Function at 0x100329f0
Capabilities:
Create thread
Get session user name
Read .ini file

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
mov eax, 0x1198
call fcn.100eccb0
mov eax, dword [0x1012d034]
xor eax, esp
mov dword [esp + 0x1194], eax
push esi
push edi
push 0x10104c9c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexW]
mov edi, eax
mov dword [esp + 0x2c], edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
test edi, edi
je 0x10033952
cmp eax, 0xb7
je 0x10033952
push 3
call dword [sym.imp.libcurl.dll_curl_global_init]
add esp, 4
lea ecx, [esp + 0xf0]
push 0x10104d80
call fcn.10007b40
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0x9a0], ax
lea eax, [esp + 0x9a2]
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
mov dword [esp + 0xd4], 0x400
lea eax, [esp + 0xd4]
push eax
lea eax, [esp + 0x99c]
push eax
call dword [sym.imp.ADVAPI32.dll_GetUserNameW]
sub esp, 0x18
mov ecx, esp
push 0x10104d74
call fcn.10001f10
lea ecx, [esp + 0x138]
call fcn.100b7c60
mov ecx, esp
push str.dataDB
call fcn.10001f10
lea ecx, [esp + 0x120]
call fcn.100b7c60
mov ecx, esp
push str.Log
call fcn.10001f10
lea ecx, [esp + 0xf0]
call fcn.100b7c60
mov ecx, esp
push 0x10104de4
call fcn.10001f10
lea ecx, [esp + 0x150]
call fcn.100b7c60
add esp, 0x18
call fcn.1001bbe0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031bb0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10022230
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10025140
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031c30
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031cb0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031d30
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031db0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031e30
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031eb0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10020f00
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10029420
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031f30
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.1002bbf0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.10031fb0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.100129e0
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
cmp dword [esp + 0xec], 8
lea ecx, [esp + 0xd8]
lea edx, [esp + 0x998]
cmovae ecx, dword [esp + 0xd8]
call fcn.100b8070
cmp dword [esp + 0x134], 8
lea ecx, [esp + 0x120]
lea edx, [esp + 0x998]
cmovae ecx, dword [esp + 0x120]
call fcn.100b8070
cmp dword [esp + 0x11c], 8
lea ecx, [esp + 0x108]
lea edx, [esp + 0x998]
cmovae ecx, dword [esp + 0x108]
call fcn.100b8070
cmp dword [esp + 0x14c], 8
lea ecx, [esp + 0x138]
lea edx, [esp + 0x998]
cmovae ecx, dword [esp + 0x138]
call fcn.100b8070
mov eax, dword [0x10132504]
test al, 1
jne 0x10032c60
or eax, 1
mov dword [0x10132504], eax
call fcn.100134d0
push 0x100f6ad0
call fcn.100ebe7b
add esp, 4
sub esp, 0x18
mov ecx, esp
push str.configure.dat
call fcn.10001f10
call fcn.10016470
mov ecx, eax
call fcn.100be8d0
sub esp, 0x18
mov ecx, esp
call fcn.100b86b0
lea ecx, [esp + 0xb0]
call fcn.1003a310
lea ecx, [esp + 0x168]
call fcn.100b8630
push 0
call dword [sym.imp.MSVCR120.dll__time64]
add esp, 0x1c
lea ecx, [esp + 0x180]
mov edx, eax
call fcn.100190e0
sub esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.EdgeRecord
