Function at 0x438ae0
Capabilities:
Access peb ldr_data

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46864b
mov eax, dword fs:[0]
push eax
sub esp, 0x324
mov eax, dword [0x48700c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
push 0x54
call fcn.00461273
mov ebx, eax
lea eax, [ebx + 4]
mov dword [ebp - 0x198], ebx
mov dword [eax], 1
push 0x48
mov dword [ebp - 0x194], eax
lea esi, [ebx + 0xc]
lea eax, [ebx + 8]
mov dword [ebx], vtable.std::_Ref_count_obj_struct_net_client::capdump::log::ConfigRequest_.0
mov dword [eax], 1
push 0
push esi
mov dword [ebp - 0x19c], eax
call sub.VCRUNTIME140.dll_memset
mov dword [esi + 0x10], 0
add esp, 0x10
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0xf
mov byte [esi + 0x18], 0
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0xf
mov byte [esi + 0x30], 0
mov dword [ebp - 0x1a8], esi
mov dword [ebp - 0x1a4], ebx
lea ecx, [ebp - 0x180]
mov dword [ebp - 4], 0
call fcn.00435210
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
call fcn.00438a10
push eax
lea ecx, [ebp - 0xb4]
call fcn.00414e80
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x438bf4
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x438bea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x438bea
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00461242
add esp, 8
sub esp, 8
lea ecx, [ebx + 4]
mov eax, esp
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [ecx]
mov dword [eax], esi
mov ecx, edi
mov dword [eax + 4], ebx
lea eax, [ebp - 0x40]
push eax
call fcn.004374c0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x40]
cmp dword [ebp - 0x2c], 0x10
lea ecx, [ebp - 0xcc]
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
push eax
call fcn.00403560
lea eax, [edi + 0x24]
lea ecx, [ebp - 0x180]
cmp ecx, eax
je 0x438c60
cmp dword [eax + 0x14], 0x10
mov ecx, eax
jb 0x438c51
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x180]
call fcn.00403560
push 0
push 0x46ce34
lea ecx, [ebp - 0x28]
mov dword [ebp - 0xd0], 1
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
call fcn.00403560
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
push 0x124
mov byte [ebp - 4], 4
call fcn.00461273
mov ebx, eax
add esp, 4
lea esi, [ebx + 0xc]
mov dword [ebx + 4], 1
lea eax, [ebx + 4]
mov dword [ebp - 0x184], ebx
mov dword [ebp - 0x18c], eax
mov dword [ebx + 8], 1
mov dword [ebx], vtable.std::_Ref_count_obj_struct_net_client::capdump::log::ConfigResponse_.0
mov byte [esi], 1
mov dword [esi + 0x14], 0
mov dword [esi + 0x18], 0xf
mov byte [esi + 4], 0
mov dword [esi + 0x2c], 0
mov dword [esi + 0x30], 0xf
mov byte [esi + 0x1c], 0
mov dword [esi + 0x34], 0
mov dword [esi + 0x38], 0
mov dword [esi + 0x3c], 0
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0
mov dword [esi + 0x58], 0
mov dword [esi + 0x5c], 0xf
mov byte [esi + 0x48], 0
mov dword [esi + 0x60], 0
mov dword [esi + 0x64], 0
mov dword [esi + 0x68], 0
mov dword [esi + 0x6c], 0
mov dword [esi + 0x80], 0
mov dword [esi + 0x84], 0xf
mov byte [esi + 0x70], 0
mov dword [esi + 0x98], 0
mov dword [esi + 0x9c], 0xf
mov byte [esi + 0x88], 0
mov dword [esi + 0xb0], 0
mov dword [esi + 0xb4], 0xf
mov byte [esi + 0xa0], 0
mov dword [esi + 0xc8], 0
mov dword [esi + 0xcc], 0xf
mov byte [esi + 0xb8], 0
mov dword [esi + 0xe0], 0
mov dword [esi + 0xe4], 0xf
mov byte [esi + 0xd0], 0
mov dword [esi + 0xf8], 0
mov dword [esi + 0xfc], 0xf
mov byte [esi + 0xe8], 0
mov dword [esi + 0x110], 0
mov dword [esi + 0x114], 0xf
mov byte [esi + 0x100], 0
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x1ac], ebx
mov byte [ebp - 4], 5
lea eax, [ebp - 0x58]
push eax
lea eax, [ebp - 0x188]
push eax
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp - 0x180]
call fcn.0044b2c0
add esp, 0xc
sub esp, 8
test eax, eax
jne 0x438ed0
mov bl, byte [0x48b173]
lea ecx, [ebp - 0x270]
call fcn.00402c10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x270]
mov eax, dword [ebp - 0x270]
push 0
push 0
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov byte [ebp - 0x1bf], bl
