Function at 0x41e0e8
Capabilities:
Create process on windows
Get common file path

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffdd0
push ebx
push esi
push edi
mov ebx, eax
mov eax, 0x4953e8
call fcn.004696b8
mov edx, dword [ebx + 0x38]
cmp edx, 0x1109
jg 0x41e132
je 0x41ed4e
sub edx, 0x1105
je 0x41e482
sub edx, 2
je 0x41e775
dec edx
je 0x41e5d5
jmp 0x41f1bc
sub edx, 0x1205
je 0x41e25a
sub edx, 0x4ff
jne 0x41f1bc
mov word [ebp - 0x11c], 8
xor ecx, ecx
mov dword [ebp - 4], ecx
lea ecx, [ebp - 4]
inc dword [ebp - 0x110]
mov edx, 2
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
lea eax, [ebp - 4]
xor edx, edx
mov eax, dword [eax]
call fcn.0045f76c
push eax
xor ecx, ecx
mov dword [ebp - 8], ecx
lea ecx, [ebp - 8]
inc dword [ebp - 0x110]
mov edx, 1
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 8]
test eax, eax
je 0x41e1a2
mov edx, dword [ebp - 8]
jmp 0x41e1a7
mov edx, 0x494e5c
push edx
xor eax, eax
mov dword [ebp - 0xc], eax
lea ecx, [ebp - 0xc]
inc dword [ebp - 0x110]
xor edx, edx
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x41e1cc
mov edx, dword [ebp - 0xc]
jmp 0x41e1d1
mov edx, 0x494e5b
push edx
push 0
call sub.USER32.DLL_MessageBoxA
dec dword [ebp - 0x110]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 4]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x11c], 0x14
mov edx, 0x494e5d
lea eax, [ebp - 0x10]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.00474d44
jmp 0x41f1bc
mov dl, 1
mov eax, dword [0x455850]
call fcn.00419be8
mov esi, eax
xor eax, eax
push esi
lea ecx, [ebp - 0x14]
mov word [ebp - 0x11c], 0x20
mov dword [ebp - 0x14], eax
mov edx, 1
inc dword [ebp - 0x110]
mov eax, dword [ebx + 0x2c]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x14]
xor ecx, ecx
mov edx, dword [eax]
push edx
mov dword [ebp - 0x18], ecx
inc dword [ebp - 0x110]
xor edx, edx
mov eax, dword [ebx + 0x2c]
lea ecx, [ebp - 0x18]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x18]
mov edx, dword [eax]
push edx
call fcn.0040730c
add esp, 0xc
mov edx, 2
push eax
lea eax, [ebp - 0x18]
dec dword [ebp - 0x110]
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x41e398
push 0x1f4
call fcn.00403e2c
pop ecx
xor eax, eax
mov word [ebp - 0x11c], 0x2c
mov dword [ebp - 0x1c], eax
mov eax, 0x1004
inc dword [ebp - 0x110]
lea edx, [ebp - 0x1c]
call fcn.0045f6c4
lea edx, [ebp - 0x1c]
push edx
mov edx, 0x494e6f
lea eax, [ebp - 0x20]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0x24], eax
lea edx, [ebp - 0x20]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0x24]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x24]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.00474d44
jmp 0x41e442
push 0x1f4
call fcn.00403e2c
pop ecx
lea edx, [ebp - 0x28]
mov word [ebp - 0x11c], 0x38
xor ecx, ecx
mov eax, 0x1004
mov dword [ebp - 0x28], ecx
inc dword [ebp - 0x110]
call fcn.0045f6c4
lea ecx, [ebp - 0x28]
push ecx
mov edx, 0x494e7d
lea eax, [ebp - 0x2c]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0x30], eax
lea edx, [ebp - 0x2c]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0x30]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x30]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x30]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.00474d44
mov edx, dword [ebx + 0x28]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov edi, esi
mov dword [ebp - 0x38], edi
test edi, edi
je 0x41f1bc
mov eax, dword [edi]
mov dword [ebp - 0x34], eax