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.ChromeRecord
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.IERecord
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.OperaRecord
call fcn.10007b40
call fcn.10032280
add esp, 0x18
mov ecx, esp
lea eax, [esp + 0xb0]
push 0xffffffffffffffff
push 0
push eax
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.FirefoxRecord
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0x198]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.UserOperate
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.IEDownload
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.EdgeDownload
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.ChromeDownload
call fcn.10007b40
call fcn.10032280
add esp, 0x18
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
mov byte [ecx], 0
push 0
lea eax, [esp + 0xb8]
push eax
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.OperaDownload
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.FirefoxDownload
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0x168]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.ImRecord
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0x168]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.EmailRecord
call fcn.10007b40
call fcn.10032280
add esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.CHandleChromeRecordEvent
call fcn.10007b40
call fcn.10016470
mov ecx, eax
call fcn.100bea10
sub esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.CHandleEdgeRecordEvent
call fcn.10007b40
call fcn.10016470
mov ecx, eax
call fcn.100bea10
sub esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.CHandleOperaRecordEvent
call fcn.10007b40
call fcn.10016470
mov ecx, eax
call fcn.100bea10
sub esp, 0x18
lea eax, [esp + 0xb0]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push str.CHandleFirefoxRecordEvent
call fcn.10007b40
call fcn.10016470
mov ecx, eax
call fcn.100bea10
mov eax, 0x10025370
test eax, eax
jne 0x100330cc
mov dword [esp + 0x40], eax
jmp 0x100330e4
lea eax, [esp + 0x30]
mov dword [esp + 0x30], 0x10116384
mov dword [esp + 0x34], 0x10025370
mov dword [esp + 0x40], eax
call fcn.10032030
lea esi, [eax + 0x18]
lea eax, [esp + 0x30]
cmp esi, eax
je 0x1003311c
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x10033110
mov edx, dword [ecx]
cmp ecx, esi
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [esi + 0x10], 0
lea eax, [esp + 0x30]
mov ecx, esi
push eax
call fcn.100d0070
mov ecx, dword [esp + 0x40]
test ecx, ecx
je 0x10033136
mov edx, dword [ecx]
lea eax, [esp + 0x30]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
call fcn.10032030
mov esi, eax
call fcn.10032030
mov dword [eax], 0x27db
lea eax, [esp + 0xc]
push eax
push 0
push esi
push 0x100cfce0
push 0
push 0
mov dword [esp + 0x24], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [esi + 0x14], eax
call fcn.10039770
mov ecx, eax
call fcn.10039cb0
call fcn.1002f1a0
mov ecx, eax
call fcn.1002fc60
call fcn.10039770
mov dword [eax], 0x1002ff80
mov dword [eax + 4], 0
call fcn.10033d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx]
call fcn.100375e0
call fcn.10037650
mov eax, dword [0x10132500]
test al, 1
jne 0x100331c7
or eax, 1
push 0x100f6a50
mov dword [0x10132500], eax
call fcn.100ebe7b
add esp, 4
call fcn.10012a60
