Function at 0x409d00
Capabilities:
Initialize winsock library
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x571410
mov eax, dword fs:[0]
push eax
sub esp, 0x220
mov eax, dword [0x5d4d80]
xor eax, esp
mov dword [esp + 0x218], eax
push ebx
push esi
push edi
mov eax, dword [0x5d4d80]
xor eax, esp
push eax
lea eax, [esp + 0x230]
mov dword fs:[0], eax
mov edi, ecx
push edi
call fcn.00409a80
test eax, eax
jne 0x409d53
push eax
call dword [sym.imp.KERNEL32.dll_ExitProcess]
lea eax, [esp + 0x30]
push eax
mov dword [esp + 0x34], 8
mov dword [esp + 0x38], 0xff
call dword [sym.imp.COMCTL32.dll_InitCommonControlsEx]
mov ecx, edi
call fcn.0048648f
call fcn.004188d0
mov eax, dword [eax]
sub eax, 0x10
push eax
call fcn.00403ad0
add eax, 0x10
add esp, 4
mov dword [esp + 0x14], eax
push 0xf
push 0x5a6930
lea ecx, [esp + 0x1c]
mov dword [esp + 0x240], 0
call fcn.00402af0
lea ecx, [esp + 0x10]
push ecx
call fcn.00417f40
mov byte [esp + 0x238], 1
mov eax, dword [esp + 0x14]
push ecx
add eax, 0xfffffff0
mov dword [esp + 0x1c], esp
mov esi, esp
push eax
mov dword [esp + 0x24], eax
call fcn.00403ad0
add eax, 0x10
add esp, 4
lea ecx, [esp + 0x14]
mov dword [esi], eax
call fcn.00417fe0
push ecx
mov ecx, esp
mov dword [esp + 0x1c], esp
push str.langid
call fcn.00403630
push ecx
mov byte [esp + 0x240], 2
mov ecx, esp
mov dword [esp + 0x30], esp
push str.Config
call fcn.00403630
lea ecx, [esp + 0x18]
mov byte [esp + 0x240], 1
call fcn.00418050
mov esi, eax
call fcn.0041b560
mov dword [eax], esi
call fcn.0041b560
mov ecx, eax
call fcn.0041b5d0
push str._V2.06
push ecx
mov ecx, esp
mov dword [esp + 0x28], esp
push str.PC_Link
call fcn.00403630
lea edx, [esp + 0x20]
push edx
mov byte [esp + 0x244], 3
call fcn.0041b560
mov ecx, eax
mov byte [esp + 0x244], 1
call fcn.0041bec0
mov ebx, eax
mov byte [esp + 0x23c], 4
mov dword [esp + 0x24], vtable.CBinary.0
mov dword [esp + 0x28], 0
mov eax, 6
lea esi, [esp + 0x24]
call fcn.00416720
movzx eax, ax
test ax, ax
jne 0x409ec0
mov ecx, dword [esp + 0x28]
movsx eax, word [ecx + 4]
add eax, dword [ecx]
mov edx, dword [0x5a5fa8]
mov dword [eax], edx
mov dx, word [0x5a5fac]
mov word [eax + 4], dx
add word [ecx + 4], 6
jmp 0x409ec6
mov word [0x5ee374], ax
mov eax, ebx
lea esi, [esp + 0x2c]
mov byte [esp + 0x23c], 5
call fcn.00418770
push eax
lea eax, [esp + 0x34]
push eax
mov byte [esp + 0x244], 6
call fcn.0040a8e0
add esp, 0xc
lea ebx, [edi + 0xf0]
push eax
mov ecx, ebx
mov byte [esp + 0x23c], 7
call fcn.00403b60
mov byte [esp + 0x238], 6
mov eax, dword [esp + 0x2c]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409f2d
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov byte [esp + 0x238], 5
mov eax, dword [esp + 0x28]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409f55
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov esi, dword [esp + 0x24]
test esi, esi
je 0x409f7e
cmp word [esi + 0xa], 1
jne 0x409f7a
mov eax, dword [esi]
push eax
call fcn.00427143
add esp, 4
push esi
call fcn.00427143
add esp, 4
jmp 0x409f7e
dec word [esi + 0xa]
