Function at 0x44cd90
Capabilities:
Create process on windows
Encode data using xor
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5c54c6
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x64cbc0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp - 0x68]
call fcn.0044beb0
mov edx, eax
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xd0]
call fcn.0044b800
mov esi, eax
cmp esi, 0x654894
je 0x44ce5f
mov ecx, dword [0x6548a8]
cmp ecx, 0xf
jbe 0x44ce1c
mov eax, dword [0x654894]
inc ecx
cmp ecx, 0x1000
jb 0x44ce12
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44cedd
mov eax, edx
push ecx
push eax
call fcn.005c1677
add esp, 8
mov dword [0x6548a4], 0
mov dword [0x6548a8], 0xf
mov byte [0x654894], 0
movups xmm0, xmmword [esi]
movups xmmword [0x654894], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x6548a4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x44ce95
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ce8b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44cedd
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
cmp ecx, 0xf
jbe 0x44ceed
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44cee3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44cee3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c1677
add esp, 8
cmp dword [0x6547f0], 0xa
jne 0x44dc84
cmp dword [0x654808], 0x40
jne 0x44dc84
mov dword [ebp - 0xa8], 0xe2e4e0ae
xor ecx, ecx
mov dword [ebp - 0xa4], 0xf9e7d2f8
mov word [ebp - 0xa0], 0xad
mov byte [ebp - 0x9e], 1
nop dword [eax]
mov al, cl
sub al, 0x78
xor byte [ebp + ecx - 0xa8], al
inc ecx
cmp ecx, 9
jb 0x44cf30
mov edx, 0x6547e0
mov byte [ebp - 0x9e], 0
lea ecx, [ebp - 0x1dc]
call fcn.0044bc40
mov dword [ebp - 0xb4], eax
mov dword [ebp - 4], 1
xor ecx, ecx
mov dword [ebp - 0x9c], 0xe5fde6ae
mov dword [ebp - 0x98], 0xebe7ffe9
mov word [ebp - 0x94], 0xad
mov byte [ebp - 0x92], 1
nop dword [eax + eax]
mov al, cl
sub al, 0x78
xor byte [ebp + ecx - 0x9c], al
inc ecx
cmp ecx, 9
jb 0x44cf90
mov edx, 0x6547c8
mov byte [ebp - 0x92], 0
lea ecx, [ebp - 0x1c4]
call fcn.0044bc40
mov dword [ebp - 0xd4], eax
mov byte [ebp - 4], 2
xor ecx, ecx
mov dword [ebp - 0x84], 0xe6ebe7ae
mov dword [ebp - 0x80], 0x100b0e9
mov al, cl
sub al, 0x78
xor byte [ebp + ecx - 0x84], al
inc ecx
cmp ecx, 6
jb 0x44cfd5
sub esp, 0x18
mov byte [ebp - 0x7d], 0
mov ecx, esp
mov dword [ebp - 0xb0], esp
push 0x65478c
call fcn.0045c5d0
sub esp, 0x18
mov byte [ebp - 4], 3
mov ecx, esp
mov dword [ebp - 0xb8], esp
push 0x6547f8
call fcn.0045c5d0
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
push 0x654894
call fcn.0045c5d0
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 2
call fcn.0044bfe0
add esp, 0x48
mov dword [ebp - 0xb0], eax
mov esi, 0xffffff8b
mov byte [ebp - 4], 5
movaps xmm4, xmmword [0x63eb20]
mov dword [ebp - 0x90], 0xe8e4ecae
mov dword [ebp - 0x8c], 0xb2f7e8e7
mov word [ebp - 0x88], 0x100
lea edi, [esi + 0x77]
lea eax, [esi - 1]
movd xmm2, esi
lea edx, [esi - 3]
movd xmm0, eax
movd xmm3, edx
lea ecx, [esi - 2]
punpckldq xmm3, xmm0
movd xmm0, dword [ebp + esi - 0x1b]
punpcklbw xmm0, xmm0
movd xmm1, ecx
punpcklwd xmm0, xmm0
punpckldq xmm1, xmm2
punpckldq xmm3, xmm1
psrad xmm0, 0x18
xorps xmm3, xmm0
andps xmm3, xmm4
packuswb xmm3, xmm3
packuswb xmm3, xmm3
movd dword [ebp + esi - 0x1b], xmm3
add esi, 4
sub edi, 1
jne 0x44d073
sub esp, 0x18
mov byte [ebp - 0x87], 0
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x65478c
call fcn.0045c5d0
sub esp, 0x18
mov byte [ebp - 4], 6
mov ecx, esp
mov dword [ebp - 0xb8], esp
push 0x6547f8
call fcn.0045c5d0
sub esp, 0x18
mov byte [ebp - 4], 7
mov ecx, esp
push 0x654810
call fcn.0045c5d0
lea ecx, [ebp - 0x194]
mov byte [ebp - 4], 5
call fcn.0044bfe0
add esp, 0x48
mov edi, eax
mov byte [ebp - 4], 8
xor ecx, ecx
mov dword [ebp - 0x7c], 0xf9efffae
mov word [ebp - 0x78], 0xb1
mov byte [ebp - 0x76], 1
mov al, cl
