Function at 0x4300c0
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2b8
mov eax, dword [0x5402b0]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
mov dword [ebp - 0x2a0], eax
xor ebx, ebx
push esi
mov eax, sym.360bdoctor.exe_get_addr
push edi
mov dword [ebp - 0x7c], 0xf
mov dword [ebp - 0x80], ebx
mov byte [ebp - 0x90], bl
lea edx, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x430100
sub eax, edx
push eax
push sym.360bdoctor.exe_get_addr
lea ecx, [ebp - 0x94]
call fcn.0040b8b0
push 1
mov ecx, str.http:__dd.browser.360.cn_static_a_1453.4197.gif
call fcn.00409fe0
add esp, 4
mov ecx, 1
call fcn.00458ee0
cmp eax, ebx
je 0x430147
lea ecx, [ebp - 0x2b8]
mov dword [eax], ecx
mov dword [ebp - 0x2b8], eax
jmp 0x43014d
mov dword [ebp - 0x2b8], ebx
push 2
push 0x51f760
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2ac], ebx
mov dword [ebp - 0x2a8], ebx
mov dword [ebp - 0x2a4], ebx
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
lea edi, [ebp - 0x2b8]
lea eax, [ebp - 0x40]
lea ecx, [ebp - 0x94]
call fcn.00450c20
mov esi, 0x10
cmp dword [ebp - 0x28], esi
jb 0x4301a5
mov edx, dword [ebp - 0x3c]
push edx
call fcn.004c097a
add esp, 4
mov ecx, 1
call fcn.00458ee0
cmp eax, ebx
je 0x4301c3
lea ecx, [ebp - 0x29c]
mov dword [eax], ecx
mov dword [ebp - 0x29c], eax
jmp 0x4301c9
mov dword [ebp - 0x29c], ebx
call fcn.004322d0
mov dword [ebp - 0x284], eax
mov byte [eax + 0x2d], 1
mov eax, dword [ebp - 0x284]
mov dword [eax + 4], eax
mov eax, dword [ebp - 0x284]
mov dword [eax], eax
mov eax, dword [ebp - 0x284]
push 5
mov dword [eax + 8], eax
push str.sethp
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x280], ebx
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
lea edx, [ebp - 0x40]
push edx
lea edi, [ebp - 0x29c]
call fcn.004317e0
mov byte [eax], bl
cmp dword [ebp - 0x28], esi
jb 0x430236
mov eax, dword [ebp - 0x3c]
push eax
call fcn.004c097a
add esp, 4
push 5
push str.fixmv
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
lea ecx, [ebp - 0x40]
push ecx
lea edi, [ebp - 0x29c]
call fcn.004317e0
mov byte [eax], bl
cmp dword [ebp - 0x28], esi
jb 0x430274
mov edx, dword [ebp - 0x3c]
push edx
call fcn.004c097a
add esp, 4
push 6
push str.kittip
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
lea eax, [ebp - 0x40]
push eax
lea edi, [ebp - 0x29c]
call fcn.004317e0
mov byte [eax], bl
cmp dword [ebp - 0x28], esi
jb 0x4302b2
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.004c097a
add esp, 4
push 5
push str.fixsc
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
lea edx, [ebp - 0x40]
push edx
lea edi, [ebp - 0x29c]
call fcn.004317e0
mov byte [eax], bl
cmp dword [ebp - 0x28], esi
jb 0x4302f0
mov eax, dword [ebp - 0x3c]
push eax
call fcn.004c097a
add esp, 4
push 6
push str.instex
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
lea ecx, [ebp - 0x40]
push ecx
lea edi, [ebp - 0x29c]
call fcn.004317e0
mov byte [eax], bl
cmp dword [ebp - 0x28], esi
jb 0x43032e
mov edx, dword [ebp - 0x3c]
push edx
call fcn.004c097a
add esp, 4
push 6
push str.scexit
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
lea eax, [ebp - 0x40]
push eax
lea edi, [ebp - 0x29c]
