Function at 0x44a010
Capabilities:
Contain obfuscated stackstrings
Get system information on windows
Identify system language via api

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4d2b9b
mov eax, dword fs:[0]
push eax
sub esp, 0x128
mov eax, dword [0x5080f4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov dword [ebp - 0xa8], esi
mov eax, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xac], eax
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 0xf
mov byte [ebp - 0x48], 0
push str._record_:_
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], 1
call fcn.004163d0
push str._event_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x28]
push 0x19
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push str._type_:_d_
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 2
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a122
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a118
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b679
push edx
push ecx
call fcn.00484d63
add esp, 8
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 4
lea eax, [ebp - 0x28]
push 1
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push str._subtype_:_d_
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 4
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a1ac
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a1a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b67e
push edx
push ecx
call fcn.00484d63
add esp, 8
lea eax, [ebp - 0x134]
push eax
call fcn.0043ada0
add esp, 4
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0xc4]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x70], xmm0
call fcn.00411c90
push eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 6
push eax
call fcn.00449cf0
cmp dword [eax + 0x14], 0x10
jb 0x44a1e6
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._request_id_:__s__
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 8
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a26f
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a265
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b683
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44a2b9
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a2af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b683
push edx
push ecx
call fcn.00484d63
add esp, 8
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
call fcn.004127e0
call fcn.004846c3
push 0
push 0x2710
push edx
push eax
call fcn.004cdb80
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], 0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xa
push eax
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x10
call fcn.0044c010
add esp, 4
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a369
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a35f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b688
push edx
push ecx
call fcn.00484d63
add esp, 8
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._setup_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._common_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
lea eax, [esi + 0xd4]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00449da0
cmp dword [eax + 0x14], 0x10
jb 0x44a3a8
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._operation_:__s__
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x20
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a431
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a427
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b68d
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44a47b
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a471
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b68d
push edx
push ecx
call fcn.00484d63
add esp, 8
lea eax, [esi + 0x44]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00449cf0
cmp dword [eax + 0x14], 0x10
jb 0x44a490
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._session_id_:__s__
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x40
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a519
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a50f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b692
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44a563
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a559
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b692
push edx
push ecx
call fcn.00484d63
add esp, 8
push edi
lea eax, [ebp - 0x60]
push eax
call fcn.00449da0
cmp dword [eax + 0x14], 0x10
jb 0x44a575
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._stage_:__s__
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x80
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x12
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a5fe
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a5f4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b697
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44a648
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a63e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b697
push edx
push ecx
call fcn.00484d63
add esp, 8
lea eax, [esi + 0x5c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00449cf0
cmp dword [eax + 0x14], 0x10
jb 0x44a65d
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._title_:__s_
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x100
