Function at 0x437270
Capabilities:
Create http request
Create process on windows
Create thread
Get disk information
Hide graphical window
Read data from internet
Receive data
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47d91b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x254
movaps xmm0, xmmword [0x492f40]
push esi
mov esi, ecx
mov byte [ebp - 0x15], 1
push edi
lea ecx, [ebp - 0x25]
movups xmmword [ebp - 0x25], xmm0
call fcn.00439280
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x25]
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
push 0
push 0x80000000
push 0
push 0
push esi
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, eax
push 0x1f4
mov dword [ebp - 0xc0], 0xf
call edi
lea eax, [ebp - 0xc0]
push eax
push 0xf
lea eax, [ebp - 0x1b0]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
mov eax, dword [ebp - 0xc0]
lea ecx, [ebp - 0x23]
mov dword [ebp - 0x23], 0xd0c1c0d2
mov dword [ebp - 0x1f], 0xdad3dcd1
mov dword [ebp - 0x1b], 0x9b92d8ca
mov byte [ebp + eax - 0x1b0], 0
mov word [ebp - 0x17], 0x97
mov byte [ebp - 0x15], 1
call fcn.00439460
lea ecx, [ebp - 0x1b0]
lea eax, [ebp - 0x23]
nop dword [eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x437360
test dl, dl
je 0x43735c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x437360
add eax, 2
add ecx, 2
test dl, dl
jne 0x437340
xor eax, eax
jmp 0x437365
sbb eax, eax
or eax, 1
test eax, eax
jne 0x438407
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0xd0b2c5b6
mov dword [ebp - 0x20], 0x869681a4
mov dword [ebp - 0x1c], 0x9d9a979b
mov dword [ebp - 0x18], 0x100dac3
call fcn.00439130
lea eax, [ebp - 0x24]
push eax
call fcn.00429240
add esp, 4
mov edx, 0x4b4120
mov ecx, 0x4b5bf0
call fcn.0043c9f0
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0xd0b2c5b6
mov dword [ebp - 0x20], 0x878093a1
mov dword [ebp - 0x1c], 0x9c85c682
mov dword [ebp - 0x18], 0x100dac3
call fcn.00439130
lea edx, [ebp - 0x24]
mov ecx, 0x4b5ab0
call fcn.0043bec0
xor esi, esi
push ebx
call fcn.00463573
mov bl, al
cmp bl, 0x61
jl 0x4373f1
cmp bl, 0x7a
jle 0x437402
cmp bl, 0x41
jl 0x4373fb
cmp bl, 0x5a
jle 0x437402
lea eax, [ebx - 0x30]
cmp al, 9
ja 0x437428
mov byte [esi + 0x4b6e30], bl
lea ecx, [ebp - 0x2f]
inc esi
mov word [ebp - 0x2f], 0xc7
mov byte [ebp - 0x2d], 1
call fcn.00438ea0
lea edx, [ebp - 0x2f]
mov ecx, 0x4b5ab0
call fcn.0043bec0
cmp bl, 8
jne 0x437444
cmp esi, 1
jl 0x4373e0
mov edx, 0x492c70
mov ecx, 0x4b5ab0
call fcn.0043bec0
dec esi
jmp 0x4373e0
cmp bl, 0xd
jne 0x4373e0
lea ecx, [ebp - 0x2f]
mov byte [esi + 0x4b6e30], 0
mov word [ebp - 0x2f], 0xe7
mov byte [ebp - 0x2d], 1
call fcn.00438ea0
lea eax, [ebp - 0x2f]
push eax
call fcn.00429240
add esp, 4
pop ebx
cmp esi, 1
jg 0x4374fd
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x493c40]
lea ecx, [ebp - 0x4e]
movups xmmword [ebp - 0x4e], xmm0
mov dword [ebp - 0x3e], 0x778c8d9c
mov dword [ebp - 0x3a], 0x2467706e
mov dword [ebp - 0x36], 0x646b734b
mov word [ebp - 0x32], 0x100
call fcn.00438de0
lea edx, [ebp - 0x4e]
mov ecx, 0x4b5ab0
call fcn.0043bec0
push eax
call fcn.0043c170
add esp, 4
mov dword [ebp - 0x13], 0x839a8f9d
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0x94
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
call fcn.00464678
add esp, 4