mov word [ebp - 0x11c], 0x50
mov edx, 3
mov eax, dword [ebp - 0x38]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x11c], 0x44
jmp 0x41f1bc
mov dl, 1
mov eax, dword [0x455850]
call fcn.00419be8
mov esi, eax
xor eax, eax
push esi
lea ecx, [ebp - 0x3c]
mov word [ebp - 0x11c], 0x5c
mov dword [ebp - 0x3c], eax
mov edx, 1
inc dword [ebp - 0x110]
mov eax, dword [ebx + 0x2c]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x3c]
xor ecx, ecx
mov edx, dword [eax]
push edx
mov dword [ebp - 0x40], ecx
inc dword [ebp - 0x110]
xor edx, edx
mov eax, dword [ebx + 0x2c]
lea ecx, [ebp - 0x40]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x40]
mov edx, dword [eax]
push edx
call fcn.004061e0
add esp, 0xc
mov edx, 2
push eax
lea eax, [ebp - 0x40]
dec dword [ebp - 0x110]
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x3c]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x41e552
mov word [ebp - 0x11c], 0x68
mov edx, 0x494e95
lea eax, [ebp - 0x44]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x44]
mov edx, 2
call fcn.00474d44
jmp 0x41e595
mov word [ebp - 0x11c], 0x74
mov edx, 0x494e9b
lea eax, [ebp - 0x48]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x48]
mov edx, 2
call fcn.00474d44
mov edx, dword [ebx + 0x28]
mov eax, esi
mov ecx, dword [eax]
call dword [ecx + 0x68]
mov edi, esi
mov dword [ebp - 0x50], edi
test edi, edi
je 0x41f1bc
mov eax, dword [edi]
mov dword [ebp - 0x4c], eax
mov word [ebp - 0x11c], 0x8c
mov edx, 3
mov eax, dword [ebp - 0x50]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x11c], 0x80
jmp 0x41f1bc
mov word [ebp - 0x11c], 0x98
xor edx, edx
mov dword [ebp - 0x54], edx
lea ecx, [ebp - 0x54]
inc dword [ebp - 0x110]
xor edx, edx
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x41e602
mov edx, dword [ebp - 0x54]
jmp 0x41e607
mov edx, 0x494eb3
lea eax, [ebp - 0x58]
call fcn.00474b48
inc dword [ebp - 0x110]
mov eax, dword [eax]
call fcn.0045f8bc
push eax
dec dword [ebp - 0x110]
lea eax, [ebp - 0x58]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x54]
mov edx, 2
call fcn.00474d44
pop ecx
test cl, cl
je 0x41e72d
mov word [ebp - 0x11c], 0xa4
xor eax, eax
mov dword [ebp - 0x5c], eax
lea ecx, [ebp - 0x5c]
inc dword [ebp - 0x110]
xor edx, edx
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
lea eax, [ebp - 0x5c]
mov edx, dword [eax]
push edx
mov cx, word [ebx + 0x36]
push ecx
mov eax, dword [ebx + 0x30]
push eax
call fcn.00404148
add esp, 0xc
mov edx, 2
push eax
lea eax, [ebp - 0x5c]
dec dword [ebp - 0x110]
call fcn.00474d44
pop ecx
test ecx, ecx
je 0x41e6e5
mov word [ebp - 0x11c], 0xb0
mov edx, 0x494eb4
lea eax, [ebp - 0x60]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x60]
mov edx, 2
call fcn.00474d44
jmp 0x41f1bc
mov word [ebp - 0x11c], 0xbc
mov edx, 0x494ec2
lea eax, [ebp - 0x64]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x64]
mov edx, 2
call fcn.00474d44
jmp 0x41f1bc
mov word [ebp - 0x11c], 0xc8
mov edx, 0x494ed0
lea eax, [ebp - 0x68]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x68]
mov edx, 2
call fcn.00474d44
jmp 0x41f1bc
lea ecx, [ebp - 0x12e]
push ecx
call fcn.004040c8
pop ecx
mov esi, eax
test esi, esi
je 0x41ed00
mov word [ebp - 0x11c], 0xd4
xor eax, eax
lea edx, [ebp - 0x230]
mov dword [ebp - 0x6c], eax
inc dword [ebp - 0x110]
mov word [ebp - 0x11c], 0xe0
push edx
push 0xff
call sub.KERNEL32.DLL_GetTempPathA
mov word [ebp - 0x11c], 0xec
xor ecx, ecx
mov dword [ebp - 0x74], ecx
