Function at 0x44d3f0
Capabilities:
Accept command line arguments
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
mov eax, dword [0x5153e8]
xor eax, ebp
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x214], 0
mov word [ebp - 0x224], ax
lea eax, [ebp - 0x224]
push eax
mov dword [ebp - 0x210], 7
call fcn.0044a480
mov edx, dword [ebp - 0x210]
add esp, 4
cmp edx, 8
jb 0x44d46f
mov ecx, dword [ebp - 0x224]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44d465
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd07
push edx
push ecx
call fcn.0049211e
add esp, 8
push esi
push edi
push 0x51b500
push 0x51b508
push 0x44d340
push 0x4e13a4
call fcn.0044d3b0
push 0x208
lea eax, [ebp - 0x20c]
push 0
push eax
call fcn.00494910
add esp, 0xc
lea eax, [ebp - 0x20c]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push str.ksolaunch.exe
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.SHLWAPI.dll_StrStrIW]
mov ecx, eax
test ecx, ecx
je 0x44d675
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44d4d3
sub ecx, edx
sar ecx, 1
cmp ecx, 0xd
jne 0x44d675
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
mov edx, eax
mov dword [ebp - 0x214], 0
mov ecx, edx
mov dword [ebp - 0x210], 7
xor eax, eax
mov word [ebp - 0x224], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x44d515
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x224]
call fcn.00408480
xor eax, eax
mov dword [ebp - 0x22c], 0
push eax
push 0x4db638
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x228], 7
mov word [ebp - 0x23c], ax
call fcn.00408480
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.0047aeb0
add esp, 4
push eax
call fcn.0041ce70
add esp, 0xc
lea ecx, [ebp - 0x254]
mov esi, eax
call fcn.00402ba0
mov edx, dword [ebp - 0x228]
cmp edx, 8
jb 0x44d5d2
mov ecx, dword [ebp - 0x23c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44d5c8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd0c
push edx
push ecx
call fcn.0049211e
add esp, 8
xor eax, eax
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 7
mov word [ebp - 0x23c], ax
test esi, esi
je 0x44d5fc
cmp esi, 0xffffffff
je 0x44d5fc
xor edi, edi
jmp 0x44d60d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
shl edi, 0x10
or edi, 0xfc19
test esi, esi
je 0x44d61d
cmp esi, 0xffffffff
je 0x44d61d
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp - 0x210]
cmp edx, 8
jb 0x44dcf3
mov ecx, dword [ebp - 0x224]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44d657
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd11
push edx
push ecx
call fcn.0049211e
add esp, 8
mov eax, edi
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0049212c
mov esp, ebp
pop ebp
ret 0x10
lea eax, [ebp - 0x254]
push ebx
push eax
call fcn.0041df10
push eax
call fcn.0044cf50
add esp, 8
lea ecx, [ebp - 0x254]
call fcn.00402ba0
push 0
or edi, 0xffffffff
call fcn.0047a2b0
add esp, 4
test al, al
jne 0x44da50
push 0
call fcn.00479e40
add esp, 4
test al, al
jne 0x44da50
lea ecx, [ebp - 0x298]
call fcn.004031b0
xor eax, eax
mov dword [ebp - 0x260], 0
mov word [ebp - 0x23c], ax
lea ecx, [ebp - 0x298]
lea eax, [ebp - 0x260]
mov dword [ebp - 0x25c], 0
push eax
lea eax, [ebp - 0x23c]
mov dword [ebp - 0x258], 0
push eax
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 7
call fcn.00403510
mov edx, dword [ebp - 0x228]
mov ebx, eax
mov dword [ebp - 0x26c], ebx
cmp edx, 8
jb 0x44d764
mov ecx, dword [ebp - 0x23c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44d75a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd16
push edx
push ecx
call fcn.0049211e
add esp, 8
mov esi, dword [ebp - 0x260]
xor eax, eax
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 7
mov word [ebp - 0x23c], ax
test esi, esi
je 0x44d846
mov ebx, dword [ebp - 0x25c]
cmp esi, ebx
je 0x44d7f9
lea esp, [esp]
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x44d7d9
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x44d7cf
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd16
mov eax, edx
push ecx
push eax
call fcn.0049211e
add esp, 8
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
add esi, 0x18
cmp esi, ebx
jne 0x44d7a0
mov esi, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x258]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x44d836
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd16
push ecx
push esi
call fcn.0049211e
mov ebx, dword [ebp - 0x26c]
add esp, 8
cmp ebx, 0xffffffff
je 0x44d855
cmp bx, 1
jne 0x44d9f4
push 0
call fcn.0047a040
add esp, 4
test al, al
jne 0x44d9c8
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push eax
lea ecx, [ebp - 0x224]
call fcn.00402a00
call fcn.004110b0
test al, al
je 0x44d8d5
push 0
push str.ksoqing:
lea ecx, [ebp - 0x224]
