Function at 0x44d5d0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5b6ab4
mov eax, dword fs:[0]
push eax
sub esp, 0x230
mov eax, dword [0x63abb0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x38]
call fcn.0044c600
mov edx, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xcc]
call fcn.0044bdb0
push eax
mov ecx, 0x6452b8
call fcn.00455470
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xb8]
cmp edx, 0x10
jb 0x44d664
mov ecx, dword [ebp - 0xcc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44d65a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44d65a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
mov dword [ebp - 4], 2
mov edx, dword [ebp - 0x24]
cmp edx, 0x10
jb 0x44d6bc
mov ecx, dword [ebp - 0x38]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44d6b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44d6b2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 4], 0xffffffff
cmp dword [0x6451b0], 0xa
jne 0x44e350
cmp dword [0x6451c8], 0x40
jne 0x44e350
mov dword [ebp - 0xa8], 0x2620246a
xor ecx, ecx
mov dword [ebp - 0xa4], 0x253b0e24
mov word [ebp - 0xa0], 0x69
mov byte [ebp - 0x9e], 1
mov al, cl
add al, 0x4c
xor byte [ebp + ecx - 0xa8], al
inc ecx
cmp ecx, 9
jb 0x44d703
mov edx, 0x6451a0
mov byte [ebp - 0x9e], 0
lea ecx, [ebp - 0x160]
call fcn.0044c200
mov dword [ebp - 0xd0], eax
mov dword [ebp - 4], 3
xor ecx, ecx
mov dword [ebp - 0x9c], 0x2139226a
mov dword [ebp - 0x98], 0x373b2335
mov word [ebp - 0x94], 0x69
mov byte [ebp - 0x92], 1
nop
mov al, cl
add al, 0x4c
xor byte [ebp + ecx - 0x9c], al
inc ecx
cmp ecx, 9
jb 0x44d760
mov edx, 0x645188
mov byte [ebp - 0x92], 0
lea ecx, [ebp - 0x178]
call fcn.0044c200
mov edi, eax
mov byte [ebp - 4], 4
xor ecx, ecx
mov dword [ebp - 0x84], 0x222f236a
mov dword [ebp - 0x80], 0x1006c35
mov al, cl
add al, 0x4c
xor byte [ebp + ecx - 0x84], al
inc ecx
cmp ecx, 6
jb 0x44d7a1
sub esp, 0x18
mov byte [ebp - 0x7d], 0
mov ecx, esp
mov dword [ebp - 0xb0], esp
push 0x64516c
call fcn.00455560
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
mov dword [ebp - 0xb4], esp
push 0x6451b8
call fcn.00455560
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
push 0x6452b8
call fcn.00455560
lea ecx, [ebp - 0x23c]
mov byte [ebp - 4], 4
call fcn.0044c720
add esp, 0x48
mov dword [ebp - 0xb0], eax
mov byte [ebp - 4], 7
xor ecx, ecx
mov dword [ebp - 0x90], 0x2c20286a
mov dword [ebp - 0x8c], 0x6e2b343b
mov word [ebp - 0x88], 0x100
mov al, cl
add al, 0x4c
xor byte [ebp + ecx - 0x90], al
inc ecx
cmp ecx, 8
jb 0x44d832
sub esp, 0x18
mov byte [ebp - 0x87], 0
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x64516c
call fcn.00455560
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0xb4], esp
push 0x6451b8
call fcn.00455560
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
push 0x6451d0
call fcn.00455560
lea ecx, [ebp - 0x224]
mov byte [ebp - 4], 7
call fcn.0044c720
add esp, 0x48
mov esi, eax
mov byte [ebp - 4], 0xa
xor ecx, ecx
mov dword [ebp - 0x7c], 0x3d2b3b6a
mov word [ebp - 0x78], 0x6d
mov byte [ebp - 0x76], 1
mov al, cl
add al, 0x4c
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 5
jb 0x44d8b3
mov byte [ebp - 0x76], 0
xor ecx, ecx
mov dword [ebp - 0x70], 0x3b272325
mov word [ebp - 0x6c], 0x100
mov al, cl
add al, 0x4c
xor byte [ebp + ecx - 0x70], al
inc ecx
cmp ecx, 4
jb 0x44d8d4
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x6b], 0
mov dword [ebp - 0xbc], 0
lea edx, [ecx + 1]
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44d907
sub ecx, edx
lea eax, [ebp - 0x70]
push ecx
push eax
lea ecx, [ebp - 0xcc]
call fcn.00456560
lea edx, [ebp - 0xcc]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x20c]
call fcn.0044c200
mov edx, eax
mov byte [ebp - 4], 0xc
xor ecx, ecx
mov dword [ebp - 0x70], 0x2a3e3438
mov word [ebp - 0x6c], 0x6d
mov byte [ebp - 0x6a], 1
nop
mov al, cl
add al, 0x4c
xor byte [ebp + ecx - 0x70], al
inc ecx
cmp ecx, 5
jb 0x44d950
push edx
lea eax, [ebp - 0x70]
mov byte [ebp - 0x6a], 0
push eax
lea eax, [ebp - 0x1f4]
push eax
call fcn.004573c0
add esp, 0xc
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0xd
push ecx
mov ecx, eax
call fcn.004552a0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x148], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x138], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push esi
lea eax, [ebp - 0x148]
mov byte [ebp - 4], 0xe
push eax
lea eax, [ebp - 0x1dc]
push eax
call fcn.00457420
add esp, 0xc
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, eax
call fcn.004552a0
