Function at 0x41f810
Capabilities:
Create thread
Terminate process

Disassembly:
push 0x1e4
mov eax, 0x478bad
call fcn.0045e88a
lea eax, [ebp - 0x190]
push eax
mov dword [ebp - 0xe8], str.www.baidu.com
mov dword [ebp - 0xe4], str.news.163.com
mov dword [ebp - 0xe0], str.www.taobao.com
mov dword [ebp - 0xdc], str.www.tencent.com
mov dword [ebp - 0xd8], str.www.sogou.com
mov dword [ebp - 0xd4], str.weibo.com
call fcn.0041ed54
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x94], ebx
call fcn.0046a313
push 3
pop esi
cdq
mov ecx, esi
idiv ecx
push 4
pop edi
add edx, edi
test edx, edx
jle 0x41f8fd
lea eax, [ebp - 0x188]
push 0x481004
push eax
call fcn.004169cb
pop ecx
pop ecx
mov dword [ebp - 0xcc], ebx
call fcn.0046a313
cdq
mov ecx, esi
idiv ecx
add edx, edi
test edx, edx
jle 0x41f8e3
call fcn.0046a313
push 0x64
cdq
pop ecx
idiv ecx
lea eax, [ebp - 0x188]
push edx
push eax
call fcn.004130c2
inc dword [ebp - 0xcc]
call fcn.0046a313
cdq
mov ecx, esi
idiv ecx
add edx, edi
cmp dword [ebp - 0xcc], edx
jl 0x41f8b1
inc dword [ebp - 0x94]
call fcn.0046a313
cdq
mov ecx, esi
idiv ecx
add edx, edi
cmp dword [ebp - 0x94], edx
jl 0x41f888
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x190]
call fcn.0041ee07
cmp dword [eax + 0x18], 0x10
jb 0x41f91a
mov eax, dword [eax + 4]
jmp 0x41f91d
add eax, 4
push 0x80
push eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push ebx
push 1
lea ecx, [ebp - 0x104]
call fcn.00403022
push edi
call fcn.0045d68c
pop ecx
cmp eax, ebx
je 0x41f953
lea ecx, [ebp - 0xc8]
mov dword [eax], ecx
jmp 0x41f955
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov byte [ebp - 4], 2
xor edi, edi
lea esi, [ebp - 0x1e8]
jmp 0x41f97d
xor ebx, ebx
mov ecx, dword [ebp + edi*4 - 0xe8]
push ebx
push ebx
lea eax, [esi - 8]
push eax
push 0x41fdca
mov dword [eax], ecx
push ebx
lea ecx, [ebp - 0x90]
push ebx
mov dword [esi - 4], ecx
mov dword [esi], ebx
mov dword [esi + 4], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0xbc], ebx
jne 0x41f9b9
xor edx, edx
jmp 0x41f9c8
mov edx, dword [ebp - 0xb4]
sub edx, dword [ebp - 0xbc]
sar edx, 2
mov ecx, dword [ebp - 0xb8]
mov ebx, ecx
sub ebx, dword [ebp - 0xbc]
sar ebx, 2
cmp ebx, edx
jae 0x41f9ea
mov dword [ecx], eax
lea eax, [ecx + 4]
mov dword [ebp - 0xb8], eax
jmp 0x41fa20
mov ebx, ecx
cmp dword [ebp - 0xbc], ecx
jbe 0x41f9f9
call fcn.0045dcc3
mov eax, dword [ebp - 0xc8]
push ebx
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xc8]
call fcn.0042045c
mov eax, dword [ebp - 0xb8]
push 6
inc edi
pop ebx
add esi, 0x10
cmp edi, ebx
jb 0x41f97b
mov esi, dword [ebp - 0xbc]
cmp esi, eax
jbe 0x41fa44
call fcn.0045dcc3
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xc8]
push 0xc1f
mov dword [ebp - 0x94], esi
sar eax, 2
push 1
lea esi, [ebp - 0x98]
mov dword [ebp - 0x98], ecx
mov edi, eax
call fcn.00420434
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov esi, dword [ebp - 0xbc]
cmp esi, dword [ebp - 0xb8]
jbe 0x41fa8e
call fcn.0045dcc3
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x94], esi
mov esi, dword [ebp - 0xb8]
cmp dword [ebp - 0xbc], esi
jbe 0x41fab3
call fcn.0045dcc3
test edi, edi
je 0x41fabf
cmp edi, dword [ebp - 0xc8]
je 0x41fac4
call fcn.0045dcc3
cmp dword [ebp - 0x94], esi
je 0x41fb16
lea esi, [ebp - 0x98]
call fcn.00420434
push 0xffffffffffffff9c
