Function at 0x1000fc21
Capabilities:
Create thread

Disassembly:
push 0x68c
mov eax, 0x1004448e
call fcn.1002eac6
mov dword [ebp - 0x68c], ecx
mov esi, 0x10047689
push esi
lea ecx, [ebp - 0x518]
call fcn.10002b9d
mov ecx, dword [ebp - 0x68c]
xor ebx, ebx
push ebx
lea eax, [ebp - 0x518]
push eax
mov dword [ebp - 4], ebx
call fcn.1000f346
test al, al
jne 0x1000fc7b
push ebx
push 1
lea ecx, [ebp - 0x518]
call fcn.100012ee
xor al, al
call fcn.1002eb49
ret 0xc
lea ecx, [ebp - 0x674]
call fcn.10027b2b
push esi
lea ecx, [ebp - 0x48c]
mov byte [ebp - 4], 1
call fcn.10002b9d
mov edi, 0x100481d4
push edi
mov byte [ebp - 4], 2
call fcn.1002dd10
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48c]
call fcn.100016a1
mov edi, str.1.1.4.0
push edi
call fcn.1002dd10
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48c]
call fcn.1000156f
push dword [0x1009c530]
lea eax, [ebp - 0x1c]
push 0x10047d14
push eax
call fcn.1002ff5d
add esp, 0xc
lea eax, [ebp - 0x5c0]
push eax
lea ecx, [ebp - 0x674]
call fcn.100283a6
mov dword [ebp - 0x678], eax
xor edi, edi
inc edi
push edi
lea eax, [ebp - 0x64c]
push eax
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], 3
call fcn.100281b3
mov dword [ebp - 0x690], eax
lea eax, [ebp - 0x668]
push eax
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], 4
call fcn.1002800b
mov dword [ebp - 0x698], eax
lea eax, [ebp - 0x518]
push eax
lea eax, [ebp - 0x630]
push str.r1
push eax
mov byte [ebp - 4], 5
call fcn.1000e414
push str.tm
push eax
lea eax, [ebp - 0x614]
push eax
mov byte [ebp - 4], 6
call fcn.10003050
push dword [ebp - 0x698]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0x5dc]
push eax
call fcn.10009078
push str.os
push eax
lea eax, [ebp - 0x5a4]
mov byte [ebp - 4], 8
push eax
call fcn.10003050
push dword [ebp - 0x690]
mov byte [ebp - 4], 9
push eax
lea eax, [ebp - 0x588]
push eax
call fcn.10009078
push str.uid
push eax
lea eax, [ebp - 0x56c]
push eax
mov byte [ebp - 4], 0xa
call fcn.10003050
add esp, 0x48
push dword [ebp - 0x678]
mov byte [ebp - 4], 0xb
push eax
lea eax, [ebp - 0x550]
push eax
call fcn.10009078
push str.cht
push eax
lea eax, [ebp - 0x5f8]
push eax
mov byte [ebp - 4], 0xc
call fcn.10003050
lea ecx, [ebp - 0x1c]
push ecx
push eax
lea eax, [ebp - 0x534]
push eax
mov byte [ebp - 4], 0xd
call fcn.10003050
add esp, 0x24
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x48c]
mov byte [ebp - 4], 0xe
call fcn.100014d5
push ebx
push edi
lea ecx, [ebp - 0x534]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x5f8]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x550]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x56c]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x588]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x5a4]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x5dc]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x614]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x630]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x668]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x64c]
call fcn.100012ee
push ebx
push edi
lea ecx, [ebp - 0x5c0]
call fcn.100012ee
mov dword [ebp - 0x688], ebx
mov dword [ebp - 0x684], ebx
mov dword [ebp - 0x680], ebx
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0xf
call fcn.1000ad27
push 0x3ff
lea eax, [ebp - 0x41b]