call fcn.00404c70
cmp eax, 0xffffffff
je 0x44d8d5
push 0
push 0x4db58c
lea ecx, [ebp - 0x224]
call fcn.00404c70
cmp eax, 0xffffffff
jne 0x44d8d5
push 0
push str.ksoqing:
lea ecx, [ebp - 0x224]
call fcn.00404c70
push 0xd
push str._qingbangong
push eax
lea ecx, [ebp - 0x224]
call fcn.00404d30
cmp dword [ebp - 0x210], 8
lea eax, [ebp - 0x224]
cmovae eax, dword [ebp - 0x224]
push eax
lea eax, [ebp - 0x260]
push eax
call fcn.00415ee0
lea eax, [ebp - 0x260]
push eax
call fcn.0044d140
add esp, 0xc
test al, al
je 0x44d985
push 0x4debc8
lea ecx, [ebp - 0x254]
call fcn.00402a00
mov eax, dword [ebp - 0x260]
lea ecx, [ebp - 0x254]
push ecx
add eax, 0x18
lea ecx, [ebp - 0x260]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.0042fe70
lea ecx, [ebp - 0x254]
call fcn.00402ba0
push str._prometheus
lea ecx, [ebp - 0x254]
call fcn.00402a00
mov eax, dword [ebp - 0x260]
lea ecx, [ebp - 0x254]
push ecx
add eax, 0x18
lea ecx, [ebp - 0x260]
push eax
lea eax, [ebp - 0x26c]
push eax
call fcn.0042fe70
lea ecx, [ebp - 0x254]
call fcn.00402ba0
lea eax, [ebp - 0x260]
push eax
lea eax, [ebp - 0x254]
push eax
call fcn.00419f20
add esp, 8
lea ecx, [ebp - 0x298]
push eax
call fcn.00404f50
lea ecx, [ebp - 0x254]
call fcn.00402ba0
lea ecx, [ebp - 0x260]
call fcn.00402c00
lea ecx, [ebp - 0x224]
call fcn.00402ba0
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x238]
call fcn.00428ae0
push 0
lea ecx, [ebp - 0x238]
call fcn.00428cd0
lea ecx, [ebp - 0x238]
mov ebx, eax
call fcn.00428c40
lea ecx, [ebp - 0x298]
call fcn.00403450
cmp byte [0x51d3b4], 0
je 0x44da38
push 0
push 0
push 0x4e48cd
push str.PrometheusExit
push 1
call fcn.0044a5b0
add esp, 0x14
cmp byte [0x51d3b4], 0
je 0x44da38
push 0
push str.PrometheusExit
call fcn.0044a610
add esp, 8
call fcn.0044a510
push ebx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x44dced
lea ecx, [ebp - 0x298]
call fcn.004031b0
xor eax, eax
mov dword [ebp - 0x260], 0
mov word [ebp - 0x224], ax
lea ecx, [ebp - 0x298]
lea eax, [ebp - 0x260]
mov dword [ebp - 0x25c], 0
push eax
lea eax, [ebp - 0x224]
mov dword [ebp - 0x258], 0
push eax
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 7
call fcn.00403510
mov edx, dword [ebp - 0x210]
mov edi, eax
cmp edx, 8
jb 0x44daf1
mov ecx, dword [ebp - 0x224]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44dae7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd1b
push edx
push ecx
call fcn.0049211e
add esp, 8
mov esi, dword [ebp - 0x260]
xor eax, eax
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 7
mov word [ebp - 0x224], ax
test esi, esi
je 0x44dbc6
mov ebx, dword [ebp - 0x25c]
cmp esi, ebx
je 0x44db7f
mov ecx, dword [esi + 0x14]
cmp ecx, 8
jb 0x44db5f
mov eax, dword [esi]
lea ecx, [ecx*2 + 2]
cmp ecx, 0x1000
jb 0x44db55
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd1b
mov eax, edx
push ecx
push eax
call fcn.0049211e
add esp, 8
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
add esi, 0x18
cmp esi, ebx
jne 0x44db26
mov esi, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x258]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea ecx, [eax + eax*2]
mov eax, esi
shl ecx, 3
cmp ecx, 0x1000
jb 0x44dbbc
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd1b
push ecx
push esi
call fcn.0049211e
add esp, 8
cmp edi, 0xffffffff
je 0x44dbd5
cmp di, 1
jne 0x44dce2
lea eax, [ebp - 0x298]
push eax
lea ecx, [ebp - 0x268]
call fcn.00428ae0
push 2
lea ecx, [ebp - 0x268]
call fcn.00428cd0
mov edi, eax
cmp edi, 0xffffffff
je 0x44dc05
cmp di, 1
jne 0x44dcd7
push 0
call fcn.0047a2b0
add esp, 4
test al, al
je 0x44dc35
cmp dword [0x51b52c], 0
je 0x44dc35
push 0x4e13b8
push dword [0x51b504]
push dword [0x51b500]
call fcn.0042fe40
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x214], 0
mov word [ebp - 0x224], ax
lea eax, [ebp - 0x224]
push eax
push dword [0x51b4d4]
mov dword [ebp - 0x210], 7
call fcn.00417020
add esp, 8
test al, al
je 0x44dc8c
lea eax, [ebp - 0x224]
push eax
lea ecx, [ebp - 0x298]
call fcn.00404f50
mov ecx, dword [ebp - 0x264]
test ecx, ecx
je 0x44dc8c
call fcn.00429cd0
push 1
lea ecx, [ebp - 0x268]
call fcn.00428cd0
mov edx, dword [ebp - 0x210]
mov edi, eax
cmp edx, 8
jb 0x44dcd7
mov ecx, dword [ebp - 0x224]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x44dccd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dd20
push edx
push ecx
call fcn.0049211e
add esp, 8
lea ecx, [ebp - 0x268]
call fcn.00428c40
lea ecx, [ebp - 0x298]
call fcn.00403450
call fcn.0044a510
pop ebx
mov ecx, dword [ebp - 4]
mov eax, edi
pop edi
xor ecx, ebp
pop esi
call fcn.0049212c
mov esp, ebp
pop ebp
ret 0x10
call fcn.0049da69
call fcn.0049da69
call fcn.0049da69
call fcn.0049da69
call fcn.0049da69
call fcn.0049da69
int3