Function at 0x4206c7
Capabilities:
Create thread
Terminate process

Disassembly:
push 0x1e4
mov eax, 0x479fc2
call fcn.0045fd3a
lea eax, [ebp - 0x190]
push eax
mov dword [ebp - 0xe8], 0x483974
mov dword [ebp - 0xe4], str.news.163.com
mov dword [ebp - 0xe0], str.www.taobao.com
mov dword [ebp - 0xdc], str.www.tencent.com
mov dword [ebp - 0xd8], str.www.sogou.com
mov dword [ebp - 0xd4], str.weibo.com
call fcn.0041fbc0
xor ebx, ebx
mov dword [ebp - 4], ebx
mov dword [ebp - 0x94], ebx
call fcn.0046b613
push 3
pop esi
cdq
mov ecx, esi
idiv ecx
push 4
pop edi
add edx, edi
test edx, edx
jle 0x4207b4
lea eax, [ebp - 0x188]
push 0x4839d0
push eax
call fcn.004174d7
pop ecx
pop ecx
mov dword [ebp - 0xcc], ebx
call fcn.0046b613
cdq
mov ecx, esi
idiv ecx
add edx, edi
test edx, edx
jle 0x42079a
call fcn.0046b613
push 0x64
cdq
pop ecx
idiv ecx
lea eax, [ebp - 0x188]
push edx
push eax
call fcn.00413c52
inc dword [ebp - 0xcc]
call fcn.0046b613
cdq
mov ecx, esi
idiv ecx
add edx, edi
cmp dword [ebp - 0xcc], edx
jl 0x420768
inc dword [ebp - 0x94]
call fcn.0046b613
cdq
mov ecx, esi
idiv ecx
add edx, edi
cmp dword [ebp - 0x94], edx
jl 0x42073f
lea eax, [ebp - 0x104]
push eax
lea eax, [ebp - 0x190]
call fcn.0041fc73
cmp dword [eax + 0x18], 0x10
jb 0x4207d1
mov eax, dword [eax + 4]
jmp 0x4207d4
add eax, 4
push 0x80
push eax
lea eax, [ebp - 0x90]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
push ebx
push 1
lea ecx, [ebp - 0x104]
call fcn.00403021
push edi
call fcn.0045e99a
pop ecx
cmp eax, ebx
je 0x42080a
lea ecx, [ebp - 0xc8]
mov dword [eax], ecx
jmp 0x42080c
xor eax, eax
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov byte [ebp - 4], 2
xor edi, edi
lea esi, [ebp - 0x1e8]
jmp 0x420834
xor ebx, ebx
mov ecx, dword [ebp + edi*4 - 0xe8]
push ebx
push ebx
lea eax, [esi - 8]
push eax
push 0x420c81
mov dword [eax], ecx
push ebx
lea ecx, [ebp - 0x90]
push ebx
mov dword [esi - 4], ecx
mov dword [esi], ebx
mov dword [esi + 4], ebx
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0xbc], ebx
jne 0x420870
xor edx, edx
jmp 0x42087f
mov edx, dword [ebp - 0xb4]
sub edx, dword [ebp - 0xbc]
sar edx, 2
mov ecx, dword [ebp - 0xb8]
mov ebx, ecx
sub ebx, dword [ebp - 0xbc]
sar ebx, 2
cmp ebx, edx
jae 0x4208a1
mov dword [ecx], eax
lea eax, [ecx + 4]
mov dword [ebp - 0xb8], eax
jmp 0x4208d7
mov ebx, ecx
cmp dword [ebp - 0xbc], ecx
jbe 0x4208b0
call fcn.0045efd1
mov eax, dword [ebp - 0xc8]
push ebx
push eax
lea eax, [ebp - 0x94]
push eax
lea eax, [ebp - 0xd0]
push eax
lea eax, [ebp - 0xc8]
call fcn.004212f9
mov eax, dword [ebp - 0xb8]
push 6
inc edi
pop ebx
add esi, 0x10
cmp edi, ebx
jb 0x420832
mov esi, dword [ebp - 0xbc]
cmp esi, eax
jbe 0x4208fb
call fcn.0045efd1
mov eax, dword [ebp - 0xb8]
sub eax, dword [ebp - 0xbc]
mov ecx, dword [ebp - 0xc8]
push 0xc1f
mov dword [ebp - 0x94], esi
sar eax, 2
push 1
lea esi, [ebp - 0x98]
mov dword [ebp - 0x98], ecx
mov edi, eax
call fcn.004212c8
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
mov esi, dword [ebp - 0xbc]
cmp esi, dword [ebp - 0xb8]
jbe 0x420945
call fcn.0045efd1
mov edi, dword [ebp - 0xc8]
mov dword [ebp - 0x98], edi
mov dword [ebp - 0x94], esi
mov esi, dword [ebp - 0xb8]
cmp dword [ebp - 0xbc], esi
jbe 0x42096a
call fcn.0045efd1
test edi, edi
je 0x420976
cmp edi, dword [ebp - 0xc8]
je 0x42097b
call fcn.0045efd1
cmp dword [ebp - 0x94], esi
je 0x4209cd
lea esi, [ebp - 0x98]
call fcn.004212c8
push 0xffffffffffffff9c