push ebx
push eax
mov byte [ebp - 4], 0x10
mov byte [ebp - 0x41c], bl
call fcn.1002eb70
add esp, 0xc
push esi
lea ecx, [ebp - 0x454]
call fcn.10002b9d
push 0x2b
lea eax, [ebp - 0x41c]
push 0x10047f74
push eax
mov byte [ebp - 4], 0x11
call fcn.1002dda0
add esp, 0xc
mov edi, 0x100480ac
push edi
push 0x2b
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x670]
call fcn.1000ad37
lea eax, [ebp - 0x41c]
push eax
call fcn.1002dd10
pop ecx
push eax
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100016a1
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100014d5
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
push 0x26
lea eax, [ebp - 0x41c]
push 0x10047fc4
push eax
call fcn.1002dda0
add esp, 0xc
push edi
push 0x26
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x670]
call fcn.1000ad37
lea eax, [ebp - 0x41c]
push eax
call fcn.1002dd10
pop ecx
push eax
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100016a1
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100014d5
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
push 0x29
lea eax, [ebp - 0x41c]
push 0x1004800c
push eax
call fcn.1002dda0
add esp, 0xc
push edi
push 0x29
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x670]
call fcn.1000ad37
lea eax, [ebp - 0x41c]
push eax
call fcn.1002dd10
pop ecx
push eax
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100016a1
push 0xffffffffffffffff
push ebx
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100014d5
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
push 0x29
lea eax, [ebp - 0x41c]
push 0x1004805c
push eax
call fcn.1002dda0
add esp, 0xc
push edi
push 0x29
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x670]
call fcn.1000ad37
lea eax, [ebp - 0x41c]
push eax
call fcn.1002dd10
pop ecx
push eax
lea eax, [ebp - 0x41c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100016a1
or edi, 0xffffffff
push edi
push ebx
lea eax, [ebp - 0x48c]
push eax
lea ecx, [ebp - 0x454]
call fcn.100014d5
lea eax, [ebp - 0x454]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
push esi
lea ecx, [ebp - 0x470]
call fcn.10002b9d
lea eax, [ebp - 0x470]
push eax
sub esp, 0x1c
mov eax, esp
lea ecx, [ebp - 0x688]
mov dword [ebp - 0x678], esp
push ecx
push eax
mov byte [ebp - 4], 0x12
call fcn.1000d268
pop ecx
pop ecx
call fcn.1000ce24
add esp, 0x20
cmp al, bl
jne 0x1001016f
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x470]
call fcn.100012ee
push ebx
push esi
lea ecx, [ebp - 0x454]
call fcn.100012ee
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0xf
call fcn.1000ad30
lea ecx, [ebp - 0x688]
call fcn.100034b0
push ebx
push esi
lea ecx, [ebp - 0x48c]
call fcn.100012ee
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], bl
call fcn.10027b34
push ebx
push esi
jmp 0x1000fc66
push dword [ebp - 0x684]
lea eax, [ebp - 0x678]
push dword [ebp - 0x688]
lea ecx, [ebp - 0x688]
push eax
call fcn.10006441
push esi
lea ecx, [ebp - 0x438]
call fcn.10002b9d
push esi
lea ecx, [ebp - 0x4fc]
mov byte [ebp - 4], 0x13
call fcn.10002b9d
push esi
lea ecx, [ebp - 0x4e0]
mov byte [ebp - 4], 0x14
call fcn.10002b9d
push esi
lea ecx, [ebp - 0x4a8]
mov byte [ebp - 4], 0x15
call fcn.10002b9d
mov esi, str.http:
push esi
mov byte [ebp - 4], 0x16
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x438]
call fcn.1000156f
mov esi, str.__343.
