Function at 0x100174c0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
push esi
push edi
push 0x103
mov esi, eax
lea eax, [ebp - 0x107]
push 0
push eax
mov byte [ebp - 0x108], 0
call sub.MSVCRT.dll_memset
add esp, 0xc
test esi, esi
je 0x100179fe
mov edi, dword [ebp + 8]
test edi, edi
je 0x100179fe
push edi
push esi
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
test eax, eax
jne 0x100179fe
lea ecx, [edi + 1]
call fcn.10012ce0
mov edi, eax
test edi, edi
je 0x100179fe
mov ecx, dword [ebp + 8]
push ecx
push esi
push edi
call sub.MSVCRT.dll_memcpy
add esp, 0xc
mov eax, edi
call fcn.1001ce00
push edi
call fcn.10022ae0
mov esi, dword [sym.imp.SHLWAPI.dll_StrStrIA]
push str.j_username
push edi
call esi
test eax, eax
je 0x10017608
push str.j_password
push edi
call esi
test eax, eax
je 0x10017608
xor eax, eax
mov cl, byte [eax + 0x10057a88]
mov byte [ebp + eax - 0x108], cl
inc eax
test cl, cl
jne 0x10017562
mov esi, dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
push 0x10059d78
call esi
push 0x10059d78
lea edx, [ebp - 0x108]
push edx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea eax, [ebp - 0x108]
push eax
call esi
push 0x10059d78
call esi
push 0x10059d78
call fcn.10003090
lea esi, [ebp - 0x108]
call fcn.100069d0
mov eax, esi
dec eax
jmp 0x100175c0
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x100175c0
mov ecx, dword [str.pass.log]
mov edx, dword [0x10047c64]
mov dword [eax], ecx
mov cl, byte [0x10047c68]
mov dword [eax + 4], edx
lea esi, [ebp - 0x108]
mov byte [eax + 8], cl
call fcn.10006a10
mov edx, dword [ebp + 8]
push edx
push edi
mov eax, esi
call fcn.100064d0
mov esi, edi
call fcn.10012d20
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
push str.commandauth_loginByPasswordback_commandback_custom1
push edi
call esi
test eax, eax
je 0x100176cd
xor eax, eax
lea ebx, [ebx]
mov cl, byte [eax + 0x10057a88]
mov byte [ebp + eax - 0x108], cl
inc eax
test cl, cl
jne 0x10017620
mov esi, dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
push 0x10059e7c
call esi
push 0x10059e7c
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea ecx, [ebp - 0x108]
push ecx
call esi
push 0x10059e7c
call esi
push 0x10059e7c
call fcn.10003090
lea esi, [ebp - 0x108]
call fcn.100069d0
mov eax, esi
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10017680
mov edx, dword [str.pass.log]
mov ecx, dword [0x10047c64]
mov dword [eax], edx
mov dl, byte [0x10047c68]
mov dword [eax + 4], ecx
lea esi, [ebp - 0x108]
mov byte [eax + 8], dl
call fcn.10006a10
mov eax, dword [ebp + 8]
push eax
push edi
mov eax, esi
call fcn.100064d0
call fcn.1001a2a0
mov esi, edi
call fcn.10012d20
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
push str.edClientLogin
push edi
call esi
test eax, eax
je 0x100177a9
push str.edUserLogin
push edi
call esi
test eax, eax
je 0x100177a9
push str.edPassword
push edi
call esi
test eax, eax
je 0x100177a9
xor eax, eax
nop
mov cl, byte [eax + 0x10057a88]
mov byte [ebp + eax - 0x108], cl
inc eax
test cl, cl
jne 0x10017700
mov esi, dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
push 0x1005a188
call esi
push 0x1005a188
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea edx, [ebp - 0x108]
push edx
call esi
push 0x1005a188
call esi
push 0x1005a188
call fcn.10003090
lea esi, [ebp - 0x108]
call fcn.100069d0
mov eax, esi
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10017760
mov ecx, dword [str.pass.log]
mov edx, dword [0x10047c64]