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x12]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0x12], 0xdfc0d4ae
mov word [ebp - 0xe], 0x100
call fcn.004395c0
push 0
push 0
push 0
push 0
lea eax, [ebp - 0xc4]
push eax
push 0
push 0
lea eax, [ebp - 0x12]
push eax
call dword [sym.imp.KERNEL32.dll_GetVolumeInformationA]
test eax, eax
jne 0x437596
movaps xmm0, xmmword [0x4933a0]
mov ecx, 0x4b4278
movups xmmword [ebp - 0x71], xmm0
push 0x40010
movaps xmm0, xmmword [0x493e90]
movups xmmword [ebp - 0x61], xmm0
mov byte [ebp - 0x31], 1
movaps xmm0, xmmword [0x493860]
movups xmmword [ebp - 0x51], xmm0
movaps xmm0, xmmword [str.y0xG]
movups xmmword [ebp - 0x41], xmm0
call fcn.00439950
push eax
lea ecx, [ebp - 0x71]
call fcn.0042ab20
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x4b421c], 0x10
lea ecx, [ebp - 0xbc]
mov edx, 0x4b4208
cmovae edx, dword [0x4b4208]
call fcn.00434fb0
push eax
mov ecx, 0x4b4180
call fcn.00439a90
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 0
call fcn.00439a40
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xbc]
mov edx, dword [ebp - 0xc4]
call fcn.0043be30
mov dword [ebp - 4], 1
lea edx, [ebp - 0xbc]
cmp dword [ebp - 0xa8], 0x10
lea ecx, [ebp - 0x2c]
cmovae edx, dword [ebp - 0xbc]
call fcn.00434fb0
push eax
mov ecx, 0x4b4290
call fcn.00439a90
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 2
call fcn.00439a40
lea ecx, [ebp - 0xbc]
mov dword [ebp - 4], 3
call fcn.00439a40
lea ecx, [ebp - 0xe4]
mov dword [ebp - 4], 4
call fcn.0043c840
lea ecx, [ebp - 0xe4]
call fcn.0043b050
mov dword [ebp - 4], 5
lea ecx, [ebp - 0x5a]
movaps xmm0, xmmword [0x493ab0]
movups xmmword [ebp - 0x5a], xmm0
mov dword [ebp - 0x3a], 0x787f207a
movaps xmm0, xmmword [0x493850]
movups xmmword [ebp - 0x4a], xmm0
mov dword [ebp - 0x36], 0x29662d61
mov word [ebp - 0x32], 0x100
call fcn.00438bd0
lea ecx, [ebp - 0x5a]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437691
sub ecx, edx
lea eax, [ebp - 0x5a]
push ecx
push eax
mov ecx, 0x4b4238
call fcn.0043b460
cmp dword [0x4b4134], 0x10
mov edx, 0x4b4120
cmovae edx, dword [0x4b4120]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4376c1
sub ecx, esi
push ecx
push edx
mov ecx, 0x4b4238
call fcn.0043b460
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0xd29ecb
mov byte [ebp - 0xd], 1
call fcn.004395f0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4376f0
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b4238
call fcn.0043b460
mov ecx, 0x4b6e30
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437710
sub ecx, edx
push ecx
push 0x4b6e30
mov ecx, 0x4b4238
call fcn.0043b460
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0xd286cb
mov byte [ebp - 0xd], 1
call fcn.004395f0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437742
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b4238
call fcn.0043b460
cmp dword [0x4b42a4], 0x10
mov edx, 0x4b4290
cmovae edx, dword [0x4b4290]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437772
sub ecx, esi
push ecx
push edx
mov ecx, 0x4b4238
call fcn.0043b460
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0xd289cb
mov byte [ebp - 0xd], 1
call fcn.004395f0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4377a0