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a6e6
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a6dc
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b69c
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44a730
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a726
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b69c
push edx
push ecx
call fcn.00484d63
add esp, 8
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
cmp dword [esi + 0x9c], 0
je 0x44a937
push str._finish_state_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
lea eax, [esi + 0x74]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00449da0
cmp dword [eax + 0x14], 0x10
jb 0x44a76c
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._reboot_:__s__
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x200
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a7f5
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a7eb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6a1
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44a83f
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a835
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6a1
push edx
push ecx
call fcn.00484d63
add esp, 8
lea eax, [esi + 0x8c]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00449da0
cmp dword [eax + 0x14], 0x10
jb 0x44a857
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._ret_code_:__s_
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x400
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44a8e0
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a8d6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6a6
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44a92a
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44a920
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6a6
push edx
push ecx
call fcn.00484d63
add esp, 8
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._config_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._main_products_:_
lea ecx, [ebp - 0x48]
call fcn.004163d0
lea eax, [esi + 0xa4]
push eax
lea ecx, [ebp - 0x48]
call fcn.004165a0
push 0x4eccd8
lea ecx, [ebp - 0x48]
call fcn.004163d0
lea ecx, [ebp - 0x60]
call fcn.004355e0
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x30]
call fcn.00436c50
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.004127e0
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x30]
call fcn.00410430
push eax
lea eax, [ebp - 0x60]
mov byte [ebp - 4], 0x1f
push eax
call fcn.00449cf0
cmp dword [eax + 0x14], 0x10
jb 0x44a9b5
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._sfx_ver_:__s__
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x800
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x20
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44aa3e
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44aa34
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6ab
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44aa88
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44aa7e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6ab
push edx
push ecx
call fcn.00484d63
add esp, 8
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], 0
mov byte [ebp - 4], 1
call fcn.004127e0
lea eax, [esi + 0xf0]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00449cf0
cmp dword [eax + 0x14], 0x10
jb 0x44aac1
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._trigger_:__s__
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x1000
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44ab4a
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44ab40
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6b0
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44ab94
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44ab8a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6b0
push edx
push ecx
call fcn.00484d63
add esp, 8
lea eax, [esi + 0x108]
push eax
lea eax, [ebp - 0x60]
push eax
call fcn.00449cf0
cmp dword [eax + 0x14], 0x10
jb 0x44abac
mov eax, dword [eax]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._cmdline_:__s_
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x2000
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44ac35
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44ac2b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6b5
push edx
push ecx
call fcn.00484d63
add esp, 8
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44ac7f
mov ecx, dword [ebp - 0x60]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44ac75
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6b5
push edx
push ecx
call fcn.00484d63
add esp, 8
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._system_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
call fcn.0044b7d0
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], 0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x29
push eax
mov edx, str._memory_:_I64d_
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x4000
call fcn.0044c040
add esp, 4
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44ad23
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44ad19
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6ba
push edx
push ecx
call fcn.00484d63
add esp, 8
lea eax, [ebp - 0x9c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 0x2b
