Function at 0x436450
Capabilities:
Contain obfuscated stackstrings
Create http request
Create process on windows
Create thread
Get disk information
Hide graphical window
Read data from internet
Receive data
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47c42b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x248
push ebx
push esi
push edi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0xe0e295e6
mov dword [ebp - 0x20], 0xb6a6b194
mov dword [ebp - 0x1c], 0xadaaa7ab
mov dword [ebp - 0x18], 0x100eaf3
call fcn.00437ee0
lea eax, [ebp - 0x24]
push eax
call fcn.00429020
add esp, 4
mov edx, 0x4b2120
mov ecx, 0x4b3b78
call fcn.0043b490
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0xe0e295e6
mov dword [ebp - 0x20], 0xb7b0a391
mov dword [ebp - 0x1c], 0xacb5f6b2
mov dword [ebp - 0x18], 0x100eaf3
call fcn.00437ee0
lea edx, [ebp - 0x24]
mov ecx, 0x4b3a38
call fcn.0043aae0
xor esi, esi
call fcn.004620e3
mov bl, al
cmp bl, 0x61
jl 0x4364f4
cmp bl, 0x7a
jle 0x436505
cmp bl, 0x41
jl 0x4364fe
cmp bl, 0x5a
jle 0x436505
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x43652b
mov byte [esi + 0x4b4db8], bl
lea ecx, [ebp - 0x2f]
inc esi
mov word [ebp - 0x2f], 0x97
mov byte [ebp - 0x2d], 1
call fcn.00437c50
lea edx, [ebp - 0x2f]
mov ecx, 0x4b3a38
call fcn.0043aae0
cmp bl, 8
jne 0x436547
cmp esi, 1
jl 0x4364e3
mov edx, 0x490c48
mov ecx, 0x4b3a38
call fcn.0043aae0
dec esi
jmp 0x4364e3
cmp bl, 0xd
jne 0x4364e3
lea ecx, [ebp - 0x2f]
mov byte [esi + 0x4b4db8], 0
mov word [ebp - 0x2f], 0xb7
mov byte [ebp - 0x2d], 1
call fcn.00437c50
lea eax, [ebp - 0x2f]
push eax
call fcn.00429020
add esp, 4
cmp esi, 1
jg 0x436600
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491d00]
lea ecx, [ebp - 0x4e]
movups xmmword [ebp - 0x4e], xmm0
mov dword [ebp - 0x3e], 0xa7bcbdac
mov dword [ebp - 0x3a], 0xf4b7a0be
mov dword [ebp - 0x36], 0xb4bba39b
mov word [ebp - 0x32], 0x100
call fcn.00437b90
lea edx, [ebp - 0x4e]
mov ecx, 0x4b3a38
call fcn.0043aae0
push eax
call fcn.0043ad90
add esp, 4
mov dword [ebp - 0x13], 0xb3cadfcd
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0xa4
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
call fcn.004631e8
add esp, 4
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x12]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x12], 0xef9084fe
mov word [ebp - 0xe], 0x100
call fcn.00438370
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc4]
push eax
push 0
push 0
lea eax, [ebp - 0x12]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
jne 0x436699
movaps xmm0, xmmword [0x490fa0]
mov ecx, 0x4b2278
movups xmmword [ebp - 0x71], xmm0
push 0x40010
movaps xmm0, xmmword [0x491a90]
movups xmmword [ebp - 0x61], xmm0
mov byte [ebp - 0x31], 1
movaps xmm0, xmmword [0x491d10]
movups xmmword [ebp - 0x51], xmm0
movaps xmm0, xmmword [0x490ed0]
movups xmmword [ebp - 0x41], xmm0
call fcn.00438560
push eax
lea ecx, [ebp - 0x71]
call fcn.0042a200
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x4b221c], 0x10
lea ecx, [ebp - 0xc0]
mov edx, 0x4b2208
cmovae edx, dword [0x4b2208]
call fcn.00434270
push eax
mov ecx, 0x4b2180
call fcn.004386a0
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 0
call fcn.00438650
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xc0]
mov edx, dword [ebp - 0xc4]
call fcn.0043aa50
mov dword [ebp - 4], 1
lea edx, [ebp - 0xc0]
cmp dword [ebp - 0xac], 0x10
lea ecx, [ebp - 0x2c]
cmovae edx, dword [ebp - 0xc0]
call fcn.00434270
push eax
mov ecx, 0x4b2290
call fcn.004386a0
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00438650
lea ecx, [ebp - 0xc0]
mov dword [ebp - 4], 3
call fcn.00438650
lea ecx, [ebp - 0xe4]
mov dword [ebp - 4], 4
call fcn.0043b2e0
lea ecx, [ebp - 0xe4]
call fcn.00439c70
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x5a]
movaps xmm0, xmmword [0x491d90]
movups xmmword [ebp - 0x5a], xmm0
mov dword [ebp - 0x3a], 0x88aff0aa
movaps xmm0, xmmword [0x491ed0]
movups xmmword [ebp - 0x4a], xmm0
mov dword [ebp - 0x36], 0xd996dd91
mov word [ebp - 0x32], 0x100
call fcn.00437980
