Function at 0x44cee0
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Encode data using xor
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c60dc
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x278
mov eax, dword [0x64ebc0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x78]
call fcn.0044bf90
mov edx, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xdc]
call fcn.0044b8c0
mov esi, eax
cmp esi, 0x656894
je 0x44cfc3
mov ecx, dword [0x6568a8]
cmp ecx, 0xf
jbe 0x44cf80
mov eax, dword [0x656894]
inc ecx
cmp ecx, 0x1000
jb 0x44cf76
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d041
mov eax, edx
push ecx
push eax
call fcn.005c22ac
add esp, 8
mov dword [0x6568a4], 0
mov dword [0x6568a8], 0xf
mov byte [0x656894], 0
movups xmm0, xmmword [esi]
movups xmmword [0x656894], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x6568a4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0xf
jbe 0x44cff9
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44cfef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d041
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
cmp ecx, 0xf
jbe 0x44d051
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d047
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44d047
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c22ac
add esp, 8
cmp dword [0x6567f0], 0xa
jne 0x44de28
cmp dword [0x656808], 0x40
jne 0x44de28
mov dword [ebp - 0xb4], 0x383e2668
xor ecx, ecx
mov dword [ebp - 0xb0], 0x233d0c26
mov word [ebp - 0xac], 0x6b
mov byte [ebp - 0xaa], 1
mov al, cl
add al, 0x4e
xor byte [ebp + ecx - 0xb4], al
inc ecx
cmp ecx, 9
jb 0x44d091
mov edx, 0x6567e0
mov byte [ebp - 0xaa], 0
lea ecx, [ebp - 0x1e8]
call fcn.0044bd00
mov dword [ebp - 0xc0], eax
mov dword [ebp - 4], 1
xor ecx, ecx
mov dword [ebp - 0xa4], 0x3f272068
mov dword [ebp - 0xa0], 0x313d2137
mov word [ebp - 0x9c], 0x6b
mov byte [ebp - 0x9a], 1
nop dword [eax]
mov al, cl
add al, 0x4e
xor byte [ebp + ecx - 0xa4], al
inc ecx
cmp ecx, 9
jb 0x44d0f0
mov edx, 0x6567c8
mov byte [ebp - 0x9a], 0
lea ecx, [ebp - 0x1d0]
call fcn.0044bd00
mov dword [ebp - 0xe0], eax
mov byte [ebp - 4], 2
xor ecx, ecx
mov dword [ebp - 0x1c], 0x3c312168
mov dword [ebp - 0x18], 0x1006e37
mov al, cl
add al, 0x4e
xor byte [ebp + ecx - 0x1c], al
inc ecx
cmp ecx, 6
jb 0x44d132
sub esp, 0x18
mov byte [ebp - 0x15], 0
mov ecx, esp
mov dword [ebp - 0xbc], esp
push 0x65678c
call fcn.0045ca30
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0xc4], esp
push 0x6567f8
call fcn.0045ca30
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push 0x656894
call fcn.0045ca30
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 2
call fcn.0044c0d0
add esp, 0x48
mov dword [ebp - 0xbc], eax
mov esi, 0x51
mov byte [ebp - 4], 5
movaps xmm4, xmmword [0x640610]
mov dword [ebp - 0x98], 0x323e2a68
mov dword [ebp - 0x94], 0x682d3639
mov word [ebp - 0x90], 0x100
lea edi, [esi - 0x4f]
nop dword [eax]
lea eax, [esi - 1]
movd xmm2, esi
lea edx, [esi - 3]
movd xmm0, eax
movd xmm3, edx
lea ecx, [esi - 2]
punpckldq xmm3, xmm0
movd xmm0, dword [ebp + esi - 0xe9]
punpcklbw xmm0, xmm0
movd xmm1, ecx
punpcklwd xmm0, xmm0
punpckldq xmm1, xmm2
punpckldq xmm3, xmm1
psrad xmm0, 0x18
xorps xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd dword [ebp + esi - 0xe9], xmm3
add esi, 4
sub edi, 1
jne 0x44d1d0
sub esp, 0x18
mov byte [ebp - 0x8f], 0
mov ecx, esp
mov dword [ebp - 0x8c], esp
push 0x65678c
call fcn.0045ca30
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0xc4], esp
push 0x6567f8
call fcn.0045ca30
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
push 0x656810
call fcn.0045ca30
lea ecx, [ebp - 0x1a0]
mov byte [ebp - 4], 5
call fcn.0044c0d0
add esp, 0x48
mov edi, eax
mov byte [ebp - 4], 8
xor ecx, ecx
mov dword [ebp - 0x8c], 0x23353968
mov word [ebp - 0x88], 0x6f
mov byte [ebp - 0x86], 1
nop word [eax + eax]
mov al, cl
add al, 0x4e
xor byte [ebp + ecx - 0x8c], al
inc ecx
cmp ecx, 5
jb 0x44d2b0
movaps xmm1, xmmword [str.NOPQRSTUVWXYZ__]
lea ecx, [ebp - 0x80]
mov dword [ebp - 0x80], 0x25392127
lea edx, [ecx + 1]
movd xmm0, dword [ebp - 0x80]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
mov byte [ebp - 0x86], 0
xorps xmm1, xmm0
mov word [ebp - 0x7c], 0
andps xmm1, xmmword [0x640610]
xorps xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0x80], xmm1
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44d330
sub ecx, edx
lea eax, [ebp - 0x80]
push ecx
push eax
lea ecx, [ebp - 0x128]
call fcn.00460400
lea edx, [ebp - 0x128]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x188]
call fcn.0044bd00
mov esi, eax
mov byte [ebp - 4], 0xa
xor ecx, ecx
mov dword [ebp - 0x80], 0x3420363a
mov word [ebp - 0x7c], 0x6f
mov byte [ebp - 0x7a], 1
mov al, cl
add al, 0x4e
xor byte [ebp + ecx - 0x80], al
inc ecx
cmp ecx, 5
jb 0x44d377
lea ecx, [ebp - 0x80]
mov byte [ebp - 0x7a], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44d390
sub ecx, edx
lea eax, [ebp - 0x80]
push ecx
push eax
push 0
mov ecx, esi
call fcn.0045e450
mov dword [ebp - 0x100], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x110], xmm0