push dword [eax]
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
call fcn.004212c8
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test edi, edi
jne 0x4209c9
call fcn.0045efd1
xor eax, eax
mov ecx, dword [ebp - 0x94]
cmp ecx, dword [eax + 0x10]
jb 0x4209c0
call fcn.0045efd1
add dword [ebp - 0x94], 4
jmp 0x420957
mov eax, dword [edi]
jmp 0x4209b0
push 4
call fcn.0045e99a
pop ecx
test eax, eax
je 0x4209e3
lea ecx, [ebp - 0xb0]
mov dword [eax], ecx
jmp 0x4209e5
xor eax, eax
mov dword [ebp - 0xb0], eax
xor eax, eax
xor ecx, ecx
xor edi, edi
xor edx, edx
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], ecx
mov dword [ebp - 0x9c], edx
mov byte [ebp - 4], 4
lea esi, [ebp - 0x1e4]
jmp 0x420a17
mov edx, dword [ebp - 0x9c]
cmp dword [esi - 4], 1
jne 0x420a79
cmp eax, edi
jne 0x420a25
xor edx, edx
jmp 0x420a2a
sub edx, eax
sar edx, 2
mov edi, ecx
sub edi, eax
sar edi, 2
cmp edi, edx
jae 0x420a46
mov edx, dword [esi]
mov eax, ecx
mov dword [ecx], edx
lea ecx, [eax + 4]
mov dword [ebp - 0xa0], ecx
jmp 0x420a71
mov edi, ecx
cmp eax, ecx
jbe 0x420a51
call fcn.0045efd1
push edi
push dword [ebp - 0xb0]
lea eax, [ebp - 0x98]
push esi
push eax
lea eax, [ebp - 0xb0]
call fcn.004212f9
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
xor edi, edi
add esi, 0x10
dec ebx
jne 0x420a11
mov edx, ecx
sub edx, eax
sar edx, 2
sub edx, edi
je 0x420c12
dec edx
je 0x420b5b
dec edx
je 0x420b52
mov ebx, ecx
cmp eax, ecx
jbe 0x420ab3
call fcn.0045efd1
mov ecx, dword [ebp - 0xa0]
mov eax, dword [ebp - 0xa4]
mov edi, dword [ebp - 0xb0]
mov esi, eax
cmp eax, ecx
jbe 0x420ac4
call fcn.0045efd1
test edi, edi
je 0x420ad0
cmp edi, dword [ebp - 0xb0]
je 0x420ad5
call fcn.0045efd1
mov eax, ebx
sub eax, esi
sar eax, 2
push eax
push ebx
push esi
call fcn.004216ba
mov eax, dword [ebp - 0xa0]
sub eax, dword [ebp - 0xa4]
add esp, 0xc
sar eax, 2
mov esi, eax
shr esi, 1
cmp esi, eax
jb 0x420b03
call fcn.0045efd1
mov eax, dword [ebp - 0xa4]
mov esi, dword [eax + esi*4]
xor edi, edi
cmp eax, edi
je 0x420b19
push eax
call fcn.0045e8a6
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.0045e8a6
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x420b4b
push dword [ebp - 0xbc]
call fcn.0045e8a6
pop ecx
xor edi, edi
jmp 0x420bd6
mov esi, dword [eax + 4]
add esi, dword [eax]
shr esi, 1
jmp 0x420b9d
mov esi, eax
cmp eax, ecx
jbe 0x420b6c
call fcn.0045efd1
mov eax, dword [ebp - 0xa4]
mov ecx, dword [ebp - 0xb0]
cmp ecx, edi
jne 0x420c0b
call fcn.0045efd1
mov eax, dword [ebp - 0xa4]
xor ecx, ecx
cmp esi, dword [ecx + 0x10]
jb 0x420b97
call fcn.0045efd1
mov eax, dword [ebp - 0xa4]
mov esi, dword [esi]
cmp eax, edi
je 0x420ba4
push eax
call fcn.0045e8a6
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.0045e8a6
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x420bd6
push dword [ebp - 0xbc]
call fcn.0045e8a6
pop ecx
push dword [ebp - 0xc8]
mov dword [ebp - 0xbc], edi
mov dword [ebp - 0xb8], edi
mov dword [ebp - 0xb4], edi
call fcn.0045e8a6
or dword [ebp - 4], 0xffffffff
pop ecx
lea eax, [ebp - 0x190]
call fcn.0041ed8a
mov eax, esi
call fcn.0045fdbd
ret
mov ecx, dword [ecx]
jmp 0x420b87
cmp eax, edi
je 0x420c1d
push eax
call fcn.0045e8a6
pop ecx
push dword [ebp - 0xb0]
mov dword [ebp - 0xa4], edi
mov dword [ebp - 0xa0], edi
mov dword [ebp - 0x9c], edi
call fcn.0045e8a6
pop ecx
cmp dword [ebp - 0xbc], edi
je 0x420c4f
push dword [ebp - 0xbc]
call fcn.0045e8a6
pop ecx
xor esi, esi
jmp 0x420bd6