lea eax, [ebp - 0x28]
push dword [ebp - 0x88]
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push str._processors_:_lu_
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x8000
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44adbe
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44adb4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6bf
push edx
push ecx
call fcn.00484d63
add esp, 8
call fcn.0043ba70
test al, al
mov ecx, 0x4ea5c0
mov edx, 0x4ea5b8
cmove ecx, edx
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 0x2d
lea eax, [ebp - 0x28]
push ecx
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push str._workstation_:_s
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x20000
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44ae5b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44ae51
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6c4
push edx
push ecx
call fcn.00484d63
add esp, 8
cmp dword [esi + 0x24], 0
je 0x44af18
push 0x4ecb6c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._hdd_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
mov ecx, esi
call fcn.0044b840
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], 0
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x2f
push eax
mov edx, str._available_:_I64d
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x40000
call fcn.0044c040
add esp, 4
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44af0b
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44af01
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6c9
push edx
push ecx
call fcn.00484d63
add esp, 8
push 0x4ecd6c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push 0x4ecd6c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._identity_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
lea ecx, [ebp - 0x98]
call fcn.0046f9c0
mov dword [ebp - 0x78], 0
mov dword [ebp - 4], 0x32
lea ecx, [ebp - 0x78]
xor eax, eax
mov byte [ebp - 4], 0x31
push 0x40
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov dword [ebp - 0xa4], 0x200000
call fcn.0040edc0
xor edi, edi
nop word [eax + eax]
movzx esi, byte [ebp + edi - 0x98]
lea ecx, [ebp - 0x78]
mov eax, esi
shr eax, 4
movzx eax, word [eax*2 + 0x4ece80]
push eax
call fcn.0040b380
and esi, 0xf
lea ecx, [ebp - 0x78]
movzx eax, word [esi*2 + 0x4ece80]
push eax
call fcn.0040b380
inc edi
cmp edi, 0x20
jb 0x44af90
mov dword [ebp - 4], 1
cmp dword [ebp - 0x64], 8
lea eax, [ebp - 0x78]
cmovae eax, dword [ebp - 0x78]
mov dword [ebp - 0x28], 0
push eax
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
push str._hwid_:__ls_
push eax
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x580000
mov dword [ebp - 0xa0], ecx
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 0x33
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44b063
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44b059
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6ce
push edx
push ecx
call fcn.00484d63
add esp, 8
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov byte [ebp - 4], 1
call fcn.004127e0
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._installation_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x28]
push str.INSTALL
mov dword [ebp - 0xa0], eax
lea eax, [ebp - 0xa0]
push str._action_:__s__
push eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x980000
call fcn.0041bd60
add esp, 0xc
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x44b128
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x44b11e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b6d3
push edx
push ecx
call fcn.00484d63
add esp, 8
mov edi, dword [ebp - 0xa8]
lea eax, [edi + 0x2c]
push eax
lea eax, [ebp - 0xc4]
push eax
call fcn.00449cf0
cmp dword [eax + 0x14], 0x10
jb 0x44b146
mov eax, dword [eax]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x28], 0
lea eax, [ebp - 0xa8]
mov byte [ebp - 4], 0x39
push eax
mov edx, str._aiid_:__s__
mov dword [ebp - 0x18], 0
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
mov dword [ebp - 0xa4], 0x1180000
call fcn.0044bff0
add esp, 4
lea eax, [ebp - 0x28]
lea ecx, [ebp - 0x48]
push eax
call fcn.004165a0
lea ecx, [ebp - 0x28]
call fcn.004129e0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 1
call fcn.004129e0
call fcn.004846c3
push 0
push 0x2710
push edx
push eax
call fcn.004cdb80
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0xc4]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x2c], edx
push eax
call fcn.0044bc10
add esp, 4
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x3b
call fcn.004165a0
lea ecx, [ebp - 0xc4]
mov byte [ebp - 4], 1
call fcn.004129e0
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._platform_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
push 1
mov byte [ebp - 4], 0x3c
call fcn.00483554
add esp, 4
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x78]
mov byte [ebp - 4], 0x3d
push eax
call fcn.0044b6e0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x3e
push ecx
mov edx, eax
lea ecx, [ebp - 0x60]
call fcn.0044bc90
add esp, 4
mov ecx, eax
mov byte [ebp - 4], 0x3f
call fcn.00412590
mov dword [ebp - 0xa8], eax
lea ecx, [ebp - 0xc4]
lea eax, [ebp - 0xa8]
mov edx, str._architecture_:__ls__
push eax
call fcn.0044bb80
add esp, 4
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x40
