Function at 0x484d80
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d4679
mov eax, dword fs:[0]
push eax
sub esp, 0x78
mov eax, dword [0x6385e0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x78], ecx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x78]
call fcn.00484b30
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x78]
mov dword [ecx], vtable.HitmanPro35::CloudClassifier.0
mov edx, dword [ebp - 0x78]
mov dword [edx + 0x10], 0
push 1
mov ecx, dword [ebp - 0x78]
add ecx, 0x814
call fcn.00401280
mov byte [ebp - 4], 1
push 0
mov ecx, dword [ebp - 0x78]
add ecx, 0x81c
call fcn.00401280
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x78]
add ecx, 0x824
call fcn.00401300
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x78]
add ecx, 0x840
call fcn.00401e80
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x78]
add ecx, 0x850
call fcn.00486980
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x78]
add ecx, 0x870
call fcn.00401300
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x78]
add ecx, 0x894
call fcn.00401300
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0x78]
add ecx, 0x8b0
call fcn.004318e0
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x78]
add ecx, 0x8d0
call fcn.004318e0
mov byte [ebp - 4], 9
mov byte [ebp - 0x1d], 1
mov eax, dword [ebp - 0x78]
mov dword [eax + 0x864], 0x3a98
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x868], 0x99cf0
mov edx, dword [ebp - 0x78]
mov byte [edx + 0x86c], 1
push 0
push str.SOFTWAREHitman_Pro
call fcn.00414b30
mov ecx, eax
call fcn.00414830
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
je 0x484f32
lea eax, [ebp - 0x28]
push eax
push str.NoCompression
mov ecx, dword [ebp - 0x10]
call fcn.00414450
movzx ecx, al
test ecx, ecx
jne 0x484ed2
jmp 0x484ee2
cmp dword [ebp - 0x28], 0
je 0x484ee2
mov edx, dword [ebp - 0x78]
mov byte [edx + 0x86c], 0
lea eax, [ebp - 0x28]
push eax
push str.NoSSL
mov ecx, dword [ebp - 0x10]
call fcn.00414450
movzx ecx, al
test ecx, ecx
jne 0x484efc
jmp 0x484f06
cmp dword [ebp - 0x28], 0
je 0x484f06
mov byte [ebp - 0x1d], 0
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0
je 0x484f2b
push 1
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x4c]
mov eax, dword [edx]
call eax
mov dword [ebp - 0x7c], eax
jmp 0x484f32
mov dword [ebp - 0x7c], 0
movzx ecx, byte [ebp - 0x1d]
test ecx, ecx
je 0x484f81
push 0
push 0
push 0
push 0
push 1
push 9
push 0x7d9
lea ecx, [ebp - 0x44]
call fcn.004114a0
lea edx, [ebp - 0x6c]
push edx
call fcn.00411800
add esp, 4
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x44]
push eax
mov ecx, dword [ebp - 0x80]
call fcn.004116c0
mov byte [ebp - 0x1d], al
lea ecx, [ebp - 0x6c]
call fcn.00407c30
lea ecx, [ebp - 0x44]
call fcn.00407c30
push 0x606e8c
lea ecx, [ebp - 0x1c]
call fcn.004b3550
mov byte [ebp - 4], 0xa
push 0x24
call fcn.0054d57b
add esp, 4
mov dword [ebp - 0x74], eax
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x74], 0
je 0x484fc6
movzx ecx, byte [ebp - 0x1d]
push ecx
lea edx, [ebp - 0x1c]
push edx
mov eax, dword [ebp - 0x74]
push eax
mov ecx, dword [ebp + 8]
call fcn.00419bc0
mov dword [ebp - 0x84], eax
jmp 0x484fd0
mov dword [ebp - 0x84], 0
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x70], ecx
mov byte [ebp - 4], 0xa
mov edx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x70]
mov dword [edx + 0x860], eax
mov dword [ebp - 0x48], 0
jmp 0x484ffb
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
cmp dword [ebp - 0x48], 2
jae 0x485014
mov edx, dword [ebp - 0x48]
mov eax, dword [ebp - 0x78]
mov dword [eax + edx*4 + 0x88c], 0
jmp 0x484ff2
push 0x400
mov ecx, dword [ebp - 0x78]
add ecx, 0x14
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [ebp - 0x24]
push edx
push 0
mov eax, dword [ebp - 0x78]
push eax
push 0x4854b0
push 0x20000
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, dword [ebp - 0x78]
mov dword [ecx + 0x10], eax
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1c]
call fcn.004b3860
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov esp, ebp
pop ebp
ret 4