Function at 0x4181f0
Capabilities:
Get number of processors
Resolve dns

Disassembly:
push 0xffffffffffffffff
push 0x4748f5
mov eax, dword fs:[0]
push eax
sub esp, 0x748
mov eax, dword [0x4a7534]
xor eax, esp
mov dword [esp + 0x740], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4a7534]
xor eax, esp
push eax
lea eax, [esp + 0x75c]
mov dword fs:[0], eax
mov ebp, dword [esp + 0x76c]
mov ebx, ecx
lea ecx, [esp + 0xec]
call fcn.00468ff0
lea ecx, [esp + 0xcc]
mov dword [esp + 0x764], 0
call fcn.00468ff0
push 0x4827e4
push 0x4a9900
lea ecx, [esp + 0xf4]
mov byte [esp + 0x76c], 1
call fcn.00469230
mov ecx, eax
call fcn.00469230
push str._.exe
push 0x4a9900
lea ecx, [esp + 0xd4]
call fcn.00469230
mov ecx, eax
call fcn.00469230
lea edi, [esp + 0x5c]
call fcn.0041def0
lea esi, [esp + 0x7c]
mov byte [esp + 0x764], 2
call fcn.00402860
push 0
push 0
push 0
push 0
push 0
push eax
lea ecx, [esp + 0xb4]
mov byte [esp + 0x77c], 3
call fcn.0046e600
mov ecx, esi
call fcn.0046d3c0
mov ecx, edi
mov byte [esp + 0x764], 6
call fcn.0046d3c0
push 0
push 0
push 0
push 0
lea ecx, [esp + 0xfc]
call fcn.00468b10
push eax
lea eax, [esp + 0xb0]
push eax
lea ecx, [esp + 0x84]
call fcn.0046e600
push 0
push 0
push 0
push 0
lea ecx, [esp + 0xdc]
mov byte [esp + 0x774], 7
call fcn.00468b10
push eax
lea ecx, [esp + 0xb0]
push ecx
lea ecx, [esp + 0xa4]
call fcn.0046e600
push 0x4821c4
lea edi, [ebx + 0x14]
push str.product0
mov ecx, edi
call fcn.00469ab0
lea ecx, [esp + 0xac]
mov dword [esp + 0x54], eax
mov byte [esp + 0x1b], 0
call fcn.00468ff0
lea ecx, [esp + 0xbc]
call fcn.00468ff0
lea ecx, [esp + 0x44]
call fcn.00468ff0
lea esi, [esp + 0xfc]
call fcn.0041de50
xor ebx, ebx
lea ecx, [esp + 0x2c]
mov dword [esp + 0x20], ebx
mov byte [esp + 0x24], bl
mov dword [esp + 0x1c], vtable.DLPyExeMsgFun.0
call fcn.00468ff0
lea ecx, [esp + 0x2c]
call fcn.00468fc0
push 0x4821bc
mov byte [esp + 0x768], 0xd
push str.product0
mov ecx, edi
mov dword [esp + 0x30], ebx
call fcn.00469ab0
push eax
lea ecx, [esp + 0x48]
call fcn.00469520
lea ecx, [esp + 0x44]
call fcn.00468bf0
test eax, eax
jne 0x41841e
push 0x482200
push 0x482200
lea ecx, [esp + 0x24]
call fcn.0040b540
push ebx
push str.NoURL
lea ecx, [esp + 0x24]
call fcn.0040b890
push 0x482810
mov ecx, ebp
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
jmp 0x41882b
lea edx, [esp + 0x1c]
lea ecx, [esp + 0x44]
mov dword [0x4add5c], 0x40c7d0
mov dword [0x4add64], edx
call fcn.00468bf0
test eax, eax
jbe 0x41853a
push 0x3fe
lea eax, [esp + 0x35a]
push ebx
push eax
mov word [esp + 0x360], bx
call fcn.004498f0
add esp, 0xc
lea ecx, [esp + 0x44]
call fcn.00468ae0
push eax
lea ecx, [esp + 0x358]
push 0x200
push ecx
call fcn.00447193
add esp, 0xc
lea edx, [esp + 0x368]
push 0x2f
push edx
call fcn.00446ef4
mov esi, eax
lea eax, [esp + 0x35c]
push str.http:__
push eax
mov word [esi], bx
call fcn.00446cee
add esp, 0x10
test eax, eax
je 0x4184b4
lea esi, [esp + 0x362]
push esi
lea ecx, [esp + 0xc0]
call fcn.00469520