call fcn.004165a0
lea ecx, [ebp - 0xc4]
call fcn.004129e0
lea ecx, [ebp - 0x60]
call fcn.004127e0
lea ecx, [ebp - 0x78]
call fcn.004127e0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 1
call fcn.004179c0
lea ecx, [ebp - 0xdc]
call fcn.0044bd60
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x41
call fcn.004165a0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 1
call fcn.004129e0
call fcn.0043b620
mov dword [ebp - 0xa8], eax
call fcn.0043b5b0
mov dword [ebp - 0xa0], eax
call fcn.0043b540
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xdc]
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xa0]
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044bde0
add esp, 0xc
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x42
call fcn.004165a0
lea ecx, [ebp - 0xdc]
mov byte [ebp - 4], 1
call fcn.004129e0
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
movzx ecx, ax
call fcn.0044c390
push eax
lea ecx, [ebp - 0x28]
call fcn.00412500
push 1
mov byte [ebp - 4], 0x44
call fcn.00483554
add esp, 4
mov dword [ebp - 0x2c], eax
push 0xffffffffffffffff
push 0
push 0x2d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x45
call fcn.0040b320
inc eax
lea ecx, [ebp - 0x28]
push eax
lea eax, [ebp - 0x78]
push eax
call fcn.0040b280
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x46
push ecx
mov edx, eax
lea ecx, [ebp - 0x60]
call fcn.0044bc90
add esp, 4
mov esi, eax
push 0
push 0x2d
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x47
call fcn.0040b320
inc eax
lea ecx, [ebp - 0x28]
push eax
push 0
lea eax, [ebp - 0xc4]
push eax
call fcn.0040b280
push esi
mov edx, eax
mov byte [ebp - 4], 0x48
lea ecx, [ebp - 0xdc]
call fcn.00412b80
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.00412640
lea ecx, [ebp - 0xdc]
call fcn.004127e0
lea ecx, [ebp - 0xc4]
call fcn.004127e0
lea ecx, [ebp - 0x60]
call fcn.004127e0
lea ecx, [ebp - 0x78]
call fcn.004127e0
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0x43
call fcn.004179c0
lea eax, [ebp - 0x28]
push eax
lea eax, [ebp - 0xf4]
push eax
call fcn.00449cf0
mov ecx, eax
mov byte [ebp - 4], 0x49
call fcn.0040e830
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xdc]
lea eax, [ebp - 0x2c]
mov edx, str._lang_:__s__
push eax
call fcn.0044bb80
add esp, 4
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x4a
call fcn.004165a0
lea ecx, [ebp - 0xdc]
call fcn.004129e0
lea ecx, [ebp - 0xf4]
mov byte [ebp - 4], 0x43
call fcn.004129e0
call fcn.0044b780
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0xf4]
lea eax, [ebp - 0x2c]
mov edx, str._time_zone_:_d
push eax
call fcn.0044bb80
add esp, 4
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x4b
call fcn.004165a0
lea ecx, [ebp - 0xf4]
call fcn.004129e0
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 1
call fcn.004127e0
push 0x4ecc1c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push str._product_:
lea ecx, [ebp - 0x48]
call fcn.004163d0
xor eax, eax
lea ecx, [ebp - 0x10c]
cmp byte [edi + 0xec], al
mov edx, str._edition_:_d_
setne al
inc eax
mov dword [ebp - 0x2c], eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0044bb80
add esp, 4
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x4c
call fcn.004165a0
lea ecx, [ebp - 0x10c]
mov byte [ebp - 4], 1
call fcn.004129e0
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x270f
push eax
mov edx, str._id_:_d_
lea ecx, [ebp - 0x124]
call fcn.0044bb80
add esp, 4
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x4d
call fcn.004165a0
lea ecx, [ebp - 0x124]
mov byte [ebp - 4], 1
call fcn.004129e0
lea ecx, [ebp - 0x12c]
call fcn.00436be0
lea ecx, [ebp - 0x60]
push ecx
mov ecx, eax
call fcn.00410430
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x90]
xorps xmm0, xmm0
mov dword [ebp - 0x64], 0
movq qword [ebp - 0x6c], xmm0
call fcn.004355e0
mov edx, eax
mov byte [ebp - 4], 0x4f
lea ecx, [ebp - 0x6c]
call fcn.00437010
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x51
call fcn.004127e0
mov eax, dword [ebp - 0x6c]
cmp eax, dword [ebp - 0x68]
je 0x44b58d
add eax, 0x34
lea ecx, [ebp - 0x60]
push eax
call fcn.004133f0
lea eax, [ebp - 0x60]
push eax
lea eax, [ebp - 0x10c]
push eax
call fcn.00449cf0
mov ecx, eax
mov byte [ebp - 4], 0x52
call fcn.0040e830
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x124]
lea eax, [ebp - 0x2c]
mov edx, str._version_app_:__s_
push eax
call fcn.0044bb80
add esp, 4
push eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x53
call fcn.004165a0
lea ecx, [ebp - 0x124]
call fcn.004129e0
lea ecx, [ebp - 0x10c]
call fcn.004129e0
lea ecx, [ebp - 0x6c]
call fcn.00438410
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 1
call fcn.004127e0
push 0x4ecd6c
lea ecx, [ebp - 0x48]
call fcn.004163d0
push 0x4ece54
lea ecx, [ebp - 0x48]
call fcn.004163d0
mov edi, dword [ebp - 0xac]
lea eax, [ebp - 0xac]
xorps xmm0, xmm0
lea ecx, [ebp - 0x48]
push eax
movq qword [edi], xmm0
mov dword [edi + 8], 0
call fcn.0044c370
lea ecx, [ebp - 0x48]
mov esi, dword [eax]
lea eax, [ebp - 0xa8]
push eax
call fcn.0044c350
push ecx
push esi
mov ecx, edi
push dword [eax]
call fcn.0044be70
lea ecx, [ebp - 0x48]
call fcn.004129e0
mov eax, edi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00484d55
mov esp, ebp
pop ebp
ret 8
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
call fcn.004a949f
int3