mov byte [esp + 0x238], 1
mov eax, dword [esp + 0x18]
add eax, 0xfffffff0
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409fa6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
push 0
call fcn.00486f54
test eax, eax
jne 0x40a012
push 0xffffffffffffffff
push eax
push 0x68
call fcn.00458eae
mov byte [esp + 0x238], 0
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
or edx, 0xffffffff
lea ecx, [eax + 0xc]
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x409fe3
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x238], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40a00b
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor eax, eax
jmp 0x40a1fc
call fcn.004871c5
test eax, eax
je 0x409fbb
push 0
call fcn.00487a68
add esp, 4
push str.Local_AppWizard_Generated_Applications
mov ecx, edi
call fcn.00487f3b
lea ecx, [esp + 0x94]
push ecx
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push 0
test eax, eax
je 0x40a0ae
push 0x40
push str.WSAstartup___is_failed_n
call fcn.00458e60
mov byte [esp + 0x238], 0
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
lea edx, [eax + 0xc]
or ecx, 0xffffffff
lock xadd dword [edx], ecx
dec ecx
test ecx, ecx
jg 0x40a07e
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x238], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x40a0a6
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
or eax, 0xffffffff
jmp 0x40a1fc
mov ecx, edi
call fcn.0048602a
mov ecx, edi
call fcn.0044bd93
mov ecx, edi
call fcn.0044bde0
mov ecx, edi
call fcn.0044bd43
call fcn.0040a810
lea ecx, [esp + 0x60]
call fcn.00409a40
lea ecx, [esp + 0x60]
push ecx
push 0x583768
push 0xffff
mov ecx, 0x5ee3b0
mov dword [esp + 0x84], 1
call fcn.0044be2d
mov ecx, eax
call fcn.00488424
push 0x6c
call fcn.00427114
add esp, 4
mov dword [esp + 0x20], eax
mov byte [esp + 0x238], 8
test eax, eax
je 0x40a13a
push 0x5a6c88
push 0x5a5dc0
push 0x5a6b70
push 0x80
mov ecx, eax
call fcn.004898b4
jmp 0x40a13c
xor eax, eax
mov byte [esp + 0x238], 1
test eax, eax
je 0x40a18e
push eax
mov ecx, edi
call fcn.00489d01
lea ecx, [esp + 0x38]
call fcn.00486ae5
lea edx, [esp + 0x38]
push edx
mov ecx, edi
mov byte [esp + 0x23c], 9
call fcn.004860b0
lea eax, [esp + 0x38]
push eax
mov ecx, edi
call fcn.00489b83
test eax, eax
jne 0x40a1a4
lea ecx, [esp + 0x38]
mov byte [esp + 0x238], 1
call fcn.00486b29
lea eax, [esp + 0x10]
call fcn.00417fc0
lea ecx, [esp + 0x14]
call fcn.004036f0
xor eax, eax
jmp 0x40a1fc
mov ecx, dword [edi + 0x20]
push 0
call fcn.0042fed8
mov edi, dword [edi + 0x20]
mov ecx, dword [edi + 0x20]
push ecx
call dword [sym.imp.USER32.dll_UpdateWindow]
mov eax, dword [ebx]
push eax
call fcn.0040a9c0
mov ecx, eax
call fcn.0042fe0d
call fcn.0040a300
call fcn.0040a500
lea ecx, [esp + 0x38]
mov byte [esp + 0x238], 1
call fcn.00486b29
lea eax, [esp + 0x10]
call fcn.00417fc0
lea ecx, [esp + 0x14]
call fcn.004036f0
mov eax, 1
mov ecx, dword [esp + 0x230]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x218]
xor ecx, esp
call fcn.0053d842
mov esp, ebp
pop ebp
ret