lea ecx, [ebp - 0x74]
inc dword [ebp - 0x110]
mov edx, 1
mov eax, dword [ebx + 0x2c]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0x74]
push eax
lea edx, [ebp - 0x230]
lea eax, [ebp - 0x70]
call fcn.00474b48
inc dword [ebp - 0x110]
xor edx, edx
mov dword [ebp - 0x78], edx
lea ecx, [ebp - 0x78]
inc dword [ebp - 0x110]
pop edx
call fcn.00474d9c
lea edx, [ebp - 0x78]
lea eax, [ebp - 0x6c]
call fcn.00474d74
dec dword [ebp - 0x110]
lea eax, [ebp - 0x78]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x74]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x70]
mov edx, 2
call fcn.00474d44
push 0x494ee2
mov ecx, dword [ebp - 0x6c]
test ecx, ecx
je 0x41e85f
mov eax, dword [ebp - 0x6c]
jmp 0x41e864
mov eax, 0x494ee5
push eax
call fcn.0046ae64
add esp, 8
test eax, eax
je 0x41ec4b
push eax
call fcn.0046ab10
pop ecx
xor edx, edx
mov word [ebp - 0x11c], 0xf8
mov dword [ebp - 0x7c], edx
lea edx, [ebp - 0x7c]
inc dword [ebp - 0x110]
mov eax, 0x1003
call fcn.0045f6c4
lea ecx, [ebp - 0x7c]
push ecx
mov edx, 0x494ee6
lea eax, [ebp - 0x80]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0x84], eax
lea edx, [ebp - 0x80]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0x84]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x84]
push edx
lea eax, [ebp - 0x88]
mov dx, word [ebp - 0x12e]
call fcn.00474c08
mov edx, eax
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0x8c], eax
lea ecx, [ebp - 0x8c]
inc dword [ebp - 0x110]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x8c]
push edx
mov edx, 0x494ee8
lea eax, [ebp - 0x90]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0x94], eax
lea edx, [ebp - 0x90]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0x94]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x94]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x94]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x90]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x8c]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x88]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x84]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x80]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x7c]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x6c]
push ecx
mov edi, esi
push edi
call fcn.00404514
add esp, 8
test eax, eax
je 0x41ebfd
push edi
call sub.WSOCK32.DLL_closesocket
mov word [ebp - 0x11c], 0x110
xor eax, eax
mov dword [ebp - 0x98], eax
lea ecx, [ebp - 0x98]
inc dword [ebp - 0x110]
mov edx, 2
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
lea eax, [ebp - 0x98]
mov edx, 1
mov eax, dword [eax]
call fcn.0045f76c
mov esi, eax
dec dword [ebp - 0x110]
lea eax, [ebp - 0x98]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x11c], 0x104
push esi
push 0
mov word [ebp - 0x11c], 0x11c
xor ecx, ecx
mov dword [ebp - 0x9c], ecx
lea ecx, [ebp - 0x9c]
inc dword [ebp - 0x110]
mov edx, 3
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
mov eax, dword [ebp - 0x9c]
test eax, eax
je 0x41eab0
mov edx, dword [ebp - 0x9c]
jmp 0x41eab5
mov edx, 0x494efc
push edx
mov eax, dword [ebp - 0x6c]
test eax, eax
je 0x41eac2
mov ecx, dword [ebp - 0x6c]
jmp 0x41eac7
mov ecx, 0x494efb
mov eax, dword [0x49a444]
push ecx
push str.open
mov edx, dword [eax]
mov eax, dword [edx + 0x24]
push eax
call sub.SHELL32.DLL_ShellExecuteA
mov esi, eax
dec dword [ebp - 0x110]
lea eax, [ebp - 0x9c]
mov edx, 2
call fcn.00474d44
cmp si, 0x20
ja 0x41eba6
mov eax, esi
cmp ax, 2
je 0x41eb0d
