRicH_EgReT_from_GBOX.WEB.ID_and_RO2.MYNGAME.COM
push str.RO_2_Launcher
call fcn.0040d076
jmp 0x4019da
mov ebx, 0x17
cmp ebx, dword [esp]
jne 0x4019c0
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x4019be
call fcn.0040707e
jmp 0x4019da
mov ebx, 0x18
cmp ebx, dword [esp]
jne 0x4019da
call fcn.0042be4d
mov ebx, eax
and ebx, ebx
jne 0x4019da
call fcn.0040707e
pop eax
jmp 0x401b17
mov ebx, 0x201
cmp ebx, dword [esp]
jne 0x401a19
call fcn.0042be5c
mov ebx, eax
and ebx, ebx
jne 0x401a14
push 0
push 2
push 0xa1
push 1
call fcn.0042bb51
push eax
call sub.USER32.DLL_SendMessageA
jmp 0x401b17
mov ebx, 0x100
cmp ebx, dword [esp]
jne 0x401ac0
call fcn.0042be9c
mov ebx, eax
cmp ebx, 9
je 0x401a41
call fcn.0042be9c
mov ebx, eax
cmp ebx, 0x2e
je 0x401a41
jmp 0x401a48
mov eax, 1
jmp 0x401a4a
xor eax, eax
and eax, eax
je 0x401aa1
push 0x59f028
mov ebp, 0x599cd7
push ebp
mov eax, dword [0x59f024]
push eax
mov eax, dword [eax]
call dword [eax]
push dword [0x59f034]
lea ebp, [0x59f03c]
pop dword [ebp + 4]
call fcn.0042be9c
push eax
pop dword [ebp + 8]
call fcn.0042beab
push eax
pop dword [ebp + 0xc]
push 0x59f03c
mov eax, dword [0x59f028]
push eax
mov eax, dword [eax]
call dword [eax + 0x14]
mov eax, dword [0x59f028]
push eax
mov eax, dword [eax]
call dword [eax + 8]
jmp 0x401abe
call fcn.0042be9c
mov ebx, eax
cmp ebx, 0xd
jne 0x401abe
call fcn.0042be5c
mov ebx, eax
cmp ebx, 1
jne 0x401abe
call fcn.00409225
jmp 0x401b17
mov ebx, 0x10
cmp ebx, dword [esp]
jne 0x401aee
call fcn.0042be5c
mov ebx, eax
cmp ebx, 3
je 0x401ae2
mov dword [0x59f038], 1
jmp 0x401aec
push 3
call fcn.0042b641
jmp 0x401b17
mov ebx, 0x32
cmp ebx, dword [esp]
jne 0x401b17
push 3
push 0xf
call fcn.0042ab32
push dword [0x59eff4]
push 0xf
call fcn.0042ab59
pop eax
mov ebx, dword [0x59f038]
cmp ebx, 1
jne 0x40179c
push 0
call 0x401b46
call fcn.00433b00
push dword [0x59efb8]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040d290
call fcn.004250bf
call fcn.00425c26
call fcn.004283e6
call fcn.00428e7c
call fcn.0042b74e
call fcn.0042d070
call fcn.0042d258
call fcn.0042d8d0
call fcn.00431214
call fcn.00431e6e
call fcn.00432b60
ret