Function at 0x44de70
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cbed7
mov eax, dword fs:[0]
push eax
sub esp, 0xf8
mov eax, dword [0x51fee0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0xb4], edi
mov eax, dword [ebp + 8]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xc4], eax
mov eax, dword [0x51fab0]
mov ecx, 0x51fab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xb8], eax
mov edx, dword [0x521340]
mov dword [ebp - 4], 0
lea ecx, [edx + 2]
lea eax, [edx + 1]
imul ecx, eax
imul ecx, edx
and ecx, 0x8000000f
jns 0x44def4
dec ecx
or ecx, 0xfffffff0
inc ecx
cmp ecx, 9
jne 0x44df18
xor esi, esi
test edx, edx
je 0x44df12
nop
mov ecx, edx
mov eax, edx
cdq
sub eax, edx
and ecx, 1
mov edx, eax
add esi, ecx
sar edx, 1
jne 0x44df00
mov dword [0x521340], esi
lea eax, [ebp - 0xc0]
push eax
call fcn.00430410
add esp, 4
mov ebx, eax
mov edx, dword [0x51fab0]
mov ecx, 0x51fab0
mov byte [ebp - 4], 1
call dword [edx + 0xc]
add eax, 0x10
mov dword [ebp - 0xa4], eax
mov eax, str.geo
mov byte [ebp - 4], 2
test eax, 0xffff0000
jne 0x44df75
movzx esi, ax
push 0
push esi
call fcn.00403bc0
add esp, 8
test eax, eax
je 0x44df85
push esi
push eax
lea ecx, [ebp - 0xa4]
call fcn.004075c0
jmp 0x44df85
push str.geo
lea ecx, [ebp - 0xa4]
call fcn.0040b480
push ebx
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xbc]
push eax
mov byte [ebp - 4], 3
call fcn.0040b6d0
push str.userscope
push eax
lea eax, [ebp - 0xc8]
push eax
mov byte [ebp - 4], 4
call fcn.0040b790
cmp byte [edi + 0x9c], 0
mov edx, 0x4de414
mov ecx, 0x4dd5e4
cmove ecx, edx
push ecx
push eax
lea eax, [ebp - 0xcc]
push eax
mov byte [ebp - 4], 5
call fcn.0040b790
add esp, 0x24
mov eax, dword [eax]
lea ecx, [ebp - 0xb8]
push dword [eax - 0xc]
mov byte [ebp - 4], 6
push eax
call fcn.0040b9f0
mov edx, dword [ebp - 0xcc]
add edx, 0xfffffff0
or ebx, 0xffffffff
mov byte [ebp - 4], 5
lea ecx, [edx + 0xc]
mov eax, ebx
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x44e017
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xc8]
add edx, 0xfffffff0
mov byte [ebp - 4], 4
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e03a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xbc]
add edx, 0xfffffff0
mov byte [ebp - 4], 3
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e05d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xa4]
add edx, 0xfffffff0
mov byte [ebp - 4], 1
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e080
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xc0]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e0a3
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push str.downloading_update
lea ecx, [ebp - 0xa4]
call fcn.00401ff0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xa4]
push eax
mov ecx, edi
mov byte [ebp - 4], 7
call fcn.0042eef0
mov edx, dword [ebp - 0xa4]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e0ef
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push dword [ebp - 0xac]
lea eax, [ebp - 0xb0]
push eax
call fcn.00435ec0
add esp, 0xc
mov esi, dword [0x521340]
mov eax, esi
imul eax, esi
imul eax, esi
cdq
mov ecx, 0x12
idiv ecx
mov byte [ebp - 4], 8
cmp edx, 0xe
jne 0x44e18d
test esi, esi
je 0x44e18d
lea esp, [esp]
mov eax, esi
and eax, 0x80000001
jns 0x44e13e
dec eax
or eax, 0xfffffffe
inc eax
jne 0x44e14b
mov eax, esi
cdq
sub eax, edx
mov esi, eax
sar esi, 1
jmp 0x44e152
lea esi, [esi*2 + 1]
mov eax, 0x55555556
imul esi
mov eax, edx
shr eax, 0x1f
add eax, edx
mov ecx, esi
lea eax, [eax + eax*2]
sub ecx, eax
mov dword [0x521340], esi
sub ecx, 0
je 0x44e17c
sub ecx, 2
je 0x44e17f
dec ecx
je 0x44e180
jmp 0x44e189
add esi, 2
inc esi
add esi, 2
mov dword [0x521340], esi
test esi, esi
jne 0x44e130
mov eax, dword [ebp - 0xac]
