Function at 0x43c7f0
Capabilities:
Create thread
Hide graphical window

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x43f9d0
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x70
mov eax, dword [0x44900c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xorps xmm0, xmm0
xor esi, esi
movups xmmword [ebp - 0x80], xmm0
mov edi, 0xf
mov dword [ebp - 0x70], esi
push esi
mov dword [ebp - 0x6c], edi
mov byte [ebp - 0x80], 0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
add esp, 4
lea eax, [eax + eax*4]
push eax
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_srand]
add esp, 4
mov dword [ebp - 0x68], 8
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
xor edx, edx
mov ecx, 0x3e
div ecx
mov cl, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz]
mov byte [ebp - 0x1c], cl
cmp esi, edi
jae 0x43c89a
lea eax, [esi + 1]
cmp edi, 0x10
mov dword [ebp - 0x70], eax
lea eax, [ebp - 0x80]
cmovae eax, dword [ebp - 0x80]
mov byte [eax + esi], cl
mov byte [eax + esi + 1], 0
jmp 0x43c8a9
push dword [ebp - 0x1c]
push dword [ebp - 0x1c]
push ecx
lea ecx, [ebp - 0x80]
call fcn.00404170
sub dword [ebp - 0x68], 1
je 0x43c8b7
mov edi, dword [ebp - 0x6c]
mov esi, dword [ebp - 0x70]
jmp 0x43c864
mov ecx, dword [0x449224]
cmp ecx, 0x10
jb 0x43c8f0
mov eax, dword [0x449210]
inc ecx
cmp ecx, 0x1000
jb 0x43c8e6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x43cb5c
mov eax, edx
push ecx
push eax
call fcn.0043dc46
add esp, 8
movups xmm0, xmmword [ebp - 0x80]
push 0x80
movups xmmword [0x449210], xmm0
movq xmm0, qword [ebp - 0x70]
movq qword [0x449220], xmm0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
cmp dword [0x449224], 0x10
mov esi, 0x449210
push 0
cmovae esi, dword [0x449210]
mov dword [0x449a60], 0x30
mov dword [0x449a64], 0x40
mov dword [0x449a68], 0x4065e0
mov dword [0x449a6c], 0
mov dword [0x449a70], 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
xorps xmm0, xmm0
mov dword [0x449a74], eax
push 0x449a60
movups xmmword [0x449a78], xmm0
mov dword [0x449a88], 0x44075c
mov dword [0x449a8c], 0
call dword [sym.imp.USER32.dll_RegisterClassExA]
push 0
push dword [0x449a74]
push 0
push 0
push 0x190
push 0x258
push 0x190
push 0x258
push 0x80000000
push esi
push dword [0x449a88]
push 0
call dword [sym.imp.USER32.dll_CreateWindowExA]
push 2
push 0xff
push 0
push eax
mov dword [0x449a58], eax
call dword [sym.imp.USER32.dll_SetLayeredWindowAttributes]
push 0xa
push dword [0x449a58]
call dword [sym.imp.USER32.dll_ShowWindow]
push dword [0x449a58]
call dword [sym.imp.USER32.dll_UpdateWindow]
push 0x20
mov dword [ebp - 4], 0
call dword [sym.imp.d3d9.dll_Direct3DCreate9]
mov ecx, eax
mov dword [0x449a54], ecx
test ecx, ecx
je 0x43ca9e
push 0x449a5c
push 0x449a90
push 0x40
push dword [0x449a58]
xorps xmm0, xmm0
mov dword [0x449aa4], 0
push 1
movlpd qword [0x449a90], xmm0
movlpd qword [0x449a9c], xmm0
mov dword [0x449aac], 0
movlpd qword [0x449abc], xmm0
mov dword [0x449ab0], 1
mov dword [0x449aa8], 1
mov dword [0x449a98], 0
mov dword [0x449ab4], 1
mov dword [0x449ab8], 0x50
mov dword [0x449ac4], 1
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.00406890
push 8
push ecx
call fcn.0043cfe0
cmp dword [0x449060], 0x10
mov eax, 0x44904c
push dword [0x44905c]
cmovae eax, dword [0x44904c]