lea ecx, [ebp - 0x5a]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436794
sub ecx, edx
lea eax, [ebp - 0x5a]
push ecx
push eax
mov ecx, 0x4b2238
call fcn.0043a080
cmp dword [0x4b2134], 0x10
mov edx, 0x4b2120
cmovae edx, dword [0x4b2120]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4367c4
sub ecx, esi
push ecx
push edx
mov ecx, 0x4b2238
call fcn.0043a080
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0x82ce9b
mov byte [ebp - 0xd], 1
call fcn.004383a0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4367f2
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b2238
call fcn.0043a080
mov ecx, 0x4b4db8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436812
sub ecx, edx
push ecx
push 0x4b4db8
mov ecx, 0x4b2238
call fcn.0043a080
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0x82d69b
mov byte [ebp - 0xd], 1
call fcn.004383a0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436844
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b2238
call fcn.0043a080
cmp dword [0x4b22a4], 0x10
mov edx, 0x4b2290
cmovae edx, dword [0x4b2290]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436874
sub ecx, esi
push ecx
push edx
mov ecx, 0x4b2238
call fcn.0043a080
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0x82d99b
mov byte [ebp - 0xd], 1
call fcn.004383a0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4368a2
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b2238
call fcn.0043a080
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0xc5dccd
mov byte [ebp - 0xd], 1
call fcn.004383a0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4368d3
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b2238
call fcn.0043a080
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0x82dd9b
mov byte [ebp - 0xd], 1
call fcn.004383a0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436904
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b2238
call fcn.0043a080
cmp dword [0x4b221c], 0x10
lea ecx, [ebp - 0xc0]
mov edx, 0x4b2208
cmovae edx, dword [0x4b2208]
call fcn.00434270
push eax
mov ecx, 0x4b2238
mov byte [ebp - 4], 6
call fcn.004385e0
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 7
call fcn.00438650
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x25]
movaps xmm0, xmmword [0x490ec0]
mov dword [ebp - 0xc8], 0x20
movups xmmword [ebp - 0x25], xmm0
mov byte [ebp - 0x15], 1
call fcn.00438030
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x25]
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
cmp dword [0x4b224c], 0x10
mov ecx, 0x4b2238
push 0
cmovae ecx, dword [0x4b2238]
push 0x80000000
push 0
push 0
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, eax
push 0x19
call ebx
lea eax, [ebp - 0xc8]
push eax
push 0x40
lea eax, [ebp - 0x1a0]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
push 0x19
call ebx
mov eax, dword [ebp - 0xc8]
push 0x64
mov byte [ebp + eax - 0x1a0], 0
call ebx
lea ecx, [ebp - 0x1d]
mov dword [ebp - 0x1d], 0x9ae19d99
mov dword [ebp - 0x19], 0xe6e6e7
mov byte [ebp - 0x15], 1
call fcn.00438340
lea eax, [ebp - 0x1d]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.004554c0
add esp, 8
test eax, eax
je 0x436ab2
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491f30]
lea ecx, [ebp - 0x49]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0xb1a1bca8
mov dword [ebp - 0x35], 0xfdb7bc
mov byte [ebp - 0x31], 1
call fcn.00437f40
lea edx, [ebp - 0x49]
mov ecx, 0x4b3a38
call fcn.0043aae0
push eax
call fcn.0043ad90
add esp, 4
mov dword [ebp - 0x13], 0xb3cadfcd
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0xa4
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
call fcn.004631e8
add esp, 4
mov dword [ebp - 4], 8
lea ecx, [ebp - 0xe4]
call fcn.00438650
mov ecx, dword [ebp - 0xc]
xor al, al
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0x9e9c9ae3
mov dword [ebp - 0x10], 0x100e1e4
call fcn.00438400
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.004554c0
add esp, 8
test eax, eax
je 0x436b55
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491e40]
