Function at 0x10030470
Capabilities:
Create thread

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1008e1ed
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x100ab080]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x58], eax
mov al, byte [ebp + 8]
mov dword [ebp - 4], 0
mov byte [edi + 8], 1
mov dword [edi + 0x30], 1
mov byte [edi + 0x2e], al
call fcn.1002ff80
mov esi, eax
xorps xmm0, xmm0
movups xmmword [esi + 0x18], xmm0
mov dword [esi + 0x28], 0
mov word [esi + 0x2c], 0
cmp byte [esi + 0x2e], 0
je 0x100304e2
call fcn.10042d20
jmp 0x100304e7
call fcn.1002d1e0
test eax, eax
jne 0x100304f6
mov dword [esi + 0x30], eax
mov byte [ebp - 0x41], al
jmp 0x10030945
xorps xmm0, xmm0
mov dword [esi + 0x30], 1
movups xmmword [ebp - 0x40], xmm0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0xf
mov byte [ebp - 0x40], 0
sub esp, 0x18
mov byte [ebp - 4], 1
lea eax, [ebp + 0x18]
mov ecx, esp
lea esi, [ebp - 0x40]
push eax
call fcn.10003da0
mov edx, esi
lea ecx, [ebp - 0x48]
call fcn.10026010
add esp, 0x18
test eax, eax
je 0x1003054a
call fcn.10022820
jmp 0x1003054d
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], eax
cmp eax, 0xffffffff
je 0x1003055c
mov ecx, eax
call fcn.10022010
movq xmm0, qword [str.255.255.255.0]
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x18], 0xd
mov word [ebp - 0x1a], ax
mov eax, dword [0x1009c998]
mov dword [ebp - 0x20], eax
mov al, byte [0x1009c99c]
mov dword [ebp - 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x1b], 0
call fcn.1001a9d0
mov ecx, dword [ebp - 0x14]
mov esi, eax
cmp ecx, 0xf
jbe 0x100305cf
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100305c5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309a3
push ecx
push edx
call fcn.100666c9
add esp, 8
not esi
and esi, dword [ebp - 0x48]
cmp dword [ebp - 0x48], 0xffffffff
jne 0x1003061a
call fcn.10065995
mov esi, 0xfd
mul esi
cmp eax, esi
jae 0x100305fc
cmp eax, 0x51
jae 0x100305fc
nop
call fcn.10065995
mul esi
cmp eax, 0x51
jb 0x100305f0
lea ecx, [edx - 0x7ffffffe]
cmp ecx, 0x80000000
lea eax, [ecx - 0x80000000]
lea esi, [ecx - 0x80000000]
cmovae esi, eax
shl esi, 0x18
cmp byte [edi + 0x2e], 0
lea ecx, [ebp - 0x28]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0xa
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x1e], 0
je 0x10030779
movq xmm0, qword [str.172.27.6.0]
mov ax, word [0x1009c9a8]
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
call fcn.1001a9d0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4c], eax
cmp ecx, 0xf
jbe 0x10030693
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030689
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309a8
push ecx
push edx
call fcn.100666c9
add esp, 8
movq xmm0, qword [str.255.255.255.0]
lea ecx, [ebp - 0x28]
xor eax, eax
mov dword [ebp - 0x18], 0xd
mov word [ebp - 0x1a], ax
mov eax, dword [0x1009c998]
mov dword [ebp - 0x20], eax
mov al, byte [0x1009c99c]
mov dword [ebp - 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov byte [ebp - 0x1c], al
mov byte [ebp - 0x1b], 0
call fcn.1001a9d0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x54], eax
cmp ecx, 0xf
jbe 0x10030707
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100306fd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309ad
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ax, word [0x1009c9b4]
lea ecx, [ebp - 0x28]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0xa
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
movq xmm0, qword [str.172.27.6.1]
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
mov byte [ebp - 0x1e], 0
call fcn.1001a9d0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x50], eax
cmp ecx, 0xf
jbe 0x1003088c
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030882
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309b2
jmp 0x10030882
movq xmm0, qword [str.172.27.7.0]
mov ax, word [0x1009c9c0]
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
call fcn.1001a9d0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x4c], eax
cmp ecx, 0xf
jbe 0x100307cc
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100307c2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309b7
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ax, word [0x1009c9cc]
lea ecx, [ebp - 0x28]
movq xmm0, qword [str.255.255.0.0]
mov word [ebp - 0x20], ax
mov al, byte [0x1009c9ce]
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xb
mov dword [ebp - 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov byte [ebp - 0x1e], al
mov byte [ebp - 0x1d], 0
call fcn.1001a9d0
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 0x54], eax
cmp ecx, 0xf
jbe 0x10030843
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10030839
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309bc
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ax, word [0x1009c9a8]
lea ecx, [ebp - 0x28]
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0xa
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0xf
movq xmm0, qword [str.172.27.6.0]
movq qword [ebp - 0x28], xmm0
mov word [ebp - 0x20], ax
mov byte [ebp - 0x1e], 0
call fcn.1001a9d0
add eax, esi
jmp 0x1003073f
push ecx
push edx
call fcn.100666c9
add esp, 8
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x4c]
push dword [ebp + 0x10]
add eax, esi
push dword [ebp - 0x48]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push eax
push dword [ebp - 0x58]
call fcn.1002ff80
mov ecx, eax
call fcn.10030000
test al, al
jne 0x100308b9
mov byte [ebp - 0x41], al
jmp 0x10030915
push dword [edi + 0xc]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 8
call fcn.1006637f
mov dword [ebp - 0x58], eax
mov dword [eax], 0x10031af0
mov dword [eax + 4], edi
lea ecx, [ebp - 0x5c]
mov byte [ebp - 4], 2
push ecx
push 0
push eax
push 0x10031d00
push 0
push 0
call fcn.10076fde
mov ecx, eax
add esp, 0x1c
mov dword [ebp - 0x60], ecx
test ecx, ecx
je 0x10030995
cmp dword [edi + 0x14], 0
jne 0x100309c1
mov eax, dword [ebp - 0x5c]
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], eax
mov byte [ebp - 0x41], 1
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x10030945
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003093b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309b2
push ecx
push edx
call fcn.100666c9
add esp, 8
mov ecx, dword [ebp + 0x2c]
cmp ecx, 0xf
jbe 0x10030975
mov edx, dword [ebp + 0x18]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1003096b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100309b2
push ecx
push edx
call fcn.100666c9
add esp, 8
mov al, byte [ebp - 0x41]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1006636c
mov esp, ebp
pop ebp
ret 0x28
push 6
mov dword [ebp - 0x5c], 0
call fcn.100657c0
call fcn.10070c0f
call fcn.10070c0f
call fcn.10070c0f
call fcn.10070c0f
call fcn.10070c0f
call fcn.10070c0f
call fcn.100773d9
int3