push 0x3f
lea ecx, [esp + 0x111]
push ebx
push ecx
mov byte [esp + 0x118], 0
call fcn.004498f0
add esp, 0xc
push ebx
push ebx
push 0x40
lea edx, [esp + 0x118]
push edx
push 0xffffffffffffffff
push esi
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
lea eax, [esp + 0x10c]
push eax
call sub.WS2_32.dll_gethostbyname
cmp eax, ebx
je 0x41853a
cmp word [eax + 8], 2
jne 0x41853a
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx]
push edx
call sub.WS2_32.dll_inet_ntoa
cmp eax, ebx
je 0x41853a
mov ecx, eax
lea esi, [ecx + 1]
nop
mov dl, byte [ecx]
add ecx, 1
test dl, dl
jne 0x418520
sub ecx, esi
je 0x41853a
push eax
lea ecx, [esp + 0xb0]
call fcn.00469030
push 0x206
lea eax, [esp + 0x152]
push ebx
push eax
mov word [esp + 0x158], bx
call fcn.004498f0
add esp, 0xc
mov ebx, 0x104
lea edi, [esp + 0x14c]
call fcn.00415a80
test eax, eax
jle 0x418585
mov ecx, edi
push ecx
push 0x482110
lea ecx, [esp + 0x4c]
call fcn.00469230
mov ecx, eax
call fcn.00469230
lea ecx, [esp + 0xac]
call fcn.00468ae0
push eax
lea ecx, [esp + 0xc0]
call fcn.00468ae0
push eax
lea ecx, [esp + 0x24]
call fcn.0040b540
lea ecx, [esp + 0x9c]
call fcn.0046d690
test al, al
jne 0x4185e0
push 0
push str.NoTmpPath
lea ecx, [esp + 0x24]
call fcn.0040b890
push 0x482850
mov ecx, ebp
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
jmp 0x41882b
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x4c], esp
xor ebx, ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [esp + 0x90]
push edx
xor esi, esi
call fcn.0046e600
mov edi, dword [esp + 0x64]
call fcn.0041f120
add esp, 0x10
cmp al, bl
je 0x418633
push str.locok1
lea ecx, [esp + 0x30]
call fcn.00469230
mov eax, dword [esp + 0x1c]
mov edx, dword [eax + 4]
push 0x64
push 0x64
lea ecx, [esp + 0x24]
call edx
jmp 0x418826
lea eax, [esp + 0x54]
push eax
call fcn.004476fc
add esp, 4
cmp esi, 3
jge 0x418670
lea ecx, [esp + 0x1c]
push ecx
lea ecx, [esp + 0x48]
call fcn.00468ae0
push ebp
lea edx, [esp + 0x94]
mov ecx, eax
call fcn.00411ae0
add esp, 8
add esi, 1
cmp al, bl
mov byte [esp + 0x1b], al
je 0x418640
lea edx, [esp + 0x3c]
push edx
call fcn.004476fc
add esp, 4
lea ecx, [esp + 0x7c]
call fcn.00468ff0
mov eax, dword [esp + 0x3c]
sub eax, dword [esp + 0x54]
lea ecx, [esp + 0x7c]
push eax
push str.dltm
call fcn.00469230
mov ecx, eax
call fcn.00469260
lea ecx, [esp + 0x7c]
call fcn.00468ae0
mov esi, eax
cmp word [esi], 0x26
je 0x4186c0
push 0x26
lea ecx, [esp + 0x30]
call fcn.00469260
push esi
lea ecx, [esp + 0x30]
call fcn.00469230
lea ecx, [esp + 0x5c]
call fcn.00468ff0
mov byte [esp + 0x764], 0xf
mov ecx, dword [esp + 0x20]
push ecx
push str.dlbts
lea ecx, [esp + 0x64]
call fcn.00469230
mov ecx, eax
call fcn.00469260
lea ecx, [esp + 0x5c]
call fcn.00468ae0
mov esi, eax
cmp word [esi], 0x26
je 0x418711
push 0x26
lea ecx, [esp + 0x30]
call fcn.00469260
push esi
lea ecx, [esp + 0x30]
call fcn.00469230
cmp byte [esp + 0x1b], bl
jne 0x41874b
push 0x48289c
mov ecx, ebp
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
