Function at 0x42bd43
Capabilities:
Create thread

Disassembly:
sub esp, 0x24c
push ebx
push ebp
push esi
push edi
mov esi, edx
mov edi, ecx
call fcn.00404f03
xor ebx, ebx
mov dword [esp + 0x38], 1
push ebx
lea eax, [esp + 0x3c]
mov dword [esp + 0x28], ebx
push eax
lea eax, [esp + 0x2c]
mov dword [esp + 0x44], ebx
push eax
mov dword [esp + 0x4c], ebx
mov dword [esp + 0x50], ebx
call dword [sym.imp.gdiplus.dll_GdiplusStartup]
push ebx
call dword [sym.imp.ole32.dll_OleInitialize]
call fcn.0040129e
push eax
lea ecx, [esp + 0x24]
call fcn.004028e5
lea eax, [esp + 0x20]
mov edx, esi
push eax
mov ecx, edi
call fcn.0040185b
mov ebp, dword [sym.imp.msvcrt.dll_malloc]
push 8
mov byte [esp + 0x1b], al
call ebp
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x42bdc2
mov dword [esi], ebx
mov dword [esi + 4], ebx
jmp 0x42bdc4
mov esi, ebx
mov edi, dword [esp + 0x20]
mov ecx, esi
push edi
call fcn.004386d8
test al, al
je 0x42c180
cmp byte [esp + 0x13], bl
jne 0x42bde7
cmp dword [edi - 0xc], ebx
jne 0x42bde7
push 1
jmp 0x42bde9
push 2
push 0x3e8
lea ecx, [esp + 0x40]
call fcn.004380b9
push ebx
lea ecx, [esp + 0x3c]
call fcn.004385c3
lea ecx, [esp + 0x38]
call fcn.00438372
xor eax, eax
push 0x206
mov word [esp + 0x58], ax
lea eax, [esp + 0x5a]
push ebx
push eax
call sub.msvcrt.dll_memset
push ebx
push 3
pop edx
lea ecx, [esp + 0x64]
call fcn.00435c08
add esp, 0x10
test al, al
je 0x42be3e
lea ecx, [esp + 0x54]
call fcn.00433a1d
push 0x214
call ebp
mov ebp, eax
mov dword [esp + 0x20], ebp
pop ecx
test ebp, ebp
je 0x42be67
mov dword [ebp], ebx
mov dword [ebp + 0x20c], ebx
mov byte [ebp + 0x210], bl
mov dword [0x460d50], ebp
jmp 0x42be6b
mov dword [esp + 0x1c], ebx
mov ebp, dword [sym.imp.msvcrt.dll_malloc]
push 0x68
call ebp
pop ecx
test eax, eax
je 0x42be87
mov ecx, eax
call fcn.00436f67
mov dword [esp + 0x2c], eax
jmp 0x42be8b
mov dword [esp + 0x2c], ebx
push 0x2c
call ebp
mov ebp, eax
mov dword [esp + 0x34], ebp
pop ecx
test ebp, ebp
je 0x42bec7
mov dword [ebp], ebx
mov dword [ebp + 4], ebx
mov dword [ebp + 8], ebx
mov dword [ebp + 0xc], ebx
mov byte [ebp + 0x10], bl
mov dword [ebp + 0x14], ebx
mov dword [ebp + 0x18], ebx
mov dword [ebp + 0x1c], ebx
mov dword [ebp + 0x20], ebx
mov dword [ebp + 0x24], ebx
mov dword [ebp + 0x28], 0xa
mov dword [0x45fb54], ebp
jmp 0x42becb
mov dword [esp + 0x30], ebx
push 4
call dword [sym.imp.msvcrt.dll_malloc]
mov dword [esp + 0x1c], eax
pop ecx
test eax, eax
je 0x42bee4
mov dword [eax], 0x456448
jmp 0x42bee8
mov dword [esp + 0x18], ebx
mov ecx, dword [esp + 0x1c]
call fcn.00435b04
mov ecx, dword [esp + 0x2c]
call fcn.00436fce
mov eax, dword [0x460d54]
mov ecx, dword [esp + 0x18]
mov dword [eax], ecx
call fcn.00430396
call fcn.00432e3d
mov ecx, eax
call fcn.00432eab
push ebx
push ebx
push ebx
push 0x430528
push 7
push 2
mov ecx, eax
call fcn.004329b0
mov cl, 1
call fcn.004079a4
call fcn.00437e14
mov ecx, eax
call fcn.00437e52
push 0x14
call dword [sym.imp.msvcrt.dll_malloc]
pop ecx
test eax, eax
je 0x42bf58
push 1
mov ecx, eax
call fcn.0042a87d
mov dword [esp + 0x14], eax
jmp 0x42bf5c
mov dword [esp + 0x14], ebx
mov eax, dword [0x46108c]
test al, 1
jne 0x42bf77
or eax, 1
mov dword [0x461088], 0x457708
mov dword [0x46108c], eax
call fcn.0042cadd
cmp dword [edi - 0xc], ebx
jne 0x42bf94
cmp byte [esp + 0x13], bl
jne 0x42bfa4
push 0xffffffffffffffff
push 1
push 1
push str.http:__www.duba.com__fsiliebao
jmp 0x42bf9b
push 0xffffffffffffffff
push 1
push 1
push edi
mov ecx, dword [esp + 0x24]
call fcn.0042ab2d
call fcn.0042ecbd
call fcn.0042bc23
mov ecx, dword [0x460d50]
push ebx
push str.clear_auto
mov dword [esp + 0x3c], eax
mov ecx, dword [ecx]
call fcn.00436309
mov ecx, dword [0x45fb1c]
mov byte [esp + 0x13], al
test ecx, ecx
je 0x42bfe0
push ecx
call dword [sym.imp.ole32.dll_CoRevokeClassObject]
mov dword [0x45fb1c], ebx
mov ecx, dword [0x45fb20]
test ecx, ecx
je 0x42bff6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x45fb20], ebx
cmp dword [esi + 4], ebx
je 0x42c007
push dword [esi + 4]
call dword [sym.imp.USER32.dll_DestroyWindow]
mov dword [esi + 4], ebx
cmp dword [esi], ebx
je 0x42c015
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esi], ebx
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
mov esi, ebx
lea ecx, [esp + 0x54]
mov dword [esp + 0x28], esi
call fcn.00433ab1
cmp byte [esp + 0x13], bl
je 0x42c072
mov eax, dword [0x460d50]
push ebx
push str.clear_mask
mov ecx, dword [eax]
call fcn.004362be
mov dword [esp + 0x14], eax
test eax, eax
je 0x42c072
call fcn.0042c3d4
mov ecx, dword [esp + 0x14]
mov dword [eax], ecx
lea ecx, [esp + 0x14]
push ecx
push ebx
push eax
push 0x41e550
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00407b3f
mov eax, dword [0x460d54]
mov dword [eax], ebx
mov eax, dword [esp + 0x18]
test eax, eax
je 0x42c094
push eax
mov dword [eax], 0x456448
call dword [sym.imp.msvcrt.dll_free]
pop ecx
call fcn.00405418
add eax, 0x34
push 2
mov dword [esp + 0x1c], eax
mov ebx, eax
pop ebp
mov ecx, dword [ebx]
mov eax, dword [ecx]
call dword [eax + 0x10]
lea ebx, [ebx + 4]
dec ebp
jne 0x42c0a5
mov ebp, dword [esp + 0x30]
xor ebx, ebx
mov edi, dword [esp + 0x18]
push 2
pop esi
mov ecx, dword [edi]
mov eax, dword [ecx]
call dword [eax + 0x18]
mov dword [edi], ebx
lea edi, [edi + 4]
dec esi
jne 0x42c0bf
call fcn.004277cf
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x20]
test eax, eax
je 0x42c0e7
mov edx, dword [eax]
mov ecx, eax
push 1
call dword [edx]
call fcn.00432e64
push ebx
mov ecx, ebp
call fcn.00431752
call fcn.00431b8e
test ebp, ebp
je 0x42c122
lea ecx, [ebp + 0x14]
mov dword [0x45fb54], ebx
call fcn.00404e09
cmp dword [ebp], ebx
je 0x42c11a
push dword [ebp]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
push ebp
call dword [sym.imp.msvcrt.dll_free]
pop ecx
mov ebp, dword [esp + 0x2c]
mov ecx, ebp
mov dword [esp + 0x28], ebx
call fcn.00437031
test ebp, ebp
je 0x42c13c
mov ecx, ebp
call fcn.0042c318
call fcn.00437e14
mov ecx, eax
call fcn.00437ed8
mov ebp, dword [esp + 0x1c]
mov ecx, dword [ebp]
call fcn.00435e96
mov ecx, dword [ebp]
mov dword [ebp], ebx
test ecx, ecx
je 0x42c163
call fcn.00425f82
mov ecx, ebp
mov dword [ebp], ebx
call fcn.0042c2c4
call dword [sym.imp.ole32.dll_OleUninitialize]
mov ebx, dword [esp + 0x34]
lea ecx, [esp + 0x28]
call fcn.0042c296
test esi, esi
je 0x42c18c
push esi
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea ecx, [edi - 0x10]
call fcn.0040169b
cmp dword [esp + 0x24], 0
je 0x42c1a5
push dword [esp + 0x24]
call dword [sym.imp.gdiplus.dll_GdiplusShutdown]
pop edi
pop esi
pop ebp
mov eax, ebx
pop ebx
add esp, 0x24c
ret