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b4238
call fcn.0043b460
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0x958c9d
mov byte [ebp - 0xd], 1
call fcn.004395f0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4377d1
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b4238
call fcn.0043b460
lea ecx, [ebp - 0x11]
mov dword [ebp - 0x11], 0xd28dcb
mov byte [ebp - 0xd], 1
call fcn.004395f0
lea ecx, [ebp - 0x11]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437802
sub ecx, edx
lea eax, [ebp - 0x11]
push ecx
push eax
mov ecx, 0x4b4238
call fcn.0043b460
cmp dword [0x4b421c], 0x10
lea ecx, [ebp - 0xbc]
mov edx, 0x4b4208
cmovae edx, dword [0x4b4208]
call fcn.00434fb0
push eax
mov ecx, 0x4b4238
mov byte [ebp - 4], 6
call fcn.004399d0
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 7
call fcn.00439a40
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x25]
movaps xmm0, xmmword [0x492f40]
mov dword [ebp - 0xc8], 0x20
movups xmmword [ebp - 0x25], xmm0
mov byte [ebp - 0x15], 1
call fcn.00439280
push 0
push 0
push 0
push 0
lea eax, [ebp - 0x25]
push eax
call dword [sym.imp.WININET.dll_InternetOpenA]
cmp dword [0x4b424c], 0x10
mov ecx, 0x4b4238
push 0
cmovae ecx, dword [0x4b4238]
push 0x80000000
push 0
push 0
push ecx
push eax
call dword [sym.imp.WININET.dll_InternetOpenUrlA]
push 0x19
mov esi, eax
call edi
lea eax, [ebp - 0xc8]
push eax
push 0x40
lea eax, [ebp - 0x128]
push eax
push esi
call dword [sym.imp.WININET.dll_InternetReadFile]
push 0x19
call edi
mov eax, dword [ebp - 0xc8]
push 0x64
mov byte [ebp + eax - 0x128], 0
call edi
lea ecx, [ebp - 0x1d]
mov dword [ebp - 0x1d], 0xaab1cdc9
mov dword [ebp - 0x19], 0xd6d6d7
mov byte [ebp - 0x15], 1
call fcn.00439590
lea eax, [ebp - 0x1d]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00456950
add esp, 8
test eax, eax
je 0x4379a9
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x4939f0]
lea ecx, [ebp - 0x49]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0x61918c98
mov dword [ebp - 0x35], 0x2d676c
mov byte [ebp - 0x31], 1
call fcn.00439190
lea edx, [ebp - 0x49]
mov ecx, 0x4b5ab0
call fcn.0043bec0
push eax
call fcn.0043c170
add esp, 4
mov dword [ebp - 0x13], 0x839a8f9d
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0x94
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
call fcn.00464678
add esp, 4
mov dword [ebp - 4], 8
lea ecx, [ebp - 0xe4]
call fcn.00439a40
mov ecx, dword [ebp - 0xc]
xor eax, eax
pop edi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x14], 0xaecccab3
mov dword [ebp - 0x10], 0x100d1d4
call fcn.00439650
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00456950
add esp, 8
test eax, eax
je 0x437a4c
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x493b30]
lea ecx, [ebp - 0x49]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0x6f888d8e
mov dword [ebp - 0x35], 0x2d6673
mov byte [ebp - 0x31], 1
call fcn.00439190
lea edx, [ebp - 0x49]
mov ecx, 0x4b5ab0
call fcn.0043bec0
push eax
call fcn.0043c170
add esp, 4
mov dword [ebp - 0x13], 0x839a8f9d
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0x94
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
call fcn.00464678
add esp, 4
mov dword [ebp - 4], 9
jmp 0x43798c
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0xd5afcdb3
mov word [ebp - 0xf], 0xaf