push dword [eax]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.00420434
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x41fb12
call fcn.0045dcc3
xor eax, eax
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [eax + 0x10]
jb 0x41fb09
call fcn.0045dcc3
add dword [ebp - 0x94], 4
jmp 0x41faa0
mov eax, dword [edi]
jmp 0x41faf9
push 4
call fcn.0045d68c
pop ecx
test eax, eax
je 0x41fb2c
lea ecx, [ebp - 0xb0]
mov dword [eax], ecx
jmp 0x41fb2e
xor eax, eax
mov dword [ebp - 0xb0], eax
xor eax, eax
xor ecx, ecx
xor edi, edi
xor edx, edx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], edx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1e4]
jmp 0x41fb60
mov edx, dword [ebp - 0x9c]
cmp dword [esi - 4], 1
jne 0x41fbc2
cmp eax, edi
jne 0x41fb6e
xor edx, edx
jmp 0x41fb73
sub edx, eax
sar edx, 2
mov edi, ecx
sub edi, eax
sar edi, 2
cmp edi, edx
jae 0x41fb8f
mov edx, dword [esi]
mov eax, ecx
mov dword [ecx], edx
lea ecx, [eax + 4]
mov dword [ebp - 0xa0], ecx
jmp 0x41fbba
mov edi, ecx
cmp eax, ecx
jbe 0x41fb9a
call fcn.0045dcc3
push edi
push dword [ebp - 0xb0]
lea eax, [ebp - 0x98]
push esi
push eax
lea eax, [ebp - 0xb0]
call fcn.0042045c
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
xor edi, edi
add esi, 0x10
dec ebx
jne 0x41fb5a
mov edx, ecx
sub edx, eax
sar edx, 2
sub edx, edi
je 0x41fd5b
dec edx
je 0x41fca4
dec edx
je 0x41fc9b
mov ebx, ecx
cmp eax, ecx
jbe 0x41fbfc
call fcn.0045dcc3
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
mov edi, dword [ebp - 0xb0]
mov esi, eax
cmp eax, ecx
jbe 0x41fc0d
call fcn.0045dcc3
test edi, edi
je 0x41fc19
cmp edi, dword [ebp - 0xb0]
je 0x41fc1e
call fcn.0045dcc3
mov eax, ebx
sub eax, esi
sar eax, 2
push eax
push ebx
push esi
call fcn.0042081d
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa4]
add esp, 0xc
sar eax, 2
mov esi, eax
shr esi, 1
cmp esi, eax
jb 0x41fc4c
call fcn.0045dcc3
mov eax, dword [ebp - 0xa4]
mov esi, dword [eax + esi*4]
xor edi, edi
cmp eax, edi
je 0x41fc62
push eax
call fcn.0045d598
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.0045d598
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x41fc94
push dword [ebp - 0xbc]
call fcn.0045d598
pop ecx
xor edi, edi
jmp 0x41fd1f
mov esi, dword [eax + 4]
add esi, dword [eax]
shr esi, 1
jmp 0x41fce6
mov esi, eax
cmp eax, ecx
jbe 0x41fcb5
call fcn.0045dcc3
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xb0]
cmp ecx, edi
jne 0x41fd54
call fcn.0045dcc3
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
cmp esi, dword [ecx + 0x10]
jb 0x41fce0
call fcn.0045dcc3
mov eax, dword [ebp - 0xa4]
mov esi, dword [esi]
cmp eax, edi
je 0x41fced
push eax
call fcn.0045d598
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.0045d598
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x41fd1f
push dword [ebp - 0xbc]
call fcn.0045d598
pop ecx
push dword [ebp - 0xc8]
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb4], edi
call fcn.0045d598
or dword [ebp - 4], 0xffffffff
pop ecx
lea eax, [ebp - 0x190]
call fcn.0041e013
mov eax, esi
call fcn.0045e90d
ret
mov ecx, dword [ecx]
jmp 0x41fcd0
cmp eax, edi
je 0x41fd66
push eax
call fcn.0045d598
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.0045d598
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x41fd98
push dword [ebp - 0xbc]
call fcn.0045d598
pop ecx
xor esi, esi
jmp 0x41fd1f