Function at 0x424a99
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd60
mov eax, dword [0x56afe8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
lea eax, [ebp - 0xd5c]
push edi
push eax
call fcn.0042166a
pop ecx
xor ebx, ebx
push ebx
mov ecx, dword [eax]
push ebx
push ebx
push str.bbt_netdiag
call fcn.0042528b
mov ecx, dword [ebp - 0xd58]
test ecx, ecx
je 0x424adc
call fcn.00420b3e
mov edi, dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0x414]
push 0x104
push eax
push ebx
call edi
mov ebx, dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea eax, [ebp - 0x414]
push str...NetDiagDll.dll
push eax
call ebx
lea eax, [ebp - 0x414]
push eax
call fcn.004125ba
mov esi, eax
pop ecx
test esi, esi
jne 0x424b84
mov eax, dword [0x52a45c]
xor ebx, ebx
mov dword [ebp - 0xc54], eax
xor esi, esi
mov ax, word [0x52a460]
inc esi
push 0x3a
mov word [ebp - 0xc50], ax
lea eax, [ebp - 0xc4e]
push ebx
push eax
mov dword [ebp - 0xc58], esi
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0xc58]
push ebx
push ebx
push 0x30
push esi
push eax
push ecx
mov ecx, esp
push 0x52cd44
call fcn.00402af5
push ecx
mov ecx, esp
push str.360_360_
call fcn.00402af5
push ebx
call fcn.004dab18
add esp, 0x20
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.00403a64
push eax
lea ecx, [ebp - 0xd60]
call fcn.00402a6b
lea eax, [ebp - 0xd60]
push eax
push 0x27b3
push 0
call fcn.0046d25d
mov ecx, eax
call fcn.0046d175
push str.GetNetDiagFunctions
push esi
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov esi, eax
test esi, esi
je 0x424b18
push 0xa4
lea eax, [ebp - 0xcfc]
push 0
push eax
call sub.msvcrt.dll_memset
lea eax, [ebp - 0xcfc]
push eax
call esi
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x1c
lea eax, [ebp - 0x20c]
push 0x104
push eax
push dword [0x577c88]
call edi
push str...deepscan
lea eax, [ebp - 0x20c]
push eax
call ebx
lea eax, [ebp - 0x20c]
push eax
call dword [ebp - 0xcfc]
push 0x58
lea eax, [ebp - 0xd54]
push 0
push eax
call sub.msvcrt.dll_memset
lea eax, [ebp - 0xcfc]
mov dword [ebp - 0xd50], 0x4243d1
mov dword [ebp - 0xd54], eax
lea eax, [ebp - 0xd54]
push eax
call dword [ebp - 0xcf8]
mov esi, eax
push esi
call dword [ebp - 0xcf4]
mov bl, al
add esp, 0x18
test bl, bl
je 0x424d29
push 0xffffffffffffffff
push esi
call dword [ebp - 0xcec]
push esi
call dword [ebp - 0xce8]
add esp, 0xc
mov edi, str.true
test al, al
mov eax, edi
jne 0x424c92
mov eax, str.false
push eax
push str.reboot:_ws
lea eax, [ebp - 0xc14]
push 0x400
push eax
call fcn.00523653
lea eax, [ebp - 0xd5c]
push eax
call fcn.0042166a
add esp, 0x14
lea ecx, [ebp - 0xc14]
push ecx
mov ecx, dword [eax]
call fcn.0042537f
mov ecx, dword [ebp - 0xd58]
test ecx, ecx
je 0x424cd5
call fcn.00420b3e
push esi
call dword [ebp - 0xce4]
pop ecx
test al, al
jne 0x424ce6
mov edi, str.false
push edi
push str.check_ie_later:_ws
lea eax, [ebp - 0xc14]
push 0x400
push eax
call fcn.00523653
lea eax, [ebp - 0xd5c]
push eax
call fcn.0042166a
add esp, 0x14
lea ecx, [ebp - 0xc14]
push ecx
mov ecx, dword [eax]
call fcn.0042537f
mov ecx, dword [ebp - 0xd58]
test ecx, ecx
je 0x424d29
call fcn.00420b3e
push esi
call dword [ebp - 0xce0]
lea eax, [ebp - 0xd5c]
push eax
call fcn.0042166a
pop ecx
pop ecx
push 0
movzx ecx, bl
push ecx
mov ecx, dword [eax]
call fcn.00422b70
mov ecx, dword [ebp - 0xd58]
test ecx, ecx
je 0x424d5a
call fcn.00420b3e
mov ecx, dword [0x5740b0]
push 0x67
call fcn.0045e6b2
mov ecx, dword [ebp - 0xd60]
lea ecx, [ecx - 0x10]
call fcn.004042e9
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00522d04
leave
ret