cmp ax, 3
jne 0x41eb5b
mov word [ebp - 0x11c], 0x128
mov edx, 0x494efd
lea eax, [ebp - 0xa0]
call fcn.00474b48
inc dword [ebp - 0x110]
mov edx, dword [eax]
push edx
mov cx, word [ebx + 0x34]
push ecx
mov eax, dword [ebx + 0x30]
push eax
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xa0]
mov edx, 2
call fcn.00474d44
jmp 0x41ebef
mov word [ebp - 0x11c], 0x134
mov edx, 0x494f0f
lea eax, [ebp - 0xa4]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xa4]
mov edx, 2
call fcn.00474d44
jmp 0x41ebef
mov word [ebp - 0x11c], 0x140
mov edx, 0x494f1d
lea eax, [ebp - 0xa8]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xa8]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x11c], 0xe0
jmp 0x41ecdf
mov word [ebp - 0x11c], 0x14c
mov edx, 0x494f2b
lea eax, [ebp - 0xac]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xac]
mov edx, 2
call fcn.00474d44
jmp 0x41ecdf
mov word [ebp - 0x11c], 0x158
xor ecx, ecx
mov dword [ebp - 0xb0], ecx
lea ecx, [ebp - 0xb0]
inc dword [ebp - 0x110]
mov edx, 1
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
lea edx, [ebp - 0xb0]
xor eax, eax
mov dword [ebp - 0xb4], eax
lea ecx, [ebp - 0xb4]
inc dword [ebp - 0x110]
mov eax, 0x494f39
call fcn.00475018
lea edx, [ebp - 0xb4]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xb4]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xb0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x6c]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x11c], 0
jmp 0x41f1bc
mov word [ebp - 0x11c], 0x164
mov edx, 0x494f49
lea eax, [ebp - 0xb8]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xb8]
mov edx, 2
call fcn.00474d44
jmp 0x41f1bc
lea ecx, [ebp - 0x130]
push ecx
call fcn.004040c8
pop ecx
mov esi, eax
test esi, esi
je 0x41f173
push 0x494f63
xor eax, eax
mov word [ebp - 0x11c], 0x170
mov dword [ebp - 0xbc], eax
lea ecx, [ebp - 0xbc]
inc dword [ebp - 0x110]
mov edx, 1
mov eax, dword [ebx + 0x2c]
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x41eda6
mov edx, dword [ebp - 0xbc]
jmp 0x41edab
mov edx, 0x494f66
push edx
call fcn.0046ae64
add esp, 8
mov edi, eax
dec dword [ebp - 0x110]
lea eax, [ebp - 0xbc]
mov edx, 2
call fcn.00474d44
test edi, edi
je 0x41f0dd
push edi
call fcn.0046ab10
pop ecx
lea edx, [ebp - 0xc0]
mov word [ebp - 0x11c], 0x17c
xor ecx, ecx
mov eax, 0x1003
mov dword [ebp - 0xc0], ecx
inc dword [ebp - 0x110]
call fcn.0045f6c4
lea ecx, [ebp - 0xc0]
push ecx
mov edx, 0x494f67
lea eax, [ebp - 0xc4]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0xc8], eax
lea edx, [ebp - 0xc4]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0xc8]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0xc8]
push edx
lea eax, [ebp - 0xcc]
mov dx, word [ebp - 0x130]
call fcn.00474c08
mov edx, eax
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0xd0], eax
lea ecx, [ebp - 0xd0]
inc dword [ebp - 0x110]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0xd0]
push edx
mov edx, 0x494f69
lea eax, [ebp - 0xd4]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0xd8], eax
lea edx, [ebp - 0xd4]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0xd8]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0xd8]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xd8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xd4]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xd0]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xcc]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xc8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xc4]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xc0]