call fcn.004317e0
mov byte [eax], bl
cmp dword [ebp - 0x28], esi
jb 0x43036c
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.004c097a
add esp, 4
push ebx
push 0x51b95b
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x64], ebx
mov byte [ebp - 0x74], bl
call fcn.0040b8b0
mov esi, dword [ebp - 0x2ac]
mov eax, dword [ebp - 0x2a8]
cmp esi, eax
jbe 0x4303a2
call fcn.004c237c
mov eax, dword [ebp - 0x2a8]
mov edi, dword [ebp - 0x2b8]
mov dword [ebp - 0x27c], edi
mov dword [ebp - 0x278], esi
mov esi, eax
cmp dword [ebp - 0x2ac], eax
jbe 0x4303c3
call fcn.004c237c
cmp edi, ebx
je 0x4303cf
cmp edi, dword [ebp - 0x2b8]
je 0x4303d4
call fcn.004c237c
cmp dword [ebp - 0x278], esi
je 0x4307c9
push ebx
mov esi, 0xf
push 0x51b95b
lea ecx, [ebp - 0x24]
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x10], ebx
mov byte [ebp - 0x20], bl
call fcn.0040b8b0
push ebx
push 0x51b95b
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
call fcn.0040b8b0
cmp edi, ebx
jne 0x4304c1
call fcn.004c237c
xor eax, eax
mov edx, dword [ebp - 0x278]
cmp edx, dword [eax + 0x10]
jb 0x430432
call fcn.004c237c
mov edi, dword [ebp - 0x278]
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x40]
call fcn.00431030
mov esi, dword [ebp - 0x10]
mov eax, esi
cmp esi, 5
jb 0x430453
mov eax, 5
cmp dword [ebp - 0xc], 0x10
mov edx, dword [ebp - 0x20]
jae 0x43045f
lea edx, [ebp - 0x20]
mov ecx, str.sethp
call fcn.0040f630
cmp eax, ebx
jne 0x4304cb
cmp esi, 5
jb 0x4304d0
xor eax, eax
cmp esi, 5
setne al
cmp eax, ebx
jne 0x4304cb
cmp dword [ebp - 0x2c], ebx
je 0x4304cb
lea ecx, [ebp - 0x24]
push ecx
lea edi, [ebp - 0x29c]
call fcn.004317e0
cmp byte [eax], bl
jne 0x4304c8
lea esi, [ebp - 0x114]
call fcn.0044c3f0
lea ecx, [ebp - 0x40]
mov edx, esi
call fcn.0044c460
lea edx, [ebp - 0x24]
push edx
call fcn.004317e0
mov byte [eax], 1
call fcn.00430a80
jmp 0x430758
mov eax, dword [edi]
jmp 0x430422
mov esi, dword [ebp - 0x10]
cmp esi, 5
jae 0x4304d4
mov eax, esi
jmp 0x4304d9
mov eax, 5
cmp dword [ebp - 0xc], 0x10
mov edx, dword [ebp - 0x20]
jae 0x4304e5
lea edx, [ebp - 0x20]
mov ecx, str.fixmv
call fcn.0040f630
cmp eax, ebx
jne 0x43054e
cmp esi, 5
jb 0x43054e
xor eax, eax
cmp esi, 5
setne al
cmp eax, ebx
jne 0x43054e
cmp dword [ebp - 0x2c], ebx
je 0x43054e
lea eax, [ebp - 0x24]
push eax
lea edi, [ebp - 0x29c]
call fcn.004317e0
cmp byte [eax], bl
jne 0x43054b
lea eax, [ebp - 0x124]
call fcn.004395e0
lea ecx, [ebp - 0x40]
call fcn.004396d0
lea ecx, [ebp - 0x24]
push ecx
call fcn.004317e0
lea esi, [ebp - 0x124]
mov byte [eax], 1
call fcn.00439630
jmp 0x430758
mov esi, dword [ebp - 0x10]
mov eax, esi
cmp esi, 6
jb 0x43055a
mov eax, 6
cmp dword [ebp - 0xc], 0x10
mov edx, dword [ebp - 0x20]
jae 0x430566
lea edx, [ebp - 0x20]
mov ecx, str.kittip
call fcn.0040f630
cmp eax, ebx
jne 0x4305e3
cmp esi, 6
jb 0x4305e3
xor eax, eax
cmp esi, 6
setne al
cmp eax, ebx
jne 0x4305e3
lea edx, [ebp - 0x24]
push edx
lea edi, [ebp - 0x29c]
call fcn.004317e0
cmp byte [eax], bl
jne 0x4305e0
mov eax, dword [ebp - 0x27c]
cmp eax, ebx
jne 0x4305dc
call fcn.004c237c
xor eax, eax
mov esi, dword [ebp - 0x278]
cmp esi, dword [eax + 0x10]
jb 0x4305b9