push eax
call fcn.0043d3e8
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00404e30
add esp, 8
mov dword [ebp - 0x78], 0
cmp dword [ebp - 0x24], 8
lea ecx, [ebp - 0x60]
lea eax, [ebp - 0x38]
mov dword [ebp - 0x74], 0xffff
cmovae eax, dword [ebp - 0x38]
push 0xffffffffffffffff
push 3
push ecx
push eax
call fcn.0043d633
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x70], eax
push ecx
push eax
lea ecx, [ebp - 0x78]
call fcn.00406070
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x70]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x1c], 0x449044
test eax, eax
je 0x43cb62
cmp eax, 1
sete byte [ebp - 0x61]
mov ecx, dword [ebp - 0x24]
cmp ecx, 8
jb 0x43cb7a
mov edx, dword [ebp - 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43cb70
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43cb70
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov byte [ebp - 0x61], 1
test ecx, ecx
jne 0x43cfb7
jmp 0x43cb30
push ecx
push edx
call fcn.0043dc46
add esp, 8
cmp byte [ebp - 0x61], 0
je 0x43cc08
cmp dword [0x449060], 0x10
mov eax, 0x44904c
push dword [0x44905c]
cmovae eax, dword [0x44904c]
push eax
call fcn.0043d3e8
mov edx, eax
lea ecx, [ebp - 0x38]
call fcn.00404e30
add esp, 8
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x24], 8
cmovae eax, dword [ebp - 0x38]
push eax
call fcn.0043d55c
mov dword [ebp - 0x20], eax
test edx, edx
jne 0x43cfc3
mov ecx, dword [ebp - 0x24]
cmp ecx, 8
jb 0x43cc08
mov edx, dword [ebp - 0x38]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x43cbfe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x43cbfe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0043dc46
add esp, 8
mov esi, dword [sym.imp.KERNEL32.dll_CreateThread]
push 0
push 0
push 0
push 0x43c570
push 0
push 0
call esi
push 0
push 0
push 0
push 0x43c6b0
push 0
push 0
call esi
cmp byte [0x449034], 0
je 0x43cddc
mov esi, dword [sym.imp.USER32.dll_PeekMessageA]
mov edi, dword [sym.imp.USER32.dll_TranslateMessage]
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x1c], 0
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
mov dword [ebp - 4], 1
push eax
call esi
test eax, eax
je 0x43cc98
lea eax, [ebp - 0x3c]
push eax
call edi
lea eax, [ebp - 0x3c]
push eax
call dword [sym.imp.USER32.dll_DispatchMessageA]
cmp dword [ebp - 0x38], 0x12
je 0x43cca9
push 1
push 0
push 0
push 0
lea eax, [ebp - 0x3c]
push eax
call esi
test eax, eax
jne 0x43cc70
mov eax, dword [0x449b68]
test eax, eax
je 0x43ccb9
mov ecx, dword [eax + 0xc8]
jmp 0x43ccbb
cmp byte [0x449034], 0
sete byte [0x449034]
jmp 0x43cce3
xor ecx, ecx
cmp dword [ecx + 0xc], 0
jne 0x43ccd9
test eax, eax
je 0x43ccd9
mov eax, dword [eax + 0xc8]
test eax, eax
je 0x43ccd9
cmp dword [eax], 0
je 0x43ccd9
call fcn.0042dfb0
call fcn.0042e530
call fcn.0040ea70
call fcn.00406b50
mov dword [ebp - 4], 2
call fcn.00410c90
mov ecx, dword [0x449a5c]
push 0
push 7
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x449a5c]
push 0
push 0x1b
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x449a5c]
push 0
push 0xae
push ecx
mov eax, dword [ecx]
call dword [eax + 0xe4]
mov ecx, dword [0x449a5c]
push 0
push ecx
mov dword [esp], 0x3f800000
mov eax, dword [ecx]
push 0xff000000
push 3
push 0
push 0
push ecx
call dword [eax + 0xac]