mov eax, dword [eax]
cmp dword [eax - 0xc], 0
jne 0x44e2a7
call fcn.0044fca0
test al, al
jne 0x44e20f
mov eax, 0x5254e78f
imul esi
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xc7
mov eax, esi
sub eax, ecx
xor edi, edi
cmp eax, 0xed
je 0x44e203
lea esp, [esp]
mov eax, esi
or eax, 0xffffff9c
add esi, eax
mov eax, esi
imul eax, esi
inc edi
cmp edi, eax
jg 0x44e203
mov eax, 0x5254e78f
imul esi
sar edx, 6
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0xc7
mov eax, esi
sub eax, ecx
cmp eax, 0xed
jne 0x44e1d0
mov dword [0x521340], edi
mov edi, dword [ebp - 0xb4]
mov eax, dword [0x51fab0]
mov ecx, 0x51fab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa4], eax
mov eax, str.download_updater_js
mov byte [ebp - 4], 9
test eax, 0xffff0000
jne 0x44e256
movzx esi, ax
push 0
push esi
call fcn.00403bc0
add esp, 8
test eax, eax
je 0x44e266
push esi
push eax
lea ecx, [ebp - 0xa4]
call fcn.004075c0
jmp 0x44e266
push str.download_updater_js
lea ecx, [ebp - 0xa4]
call fcn.0040b480
lea eax, [ebp - 0xa4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xa
call fcn.0042ef80
mov edx, dword [ebp - 0xa4]
add edx, 0xfffffff0
mov byte [ebp - 4], 8
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e29b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 0xa5], 0
jmp 0x44e7f7
push dword [edi + 0x1c]
lea ecx, [ebp - 0xb0]
push str.APP_ID
call fcn.004232b0
call fcn.0044fce0
test al, al
jne 0x44e301
mov esi, dword [0x521340]
mov eax, 0x51eb851f
imul esi
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
imul ecx, ecx, 0x64
sub esi, ecx
xor ecx, ecx
lea eax, [esi + 0x63]
mov edx, 4
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.004a63b0
push eax
call fcn.004a8200
add esp, 8
push dword [edi + 0x20]
lea ecx, [ebp - 0xb0]
push str.APP_NAME
call fcn.004232b0
call fcn.0044fdf0
test al, al
jne 0x44e3b3
mov edx, dword [0x521340]
xor esi, esi
lea esp, [esp]
mov ecx, esi
and ecx, 1
dec ecx
not ecx
and ecx, edx
mov eax, esi
sar eax, 1
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
mov ecx, eax
and ecx, 1
dec ecx
sar eax, 1
not ecx
and ecx, edx
xor ecx, eax
mov eax, ecx
and eax, 1
dec eax
not eax
and eax, edx
sar ecx, 1
xor eax, ecx
inc esi
add edx, eax
cmp esi, 0x100
jl 0x44e330
mov dword [0x521340], edx
push dword [edi + 0x24]
lea ecx, [ebp - 0xb0]
push str.BIC
call fcn.004232b0
push dword [edi + 0x4c]
lea ecx, [ebp - 0xb0]
push str.SRCID
call fcn.004232b0
push str.executing_update
lea ecx, [ebp - 0xac]
call fcn.00401ff0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xac]
push eax
mov ecx, edi
mov byte [ebp - 4], 0xb
call fcn.0042eef0
mov edx, dword [ebp - 0xac]
add edx, 0xfffffff0
mov byte [ebp - 4], 8
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e425
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0xbc], eax
call fcn.0040af50
mov dword [ebp - 0x104], 0x4dfde0
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
mov esi, dword [0x521394]
lea eax, [ebp - 0x104]
add esi, 0x10
push esi
mov byte [ebp - 4], 0xc
mov dword [ebp - 0xb4], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov ecx, dword [0x522770]
mov dword [ebp - 0xc0], eax
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.00449a40
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push str.main
lea ecx, [ebp - 0xac]
call fcn.00401ff0
mov eax, dword [edi]
lea ecx, [ebp - 0xb4]
push ecx
mov ecx, edi
mov byte [ebp - 4], 0xd
call dword [eax + 0x14]
lea ecx, [ebp - 0xac]
push ecx
push dword [ebp - 0xc4]
lea ecx, [ebp - 0xb0]
push ecx
push eax
lea eax, [edi + 0x10]
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xe
call fcn.004020a0
mov edx, dword [ebp - 0xb4]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x10
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e535
