Function at 0x70275d70
Capabilities:
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x703174c1
mov eax, dword fs:[0]
push eax
sub esp, 0x214
mov eax, dword [0x7034b250]
xor eax, esp
mov dword [esp + 0x210], eax
push esi
push edi
mov eax, dword [0x7034b250]
xor eax, esp
push eax
lea eax, [esp + 0x220]
mov dword fs:[0], eax
push 0
push 1
push 0x70359944
call dword [sym.imp.KERNEL32.dll_InterlockedCompareExchange]
test eax, eax
jne 0x7027607a
mov eax, dword [0x70359948]
test eax, eax
jne 0x70275e9a
push 0x206
push eax
lea ecx, [esp + 0x1e]
push ecx
mov word [esp + 0x20], ax
call fcn.702e95e0
mov eax, dword [0x7035806c]
add esp, 0xc
push 0x104
lea edx, [esp + 0x18]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push str...iNetSafe.dll
lea ecx, [esp + 0x18]
push ecx
mov edx, ecx
push edx
call dword [sym.imp.SHLWAPI.dll_PathCombineW]
mov esi, dword [sym.imp.SHLWAPI.dll_StrCmpIW]
push str.thunder.exe
push 0x70359f90
call esi
test eax, eax
je 0x70275e59
push str.thunderplatform.exe
push 0x70359f90
call esi
test eax, eax
je 0x70275e59
lea eax, [esp + 0x14]
push eax
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x70275e4a
lea ecx, [esp + 0x14]
push ecx
jmp 0x70275e87
lea eax, [esp + 0x14]
call fcn.702b4730
test eax, eax
jne 0x70275e82
jmp 0x70275e8d
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
lea eax, [esp + 0x14]
push eax
call esi
test eax, eax
jne 0x70275e8d
lea eax, [esp + 0x14]
call fcn.702b4730
test eax, eax
je 0x70275e8d
lea ecx, [esp + 0x14]
push ecx
call esi
test eax, eax
jne 0x70275e8d
lea edx, [esp + 0x14]
push edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [0x70359948], eax
test eax, eax
je 0x7027607a
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push str.InitMonitor
push eax
call esi
mov dword [0x7035994c], eax
mov eax, dword [0x70359948]
push str.RegisterMonitor
push eax
call esi
mov ecx, dword [0x70359948]
push str.DeRegisterMonitor
push ecx
mov dword [0x70359950], eax
call esi
mov edx, dword [0x70359948]
push str.StartMonitor
push edx
mov dword [0x70359954], eax
call esi
mov dword [0x70359958], eax
mov eax, dword [0x70359948]
push str.StopMonitor
push eax
call esi
mov ecx, dword [0x70359948]
push str.SetMonitorFilter
push ecx
mov dword [0x7035995c], eax
call esi
mov ecx, dword [0x7035994c]
mov dword [0x70359960], eax
test ecx, ecx
je 0x7027607a
cmp dword [0x70359950], 0
je 0x7027607a
cmp dword [0x70359954], 0
je 0x7027607a
cmp dword [0x70359958], 0
je 0x7027607a
cmp dword [0x7035995c], 0
je 0x7027607a
test eax, eax
je 0x7027607a
call ecx
test eax, eax
je 0x7027607a
cmp dword [0x70359964], 0
jne 0x7027607a
push 0x70275910
push 0
push 0xf
call dword [0x70359950]
mov dword [0x70359964], eax
test eax, eax
je 0x7027607a
lea edx, [esp + 0xc]
push edx
mov edi, 0xcf
call fcn.702278e0
add esp, 4
mov dword [esp + 0x228], 0
mov eax, dword [eax]
push eax
mov eax, dword [0x70359964]
push 1
push eax
call dword [0x70359960]
or esi, 0xffffffff
lea eax, [esp + 0xc]
mov dword [esp + 0x228], esi
call fcn.7020c950
lea ecx, [esp + 0xc]
push ecx
mov edi, 0x92
call fcn.702278e0
add esp, 4
mov dword [esp + 0x228], 1
mov eax, dword [eax]
mov edx, dword [0x70359964]
push eax
push 1
push edx
call dword [0x70359960]
lea eax, [esp + 0xc]
mov dword [esp + 0x228], esi
call fcn.7020c950
lea eax, [esp + 0x10]
push eax
mov edi, 0xce
call fcn.702278e0
add esp, 4
mov dword [esp + 0x228], 2
mov eax, dword [eax]
mov ecx, dword [0x70359964]
push eax
push 1
push ecx
call dword [0x70359960]
lea eax, [esp + 0x10]
mov dword [esp + 0x228], esi
call fcn.7020c950
mov edx, dword [0x70359964]
push str.http:__
push 2
push edx
call dword [0x70359960]
mov eax, dword [0x70359964]
push str.ftp:__
push 2
push eax
call dword [0x70359960]
mov ecx, dword [0x70359964]
push ecx
call dword [0x70359958]
mov ecx, dword [esp + 0x220]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [esp + 0x210]
xor ecx, esp
call fcn.702e1c2f
add esp, 0x220
ret