sub esp, 0x18
mov ecx, esp
push str.https:__api.clevguard.com
call fcn.10007b40
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetHost_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
push str.monivisor_datas
call fcn.10007b40
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetBucketName_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
mov ecx, esp
push str.https:__oss_us_west_1.aliyuncs.com
call fcn.10007b40
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetEndpoint_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
push 0x3ff
lea eax, [esp + 0x19d]
mov byte [esp + 0x19c], 0
push 0
push eax
call sub.MSVCR120.dll_memset
mov esi, dword [sym.imp.KERNEL32.dll_GetPrivateProfileStringA]
lea eax, [esp + 0xfc]
add esp, 0xc
cmp dword [esp + 0x104], 0x10
cmovae eax, dword [esp + 0xf0]
push eax
push 0x400
lea eax, [esp + 0x1a0]
push eax
push 0
push 0x10104f94
push 0x10104fa0
call esi
push 0x3ff
lea eax, [esp + 0x59d]
mov byte [esp + 0x59c], 0
push 0
push eax
call sub.MSVCR120.dll_memset
add esp, 0xc
lea eax, [esp + 0xf0]
cmp dword [esp + 0x104], 0x10
cmovae eax, dword [esp + 0xf0]
push eax
push 0x400
lea eax, [esp + 0x5a0]
push eax
push 0
push str.token
push 0x10104fb0
call esi
lea eax, [esp + 0x598]
push eax
lea eax, [esp + 0x19c]
push eax
push str.deviceId:__s__token:__s
push 1
push 0xdb
push 0x10104fd0
push 0x10104ff8
call fcn.100e13e0
add esp, 4
lea eax, [esp + 0x1b0]
mov ecx, esp
push eax
call fcn.10007b40
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetDeviceId_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
sub esp, 0x18
lea eax, [esp + 0x5b0]
mov ecx, esp
push eax
call fcn.10007b40
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::SetToken_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
lea eax, [esp + 0x94]
mov dword [esp + 0x94], 0
push eax
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_bool___thiscall_CNetManager::GetUserConfig_int__]
mov esi, dword [esp + 0x94]
call fcn.10016470
mov ecx, 0x32
test esi, esi
cmovle esi, ecx
sub esp, 0x18
mov dword [eax + 0x38], esi
mov ecx, esp
mov dword [esp + 0xdc], 0xf
mov dword [esp + 0xd8], 0
push str.type1
mov byte [esp + 0xcc], 0
call fcn.10007b40
lea eax, [esp + 0xc8]
push eax
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_bool___thiscall_CNetManager::GetScreenConfig_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char_____class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
cmp dword [esp + 0xc0], 0
je 0x10033401
sub esp, 0x18
lea eax, [esp + 0xc8]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
sub esp, 0x18
mov ecx, esp
push 0x10105010
call fcn.10007b40
call fcn.10016470
mov ecx, eax
call fcn.100bea10
movdqu xmm0, xmmword [esp + 0xb0]
sub esp, 0x18
mov eax, esp
push dword [esp + 0xac]
movdqu xmmword [eax], xmm0
push str.shot_max_limit:__d_rule:_s
movq xmm0, qword [esp + 0xe0]
push 1
push 0xe8
push 0x10105044
push 0x1010506c
movq qword [eax + 0x10], xmm0
call fcn.100e13e0
add esp, 0x30
call fcn.10029bf0
mov esi, eax
call fcn.10029bf0
mov ecx, dword [0x101326c0]
mov dword [esp + 0xc], eax
test cl, 1
jne 0x10033481
or ecx, 1
mov dword [0x101326c4], 0x10116298
push 0x100f7170
mov dword [0x101326c0], ecx
call fcn.100ebe7b
add esp, 4
call fcn.10029bf0
mov dword [esp + 8], eax
lea eax, [esp + 0x60]