lea ecx, [ebp - 0x49]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0xbfb8bdbe
mov dword [ebp - 0x35], 0xfdb6a3
mov byte [ebp - 0x31], 1
call fcn.00437f40
lea edx, [ebp - 0x49]
mov ecx, 0x4b3a38
call fcn.0043aae0
push eax
call fcn.0043ad90
add esp, 4
mov dword [ebp - 0x13], 0xb3cadfcd
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0xa4
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
call fcn.004631e8
add esp, 4
mov dword [ebp - 4], 9
jmp 0x436a94
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0xe5ff9de3
mov word [ebp - 0xf], 0x9f
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.004554c0
add esp, 8
test eax, eax
je 0x436dd8
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491e20]
lea ecx, [ebp - 0x4b]
movups xmmword [ebp - 0x4b], xmm0
mov dword [ebp - 0x3b], 0xb1b8aabf
mov dword [ebp - 0x37], 0x9df3b7a3
mov word [ebp - 0x33], 0x91
mov byte [ebp - 0x31], 1
call fcn.004381e0
lea edx, [ebp - 0x4b]
mov ecx, 0x4b3a38
call fcn.0043aae0
push eax
call fcn.0043ad90
add esp, 4
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xa
call fcn.0043b2e0
lea ecx, [ebp - 0xc0]
call fcn.00439c70
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x49]
movaps xmm0, xmmword [0x491e50]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0x878bab89
mov dword [ebp - 0x35], 0xd9f29b
mov byte [ebp - 0x31], 1
call fcn.00437f40
lea ecx, [ebp - 0x49]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436c20
sub ecx, edx
lea eax, [ebp - 0x49]
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.0043a080
movaps xmm0, xmmword [0x491c00]
lea ecx, [ebp - 0x79]
movups xmmword [ebp - 0x79], xmm0
mov dword [ebp - 0x39], 0xd13c5add
movaps xmm0, xmmword [0x4912a0]
movups xmmword [ebp - 0x69], xmm0
mov dword [ebp - 0x35], 0x232cbb
movaps xmm0, xmmword [0x491320]
movups xmmword [ebp - 0x59], xmm0
mov byte [ebp - 0x31], 1
movaps xmm0, xmmword [str._r__bJ]
movups xmmword [ebp - 0x49], xmm0
call fcn.00437950
lea ecx, [ebp - 0x79]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436c85
sub ecx, edx
lea eax, [ebp - 0x79]
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.0043a080
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.0043b2e0
lea ecx, [ebp - 0x2c]
call fcn.00439c70
mov byte [ebp - 4], 0xd
mov edx, 0x4b2150
cmp dword [0x4b2164], 0x10
cmovae edx, dword [0x4b2150]
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436cd0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.0043a080
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
push 1
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x250]
push 0x40
push 2
push eax
call fcn.004387d0
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x200], 0
je 0x436d29
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x250]
call fcn.0043ae40
lea ecx, [ebp - 0x250]
call fcn.00438740
cmp dword [0x4b21c4], 0x10
lea ecx, [ebp - 0x12]
mov edi, 0x4b21b0
mov dword [ebp - 0x12], 0xaedaced2
cmovae edi, dword [0x4b21b0]
mov esi, 0x4b2150
cmp dword [0x4b2164], 0x10
mov word [ebp - 0xe], 0x100
cmovae esi, dword [0x4b2150]
call fcn.00438370
push 5
push 0
push edi
push esi
lea eax, [ebp - 0x12]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0xb3cadfcd
mov word [ebp - 0xf], 0xa4
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
call fcn.004631e8
add esp, 4
lea ecx, [ebp - 0x1e8]
call fcn.00438780
lea ecx, [ebp - 0x1e8]
call fcn.00439640
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.00438650
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x10
call fcn.00438650
mov dword [ebp - 4], 0x11
jmp 0x436a94
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0xe5e19d99
mov word [ebp - 0xf], 0xe5
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.004554c0
add esp, 8
test eax, eax
je 0x43706a
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491e20]
lea ecx, [ebp - 0x4b]
movups xmmword [ebp - 0x4b], xmm0
mov dword [ebp - 0x3b], 0xb1b8aabf
mov dword [ebp - 0x37], 0x9df3b7a3
mov word [ebp - 0x33], 0x91
mov byte [ebp - 0x31], 1
call fcn.004381e0
lea edx, [ebp - 0x4b]
mov ecx, 0x4b3a38
call fcn.0043aae0
push eax
call fcn.0043ad90