mov eax, dword [0x449a5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa4]
test eax, eax
js 0x43cd95
call fcn.00410ff0
mov eax, dword [0x449b68]
xor ecx, ecx
mov eax, dword [eax + 0x1d4c]
mov eax, dword [eax]
add eax, 0x34
cmp byte [eax], cl
cmovne ecx, eax
call fcn.0042da80
mov eax, dword [0x449a5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xa8]
mov ecx, dword [0x449a5c]
push 0
push 0
push 0
mov eax, dword [ecx]
push 0
push ecx
call dword [eax + 0x44]
cmp eax, 0x88760868
jne 0x43cdc7
mov eax, dword [0x449a5c]
push eax
mov ecx, dword [eax]
call dword [ecx + 0xc]
cmp eax, 0x88760869
jne 0x43cdc7
call fcn.004067c0
lea ecx, [ebp - 0x20]
call fcn.0043d140
cmp byte [0x449034], 0
jne 0x43cc57
mov dword [ebp - 4], 3
mov ecx, dword [0x449b68]
test ecx, ecx
je 0x43cdf5
mov edi, dword [ecx + 0xc8]
jmp 0x43cdf7
xor edi, edi
lea esi, [ecx + 8]
mov dword [ebp - 0x68], esi
test ecx, ecx
je 0x43ce6e
mov esi, dword [ecx + 0xc8]
test esi, esi
je 0x43ce6b
cmp dword [esi], 0
je 0x43ce6b
mov edx, dword [esi + 4]
test edx, edx
je 0x43ce2a
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x449b68]
mov dword [esi + 4], 0
mov edx, dword [esi + 8]
test edx, edx
je 0x43ce44
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x449b68]
mov dword [esi + 8], 0
mov edx, dword [esi + 0xc]
test edx, edx
je 0x43ce6b
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x449b68]
mov dword [esi + 0xc], 0
mov eax, dword [ecx + 0x98]
mov dword [eax + 4], 0
mov esi, dword [ebp - 0x68]
mov edx, dword [edi]
test edx, edx
je 0x43ce80
mov eax, dword [edx]
push edx
call dword [eax + 8]
mov ecx, dword [0x449b68]
mov dword [esi + 0xb8], 0
mov dword [esi + 0xc0], 0
test ecx, ecx
je 0x43ce9e
dec dword [ecx + 0x36c]
push edi
mov edi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
call edi
mov eax, dword [0x449b68]
add esp, 4
test eax, eax
je 0x43cebb
mov esi, dword [eax + 0xc4]
jmp 0x43cebd
xor esi, esi
mov edx, dword [esi + 0x28]
lea ecx, [eax + 8]
mov dword [ebp - 0x1c], ecx
test edx, edx
je 0x43ced9
push edx
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [0x449b68]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx + 0xb4], 0
mov dword [ecx + 0xbc], 0
test eax, eax
je 0x43cef7
dec dword [eax + 0x36c]
push esi
call edi
mov esi, dword [0x449b68]
add esp, 4
mov ecx, esi
call fcn.004100d0
cmp dword [0x449b68], esi
jne 0x43cf1c
mov dword [0x449b68], 0
test esi, esi
je 0x43cf3c
mov ecx, esi
call fcn.0041e090
mov eax, dword [0x449b68]
test eax, eax
je 0x43cf36
dec dword [eax + 0x36c]
push esi
call edi
add esp, 4
mov dword [ebp - 4], 4
mov ecx, dword [0x449a5c]
test ecx, ecx
je 0x43cf5d
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x449a5c], 0
mov ecx, dword [0x449a54]
test ecx, ecx
je 0x43cf77
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [0x449a54], 0
push dword [0x449a58]
call dword [sym.imp.USER32.dll_DestroyWindow]
push dword [0x449a74]
push dword [0x449a88]
call dword [sym.imp.USER32.dll_UnregisterClassA]
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0043d9b2
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x10
lea eax, [ebp - 0x38]
push eax
lea edx, [ebp - 0x20]
call fcn.0043c4f0
lea eax, [ebp - 0x38]
mov ecx, str.create_directory
push eax
call fcn.00405fe0
int3