mov dword [esp + 0x60], vtable.._AV___Func_impl_U___Callable_obj_V___Bind__00_NU___Pmf_wrap_P8CHandleScreenshotEvent__AE_NXZ_NV1____V_std__PAVCHandleScreenshotEvent___std___0A__std__V__allocator_V___Func_class__N___V_std___2__N___V_std__.0
mov dword [esp + 0x64], 0x10014dbd
mov dword [esp + 0x68], esi
mov dword [esp + 0x70], eax
call fcn.100320e0
lea esi, [eax + 0x50]
lea eax, [esp + 0x60]
cmp esi, eax
je 0x100334de
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x100334d2
mov edx, dword [ecx]
cmp ecx, esi
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [esi + 0x10], 0
lea eax, [esp + 0x60]
mov ecx, esi
push eax
call fcn.100d0070
mov ecx, dword [esp + 0x70]
test ecx, ecx
je 0x100334f8
mov edx, dword [ecx]
lea eax, [esp + 0x60]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov eax, dword [esp + 0xc]
mov dword [esp + 0x50], eax
lea eax, [esp + 0x48]
mov dword [esp + 0x48], vtable.._AV___Func_impl_U___Callable_obj_V___Bind__00XU___Pmf_wrap_P8CHandleScreenshotEvent__AEXXZXV1____V_std__PAVCHandleScreenshotEvent___std___0A__std__V__allocator_V___Func_class_X___V_std___2_X___V_std__.0
mov dword [esp + 0x4c], 0x1002a7d0
mov dword [esp + 0x58], eax
call fcn.100320e0
lea esi, [eax + 0x80]
lea eax, [esp + 0x48]
cmp esi, eax
je 0x10033553
mov ecx, dword [esi + 0x10]
test ecx, ecx
je 0x10033547
mov edx, dword [ecx]
cmp ecx, esi
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
mov dword [esi + 0x10], 0
lea eax, [esp + 0x48]
mov ecx, esi
push eax
call fcn.100d0070
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x1003356d
mov edx, dword [ecx]
lea eax, [esp + 0x48]
cmp ecx, eax
setne al
movzx eax, al
push eax
call dword [edx + 0x10]
lea eax, [esp + 0x10]
mov dword [esp + 0x10], vtable.._AV___Func_impl_U___Callable_obj_V___Bind__00_NU___Pmf_wrap_P8CHandleUninstallEvent__AE_NXZ_NV1____V_std__PAVCHandleUninstallEvent___std___0A__std__V__allocator_V___Func_class__N___V_std___2__N___V_std__.0
push eax
push ecx
mov dword [esp + 0x1c], 0x10014dbd
mov dword [esp + 0x20], 0x101326c4
mov dword [esp + 0x28], eax
call fcn.100320e0
add esp, 4
mov ecx, eax
call fcn.100d2740
lea ecx, [esp + 0x10]
call fcn.10014680
mov eax, dword [esp + 8]
mov dword [esp + 0x18], eax
lea eax, [esp + 0x10]
push eax
push ecx
mov dword [esp + 0x18], vtable.._AV___Func_impl_U___Callable_obj_V___Bind__00_NU___Pmf_wrap_P8CHandleScreenshotEvent__AE_NXZ_NV1____V_std__PAVCHandleScreenshotEvent___std___0A__std__V__allocator_V___Func_class__N___V_std___2__N___V_std__.0
mov dword [esp + 0x1c], fcn.1002a810
mov dword [esp + 0x28], eax
call fcn.100320e0
add esp, 4
mov ecx, eax
call fcn.100d2780
lea ecx, [esp + 0x10]
call fcn.10014680
lea eax, [esp + 0x198]
push eax
lea eax, [esp + 0x16c]
push str.__userIdpc__s
push eax
call fcn.10039df0
add esp, 0xc
call fcn.100320e0
sub esp, 0x18
mov ecx, esp
mov dword [eax + 0x1c], 0x2529
push str.ws.clevguard.com
call fcn.10007b40
call fcn.100320e0
mov ecx, eax
call fcn.100d2680
sub esp, 0x18
lea eax, [esp + 0x180]
mov ecx, esp
push 0xffffffffffffffff
push 0
mov dword [ecx + 0x14], 0xf
mov dword [ecx + 0x10], 0
push eax
mov byte [ecx], 0
call fcn.10007d40
call fcn.100320e0
mov ecx, eax
call fcn.100d26e0
call fcn.100320e0
mov ecx, eax
call fcn.100d2360
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::Run_void_]
call fcn.100139f0
mov ecx, eax
call fcn.10013b10