add esp, 4
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x12
call fcn.0043b2e0
lea ecx, [ebp - 0xc0]
call fcn.00439c70
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x49]
movaps xmm0, xmmword [0x491e50]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0x878bab89
mov dword [ebp - 0x35], 0xd9f29b
mov byte [ebp - 0x31], 1
call fcn.00437f40
lea ecx, [ebp - 0x49]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436ea0
sub ecx, edx
lea eax, [ebp - 0x49]
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.0043a080
movaps xmm0, xmmword [0x491bf0]
lea ecx, [ebp - 0x7a]
movups xmmword [ebp - 0x7a], xmm0
mov dword [ebp - 0x3a], 0xd13c5add
movaps xmm0, xmmword [0x4912a0]
movups xmmword [ebp - 0x6a], xmm0
mov dword [ebp - 0x36], 0x24232cbb
movaps xmm0, xmmword [0x491320]
movups xmmword [ebp - 0x5a], xmm0
mov word [ebp - 0x32], 0x100
movaps xmm0, xmmword [str._r__bJ]
movups xmmword [ebp - 0x4a], xmm0
call fcn.00437c20
lea ecx, [ebp - 0x7a]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436f07
sub ecx, edx
lea eax, [ebp - 0x7a]
push ecx
push eax
lea ecx, [ebp - 0xc0]
call fcn.0043a080
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0043b2e0
lea ecx, [ebp - 0x2c]
call fcn.00439c70
mov byte [ebp - 4], 0x15
mov edx, 0x4b2150
cmp dword [0x4b2164], 0x10
cmovae edx, dword [0x4b2150]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x436f50
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.0043a080
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
push 1
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x250]
push 0x40
push 2
push eax
call fcn.004387d0
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x200], 0
je 0x436fa9
lea edx, [ebp - 0xc0]
lea ecx, [ebp - 0x250]
call fcn.0043ae40
lea ecx, [ebp - 0x250]
call fcn.00438740
cmp dword [0x4b21c4], 0x10
lea ecx, [ebp - 0x12]
mov edi, 0x4b21b0
mov dword [ebp - 0x12], 0xaedaced2
cmovae edi, dword [0x4b21b0]
mov esi, 0x4b2150
cmp dword [0x4b2164], 0x10
mov word [ebp - 0xe], 0x100
cmovae esi, dword [0x4b2150]
call fcn.00438370
push 5
push 0
push edi
push esi
lea eax, [ebp - 0x12]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0xb3cadfcd
mov word [ebp - 0xf], 0xa4
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
call fcn.004631e8
add esp, 4
lea ecx, [ebp - 0x1e8]
call fcn.00438780
lea eax, [ebp - 0x1e8]
mov byte [ebp - 4], 0x17
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0043ca12
add esp, 4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00438650
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x19
call fcn.00438650
mov dword [ebp - 4], 0x1a
jmp 0x436a94
lea ecx, [ebp - 0x1d]
mov dword [ebp - 0x1d], 0xe59c9a9b
mov dword [ebp - 0x19], 0xe6e19f
mov byte [ebp - 0x15], 1
call fcn.00438340
lea eax, [ebp - 0x1d]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.004554c0
add esp, 8
test eax, eax
je 0x437115
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491f30]
lea ecx, [ebp - 0x55]
movups xmmword [ebp - 0x55], xmm0
mov dword [ebp - 0x35], 0xf1baaf
movaps xmm0, xmmword [0x491e70]
movups xmmword [ebp - 0x45], xmm0
mov byte [ebp - 0x31], 1
call fcn.00437fd0
lea edx, [ebp - 0x55]
mov ecx, 0x4b3a38
call fcn.0043aae0
push eax
call fcn.0043ad90
add esp, 4
mov dword [ebp - 0x13], 0xb3cadfcd
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0xa4
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
call fcn.004631e8
add esp, 4
mov dword [ebp - 4], 0x1b
jmp 0x436a94
lea ecx, [ebp - 0x1e]
mov dword [ebp - 0x1e], 0xe39b9b98
mov dword [ebp - 0x1a], 0xe79de1e4
mov word [ebp - 0x16], 0x100
call fcn.00438430
lea eax, [ebp - 0x1e]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.004554c0
add esp, 8
test eax, eax
je 0x4371c1
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491e30]
lea ecx, [ebp - 0x4c]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0xa8aaeebe
mov dword [ebp - 0x38], 0xb1a1bba1
mov dword [ebp - 0x34], 0x100f8b1
call fcn.00438000
lea edx, [ebp - 0x4c]
mov ecx, 0x4b3a38
call fcn.0043aae0
push eax
call fcn.0043ad90
add esp, 4
mov dword [ebp - 0x13], 0xb3cadfcd