mov dword [ebp - 0xfc], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x110], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x100], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x110]
call fcn.0045c850
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x4c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x3c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea eax, [ebp - 0x4c]
mov byte [ebp - 4], 0xc
push eax
push dword [ebp - 0x7d]
lea ecx, [ebp - 0xdc]
call fcn.00461800
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xdc]
call fcn.0045c850
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x21c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x20c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x21c]
push dword [ebp - 0xbc]
lea ecx, [ebp - 0x170]
push eax
push dword [ebp - 0x7d]
call fcn.00461800
lea eax, [ebp - 0x1c]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x170]
call fcn.0045c850
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x200], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1f0], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0xe0]
lea eax, [ebp - 0x200]
mov byte [ebp - 4], 0x10
push eax
push dword [ebp - 0x7d]
lea ecx, [ebp - 0x158]
call fcn.00461800
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x158]
call fcn.0045c850
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x288], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x278], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0xc0]
lea eax, [ebp - 0x288]
mov byte [ebp - 4], 0x12
push eax
push dword [ebp - 0x7d]
lea ecx, [ebp - 0x140]
call fcn.00461800
lea eax, [ebp - 0xb4]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x140]
call fcn.0045c850
mov dword [ebp - 0xe8], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xf8], xmm0
mov dword [ebp - 0xe4], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xf8], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xe8], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x65678c
lea ecx, [ebp - 0xf8]
mov byte [ebp - 4], 0x14
call fcn.0045c920
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x78], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x68], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xe4]
cmp ecx, 0xf
jbe 0x44d620
mov edx, dword [ebp - 0xf8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d616
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0xf
mov byte [ebp - 0xf8], 0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x12c]
cmp ecx, 0xf
jbe 0x44d679
mov edx, dword [ebp - 0x140]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d66f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0xf
mov byte [ebp - 0x140], 0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x274]
cmp ecx, 0xf
jbe 0x44d6d2
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d6c8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x144]
cmp ecx, 0xf
jbe 0x44d710
mov edx, dword [ebp - 0x158]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d706
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0xf
mov byte [ebp - 0x158], 0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1ec]
cmp ecx, 0xf
jbe 0x44d769
mov edx, dword [ebp - 0x200]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d75f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x15c]
cmp ecx, 0xf
jbe 0x44d7a7
mov edx, dword [ebp - 0x170]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d79d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0xf
mov byte [ebp - 0x170], 0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x208]
cmp ecx, 0xf
jbe 0x44d800
mov edx, dword [ebp - 0x21c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d7f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0xc8]
cmp ecx, 0xf
jbe 0x44d83e
mov edx, dword [ebp - 0xdc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d834
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x44d891
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d887
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0xfc]
cmp ecx, 0xf
jbe 0x44d8cf
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d8c5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0xf
mov byte [ebp - 0x110], 0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x174]
cmp ecx, 0xf
jbe 0x44d928
mov edx, dword [ebp - 0x188]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d91e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x114]
cmp ecx, 0xf
jbe 0x44d981
mov edx, dword [ebp - 0x128]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d977
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x118], 0
mov dword [ebp - 0x114], 0xf
mov byte [ebp - 0x128], 0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x18c]
cmp ecx, 0xf
jbe 0x44d9da
mov edx, dword [ebp - 0x1a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d9d0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x1a4]
cmp ecx, 0xf
jbe 0x44da33
mov edx, dword [ebp - 0x1b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44da29
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0xf
mov byte [ebp - 0x1b8], 0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x1bc]
cmp ecx, 0xf