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::RefreshUserToken_void_]
sub esp, 0x18
lea eax, [esp + 0x1b0]
mov ecx, esp
push eax
call fcn.10007b40
call dword [sym.imp.NetCommHelper.dll_public:_static_class_CNetManager____cdecl_CNetManager::GetInstance_void_]
mov ecx, eax
call dword [sym.imp.NetCommHelper.dll_public:_void___thiscall_CNetManager::StartHeartbeat_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___]
push str.Dll_init_success_
push 1
push 0x107
push str..._srcMoniterHelperMonitorMain.cpp
push 0x101050dc
call fcn.100e13e0
add esp, 0x14
call fcn.10032170
mov esi, dword [sym.imp.USER32.dll_GetMessageW]
lea eax, [esp + 0x78]
push 0
push 0
push 0
push eax
call esi
test eax, eax
je 0x10033732
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
lea esp, [esp]
lea eax, [esp + 0x78]
push eax
push 0
push dword [esp + 0x80]
call dword [sym.imp.USER32.dll_TranslateAcceleratorW]
test eax, eax
jne 0x1003371a
lea eax, [esp + 0x78]
push eax
call edi
lea eax, [esp + 0x78]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageW]
push 0
push 0
push 0
lea eax, [esp + 0x84]
push eax
call esi
test eax, eax
jne 0x100336f0
mov edi, dword [esp + 0x2c]
call dword [sym.imp.libcurl.dll_curl_global_cleanup]
push edi
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esp + 0x17c], 0x10
mov esi, dword [sym.imp.MSVCR120.dll_void___cdecl_operator_delete_void__]
jb 0x10033762
push dword [esp + 0x168]
call esi
add esp, 4
cmp dword [esp + 0xc4], 0x10
mov dword [esp + 0x17c], 0xf
mov dword [esp + 0x178], 0
mov byte [esp + 0x168], 0
jb 0x10033796
push dword [esp + 0xb0]
call esi
add esp, 4
cmp dword [esp + 0x194], 0x10
mov dword [esp + 0xc4], 0xf
mov dword [esp + 0xc0], 0
mov byte [esp + 0xb0], 0
jb 0x100337ca
push dword [esp + 0x180]
call esi
add esp, 4
cmp dword [esp + 0x164], 0x10
mov dword [esp + 0x194], 0xf
mov dword [esp + 0x190], 0
mov byte [esp + 0x180], 0
jb 0x100337fe
push dword [esp + 0x150]
call esi
add esp, 4
cmp dword [esp + 0xac], 0x10
mov dword [esp + 0x164], 0xf
mov dword [esp + 0x160], 0
mov byte [esp + 0x150], 0
jb 0x10033832
push dword [esp + 0x98]
call esi
add esp, 4
cmp dword [esp + 0x14c], 8
mov dword [esp + 0xac], 0xf
mov dword [esp + 0xa8], 0
mov byte [esp + 0x98], 0
jb 0x10033866
push dword [esp + 0x138]
call esi
add esp, 4
xor eax, eax
mov dword [esp + 0x14c], 7
cmp dword [esp + 0xec], 8
mov dword [esp + 0x148], 0
mov word [esp + 0x138], ax
jb 0x1003389c
push dword [esp + 0xd8]
call esi
add esp, 4
xor eax, eax
mov dword [esp + 0xec], 7
cmp dword [esp + 0x11c], 8
mov dword [esp + 0xe8], 0
mov word [esp + 0xd8], ax
jb 0x100338d2
push dword [esp + 0x108]
call esi
add esp, 4
xor eax, eax
mov dword [esp + 0x11c], 7
cmp dword [esp + 0x134], 8
mov dword [esp + 0x118], 0
mov word [esp + 0x108], ax
jb 0x10033908
push dword [esp + 0x120]
call esi
add esp, 4
xor eax, eax
mov dword [esp + 0x134], 7
cmp dword [esp + 0x104], 0x10
mov dword [esp + 0x130], 0
mov word [esp + 0x120], ax
jb 0x10033972
push dword [esp + 0xf0]
call esi
add esp, 4
pop edi
pop esi
mov ecx, dword [esp + 0x1194]
xor ecx, esp
call fcn.100ebd7b
mov esp, ebp
pop ebp
ret
push str.MONITER_MUTEX_x32
push str.already_exist___s_
push 1
push 0x6d
push 0x10104d28
push 0x10104d0c
call fcn.100e1770
add esp, 0x18
mov ecx, dword [esp + 0x119c]
pop edi
pop esi
xor ecx, esp
call fcn.100ebd7b
mov esp, ebp
pop ebp
ret