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x130], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x120], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x130]
push dword [ebp - 0xb0]
push eax
lea eax, [ebp - 0x1c4]
push eax
call fcn.00457420
add esp, 0xc
lea ecx, [ebp - 0x84]
mov byte [ebp - 4], 0x11
push ecx
mov ecx, eax
call fcn.004552a0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x118], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x108], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x1ac]
push eax
call fcn.00457420
add esp, 0xc
lea ecx, [ebp - 0x9c]
mov byte [ebp - 4], 0x13
push ecx
mov ecx, eax
call fcn.004552a0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x100], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xf0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0xd0]
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x14
push eax
lea eax, [ebp - 0x194]
push eax
call fcn.00457420
add esp, 0xc
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x15
push ecx
mov ecx, eax
call fcn.004552a0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x64516c
lea ecx, [ebp - 0xe8]
mov byte [ebp - 4], 0x16
call fcn.00455370
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x38], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
movq qword [ebp - 0x28], xmm0
mov byte [eax], 0
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0xd4]
cmp edx, 0x10
jb 0x44dbe5
mov ecx, dword [ebp - 0xe8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dbdb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dbdb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0xf
mov byte [ebp - 0xe8], 0
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x180]
cmp edx, 0x10
jb 0x44dc40
mov ecx, dword [ebp - 0x194]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dc36
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dc36
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
mov byte [ebp - 4], 0x1d
mov edx, dword [ebp - 0xec]
cmp edx, 0x10
jb 0x44dc9b
mov ecx, dword [ebp - 0x100]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dc91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dc91
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0xf
mov byte [ebp - 0x100], 0
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x198]
cmp edx, 0x10
jb 0x44dcf6
mov ecx, dword [ebp - 0x1ac]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dcec
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dcec
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
mov byte [ebp - 4], 0x21
mov edx, dword [ebp - 0x104]
cmp edx, 0x10
jb 0x44dd51
mov ecx, dword [ebp - 0x118]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dd47
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dd47
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x1b0]
cmp edx, 0x10
jb 0x44ddac
mov ecx, dword [ebp - 0x1c4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dda2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dda2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b0], 0xf
mov byte [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x25
mov edx, dword [ebp - 0x11c]
cmp edx, 0x10
jb 0x44de07
mov ecx, dword [ebp - 0x130]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44ddfd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44ddfd
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 0xf
mov byte [ebp - 0x130], 0
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x1c8]
cmp edx, 0x10
jb 0x44de62
mov ecx, dword [ebp - 0x1dc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44de58
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44de58
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
mov byte [ebp - 4], 0x29
mov edx, dword [ebp - 0x134]
cmp edx, 0x10
jb 0x44debd
mov ecx, dword [ebp - 0x148]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44deb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44deb3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x1e0]
cmp edx, 0x10
jb 0x44df18
mov ecx, dword [ebp - 0x1f4]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44df0e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44df0e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
mov byte [ebp - 4], 0x2d
mov edx, dword [ebp - 0x1f8]
cmp edx, 0x10
jb 0x44df73
mov ecx, dword [ebp - 0x20c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44df69
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44df69
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0xf
mov byte [ebp - 0x20c], 0
mov byte [ebp - 4], 0x2f
mov edx, dword [ebp - 0xb8]