mov edx, 2
call fcn.00474d44
mov word [ebp - 0x11c], 0x188
xor ecx, ecx
mov dword [ebp - 0xdc], ecx
lea ecx, [ebp - 0xdc]
inc dword [ebp - 0x110]
mov edx, 1
mov eax, dword [ebx + 0x2c]
mov edi, dword [eax]
call dword [edi + 0xc]
lea eax, [ebp - 0xdc]
mov edx, dword [eax]
push edx
push esi
call fcn.00404514
add esp, 8
mov edx, 2
push eax
lea eax, [ebp - 0xdc]
dec dword [ebp - 0x110]
call fcn.00474d44
pop ecx
test ecx, ecx
je 0x41f089
mov word [ebp - 0x11c], 0x194
xor eax, eax
lea edx, [ebp - 0xe0]
mov dword [ebp - 0xe0], eax
mov eax, 0x1004
inc dword [ebp - 0x110]
call fcn.0045f6c4
lea edx, [ebp - 0xe0]
push edx
mov edx, 0x494f77
lea eax, [ebp - 0xe4]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0xe8], eax
lea edx, [ebp - 0xe4]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0xe8]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0xe8]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xe8]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xe4]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xe0]
mov edx, 2
call fcn.00474d44
jmp 0x41f0d2
mov word [ebp - 0x11c], 0x1a0
mov edx, 0x494f85
lea eax, [ebp - 0xec]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xec]
mov edx, 2
call fcn.00474d44
push esi
call sub.WSOCK32.DLL_closesocket
jmp 0x41f1bc
mov word [ebp - 0x11c], 0x1ac
xor ecx, ecx
mov dword [ebp - 0xf0], ecx
lea ecx, [ebp - 0xf0]
inc dword [ebp - 0x110]
mov edx, 1
mov eax, dword [ebx + 0x2c]
mov esi, dword [eax]
call dword [esi + 0xc]
lea edx, [ebp - 0xf0]
xor eax, eax
mov dword [ebp - 0xf4], eax
lea ecx, [ebp - 0xf4]
inc dword [ebp - 0x110]
mov eax, 0x494f93
call fcn.00475018
lea edx, [ebp - 0xf4]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xf4]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xf0]
mov edx, 2
call fcn.00474d44
jmp 0x41f1bc
mov word [ebp - 0x11c], 0x1b8
mov edx, 0x494fa3
lea eax, [ebp - 0xf8]
call fcn.00474b48
inc dword [ebp - 0x110]
mov ecx, dword [eax]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0xf8]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebx + 0x28]
push ecx
mov ax, word [ebx + 0x36]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404354
add esp, 0xc
test eax, eax
jne 0x41f2dc
mov eax, dword [ebx + 0x28]
call fcn.00458b80
test eax, eax
je 0x41f2dc
mov word [ebp - 0x11c], 0x1c4
mov eax, dword [ebx + 0x28]
call fcn.00458b80
mov edx, eax
lea eax, [ebp - 0xfc]
call fcn.00474c50
inc dword [ebp - 0x110]
xor ecx, ecx
mov dword [ebp - 0x100], ecx
mov edx, eax
inc dword [ebp - 0x110]
mov eax, 0x494fbd
lea ecx, [ebp - 0x100]
call fcn.00475018
lea edx, [ebp - 0x100]
push edx
mov edx, 0x494fc1
lea eax, [ebp - 0x104]
call fcn.00474b48
inc dword [ebp - 0x110]
xor eax, eax
mov dword [ebp - 0x108], eax
lea edx, [ebp - 0x104]
inc dword [ebp - 0x110]
lea ecx, [ebp - 0x108]
pop eax
call fcn.00474d9c
lea edx, [ebp - 0x108]
mov ecx, dword [edx]
push ecx
mov ax, word [ebx + 0x34]
push eax
mov edx, dword [ebx + 0x30]
push edx
call fcn.00404000
add esp, 0xc
dec dword [ebp - 0x110]
lea eax, [ebp - 0x108]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x104]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0x100]
mov edx, 2
call fcn.00474d44
dec dword [ebp - 0x110]
lea eax, [ebp - 0xfc]
mov edx, 2
call fcn.00474d44
mov ecx, dword [ebp - 0x12c]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret