Function at 0x4153f0
Capabilities:
Initialize winsock library
Resolve dns

Disassembly:
push 0xffffffffffffffff
push 0x475641
mov eax, dword fs:[0]
push eax
sub esp, 0x4e4
mov eax, dword [0x4a7534]
xor eax, esp
mov dword [esp + 0x4e0], eax
push esi
push edi
mov eax, dword [0x4a7534]
xor eax, esp
push eax
lea eax, [esp + 0x4f0]
mov dword fs:[0], eax
mov esi, dword [0x4ac748]
lea eax, [esp + 0x154]
push eax
push 0x202
call sub.WS2_32.dll_WSAStartup
push 0xffffffffffffffff
call sub.IMM32.dll_ImmDisableIME
call fcn.00414990
test al, al
jne 0x415496
push 0x43
call dword [sym.imp.USER32.dll_GetSystemMetrics]
test eax, eax
jne 0x415496
lea ecx, [esp + 0x14]
call fcn.0046ba70
lea ecx, [esp + 0x14]
push ecx
mov dword [esp + 0x4fc], 0
call fcn.004152a0
add esp, 4
test al, al
jne 0x41549d
push 0
lea ecx, [esp + 0x18]
call fcn.0046cc60
lea ecx, [esp + 0x14]
call fcn.0046ba10
xor al, al
jmp 0x4157a7
call fcn.0041fcc0
mov esi, 0x4ade70
call fcn.004022f0
lea edx, [esp + 0x13]
push edx
lea eax, [esp + 0x18]
push eax
mov byte [esp + 0x1b], 1
call fcn.004655d0
mov ecx, eax
call fcn.00465910
test al, al
jne 0x4154d4
lea ecx, [esp + 0x14]
call fcn.0046bdf0
cmp byte [esp + 0x13], 0
jne 0x415508
test byte [0x4ac7a0], 4
jne 0x4154f8
push 0
push 0x482c68
push 0x485690
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
lea ecx, [esp + 0x14]
call fcn.0046ba10
xor al, al
jmp 0x4157a7
call fcn.00414ae0
test al, al
je 0x41548d
mov ecx, 0x12
mov esi, str.5E7CCEC5_2A10_4717_A11E_97E922791046
lea edi, [esp + 0x2e4]
rep movsd dword es:[edi], dword [esi]
push 0x1be
lea ecx, [esp + 0x332]
push 0
push ecx
movsw word es:[edi], word [esi]
call fcn.00449450
lea edx, [esp + 0x2f0]
add esp, 0xc
push edx
call fcn.0041e090
add esp, 4
cmp dword [0x4ac7a0], 4
sete cl
test cl, cl
je 0x415587
cmp byte [eax + 4], 0
je 0x41559e
push 0x48570c
mov esi, 0x4ade70
call fcn.00402490
add esp, 4
lea ecx, [esp + 0x14]
call fcn.0046ba10
xor al, al
jmp 0x4157a7
cmp byte [eax + 4], 0
je 0x41559e
push 0
push 0x485734
push 0x48570c
jmp 0x4154f0
call fcn.0041e700
mov edi, 6
cmp dword [0x4ac7a0], edi
je 0x4155e5
mov eax, 0x4af648
mov esi, 0x4ae670
call fcn.00428490
push 0
mov esi, eax
call fcn.0044725c
sub eax, esi
add esp, 4
cmp eax, 0x15180
jl 0x41564f
push 1
push 0x4aeef0
push 0x4ae670
call fcn.00429760
call fcn.00414fc0
mov ecx, dword [0x4ac7a0]
cmp ecx, 4
jne 0x41560b
call fcn.00415110
test al, al
jne 0x41548d
mov ecx, dword [0x4ac7a0]
cmp ecx, 4
sete al
test al, al
jne 0x4156db
cmp ecx, edi
je 0x4156db
push 5
call fcn.00415080
add esp, 4
cmp dword [0x4ac7a0], 2
je 0x4156db
call fcn.00415110
test al, al
je 0x41568e
push 0
push 0x48384c
push 0x485748
jmp 0x4154f0
mov eax, 0x4aeef0
mov esi, 0x4ae670
call fcn.00428490
cmp eax, 4
ja 0x41566c
add eax, 1
push eax
jmp 0x4155d6
cmp dword [0x4ac7a0], 4
sete al
test al, al
je 0x4155e5
lea ecx, [esp + 0x14]
call fcn.0046ba10
xor al, al
jmp 0x4157a7
push 0x110
lea eax, [esp + 0x44]
push 0
push eax
mov dword [esp + 0x48], 0x114
call fcn.00449450
add esp, 0xc
call fcn.00415150
test al, al
jne 0x4156db
lea ecx, [esp + 0x3c]
push ecx
call fcn.004679c0
add esp, 4
test al, al
je 0x4156db
cmp dword [esp + 0x40], edi
jae 0x4156db
push 0
push 0x48384c
push 0x485768
jmp 0x4154f0
lea ecx, [esp + 0x1c]
call fcn.00468b50
push str.YYID
lea ecx, [esp + 0x20]
call fcn.00469080
lea esi, [esp + 0x2c]
call fcn.0041dee0
mov ecx, esi
mov byte [esp + 0x4f8], 5
call fcn.00468640
push str._path___expiresThu__07_Mar_13_09:14:07_GMT__domain.sogou.com
push eax
lea ecx, [esp + 0x24]
call fcn.00468d90
mov ecx, eax
call fcn.00468d90
lea ecx, [esp + 0x1c]
call fcn.00468640
mov esi, eax
mov edi, str.http:__sogou.com
call fcn.0041cd70
push str.YYID
lea ecx, [esp + 0x20]
call fcn.00469080
lea ecx, [esp + 0x2c]
call fcn.00468640
push str._path___expiresThu__07_Mar_13_09:14:07_GMT__domain.sohu.com
push eax
lea ecx, [esp + 0x24]
call fcn.00468d90
mov ecx, eax
call fcn.00468d90
lea ecx, [esp + 0x1c]
call fcn.00468640
mov esi, eax
mov edi, str.http:__sohu.com
call fcn.0041cd70
cmp dword [0x4ac7a0], 4
jne 0x41578a
push str.www.sogou.com
call sub.WS2_32.dll_gethostbyname
lea ecx, [esp + 0x2c]
call fcn.00468790
lea ecx, [esp + 0x1c]
call fcn.00468790
lea ecx, [esp + 0x14]
call fcn.0046ba10
mov al, 1
mov ecx, dword [esp + 0x4f0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x4e0]
xor ecx, esp
call fcn.00445c6a
add esp, 0x4f0
ret