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00456950
add esp, 8
test eax, eax
je 0x437cd8
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x493b50]
lea ecx, [ebp - 0x4b]
movups xmmword [ebp - 0x4b], xmm0
mov dword [ebp - 0x3b], 0x61889a8f
mov dword [ebp - 0x37], 0x4d236773
mov word [ebp - 0x33], 0x41
mov byte [ebp - 0x31], 1
call fcn.00439430
lea edx, [ebp - 0x4b]
mov ecx, 0x4b5ab0
call fcn.0043bec0
push eax
call fcn.0043c170
add esp, 4
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0xa
call fcn.0043c840
lea ecx, [ebp - 0xbc]
call fcn.0043b050
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x49]
movaps xmm0, xmmword [0x493b70]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0x57bb9bb9
mov dword [ebp - 0x35], 0x9224b
mov byte [ebp - 0x31], 1
call fcn.00439190
lea ecx, [ebp - 0x49]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437b14
sub ecx, edx
lea eax, [ebp - 0x49]
push ecx
push eax
lea ecx, [ebp - 0xbc]
call fcn.0043b460
movaps xmm0, xmmword [0x493790]
lea ecx, [ebp - 0x79]
movups xmmword [ebp - 0x79], xmm0
mov dword [ebp - 0x39], 0xe1ec8a0d
movaps xmm0, xmmword [0x493fd0]
movups xmmword [ebp - 0x69], xmm0
mov dword [ebp - 0x35], 0x131c8b
movaps xmm0, xmmword [0x493f40]
movups xmmword [ebp - 0x59], xmm0
mov byte [ebp - 0x31], 1
movaps xmm0, xmmword [0x4937c0]
movups xmmword [ebp - 0x49], xmm0
call fcn.00438ba0
lea ecx, [ebp - 0x79]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437b80
sub ecx, edx
lea eax, [ebp - 0x79]
push ecx
push eax
lea ecx, [ebp - 0xbc]
call fcn.0043b460
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xc
call fcn.0043c840
lea ecx, [ebp - 0x2c]
call fcn.0043b050
mov byte [ebp - 4], 0xd
mov edx, 0x4b4150
cmp dword [0x4b4164], 0x10
cmovae edx, dword [0x4b4150]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437bd0
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.0043b460
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
push 1
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x260]
push 0x40
push 2
push eax
call fcn.00439bc0
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x210], 0
je 0x437c29
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x260]
call fcn.0043c220
lea ecx, [ebp - 0x260]
call fcn.00439b30
cmp dword [0x4b41c4], 0x10
lea ecx, [ebp - 0x12]
mov edi, 0x4b41b0
mov dword [ebp - 0x12], 0x9e8a9e82
cmovae edi, dword [0x4b41b0]
mov esi, 0x4b4150
cmp dword [0x4b4164], 0x10
mov word [ebp - 0xe], 0x100
cmovae esi, dword [0x4b4150]
call fcn.004395c0
push 5
push 0
push edi
push esi
lea eax, [ebp - 0x12]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0x839a8f9d
mov word [ebp - 0xf], 0x94
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
call fcn.00464678
add esp, 4
lea ecx, [ebp - 0x1f8]
call fcn.00439b70
lea ecx, [ebp - 0x1f8]
call fcn.0043aa20
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.00439a40
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x10
call fcn.00439a40
mov dword [ebp - 4], 0x11
jmp 0x43798c
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0xd5b1cdc9
mov word [ebp - 0xf], 0xd5
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00456950
add esp, 8
test eax, eax
je 0x437f6a
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x493b50]
lea ecx, [ebp - 0x4b]