jbe 0x44da88
mov edx, dword [ebp - 0x1d0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44da7e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dad3
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x1c0], 0
mov dword [ebp - 0x1bc], 0xf
mov byte [ebp - 0x1d0], 0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1d4]
cmp ecx, 0xf
jbe 0x44dae3
mov edx, dword [ebp - 0x1e8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44dad9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dad9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c22ac
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x1d8], 0
lea eax, [ebp - 0x78]
mov dword [ebp - 0x1d4], 0xf
mov ecx, esp
mov byte [ebp - 0x1e8], 0
push eax
call fcn.0045ca30
lea ecx, [ebp - 0x34]
call fcn.0044ffb0
mov byte [ebp - 4], 0x26
mov ecx, esp
mov dword [ebp - 0x80], esp
push 0x65678c
call fcn.0045ca30
sub esp, 0x18
mov byte [ebp - 4], 0x27
mov ecx, esp
mov dword [ebp - 0x8c], esp
push 0x6567f8
call fcn.0045ca30
sub esp, 0x18
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x34]
mov ecx, esp
push eax
call fcn.0045ca30
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x26
call fcn.0044c390
mov esi, eax
add esp, 0x48
lea eax, [ebp - 0x34]
cmp eax, esi
je 0x44dbce
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x44db9a
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44db90
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dbf4
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x24], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x38]
cmp ecx, 0xf
jbe 0x44dc04
mov edx, dword [ebp - 0x4c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44dbfa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dbfa
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c22ac
add esp, 8
sub esp, 0x28
lea edx, [ebp - 0x34]
mov eax, esp
lea ecx, [ebp - 0x60]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0045f630
add esp, 0x30
push str.success
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0x29
call fcn.0045f770
mov ecx, eax
cmp byte [ecx], 4
jne 0x44dea8
cmp byte [ecx + 8], 0
lea ecx, [ebp - 0x60]
je 0x44dd16
push str.sessionid
call fcn.0045f770
lea ecx, [ebp - 0x1c]
xorps xmm0, xmm0
push ecx
mov ecx, eax
movlpd qword [ebp - 0x1c], xmm0
call fcn.00464350
push dword [ebp - 0x18]
mov ecx, 0x65687c
push dword [ebp - 0x1c]
call fcn.0045e520
lea ecx, [ebp - 0x60]
call fcn.0045b500
mov ecx, dword [ebp - 0x20]
cmp ecx, 0xf
jbe 0x44dcb0
mov edx, dword [ebp - 0x34]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44dca6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44dce8
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
cmp ecx, 0xf
jbe 0x44dcf8
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44dcee
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44dcee
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c22ac
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.005c1e17
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push str.message
call fcn.0045f770
mov edi, eax
mov byte [ebp - 4], 0x2c
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0xb0], xmm0
mov byte [ebp - 0xb8], 3
call fcn.005c1f16
add esp, 4
mov esi, eax
xorps xmm0, xmm0
mov ecx, esi
push 0xa
movups xmmword [esi], xmm0
push str.invalidver
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00460400
lea edx, [ebp - 0xb8]
mov dword [ebp - 0xb0], esi
mov ecx, edi
call fcn.004614d0
lea ecx, [ebp - 0xb8]
mov byte [ebp - 0x81], al
call fcn.0045b500
cmp byte [ebp - 0x81], 0
mov byte [ebp - 4], 0x29
je 0x44ddd3
push str.download
lea ecx, [ebp - 0x60]
call fcn.0045f770
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, eax
call fcn.0045f990
push 1
push 0
push 0
lea ecx, [ebp - 0x4c]
call fcn.0045c840
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x63aa20
call fcn.0045f410
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea ecx, [ebp - 0x60]
push str.message
call fcn.0045f770
push ecx
push eax
lea ecx, [ebp - 0x4c]
call fcn.0045fa90
mov edx, eax
mov byte [ebp - 4], 0x2d
mov ecx, esi
call fcn.0045faf0
lea ecx, [ebp - 0x4c]
call fcn.0045c9a0
push 0x1194
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
movaps xmm0, xmmword [0x640620]
lea edx, [ebp - 0x270]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movups xmmword [ebp - 0x270], xmm0
mov dword [ebp - 0x230], 0xf8f1c2ae
movaps xmm0, xmmword [str.1_2_a]
movups xmmword [ebp - 0x260], xmm0
mov dword [ebp - 0x22c], 0xe5f7bdfc
movaps xmm0, xmmword [0x640630]
movups xmmword [ebp - 0x250], xmm0
mov word [ebp - 0x228], 0xe6
movaps xmm0, xmmword [0x6406a0]
movups xmmword [ebp - 0x240], xmm0
mov byte [ebp - 0x226], 1
call fcn.0044df00
push 0x1194
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.0045e150
push eax
lea ecx, [ebp - 0x4c]
call fcn.0045c9f0
push eax
lea eax, [ebp - 0x21c]
mov byte [ebp - 4], 0x2a
push str.type_must_be_boolean__but_is
push eax
call fcn.0045eef0
add esp, 0xc
push eax
mov edx, 0x12e
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x204]
call fcn.0044aa20
add esp, 4
lea eax, [ebp - 0x204]
push 0x647ab8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3