cmp edx, 0x10
jb 0x44dfce
mov ecx, dword [ebp - 0xcc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44dfc4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dfc4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
mov byte [ebp - 4], 0x31
mov edx, dword [ebp - 0x210]
cmp edx, 0x10
jb 0x44e029
mov ecx, dword [ebp - 0x224]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e01f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44e01f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0xf
mov byte [ebp - 0x224], 0
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x228]
cmp edx, 0x10
jb 0x44e084
mov ecx, dword [ebp - 0x23c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e07a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44e07a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0xf
mov byte [ebp - 0x23c], 0
mov byte [ebp - 4], 0x35
mov edx, dword [ebp - 0x164]
cmp edx, 0x10
jb 0x44e0df
mov ecx, dword [ebp - 0x178]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e0d5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44e0d5
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
mov dword [ebp - 0x168], 0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov byte [ebp - 4], 0x37
mov edx, dword [ebp - 0x14c]
cmp edx, 0x10
jb 0x44e13a
mov ecx, dword [ebp - 0x160]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e130
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44e130
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x150], 0
lea eax, [ebp - 0x38]
mov dword [ebp - 0x14c], 0xf
mov ecx, esp
mov byte [ebp - 0x160], 0
mov byte [ebp - 4], 0x36
push eax
call fcn.00455560
lea ecx, [ebp - 0x50]
call fcn.004525d0
mov byte [ebp - 4], 0x38
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x64516c
call fcn.00455560
sub esp, 0x18
mov byte [ebp - 4], 0x39
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x6451b8
call fcn.00455560
sub esp, 0x18
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00455560
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 0x38
call fcn.0044c9f0
add esp, 0x48
lea ecx, [ebp - 0x50]
push eax
call fcn.00455470
mov byte [ebp - 4], 0x3b
mov edx, dword [ebp - 0x14c]
cmp edx, 0x10
jb 0x44e205
mov ecx, dword [ebp - 0x160]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44e1fb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44e1fb
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.005b2b1a
add esp, 8
push 0
push 1
sub esp, 0x28
mov byte [ebp - 4], 0x38
mov eax, esp
lea edx, [ebp - 0x50]
lea ecx, [ebp - 0x20]
mov dword [eax + 0x24], 0
call fcn.00457b80
add esp, 0x30
push str.success
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x3c
call fcn.00457cb0
mov ecx, eax
cmp byte [ecx], 4
jne 0x44e364
cmp byte [ecx + 8], 0
lea ecx, [ebp - 0x20]
je 0x44e294
push str.sessionid
call fcn.00457cb0
push eax
mov ecx, 0x6452a0
call fcn.0045c560
lea ecx, [ebp - 0x20]
call fcn.00454180
lea ecx, [ebp - 0x50]
call fcn.004553f0
lea ecx, [ebp - 0x38]
call fcn.004553f0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005b2572
mov esp, ebp
pop ebp
ret
push str.message
call fcn.00457cb0
mov edi, eax
mov byte [ebp - 4], 0x41
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0xa4], xmm0
mov byte [ebp - 0xac], 3
call fcn.005b286d
add esp, 4
mov esi, eax
mov ecx, esi
push 0xa
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
push str.invalidver
mov byte [esi], 0
call fcn.00456560
lea edx, [ebp - 0xac]
mov dword [ebp - 0xa4], esi
mov ecx, edi
call fcn.004592a0
lea ecx, [ebp - 0xac]
mov byte [ebp - 0x71], al
call fcn.00454180
cmp byte [ebp - 0x71], 0
lea ecx, [ebp - 0x20]
mov byte [ebp - 4], 0x3c
je 0x44e3b1
push str.download
call fcn.00457cb0
lea ecx, [ebp - 0x68]
push ecx
mov ecx, eax
call fcn.00457df0
push 1
push 0
push 0
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x43
call fcn.00455290
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
sub esp, 0x18
mov ecx, esp
push str.Application_Not_Setup_Correctly.Please_Watch_Video_Linked_in_Main.cpp
call fcn.00455520
call fcn.00452540
call fcn.00456300
push eax
lea ecx, [ebp - 0x68]
call fcn.00455520
push eax
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x3d
push str.type_must_be_boolean__but_is
push eax
call fcn.004573c0
push eax
mov edx, 0x12e
mov byte [ebp - 4], 0x3e
lea ecx, [ebp - 0x17c]
call fcn.0044afc0
add esp, 0x10
lea eax, [ebp - 0x17c]
push 0x634264
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
push str.message
call fcn.00457cb0
sub esp, 0x18
mov ecx, eax
push esp
call fcn.00457df0
call fcn.00452540
int3