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0xa4
mov byte [ebp - 0xd], 1
call fcn.004383d0
lea eax, [ebp - 0x13]
push eax
call fcn.004631e8
add esp, 4
mov dword [ebp - 4], 0x1c
jmp 0x436a94
cmp dword [0x4b2194], 0x10
mov eax, 0x4b2180
cmovae eax, dword [0x4b2180]
push eax
lea eax, [ebp - 0x1a0]
push eax
call fcn.004554c0
add esp, 8
test eax, eax
je 0x4373df
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x30], 0
call fcn.00438720
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0xaed6d1ed
mov dword [ebp - 0x20], 0xa5af80b5
mov dword [ebp - 0x1c], 0xade9adab
mov dword [ebp - 0x18], 0x100afb1
call fcn.00437ee0
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
call fcn.00429d50
test eax, eax
jne 0x437275
cmp dword [ebp - 0x30], 0
jne 0x437275
push 0x1f4
call ebx
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0xaed6d1ed
mov dword [ebp - 0x20], 0xa5af80b5
mov dword [ebp - 0x1c], 0xade9adab
mov dword [ebp - 0x18], 0x100afb1
call fcn.00437ee0
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
call fcn.00429d50
test eax, eax
je 0x437235
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0xaed6d1ed
mov dword [ebp - 0x20], 0xa5af80b5
mov dword [ebp - 0x1c], 0xade9adab
mov dword [ebp - 0x18], 0x100afb1
call fcn.00437ee0
mov edx, dword [0x4b4e38]
lea ecx, [ebp - 0x24]
call fcn.0042f630
mov ecx, dword [ebp - 0x30]
mov dword [0x4b4e60], eax
mov dword [0x4b4e18], ecx
test eax, eax
je 0x4372e9
add dword [0x4b5078], eax
add dword [0x4b4fbc], eax
add dword [0x4b4fec], eax
add dword [0x4b4cb0], eax
add dword [0x4b5088], eax
add dword [0x4b4fc4], eax
add dword [0x4b5070], eax
add dword [0x4b4e28], eax
mov edx, 0x434430
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0xcc]
call fcn.0043b980
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c]
call fcn.0043b9b0
lea ecx, [ebp - 0xcc]
call fcn.0043b2b0
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1f
call fcn.00429f10
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x18], 0
jne 0x43750b
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x434040
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00435f50
call fcn.00435bd0
call fcn.0042aac0
mov eax, dword [0x4b4ca8]
lea ecx, [ebp - 0xa8]
mov ebx, dword [eax + 0x98]
call fcn.0041fec0
mov esi, eax
lea edi, [ebp - 0x160]
mov ecx, 0x1e
lea eax, [ebp - 0x160]
rep movsd dword es:[edi], dword [esi]
push eax
mov ecx, ebx
mov dword [ebp - 0x160], 0x49bbd8
mov dword [ebp - 0x15c], 0x12
mov dword [ebp - 0x150], 0x41900000
mov dword [ebp - 0x130], 0x490908
call fcn.004200e0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.00435890
push dword [0x4b50f0]
call esi
jmp 0x4373d0
push 0
push 0
push 0
push 0x429d20
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0xc
call fcn.00436230
movaps xmm0, xmmword [0x491d80]
lea ecx, [ebp - 0x7b]
movups xmmword [ebp - 0x7b], xmm0
push fcn.0043ad90
movaps xmm0, xmmword [0x491fe0]
movups xmmword [ebp - 0x6b], xmm0
mov dword [ebp - 0x3b], 0x688b918f
movaps xmm0, xmmword [0x491c80]
movups xmmword [ebp - 0x5b], xmm0
mov dword [ebp - 0x37], 0x70666c2f
movaps xmm0, xmmword [0x491ca0]
movups xmmword [ebp - 0x4b], xmm0
mov word [ebp - 0x33], 0x58
mov byte [ebp - 0x31], 1
call fcn.00437520
push ecx
mov edx, eax
mov ecx, 0x4b3a38
call fcn.0043aae0
add esp, 4
mov ecx, eax
call fcn.00439360
movaps xmm0, xmmword [0x490f80]
mov ecx, 0x4b2278
movups xmmword [ebp - 0x158], xmm0
push 0x10
movaps xmm0, xmmword [0x490f90]
movups xmmword [ebp - 0x148], xmm0
mov dword [ebp - 0xf8], 0xf787933
movaps xmm0, xmmword [0x4917f0]
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0xf4], 0x76444349
movaps xmm0, xmmword [0x4912b0]
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0xf0], 0x6c426247
movaps xmm0, xmmword [str.Guqplpm_im]
movups xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0xec], 0x100607e
movaps xmm0, xmmword [0x491be0]
movups xmmword [ebp - 0x108], xmm0
call fcn.00438560
push eax
lea ecx, [ebp - 0x158]
call fcn.00437550
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.004631f3
int3