movups xmmword [ebp - 0x4b], xmm0
mov dword [ebp - 0x3b], 0x61889a8f
mov dword [ebp - 0x37], 0x4d236773
mov word [ebp - 0x33], 0x41
mov byte [ebp - 0x31], 1
call fcn.00439430
lea edx, [ebp - 0x4b]
mov ecx, 0x4b5ab0
call fcn.0043bec0
push eax
call fcn.0043c170
add esp, 4
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x12
call fcn.0043c840
lea ecx, [ebp - 0xbc]
call fcn.0043b050
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x49]
movaps xmm0, xmmword [0x493b70]
movups xmmword [ebp - 0x49], xmm0
mov dword [ebp - 0x39], 0x57bb9bb9
mov dword [ebp - 0x35], 0x9224b
mov byte [ebp - 0x31], 1
call fcn.00439190
lea ecx, [ebp - 0x49]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437da0
sub ecx, edx
lea eax, [ebp - 0x49]
push ecx
push eax
lea ecx, [ebp - 0xbc]
call fcn.0043b460
movaps xmm0, xmmword [0x493780]
lea ecx, [ebp - 0x7a]
movups xmmword [ebp - 0x7a], xmm0
mov dword [ebp - 0x3a], 0xe1ec8a0d
movaps xmm0, xmmword [0x493fd0]
movups xmmword [ebp - 0x6a], xmm0
mov dword [ebp - 0x36], 0x14131c8b
movaps xmm0, xmmword [0x493f40]
movups xmmword [ebp - 0x5a], xmm0
mov word [ebp - 0x32], 0x100
movaps xmm0, xmmword [0x4937c0]
movups xmmword [ebp - 0x4a], xmm0
call fcn.00438e70
lea ecx, [ebp - 0x7a]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437e07
sub ecx, edx
lea eax, [ebp - 0x7a]
push ecx
push eax
lea ecx, [ebp - 0xbc]
call fcn.0043b460
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x14
call fcn.0043c840
lea ecx, [ebp - 0x2c]
call fcn.0043b050
mov byte [ebp - 4], 0x15
mov edx, 0x4b4150
cmp dword [0x4b4164], 0x10
cmovae edx, dword [0x4b4150]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437e50
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x2c]
call fcn.0043b460
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
push 1
cmovae eax, dword [ebp - 0x2c]
lea ecx, [ebp - 0x260]
push 0x40
push 2
push eax
call fcn.00439bc0
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x210], 0
je 0x437ea9
lea edx, [ebp - 0xbc]
lea ecx, [ebp - 0x260]
call fcn.0043c220
lea ecx, [ebp - 0x260]
call fcn.00439b30
cmp dword [0x4b41c4], 0x10
lea ecx, [ebp - 0x12]
mov edi, 0x4b41b0
mov dword [ebp - 0x12], 0x9e8a9e82
cmovae edi, dword [0x4b41b0]
mov esi, 0x4b4150
cmp dword [0x4b4164], 0x10
mov word [ebp - 0xe], 0x100
cmovae esi, dword [0x4b4150]
call fcn.004395c0
push 5
push 0
push edi
push esi
lea eax, [ebp - 0x12]
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0x13]
mov dword [ebp - 0x13], 0x839a8f9d
mov word [ebp - 0xf], 0x94
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
call fcn.00464678
add esp, 4
lea ecx, [ebp - 0x1f8]
call fcn.00439b70
lea eax, [ebp - 0x1f8]
mov byte [ebp - 4], 0x17
push eax
mov dword [ebp - method.std::ios_base.virtual_0], vtable.std::ios_base.0
call fcn.0043dea2
add esp, 4
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x18
call fcn.00439a40
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x19
call fcn.00439a40
mov dword [ebp - 4], 0x1a
jmp 0x43798c
lea ecx, [ebp - 0x1d]
mov dword [ebp - 0x1d], 0xd5cccacb
mov dword [ebp - 0x19], 0xd6d1af
mov byte [ebp - 0x15], 1
call fcn.00439590
lea eax, [ebp - 0x1d]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00456950
add esp, 8
test eax, eax
je 0x438019