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0xac]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x11
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e558
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0xa0]
call fcn.0040a830
test eax, eax
jne 0x44e5c4
mov eax, dword [0x51fab0]
mov ecx, 0x51fab0
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0xa4], eax
mov eax, str.fail_init_host_class
mov byte [ebp - 4], 0x12
test eax, 0xffff0000
jne 0x44e5ae
movzx esi, ax
push 0
push esi
call fcn.00403bc0
add esp, 8
test eax, eax
je 0x44e5be
push esi
push eax
lea ecx, [ebp - 0xa4]
call fcn.004075c0
jmp 0x44e5be
push str.fail_init_host_class
lea ecx, [ebp - 0xa4]
call fcn.0040b480
mov byte [ebp - 4], 0x13
jmp 0x44e634
push 0
push dword [ebp - 0xbc]
lea ecx, [ebp - 0xa0]
call fcn.0044ae90
test eax, eax
jne 0x44e671
mov edx, dword [0x521340]
lea ecx, [edx + 1]
lea eax, [edx + 2]
imul eax, ecx
imul eax, edx
cdq
mov ecx, 0x11
idiv ecx
cmp edx, 3
jne 0x44e620
mov eax, 0xa3
mov esi, 0x67
test esi, esi
je 0x44e619
cdq
idiv esi
mov ecx, esi
mov eax, ecx
mov esi, edx
test ecx, ecx
jne 0x44e608
add eax, esi
mov dword [0x521340], eax
push str.create_browser_dialog
lea ecx, [ebp - 0xa4]
call fcn.004213a0
mov byte [ebp - 4], 0x14
lea eax, [ebp - 0xa4]
push eax
mov ecx, edi
call fcn.0042ef80
mov edx, dword [ebp - 0xa4]
add edx, 0xfffffff0
mov ecx, ebx
lea eax, [edx + 0xc]
mov byte [ebp - 4], 0x11
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e665
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 0xa5], 0
jmp 0x44e786
push str.about:blank
lea ecx, [ebp - 0xa4]
call fcn.00401ff0
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0x15
call fcn.00422a50
mov edx, dword [ebp - 0xa4]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x11
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e6ba
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x104]
call fcn.0044ddc0
mov ecx, 0x52273c
mov esi, eax
call fcn.0044db60
call fcn.0044fc70
test al, al
jne 0x44e6ec
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
mov ecx, dword [0x521340]
mov eax, ecx
imul eax, ecx
imul eax, ecx
cdq
mov dword [ebp - 0xc4], 0x13
idiv dword [ebp - 0xc4]
cmp edx, 0x11
jne 0x44e720
mov eax, 1
test ecx, ecx
cmove ecx, eax
mov dword [0x521340], ecx
push str.update_done
lea ecx, [ebp - 0xa4]
call fcn.00401ff0
lea eax, [ebp - 0xb8]
push eax
lea eax, [ebp - 0xa4]
push eax
mov ecx, edi
mov byte [ebp - 4], 0x16
call fcn.0042eef0
mov edx, dword [ebp - 0xa4]
add edx, 0xfffffff0
mov byte [ebp - 4], 0x11
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e76c
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.0044fcc0
test al, al
jne 0x44e77d
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
test esi, esi
sete byte [ebp - 0xa5]
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xc
call fcn.00402750
mov eax, dword [ebp - 0xf4]
test eax, eax
je 0x44e7b2
push eax
call fcn.004a807a
add esp, 4
mov dword [ebp - 0xf4], 0
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xec], 0
test eax, eax
je 0x44e7e3
push eax
call fcn.004a807a
add esp, 4
mov dword [ebp - 0x100], 0
mov dword [ebp - 0xfc], 0
mov dword [ebp - 0xf8], 0
mov edx, dword [ebp - 0xb0]
add edx, 0xfffffff0
mov byte [ebp - 4], 0
lea eax, [edx + 0xc]
mov ecx, ebx
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x44e81a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0xb8]
add esi, 0xfffffff0
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0xc]
lock xadd dword [eax], ebx
dec ebx
test ebx, ebx
jg 0x44e83e
mov ecx, dword [esi]
push esi
mov edx, dword [ecx]
call dword [edx + 4]
mov al, byte [ebp - 0xa5]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a7434
mov esp, ebp
pop ebp
ret 8