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x438]
call fcn.1000156f
push edi
push ebx
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4fc]
call fcn.100014d5
push edi
push ebx
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4e0]
call fcn.100014d5
push edi
push ebx
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x4a8]
call fcn.100014d5
mov esi, 0x10048270
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x438]
call fcn.1000156f
mov esi, 0x1004826c
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4fc]
call fcn.1000156f
mov esi, 0x10048268
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4e0]
call fcn.1000156f
mov esi, 0x10048264
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4a8]
call fcn.1000156f
mov esi, str.lans
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x438]
call fcn.1000156f
mov esi, 0x10048258
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4fc]
call fcn.1000156f
mov esi, 0x10048254
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4e0]
call fcn.1000156f
mov esi, 0x10048250
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4a8]
call fcn.1000156f
mov esi, str..com_
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x438]
call fcn.1000156f
mov edi, str..cn_
push edi
call fcn.1002dd10
pop ecx
push eax
push edi
lea ecx, [ebp - 0x4fc]
call fcn.1000156f
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4e0]
call fcn.1000156f
push esi
call fcn.1002dd10
pop ecx
push eax
push esi
lea ecx, [ebp - 0x4a8]
call fcn.1000156f
lea eax, [ebp - 0x438]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
lea eax, [ebp - 0x4fc]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
lea eax, [ebp - 0x4e0]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
lea eax, [ebp - 0x4a8]
push eax
lea ecx, [ebp - 0x688]
call fcn.10003df5
lea eax, [ebp - 0x688]
push eax
lea eax, [ebp - 0x4c4]
push eax
call fcn.1000d268
pop ecx
pop ecx
mov eax, dword [ebp - 0x438]
push 0x10
pop esi
mov byte [ebp - 4], 0x17
cmp dword [ebp - 0x424], esi
jae 0x100103d5
lea eax, [ebp - 0x438]
push dword [ebp - 0x428]
lea ecx, [ebp - 0x4c4]
push eax
push dword [ebp - 0x4b4]
push ebx
call fcn.100011bc
test eax, eax
je 0x100104b3
mov eax, dword [ebp - 0x438]
cmp dword [ebp - 0x424], esi
jae 0x1001040a
lea eax, [ebp - 0x438]
push dword [ebp - 0x428]
lea ecx, [ebp - 0x470]
push ebx
push eax
call fcn.100026c7
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x4c4]
push ecx
push 0x17
push eax
lea ecx, [ebp - 0x470]
call fcn.1000df92
mov eax, dword [ebp - 0x438]
cmp dword [ebp - 0x424], esi
jae 0x10010449
lea eax, [ebp - 0x438]
push dword [ebp - 0x428]
lea ecx, [ebp - 0x470]
push ebx
push eax
call fcn.100026c7
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x4c4]
push ecx
push 0x17
push eax
lea ecx, [ebp - 0x470]
call fcn.1000df92
mov eax, dword [ebp - 0x438]
cmp dword [ebp - 0x424], esi
jae 0x10010488
lea eax, [ebp - 0x438]
push dword [ebp - 0x428]
lea ecx, [ebp - 0x470]
push ebx
push eax
call fcn.100026c7
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x4c4]
push ecx
push 0x17
push eax
lea ecx, [ebp - 0x470]
call fcn.1000df92
sub esp, 0x1c
lea eax, [ebp - 0x470]
mov ecx, esp
mov dword [ebp - 0x678], esp
push eax
call fcn.10001716
mov ecx, dword [ebp - 0x68c]
call fcn.1000de3b
cmp al, bl
jne 0x1001058e
mov byte [ebp - 0x669], bl
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x4c4]
call fcn.100012ee
push ebx
push esi
lea ecx, [ebp - 0x4a8]
call fcn.100012ee
push ebx
push esi
lea ecx, [ebp - 0x4e0]
call fcn.100012ee
push ebx
push esi
lea ecx, [ebp - 0x4fc]
call fcn.100012ee
push ebx
push esi
lea ecx, [ebp - 0x438]
call fcn.100012ee
push ebx
push esi
lea ecx, [ebp - 0x470]
call fcn.100012ee
push ebx
push esi
lea ecx, [ebp - 0x454]
call fcn.100012ee
lea ecx, [ebp - 0x670]
mov byte [ebp - 4], 0xf
call fcn.1000ad30
lea ecx, [ebp - 0x688]
call fcn.100034b0
push ebx
push esi
lea ecx, [ebp - 0x48c]
call fcn.100012ee
lea ecx, [ebp - 0x674]
mov byte [ebp - 4], bl
call fcn.10027b34
push ebx
push esi
lea ecx, [ebp - 0x518]
call fcn.100012ee
mov al, byte [ebp - 0x669]
jmp 0x1000fc73
lea eax, [ebp - 0x694]
push eax
push ebx
push dword [ebp - 0x68c]
mov dword [ebp - 0x694], ebx
push 0x1000f30c
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov byte [ebp - 0x669], 1
jmp 0x100104e3