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x4939f0]
lea ecx, [ebp - 0x55]
movups xmmword [ebp - 0x55], xmm0
mov dword [ebp - 0x35], 0x216a7f
movaps xmm0, xmmword [0x493810]
movups xmmword [ebp - 0x45], xmm0
mov byte [ebp - 0x31], 1
call fcn.00439220
lea edx, [ebp - 0x55]
mov ecx, 0x4b5ab0
call fcn.0043bec0
push eax
call fcn.0043c170
add esp, 4
mov dword [ebp - 0x13], 0x839a8f9d
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0x94
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
call fcn.00464678
add esp, 4
mov dword [ebp - 4], 0x1b
jmp 0x43798c
lea ecx, [ebp - 0x1e]
mov dword [ebp - 0x1e], 0xd3cbcbc8
mov dword [ebp - 0x1a], 0xd7add1d4
mov word [ebp - 0x16], 0x100
call fcn.00439680
lea eax, [ebp - 0x1e]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00456950
add esp, 8
test eax, eax
je 0x4380c9
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x493b40]
lea ecx, [ebp - 0x4c]
movups xmmword [ebp - 0x4c], xmm0
mov dword [ebp - 0x3c], 0x789ade8e
mov dword [ebp - 0x38], 0x61716b71
mov dword [ebp - 0x34], 0x1002861
call fcn.00439250
lea edx, [ebp - 0x4c]
mov ecx, 0x4b5ab0
call fcn.0043bec0
push eax
call fcn.0043c170
add esp, 4
mov dword [ebp - 0x13], 0x839a8f9d
lea ecx, [ebp - 0x13]
mov word [ebp - 0xf], 0x94
mov byte [ebp - 0xd], 1
call fcn.00439620
lea eax, [ebp - 0x13]
push eax
call fcn.00464678
add esp, 4
mov dword [ebp - 4], 0x1c
jmp 0x43798c
cmp dword [0x4b4194], 0x10
mov eax, 0x4b4180
cmovae eax, dword [0x4b4180]
push eax
lea eax, [ebp - 0x128]
push eax
call fcn.00456950
add esp, 8
test eax, eax
je 0x4382f7
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0x30], 0
call fcn.00439b10
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x9e8681bd
mov dword [ebp - 0x20], 0x959fb085
mov dword [ebp - 0x1c], 0x9dd99d9b
mov dword [ebp - 0x18], 0x1009f81
call fcn.00439130
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
call fcn.00429f70
test eax, eax
jne 0x438180
nop dword [eax]
cmp dword [ebp - 0x30], 0
jne 0x438180
push 0x1f4
call edi
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x9e8681bd
mov dword [ebp - 0x20], 0x959fb085
mov dword [ebp - 0x1c], 0x9dd99d9b
mov dword [ebp - 0x18], 0x1009f81
call fcn.00439130
lea edx, [ebp - 0x30]
lea ecx, [ebp - 0x24]
call fcn.00429f70
test eax, eax
je 0x438140
lea ecx, [ebp - 0x24]
mov dword [ebp - 0x24], 0x9e8681bd
mov dword [ebp - 0x20], 0x959fb085
mov dword [ebp - 0x1c], 0x9dd99d9b
mov dword [ebp - 0x18], 0x1009f81
call fcn.00439130
mov edx, dword [0x4b6eb0]
lea ecx, [ebp - 0x24]
call fcn.00430000
lea ecx, [ebp - 0x1c]
mov dword [0x4b6ed8], eax
mov dword [ebp - 0x1c], 0x93c1acae
mov dword [ebp - 0x18], 0x1009f93
call fcn.00439650
mov edx, dword [0x4b6eb0]
lea ecx, [ebp - 0x1c]
call fcn.00430000
mov ecx, dword [0x4b6ed8]
mov edx, dword [ebp - 0x30]
mov dword [0x4b6e90], edx
test ecx, ecx
je 0x43821e
add dword [0x4b70f0], ecx
add dword [0x4b7034], ecx
add dword [0x4b7064], ecx
add dword [0x4b6d28], ecx
add dword [0x4b7100], ecx
add dword [0x4b703c], ecx
add dword [0x4b70e8], ecx
add dword [0x4b6ea0], ecx
lea ecx, [ebp - 0xcc]
add eax, 0x113347
push ecx
push 1
lea ecx, [ebp - 0xa1]
push ecx
push eax
push edx
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov edx, 0x435170
mov dword [ebp - 0x10], 0
lea ecx, [ebp - 0xcc]
call fcn.0043cee0