sub al, 0x78
xor byte [ebp + ecx - 0x7c], al
inc ecx
cmp ecx, 5
jb 0x44d137
movaps xmm1, xmmword [0x63ebc0]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0x70], 0xffe3e7e1
lea edx, [ecx + 1]
movd xmm0, dword [ebp - 0x70]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
mov byte [ebp - 0x76], 0
xorps xmm1, xmm0
mov word [ebp - 0x6c], 0
andps xmm1, xmmword [0x63eb20]
xorps xmm0, xmm0
packuswb xmm1, xmm1
packuswb xmm1, xmm1
movd dword [ebp - 0x70], xmm1
movups xmmword [ebp - 0x11c], xmm0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
nop word [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44d1b0
sub ecx, edx
lea eax, [ebp - 0x70]
push ecx
push eax
lea ecx, [ebp - 0x11c]
call fcn.0045fde0
lea edx, [ebp - 0x11c]
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x17c]
call fcn.0044bc40
mov esi, eax
mov byte [ebp - 4], 0xa
xor ecx, ecx
mov dword [ebp - 0x70], 0xeefaf0fc
mov word [ebp - 0x6c], 0xb1
mov byte [ebp - 0x6a], 1
mov al, cl
sub al, 0x78
xor byte [ebp + ecx - 0x70], al
inc ecx
cmp ecx, 5
jb 0x44d1f7
lea ecx, [ebp - 0x70]
mov byte [ebp - 0x6a], 0
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x44d210
sub ecx, edx
lea eax, [ebp - 0x70]
push ecx
push eax
push 0
mov ecx, esi
call fcn.0045e010
mov dword [ebp - 0xf4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x104], xmm0
mov dword [ebp - 0xf0], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x104], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xf4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x7c]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x104]
call fcn.0045c3f0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x40], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x30], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push edi
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0xc
push eax
push dword [ebp - 0x6d]
lea ecx, [ebp - 0xd0]
call fcn.004612b0
lea eax, [ebp - 0x90]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xd0]
call fcn.0045c3f0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x210], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x200], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xe
lea eax, [ebp - 0x210]
push dword [ebp - 0xb0]
lea ecx, [ebp - 0x164]
push eax
push dword [ebp - 0x6d]
call fcn.004612b0
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x164]
call fcn.0045c3f0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1f4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x1e4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0xd4]
lea eax, [ebp - 0x1f4]
mov byte [ebp - 4], 0x10
push eax
push dword [ebp - 0x6d]
lea ecx, [ebp - 0x14c]
call fcn.004612b0
lea eax, [ebp - 0x9c]
mov byte [ebp - 4], 0x11
push eax
lea ecx, [ebp - 0x14c]
call fcn.0045c3f0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x274], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x264], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push dword [ebp - 0xb4]
lea eax, [ebp - 0x274]
mov byte [ebp - 4], 0x12
push eax
push dword [ebp - 0x6d]
lea ecx, [ebp - 0x134]
call fcn.004612b0
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x13
push eax
lea ecx, [ebp - 0x134]
call fcn.0045c3f0
mov dword [ebp - 0xdc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xec], xmm0
mov dword [ebp - 0xd8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xec], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xdc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 0x65478c
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x14
call fcn.0045c4c0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x68], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x58], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0xd8]
cmp ecx, 0xf
jbe 0x44d4a0
mov edx, dword [ebp - 0xec]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d496