call fcn.004c237c
push 0xffffffffffffffff
push ebx
push esi
lea ecx, [ebp - 0x78]
call fcn.00410c40
lea eax, [ebp - 0x24]
push eax
lea edi, [ebp - 0x29c]
call fcn.004317e0
mov byte [eax], 1
jmp 0x430758
mov eax, dword [eax]
jmp 0x4305a9
mov esi, dword [ebp - 0x10]
mov eax, esi
cmp esi, 5
jb 0x4305ef
mov eax, 5
cmp dword [ebp - 0xc], 0x10
mov edx, dword [ebp - 0x20]
jae 0x4305fb
lea edx, [ebp - 0x20]
mov ecx, str.fixsc
call fcn.0040f630
cmp eax, ebx
jne 0x43065b
cmp esi, 5
jb 0x43065b
xor eax, eax
cmp esi, 5
setne al
cmp eax, ebx
jne 0x43065b
lea ecx, [ebp - 0x24]
push ecx
lea edi, [ebp - 0x29c]
call fcn.004317e0
cmp byte [eax], bl
jne 0x430658
lea esi, [ebp - 0x274]
call fcn.0043a8c0
lea edx, [ebp - 0x40]
mov eax, esi
call fcn.0043ab80
lea edx, [ebp - 0x24]
push edx
call fcn.004317e0
mov byte [eax], 1
call fcn.0043a9c0
jmp 0x430758
mov esi, dword [ebp - 0x10]
mov eax, esi
cmp esi, 6
jb 0x430667
mov eax, 6
cmp dword [ebp - 0xc], 0x10
mov edx, dword [ebp - 0x20]
jae 0x430673
lea edx, [ebp - 0x20]
mov ecx, str.instex
call fcn.0040f630
cmp eax, ebx
jne 0x4306d3
cmp esi, 6
jb 0x4306d8
xor eax, eax
cmp esi, 6
setne al
cmp eax, ebx
jne 0x4306d3
lea eax, [ebp - 0x24]
push eax
lea edi, [ebp - 0x29c]
call fcn.004317e0
cmp byte [eax], bl
jne 0x4306d0
lea esi, [ebp - 0xfc]
call fcn.0043f7a0
lea ecx, [ebp - 0x40]
mov eax, esi
call fcn.0043f910
lea ecx, [ebp - 0x24]
push ecx
call fcn.004317e0
mov byte [eax], 1
call fcn.0043f880
jmp 0x430758
mov esi, dword [ebp - 0x10]
cmp esi, 6
jae 0x4306dc
mov eax, esi
jmp 0x4306e1
mov eax, 6
cmp dword [ebp - 0xc], 0x10
mov edx, dword [ebp - 0x20]
jae 0x4306ed
lea edx, [ebp - 0x20]
mov ecx, str.scexit
call fcn.0040f630
cmp eax, ebx
jne 0x430758
cmp esi, 6
jb 0x430758
xor eax, eax
cmp esi, 6
setne al
cmp eax, ebx
jne 0x430758
cmp dword [ebp - 0x2c], ebx
je 0x430758
lea edx, [ebp - 0x24]
push edx
lea edi, [ebp - 0x29c]
call fcn.004317e0
cmp byte [eax], bl
jne 0x430758
mov esi, dword [ebp - 0x2a0]
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x40]
push eax
lea ecx, [esi + 0xc]
call fcn.00410c40
lea ecx, [ebp - 0x24]
push ecx
call fcn.004317e0
push ebx
push ebx
push esi
push 0x4311a0
push ebx
push ebx
mov byte [eax], 1
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 8], eax
mov esi, 0x10
cmp dword [ebp - 0x28], esi
jb 0x43076e
mov edx, dword [ebp - 0x3c]
push edx
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x28], 0xf
mov dword [ebp - 0x2c], ebx
mov byte [ebp - 0x3c], bl
cmp dword [ebp - 0xc], esi
jb 0x43078c
mov eax, dword [ebp - 0x20]
push eax
call fcn.004c097a
add esp, 4
mov eax, dword [ebp - 0x27c]
cmp eax, ebx
jne 0x4307c5
call fcn.004c237c
xor eax, eax
mov ecx, dword [ebp - 0x278]
cmp ecx, dword [eax + 0x10]
jb 0x4307ad
call fcn.004c237c
add dword [ebp - 0x278], 0x1c
mov eax, dword [ebp - 0x2a8]
mov edi, dword [ebp - 0x27c]
jmp 0x4303b4
mov eax, dword [eax]
jmp 0x43079d
cmp dword [ebp - 0x64], ebx
jne 0x4308d4
push 4
call fcn.004c0fe9
add esp, 4
cmp eax, ebx
je 0x4307ea
lea edx, [ebp - 0x20]
mov dword [eax], edx
mov dword [ebp - 0x20], eax
jmp 0x4307ed
mov dword [ebp - 0x20], ebx
lea eax, [ebp - 0x27c]