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x1c]
call fcn.0043cf10
lea ecx, [ebp - 0xcc]
call fcn.0043c810
lea ecx, [ebp - 0x1c]
mov byte [ebp - 4], 0x1f
call fcn.0042a220
mov byte [ebp - 4], 0x1d
cmp dword [ebp - 0x18], 0
jne 0x438539
lea eax, [ebp - 0x10]
push eax
push 0
push 0
push 0x434d80
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
call fcn.00436e00
call fcn.00436a60
call fcn.0042b440
mov ecx, dword [0x4b6d20]
movss xmm3, dword [0x492da8]
push 0x49290c
push 0
mov ecx, dword [ecx + 0x98]
push 0x12
push 0x49dbd8
call fcn.00420430
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call fcn.00436720
push dword [0x4b7168]
call edi
jmp 0x4382e8
push 0
push 0
push 0
push 0x429f40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x493ad0]
lea ecx, [ebp - 0x7b]
movups xmmword [ebp - 0x7b], xmm0
push fcn.0043c170
movaps xmm0, xmmword [0x493200]
movups xmmword [ebp - 0x6b], xmm0
mov dword [ebp - 0x3b], 0x585b415f
movaps xmm0, xmmword [0x493870]
movups xmmword [ebp - 0x5b], xmm0
mov dword [ebp - 0x37], 0x40565c1f
movaps xmm0, xmmword [0x4937f0]
movups xmmword [ebp - 0x4b], xmm0
mov word [ebp - 0x33], 0x68
mov byte [ebp - 0x31], 1
call fcn.00438540
mov edx, eax
mov ecx, 0x4b5ab0
call fcn.0043bec0
mov ecx, eax
call fcn.0043a740
movaps xmm0, xmmword [0x493280]
mov ecx, 0x4b4278
movups xmmword [ebp - 0xa0], xmm0
push 0x10
movaps xmm0, xmmword [0x493fb0]
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x40], 0x7f282963
movaps xmm0, xmmword [0x493be0]
movups xmmword [ebp - 0x80], xmm0
mov dword [ebp - 0x3c], 0x6343339
movaps xmm0, xmmword [0x493ff0]
movups xmmword [ebp - 0x70], xmm0
mov dword [ebp - 0x38], 0x1c321237
movaps xmm0, xmmword [0x494090]
movups xmmword [ebp - 0x60], xmm0
mov dword [ebp - 0x34], 0x100100e
movaps xmm0, xmmword [0x493220]
movups xmmword [ebp - 0x50], xmm0
call fcn.00439950
push eax
lea ecx, [ebp - 0xa0]
call fcn.00438570
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0
push 0
push 0
push 0x429f40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov ecx, 0xc
call fcn.004370e0
movaps xmm0, xmmword [0x493ad0]
lea ecx, [ebp - 0x130]
movups xmmword [ebp - 0x130], xmm0
push fcn.0043c170
movaps xmm0, xmmword [0x493200]
movups xmmword [ebp - 0x120], xmm0
mov dword [ebp - 0xf0], 0x585b415f
movaps xmm0, xmmword [0x493870]
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0xec], 0x40565c1f
movaps xmm0, xmmword [0x4937f0]
movups xmmword [ebp - 0x100], xmm0
mov word [ebp - 0xe8], 0x68
mov byte [ebp - 0xe6], 1
call fcn.00438540
mov edx, eax
mov ecx, 0x4b5ab0
call fcn.0043bec0
mov ecx, eax
call fcn.0043a740
movaps xmm0, xmmword [0x493270]
mov ecx, 0x4b4278
movups xmmword [ebp - 0x1a0], xmm0
push 0x10
movaps xmm0, xmmword [0x493fb0]
movups xmmword [ebp - 0x190], xmm0
mov dword [ebp - 0x140], 0x7f282963
movaps xmm0, xmmword [0x493be0]
movups xmmword [ebp - 0x180], xmm0
mov dword [ebp - 0x13c], 0x6343339
movaps xmm0, xmmword [0x493ff0]
movups xmmword [ebp - 0x170], xmm0
mov dword [ebp - 0x138], 0x1c321237
movaps xmm0, xmmword [0x494090]
movups xmmword [ebp - 0x160], xmm0
mov dword [ebp - 0x134], 0x100100e
movaps xmm0, xmmword [0x493220]
movups xmmword [ebp - 0x150], xmm0
call fcn.00439950
push eax
lea ecx, [ebp - 0x1a0]
jmp 0x4383f1
call fcn.00464683
int3