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x120]
cmp ecx, 0xf
jbe 0x44d4f9
mov edx, dword [ebp - 0x134]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d4ef
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x260]
cmp ecx, 0xf
jbe 0x44d552
mov edx, dword [ebp - 0x274]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d548
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x138]
cmp ecx, 0xf
jbe 0x44d590
mov edx, dword [ebp - 0x14c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d586
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
mov byte [ebp - 4], 0x1a
mov ecx, dword [ebp - 0x1e0]
cmp ecx, 0xf
jbe 0x44d5e9
mov edx, dword [ebp - 0x1f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d5df
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov byte [ebp - 4], 0x1b
mov ecx, dword [ebp - 0x150]
cmp ecx, 0xf
jbe 0x44d627
mov edx, dword [ebp - 0x164]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d61d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
mov byte [ebp - 4], 0x1c
mov ecx, dword [ebp - 0x1fc]
cmp ecx, 0xf
jbe 0x44d680
mov edx, dword [ebp - 0x210]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d676
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov byte [ebp - 4], 0x1d
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x44d6be
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d6b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
mov byte [ebp - 4], 0x1e
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x44d711
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d707
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0xf0]
cmp ecx, 0xf
jbe 0x44d74f
mov edx, dword [ebp - 0x104]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d745
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
mov byte [ebp - 4], 0x20
mov ecx, dword [ebp - 0x168]
cmp ecx, 0xf
jbe 0x44d7a8
mov edx, dword [ebp - 0x17c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d79e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
mov byte [ebp - 4], 0x21
mov ecx, dword [ebp - 0x108]
cmp ecx, 0xf
jbe 0x44d801
mov edx, dword [ebp - 0x11c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d7f7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
mov byte [ebp - 4], 0x22
mov ecx, dword [ebp - 0x180]
cmp ecx, 0xf
jbe 0x44d85a
mov edx, dword [ebp - 0x194]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d850
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x198]
cmp ecx, 0xf
jbe 0x44d8b3
mov edx, dword [ebp - 0x1ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d8a9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
mov byte [ebp - 4], 0x24
mov ecx, dword [ebp - 0x1b0]
cmp ecx, 0xf
jbe 0x44d908
mov edx, dword [ebp - 0x1c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d8fe
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44d953
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b0], 0xf
mov byte [ebp - 0x1c4], 0
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0x1c8]
cmp ecx, 0xf
jbe 0x44d963
mov edx, dword [ebp - 0x1dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44d959
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44d959
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c1677
add esp, 8
sub esp, 0x18
mov dword [ebp - 0x1cc], 0
lea eax, [ebp - 0x68]
mov dword [ebp - 0x1c8], 0xf
mov ecx, esp
mov byte [ebp - 0x1dc], 0
push eax
call fcn.0045c5d0
lea ecx, [ebp - 0x28]
call fcn.0044f190
mov byte [ebp - 4], 0x26
mov ecx, esp
mov dword [ebp - 0x70], esp
push 0x65478c
call fcn.0045c5d0
sub esp, 0x18
mov byte [ebp - 4], 0x27
mov ecx, esp
mov dword [ebp - 0x7c], esp
push 0x6547f8
call fcn.0045c5d0
sub esp, 0x18
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.0045c5d0
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x26
call fcn.0044c280
mov esi, eax
add esp, 0x48
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x44da4b
