Function at 0x422b34
Capabilities:
Create thread
Terminate process

Disassembly:
push 0x1e4
mov eax, 0x47c6e5
call fcn.0046215a
lea eax, [ebp - 0x190]
push eax
mov dword [ebp - 0xe8], 0x4859a4
mov dword [ebp - 0xe4], str.news.163.com
mov dword [ebp - 0xe0], str.www.taobao.com
mov dword [ebp - 0xdc], str.www.tencent.com
mov dword [ebp - 0xd8], str.www.sogou.com
mov dword [ebp - 0xd4], str.weibo.com
call fcn.00421fee
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x94], ebx
call fcn.0046da33
push 3
pop esi
cdq
mov ecx, esi
idiv ecx
push 4
pop edi
add edx, edi
test edx, edx
jle 0x422c21
lea eax, [ebp - 0x188]
push 0x485a00
push eax
call fcn.00419b47
pop ecx
pop ecx
mov dword [ebp - 0xcc], ebx
call fcn.0046da33
cdq
mov ecx, esi
idiv ecx
add edx, edi
test edx, edx
jle 0x422c07
call fcn.0046da33
push 0x64
cdq
pop ecx
idiv ecx
lea eax, [ebp - 0x188]
push edx
push eax
call fcn.004162fa
inc dword [ebp - 0xcc]
call fcn.0046da33
cdq
mov ecx, esi
idiv ecx
add edx, edi
cmp dword [ebp - 0xcc], edx
jl 0x422bd5
inc dword [ebp - 0x94]
call fcn.0046da33
cdq
mov ecx, esi
idiv ecx
add edx, edi
cmp dword [ebp - 0x94], edx
jl 0x422bac
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x190]
call fcn.004220a1
cmp dword [eax + 0x18], 0x10
jb 0x422c3e
mov eax, dword [eax + 4]
jmp 0x422c41
add eax, 4
push 0x80
push eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push ebx
push 1
lea ecx, [ebp - 0x104]
call fcn.004030c2
push edi
call fcn.00460dab
pop ecx
cmp eax, ebx
je 0x422c77
lea ecx, [ebp - 0xc8]
mov dword [eax], ecx
jmp 0x422c79
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov byte [ebp - 4], 2
xor edi, edi
lea esi, [ebp - 0x1e8]
jmp 0x422ca1
xor ebx, ebx
mov ecx, dword [ebp + edi*4 - 0xe8]
push ebx
push ebx
lea eax, [esi - 8]
push eax
push 0x4230ee
mov dword [eax], ecx
push ebx
lea ecx, [ebp - 0x90]
push ebx
mov dword [esi - 4], ecx
mov dword [esi], ebx
mov dword [esi + 4], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0xbc], ebx
jne 0x422cdd
xor edx, edx
jmp 0x422cec
mov edx, dword [ebp - 0xb4]
sub edx, dword [ebp - 0xbc]
sar edx, 2
mov ecx, dword [ebp - 0xb8]
mov ebx, ecx
sub ebx, dword [ebp - 0xbc]
sar ebx, 2
cmp ebx, edx
jae 0x422d0e
mov dword [ecx], eax
lea eax, [ecx + 4]
mov dword [ebp - 0xb8], eax
jmp 0x422d44
mov ebx, ecx
cmp dword [ebp - 0xbc], ecx
jbe 0x422d1d
call fcn.004613e3
mov eax, dword [ebp - 0xc8]
push ebx
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xc8]
call fcn.00423778
mov eax, dword [ebp - 0xb8]
push 6
inc edi
pop ebx
add esi, 0x10
cmp edi, ebx
jb 0x422c9f
mov esi, dword [ebp - 0xbc]
cmp esi, eax
jbe 0x422d68
call fcn.004613e3
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xc8]
push 0xc1f
mov dword [ebp - 0x94], esi
sar eax, 2
push 1
lea esi, [ebp - 0x98]
mov dword [ebp - 0x98], ecx
mov edi, eax
call fcn.00406a0f
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov esi, dword [ebp - 0xbc]
cmp esi, dword [ebp - 0xb8]
jbe 0x422db2
call fcn.004613e3
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x94], esi
mov esi, dword [ebp - 0xb8]
cmp dword [ebp - 0xbc], esi
jbe 0x422dd7
call fcn.004613e3
test edi, edi
je 0x422de3
cmp edi, dword [ebp - 0xc8]
je 0x422de8
call fcn.004613e3
cmp dword [ebp - 0x94], esi
je 0x422e3a
lea esi, [ebp - 0x98]
call fcn.00406a0f
push 0xffffffffffffff9c