mov dword [eax], ecx
mov cl, byte [0x10047c68]
mov dword [eax + 4], edx
lea esi, [ebp - 0x108]
mov byte [eax + 8], cl
call fcn.10006a10
mov edx, dword [ebp + 8]
push edx
push edi
mov eax, esi
call fcn.100064d0
push 0
push 0
push 0
push 0x1001d510
jmp 0x100179c4
push str.LOGIN_AUTHORIZATION_CODE
push edi
call esi
test eax, eax
je 0x1001786d
xor eax, eax
jmp 0x100177c0
mov cl, byte [eax + 0x10057a88]
mov byte [ebp + eax - 0x108], cl
inc eax
test cl, cl
jne 0x100177c0
mov esi, dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
push 0x1005a28c
call esi
push 0x1005a28c
lea ecx, [ebp - 0x108]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
lea edx, [ebp - 0x108]
push edx
call esi
push 0x1005a28c
call esi
push 0x1005a28c
call fcn.10003090
lea esi, [ebp - 0x108]
call fcn.100069d0
mov eax, esi
dec eax
lea esp, [esp]
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10017820
mov ecx, dword [str.pass.log]
mov edx, dword [0x10047c64]
mov dword [eax], ecx
mov cl, byte [0x10047c68]
mov dword [eax + 4], edx
lea esi, [ebp - 0x108]
mov byte [eax + 8], cl
call fcn.10006a10
mov edx, dword [ebp + 8]
push edx
push edi
mov eax, esi
call fcn.100064d0
call fcn.1001d930
mov esi, edi
call fcn.10012d20
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
push str.actionauthnplogin
push edi
call esi
test eax, eax
je 0x1001791d
xor eax, eax
nop
mov cl, byte [eax + 0x10057a88]
mov byte [ebp + eax - 0x108], cl
inc eax
test cl, cl
jne 0x10017880
mov esi, dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
push 0x1005a494
call esi
push 0x1005a494
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
push 0x1005a494
call esi
push 0x1005a494
call fcn.10003090
lea esi, [ebp - 0x108]
call fcn.100069d0
mov eax, esi
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x100178d0
mov ecx, dword [str.pass.log]
mov edx, dword [0x10047c64]
mov dword [eax], ecx
mov cl, byte [0x10047c68]
mov dword [eax + 4], edx
lea esi, [ebp - 0x108]
mov byte [eax + 8], cl
call fcn.10006a10
mov edx, dword [ebp + 8]
push edx
push edi
mov eax, esi
call fcn.100064d0
call fcn.1001e830
mov esi, edi
call fcn.10012d20
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4
push str.CryptoPluginIdAGAVASign
push edi
call esi
test eax, eax
je 0x100179f7
xor eax, eax
nop
mov cl, byte [eax + 0x10057a88]
mov byte [ebp + eax - 0x108], cl
inc eax
test cl, cl
jne 0x10017930
mov esi, dword [sym.imp.SHLWAPI.dll_PathAddBackslashA]
push 0x1005acb4
call esi
push 0x1005acb4
lea eax, [ebp - 0x108]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendA]
push 0x1005acb4
call esi
push 0x1005acb4
call fcn.10003090
lea esi, [ebp - 0x108]
call fcn.100069d0
mov eax, esi
dec eax
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x10017980
mov ecx, dword [str.pass.log]
mov edx, dword [0x10047c64]
mov dword [eax], ecx
mov cl, byte [0x10047c68]
mov dword [eax + 4], edx
lea esi, [ebp - 0x108]
mov byte [eax + 8], cl
call fcn.10006a10
mov edx, dword [ebp + 8]
push edx
push edi
mov eax, esi
call fcn.100064d0
push 0
push 0
push 0
push 0x10021ba0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov esi, eax
test esi, esi
je 0x100179f7
lea eax, [ebp + 8]
push eax
push esi
mov dword [ebp + 8], 0
call dword [sym.imp.KERNEL32.dll_GetHandleInformation]
test eax, eax
je 0x100179f7
test byte [ebp + 8], 2
jne 0x100179f7
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, edi
call fcn.10012d20
pop edi
pop esi
mov esp, ebp
pop ebp
ret 4