lea edi, [ebp - 0x5c]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x27c], str._referer
mov dword [ebp - 0x278], str.value
call fcn.0042bb90
mov eax, edi
push eax
lea ebx, [ebp - 0x20]
call fcn.00412280
mov ebx, 8
cmp dword [ebp - 0x28], ebx
jb 0x430839
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.004c097a
add esp, 4
xor edi, edi
xor edx, edx
mov esi, 7
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], edi
mov word [ebp - 0x3c], dx
cmp dword [ebp - 0x44], ebx
jb 0x43085d
mov eax, dword [ebp - 0x58]
push eax
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x28], esi
xor ecx, ecx
push 0x2f
mov eax, str.http:__dd.browser.360.cn_static_a_1453.4341.gif
lea esi, [ebp - 0x40]
mov dword [ebp - 0x2c], edi
mov word [ebp - 0x3c], cx
call fcn.004017f0
mov edx, esi
push edx
lea ecx, [ebp - 0x20]
call fcn.0040a0e0
add esp, 4
cmp dword [ebp - 0x28], ebx
jb 0x430897
mov eax, dword [ebp - 0x3c]
push eax
call fcn.004c097a
add esp, 4
mov eax, dword [ebp - 0x14]
cmp eax, edi
je 0x4308ba
mov ecx, dword [ebp - 0x2a0]
mov edx, dword [ebp - 0x10]
push ecx
push edx
call fcn.00412ae0
mov eax, dword [ebp - 0x14]
push eax
call fcn.004c097a
add esp, 0xc
mov ecx, dword [ebp - 0x20]
push ecx
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], edi
mov dword [ebp - 0xc], edi
call fcn.004c097a
add esp, 4
jmp 0x4309ae
call fcn.00451c20
test al, al
je 0x4309b0
mov ecx, 1
call fcn.00458ee0
cmp eax, ebx
je 0x4308f9
lea edx, [ebp - 0x20]
mov dword [eax], edx
mov dword [ebp - 0x20], eax
jmp 0x4308fc
mov dword [ebp - 0x20], ebx
lea eax, [ebp - 0x27c]
lea edi, [ebp - 0x5c]
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 0x27c], str._referer
mov dword [ebp - 0x278], str.instm
call fcn.0042bb90
mov eax, edi
push eax
lea ebx, [ebp - 0x20]
call fcn.00412280
mov ebx, 8
cmp dword [ebp - 0x28], ebx
jb 0x430948
mov ecx, dword [ebp - 0x3c]
push ecx
call fcn.004c097a
add esp, 4
xor edi, edi
xor edx, edx
mov esi, 7
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x2c], edi
mov word [ebp - 0x3c], dx
cmp dword [ebp - 0x44], ebx
jb 0x43096c
mov eax, dword [ebp - 0x58]
push eax
call fcn.004c097a
add esp, 4
mov dword [ebp - 0x28], esi
xor ecx, ecx
push 0x2f
mov eax, str.http:__dd.browser.360.cn_static_a_1453.4341.gif
lea esi, [ebp - 0x40]
mov dword [ebp - 0x2c], edi
mov word [ebp - 0x3c], cx
call fcn.004017f0
mov edx, esi
push edx
lea ecx, [ebp - 0x20]
call fcn.0040a0e0
add esp, 4
cmp dword [ebp - 0x28], ebx
jb 0x4309a6
mov eax, dword [ebp - 0x3c]
push eax
call fcn.004c097a
add esp, 4
lea esi, [ebp - 0x20]
call fcn.004341b0
xor ebx, ebx
cmp dword [ebp - 0x64], ebx
je 0x4309cb
call fcn.00451c20
test al, al
jne 0x4309cb
call fcn.004727c0
lea ecx, [ebp - 0x78]
call fcn.004727f0
cmp dword [ebp - 0x60], 0x10
jb 0x4309dd
mov ecx, dword [ebp - 0x74]
push ecx
call fcn.004c097a
add esp, 4
lea esi, [ebp - 0x29c]
mov dword [ebp - 0x60], 0xf
mov dword [ebp - 0x64], ebx
mov byte [ebp - 0x74], bl
call fcn.00430a30
lea esi, [ebp - 0x2b8]
call fcn.00425480
cmp dword [ebp - 0x7c], 0x10
jb 0x430a15
mov edx, dword [ebp - 0x90]
push edx
call fcn.004c097a
add esp, 4
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.004c0985
mov esp, ebp
pop ebp
ret 4