lea ecx, [esp + 0x5c]
call fcn.00468c30
lea ecx, [esp + 0x7c]
call fcn.00468c30
jmp 0x41882b
lea ecx, [esp + 0x5c]
call fcn.00468c30
lea ecx, [esp + 0x7c]
mov byte [esp + 0x764], 0xd
call fcn.00468c30
sub esp, 0x10
mov ecx, esp
mov dword [esp + 0x4c], esp
push ebx
push ebx
push ebx
push ebx
push ebx
lea edx, [esp + 0xb0]
push edx
call fcn.0046e600
call fcn.0041f120
add esp, 0x10
cmp al, bl
push ebx
jne 0x4187ed
push 0x4821c4
lea ecx, [esp + 0x24]
mov byte [esp + 0x23], bl
call fcn.0040b890
push ebx
push ebx
push ebp
lea ecx, [esp + 0x98]
call fcn.0046e300
test al, al
mov ecx, ebp
jne 0x4187da
push 0x4828b0
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
lea ecx, [esp + 0x6c]
mov esi, eax
call fcn.0046d3a0
push eax
mov ecx, esi
call fcn.0046c360
jmp 0x41882b
push 0x48289c
call fcn.0046c2f0
mov ecx, eax
call fcn.0046c360
jmp 0x41882b
lea eax, [esp + 0x70]
push eax
push ebp
lea ecx, [esp + 0x98]
call fcn.0046ec40
test al, al
jne 0x418809
mov byte [esp + 0x1b], bl
jmp 0x41882b
call fcn.0041f410
test al, al
je 0x418826
push 1
lea ecx, [esp + 0x70]
call fcn.0046d380
push eax
call fcn.00466790
add esp, 8
mov byte [esp + 0x1b], 1
lea ecx, [esp + 0xdc]
mov dword [0x4add64], 0
call fcn.00468ff0
lea ecx, [esp + 0xac]
mov byte [esp + 0x764], 0x10
call fcn.00468b10
push eax
push str.ip
lea ecx, [esp + 0xc4]
call fcn.00468b10
push eax
push str.url
lea ecx, [esp + 0xec]
call fcn.00469230
mov ecx, eax
call fcn.00469230
mov ecx, eax
call fcn.00469230
mov ecx, eax
call fcn.00469230
lea ecx, [esp + 0xdc]
call fcn.00468b10
mov esi, eax
cmp word [esi], 0x26
je 0x4188ad
push 0x26
lea ecx, [esp + 0x30]
call fcn.00469260
push esi
lea ecx, [esp + 0x30]
call fcn.00469230
cmp byte [esp + 0x1b], 0
lea ecx, [esp + 0x1c]
jne 0x41895a
push str.dlfail
call fcn.0040b6d0
lea ecx, [esp + 0xdc]
call fcn.00468c30
lea ecx, [esp + 0x2c]
call fcn.00468c30
lea ecx, [esp + 0xfc]
mov dword [esp + 0x1c], vtable.DLMsgFunctor.0
call fcn.00468c30
lea ecx, [esp + 0x44]
call fcn.00468c30
lea ecx, [esp + 0xbc]
call fcn.00468c30
lea ecx, [esp + 0xac]
call fcn.00468c30
lea ecx, [esp + 0x8c]
call fcn.0046d3c0
lea ecx, [esp + 0x6c]
call fcn.0046d3c0
lea ecx, [esp + 0x9c]
call fcn.0046d3c0
lea ecx, [esp + 0xcc]
call fcn.00468c30
lea ecx, [esp + 0xec]
call fcn.00468c30
xor al, al
jmp 0x4189e9
push str.dlok
call fcn.0040b6d0
lea ecx, [esp + 0xdc]
call fcn.00468c30
lea ecx, [esp + 0x2c]
call fcn.00468c30
lea ecx, [esp + 0xfc]
mov dword [esp + 0x1c], vtable.DLMsgFunctor.0
call fcn.00468c30
lea ecx, [esp + 0x44]
call fcn.00468c30
lea ecx, [esp + 0xbc]
call fcn.00468c30
lea ecx, [esp + 0xac]
call fcn.00468c30
lea ecx, [esp + 0x8c]
call fcn.0046d3c0
lea ecx, [esp + 0x6c]
call fcn.0046d3c0
lea ecx, [esp + 0x9c]
call fcn.0046d3c0
lea ecx, [esp + 0xcc]
call fcn.00468c30
lea ecx, [esp + 0xec]
call fcn.00468c30
mov al, 1
mov ecx, dword [esp + 0x75c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x740]
xor ecx, esp
call fcn.0044610a
add esp, 0x754
ret 4