mov dword [ebp - 0x1b8], 6
mov byte [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 7
push str._LOG_Sending_Config_failed__error_code_is_:
push eax
call fcn.00403720
add esp, 8
lea ecx, [ebp - 0x260]
push dword [ebp - 0x188]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
lea ecx, [ebp - 0x270]
jmp 0x4390ae
mov eax, esp
lea ecx, [ebx + 4]
mov dword [eax], 0
mov dword [eax + 4], 0
lock inc dword [ecx]
mov dword [eax], esi
mov dword [eax + 4], ebx
lea eax, [ebp - 0x28]
push eax
call fcn.00437720
mov bl, byte [0x48b173]
sub esp, 8
test al, al
je 0x439045
lea ecx, [ebp - 0x270]
call fcn.00402c10
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x270]
mov eax, dword [ebp - 0x270]
push 0
push 0
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov byte [ebp - 0x1bf], bl
mov dword [ebp - 0x1b8], 8
mov byte [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0
lea eax, [ebp - 0x260]
mov byte [ebp - 4], 9
push str._LOG_Analysis_Config_Response_success__Upload_switch_is_:
push eax
call fcn.00403720
mov al, byte [esi]
lea ecx, [ebp - 0x260]
add esp, 8
mov byte [ebp - 0x190], al
push dword [ebp - 0x190]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___bool_]
lea ecx, [ebp - 0x270]
mov byte [ebp - 4], 5
call fcn.0042c650
cmp dword [esi + 0x44], 0
jne 0x4390b7
mov ecx, dword [ebp - 0x18c]
lock inc dword [ecx]
mov byte [ebp - 4], 0xa
or eax, 0xffffffff
lock xadd dword [ecx], eax
mov ebx, dword [ebp - 0x184]
jne 0x438fcf
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
or eax, 0xffffffff
lea ecx, [ebx + 8]
lock xadd dword [ecx], eax
jne 0x438fcf
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 5
cmp byte [esi], 0
je 0x438fdf
mov ecx, edi
call fcn.0043c0b0
or esi, 0xffffffff
mov byte [ebp - 4], 0xd
mov eax, esi
lea ecx, [ebx + 4]
lock xadd dword [ecx], eax
jne 0x439009
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax]
mov eax, esi
lea ecx, [ebx + 8]
lock xadd dword [ecx], eax
jne 0x439009
mov eax, dword [ebx]
mov ecx, ebx
call dword [eax + 4]
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x4390e6
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4390dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4390dc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
lea ecx, [ebp - 0x330]
call fcn.00402c10
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x330]
mov eax, dword [ebp - 0x330]
push 0
push 0
mov eax, dword [eax + 4]
add ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::clear_int__bool_]
mov byte [ebp - 0x27f], bl
mov dword [ebp - 0x278], 6
mov byte [ebp - 0x280], 0
mov dword [ebp - 0x27c], 0
lea eax, [ebp - 0x320]
mov byte [ebp - 4], 0xc
push str._LOG_Analysis_Config_Response_failed
push eax
call fcn.00403720
add esp, 8
lea ecx, [ebp - 0x330]
mov byte [ebp - 4], 5
call fcn.0042c650
push dword [edi + 0xc]
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [edi + 8]
mov ebx, dword [ebp - 0x184]
lea eax, [ecx - 1]
mov dword [edi + 8], eax
test ecx, ecx
jle 0x438fdf
jmp 0x438e22
push edx
push ecx
call fcn.00461242
add esp, 8
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x439120
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x439116
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x439116
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00461242
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x43916c
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x439162
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x439162
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00461242
add esp, 8
lea ecx, [ebp - 0x180]
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
call fcn.00435390
mov ecx, dword [ebp - 0x194]
mov eax, esi
mov dword [ebp - 4], 0xe
lock xadd dword [ecx], eax
jne 0x4391be
mov edi, dword [ebp - 0x198]
mov ecx, edi
mov eax, dword [edi]
call dword [eax]
mov eax, dword [ebp - 0x19c]
lock xadd dword [eax], esi
dec esi
jne 0x4391be
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00461231
mov esp, ebp
pop ebp
ret