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x44da17
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44da0d
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44da71
push ecx
push edx
call fcn.005c1677
add esp, 8
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x28], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x18], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
mov ecx, dword [ebp - 0x2c]
cmp ecx, 0xf
jbe 0x44da81
mov edx, dword [ebp - 0x40]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44da77
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44da77
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c1677
add esp, 8
push 0
push 1
sub esp, 0x28
lea edx, [ebp - 0x28]
mov eax, esp
lea ecx, [ebp - 0x50]
mov dword [eax + 0x24], 0
call fcn.0045f1b0
add esp, 0x30
push str.success
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x29
call fcn.0045f2d0
mov ecx, eax
cmp byte [ecx], 4
jne 0x44dd04
cmp byte [ecx + 8], 0
lea ecx, [ebp - 0x50]
je 0x44db78
push str.sessionid
call fcn.0045f2d0
push eax
mov ecx, 0x65487c
call fcn.00464340
lea ecx, [ebp - 0x50]
call fcn.0045b120
mov ecx, dword [ebp - 0x14]
cmp ecx, 0xf
jbe 0x44db15
mov edx, dword [ebp - 0x28]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44db0b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44db4d
push ecx
push edx
call fcn.005c1677
add esp, 8
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp ecx, 0xf
jbe 0x44db5d
mov edx, dword [ebp - 0x68]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44db53
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44db53
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.005c1677
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005c12f7
mov esp, ebp
pop ebp
ret
push str.message
call fcn.0045f2d0
mov edi, eax
mov byte [ebp - 4], 0x2c
xorps xmm0, xmm0
push 0x18
movq qword [ebp - 0xa4], xmm0
mov byte [ebp - 0xac], 3
call fcn.005c13f6
add esp, 4
mov esi, eax
xorps xmm0, xmm0
mov ecx, esi
push 0xa
movups xmmword [esi], xmm0
push str.invalidver
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.0045fde0
lea edx, [ebp - 0xac]
mov dword [ebp - 0xa4], esi
mov ecx, edi
call fcn.00460f80
lea ecx, [ebp - 0xac]
mov byte [ebp - 0x71], al
call fcn.0045b120
cmp byte [ebp - 0x71], 0
mov byte [ebp - 4], 0x29
je 0x44dc2f
push str.download
lea ecx, [ebp - 0x50]
call fcn.0045f2d0
lea ecx, [ebp - 0x40]
push ecx
mov ecx, eax
call fcn.0045f410
push 1
push 0
push 0
lea ecx, [ebp - 0x40]
call fcn.0045c3e0
push eax
push str.open
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, 0x639a20
call fcn.0045efd0
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea ecx, [ebp - 0x50]
push str.message
call fcn.0045f2d0
push ecx
push eax
lea ecx, [ebp - 0x40]
call fcn.0045f500
mov edx, eax
mov byte [ebp - 4], 0x2d
mov ecx, esi
call fcn.0045f560
lea ecx, [ebp - 0x40]
call fcn.0045c540
push 0x1194
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
movaps xmm0, xmmword [0x63eb80]
lea edx, [ebp - 0x25c]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
movups xmmword [ebp - 0x25c], xmm0
mov dword [ebp - 0x21c], 0xa2ab84e8
movaps xmm0, xmmword [0x63eb70]
movups xmmword [ebp - 0x24c], xmm0
mov dword [ebp - 0x218], 0xbfade3a2
movaps xmm0, xmmword [0x63eb90]
movups xmmword [ebp - 0x23c], xmm0
mov word [ebp - 0x214], 0xa0
movaps xmm0, xmmword [0x63eb60]
movups xmmword [ebp - 0x22c], xmm0
mov byte [ebp - 0x212], 1
call fcn.0044dd60
push 0x1194
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.0045dd90
push eax
lea ecx, [ebp - 0x40]
call fcn.0045c590
push eax
lea eax, [ebp - 0x210]
mov byte [ebp - 4], 0x2a
push str.type_must_be_boolean__but_is
push eax
call fcn.0045eab0
push eax
mov edx, 0x12e
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0x1f8]
call fcn.0044a9d0
add esp, 0x10
lea eax, [ebp - 0x1f8]
push 0x645db8
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3