push dword [eax]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.00406a0f
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x422e36
call fcn.004613e3
xor eax, eax
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [eax + 0x10]
jb 0x422e2d
call fcn.004613e3
add dword [ebp - 0x94], 4
jmp 0x422dc4
mov eax, dword [edi]
jmp 0x422e1d
push 4
call fcn.00460dab
pop ecx
test eax, eax
je 0x422e50
lea ecx, [ebp - 0xb0]
mov dword [eax], ecx
jmp 0x422e52
xor eax, eax
mov dword [ebp - 0xb0], eax
xor eax, eax
xor ecx, ecx
xor edi, edi
xor edx, edx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], edx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1e4]
jmp 0x422e84
mov edx, dword [ebp - 0x9c]
cmp dword [esi - 4], 1
jne 0x422ee6
cmp eax, edi
jne 0x422e92
xor edx, edx
jmp 0x422e97
sub edx, eax
sar edx, 2
mov edi, ecx
sub edi, eax
sar edi, 2
cmp edi, edx
jae 0x422eb3
mov edx, dword [esi]
mov eax, ecx
mov dword [ecx], edx
lea ecx, [eax + 4]
mov dword [ebp - 0xa0], ecx
jmp 0x422ede
mov edi, ecx
cmp eax, ecx
jbe 0x422ebe
call fcn.004613e3
push edi
push dword [ebp - 0xb0]
lea eax, [ebp - 0x98]
push esi
push eax
lea eax, [ebp - 0xb0]
call fcn.00423778
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
xor edi, edi
add esi, 0x10
dec ebx
jne 0x422e7e
mov edx, ecx
sub edx, eax
sar edx, 2
sub edx, edi
je 0x42307f
dec edx
je 0x422fc8
dec edx
je 0x422fbf
mov ebx, ecx
cmp eax, ecx
jbe 0x422f20
call fcn.004613e3
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
mov edi, dword [ebp - 0xb0]
mov esi, eax
cmp eax, ecx
jbe 0x422f31
call fcn.004613e3
test edi, edi
je 0x422f3d
cmp edi, dword [ebp - 0xb0]
je 0x422f42
call fcn.004613e3
mov eax, ebx
sub eax, esi
sar eax, 2
push eax
push ebx
push esi
call fcn.00423af1
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa4]
add esp, 0xc
sar eax, 2
mov esi, eax
shr esi, 1
cmp esi, eax
jb 0x422f70
call fcn.004613e3
mov eax, dword [ebp - 0xa4]
mov esi, dword [eax + esi*4]
xor edi, edi
cmp eax, edi
je 0x422f86
push eax
call fcn.00460cb7
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.00460cb7
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x422fb8
push dword [ebp - 0xbc]
call fcn.00460cb7
pop ecx
xor edi, edi
jmp 0x423043
mov esi, dword [eax + 4]
add esi, dword [eax]
shr esi, 1
jmp 0x42300a
mov esi, eax
cmp eax, ecx
jbe 0x422fd9
call fcn.004613e3
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xb0]
cmp ecx, edi
jne 0x423078
call fcn.004613e3
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
cmp esi, dword [ecx + 0x10]
jb 0x423004
call fcn.004613e3
mov eax, dword [ebp - 0xa4]
mov esi, dword [esi]
cmp eax, edi
je 0x423011
push eax
call fcn.00460cb7
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.00460cb7
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x423043
push dword [ebp - 0xbc]
call fcn.00460cb7
pop ecx
push dword [ebp - 0xc8]
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb4], edi
call fcn.00460cb7
or dword [ebp - 4], 0xffffffff
pop ecx
lea eax, [ebp - 0x190]
call fcn.00421181
mov eax, esi
call fcn.004621dd
ret
mov ecx, dword [ecx]
jmp 0x422ff4
cmp eax, edi
je 0x42308a
push eax
call fcn.00460cb7
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.00460cb7
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x4230bc
push dword [ebp - 0xbc]
call fcn.00460cb7
pop ecx
xor esi, esi
jmp 0x423043