Function at 0x449b40
Capabilities:
Create process on windows
Create thread
Encode data using xor
Inspect section memory permissions
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4cccc5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x6c0
mov eax, dword [0x4ef400]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x230], edi
push 0
push 0
push 0
push 0x454a90
push 0
push 0
mov dword [ebp - 0x1b4], 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
cmp dword [edi + 0x28], 0xa
jne 0x44b78c
cmp dword [edi + 0x40], 0x40
jne 0x44b78c
xorps xmm0, xmm0
mov dword [ebp - 0x78], 0
movups xmmword [ebp - 0x88], xmm0
mov dword [ebp - 0x74], 0xf
movups xmmword [ebp - 0xe0], xmm0
mov byte [ebp - 0x88], 0
lea eax, [ebp - 0xe0]
mov dword [ebp - 4], 0
push eax
call dword [sym.imp.RPCRT4.dll_UuidCreate]
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1ac], 0
push eax
lea eax, [ebp - 0xe0]
push eax
call dword [sym.imp.RPCRT4.dll_UuidToStringA]
test eax, eax
jne 0x449c46
mov edx, dword [ebp - 0x1ac]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x449c23
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x88]
call fcn.00459c20
lea eax, [ebp - 0x1ac]
push eax
call dword [sym.imp.RPCRT4.dll_RpcStringFreeA]
xorps xmm0, xmm0
mov dword [ebp - 0x2c], 0
movups xmmword [ebp - 0x3c], xmm0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x88]
mov ecx, 0x10
mov dword [ebp - 0x314], 0
cmp dword [ebp - 0x78], ecx
movups xmmword [ebp - 0x324], xmm0
cmovb ecx, dword [ebp - 0x78]
cmp dword [ebp - 0x74], 0xf
push ecx
cmova eax, dword [ebp - 0x88]
lea ecx, [ebp - 0x324]
push eax
mov dword [ebp - 0x310], 0
call fcn.0045b260
mov ecx, dword [ebp - 0x28]
cmp ecx, 0xf
jbe 0x449cdc
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449cd2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
movups xmm0, xmmword [ebp - 0x324]
push ecx
lea eax, [ebp - 0x1c3]
mov byte [ebp - 0x324], 0
push eax
movups xmmword [ebp - 0x3c], xmm0
lea eax, [ebp - 0x1c4]
mov word [ebp - 0x1c4], 0x2d
movq xmm0, qword [ebp - 0x314]
lea ecx, [ebp - 0x350]
push eax
movq qword [ebp - 0x2c], xmm0
mov dword [ebp - 0x314], 0
mov dword [ebp - 0x310], 0xf
mov byte [ebp - 0x1c2], 0
call fcn.0045a4c0
mov byte [ebp - 4], 2
lea eax, [ebp - 0x3c]
cmp dword [ebp - 0x28], 0xf
push dword [ebp - 0x2c]
cmova eax, dword [ebp - 0x3c]
push eax
push ecx
lea ecx, [ebp - 0x350]
call fcn.0045d670
mov dword [ebp - 0x29c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2ac], xmm0
mov dword [ebp - 0x298], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2ac], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x29c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x33c]
cmp ecx, 0xf
jbe 0x449ddc
mov edx, dword [ebp - 0x350]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449dd2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x340], 0
mov dword [ebp - 0x33c], 0xf
mov byte [ebp - 0x350], 0
lea eax, [edi + 0x30]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2ac]
mov dword [ebp - 0x278], eax
call fcn.004573a0
mov dword [ebp - 0x284], 0
lea esi, [edi + 0x1cc]
mov dword [ebp - 0x280], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x294], xmm0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x294], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x284], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x294]
cmp esi, eax
je 0x449edc
mov ecx, dword [esi + 0x14]
cmp ecx, 0xf
jbe 0x449e99
mov eax, dword [esi]
inc ecx
cmp ecx, 0x1000
jb 0x449e8f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
mov eax, edx
push ecx
push eax
call fcn.004ca5d3
add esp, 8
mov dword [esi + 0x10], 0
mov eax, 0xf
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [ebp - 0x294]
movups xmmword [esi], xmm0
movq xmm0, qword [ebp - 0x284]
movq qword [esi + 0x10], xmm0
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x280], eax
mov byte [ebp - 0x294], 0
jmp 0x449ee2
mov eax, dword [ebp - 0x280]
cmp eax, 0xf
jbe 0x449f18
mov edx, dword [ebp - 0x294]
lea ecx, [eax + 1]
mov eax, edx
cmp ecx, 0x1000
jb 0x449f0e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x298]
mov dword [ebp - 0x284], 0
mov dword [ebp - 0x280], 0xf
mov byte [ebp - 0x294], 0
cmp ecx, 0xf
jbe 0x449f71
mov edx, dword [ebp - 0x2ac]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x449f67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x29c], 0
mov dword [ebp - 0x298], 0xf
mov byte [ebp - 0x2ac], 0
call fcn.00451cf0
mov byte [ebp - 4], 4
call fcn.00472bc0
mov ecx, eax
mov dword [ebp - 0x26c], 0x6100943
mov dword [ebp - 0x268], 0x802180c
mov eax, edi
mov word [ebp - 0x264], 0x50
mov byte [ebp - 0x262], 1
cmp dword [edi + 0x14], 0xf
mov dword [ebp - 0x1b4], ecx
jbe 0x449fd6
mov eax, dword [edi]
push 0
push eax
push ecx
call fcn.00472a20
add esp, 0xc
mov dword [ebp - 0x27c], eax
mov dword [ebp - 0x240], 0x5060843
xor ecx, ecx
mov dword [ebp - 0x23c], 0x100570c
mov dword [ebp - 0x254], 0xb090343
mov dword [ebp - 0x250], 0x51120f02
mov word [ebp - 0x24c], 0x100
mov dword [ebp - 0x248], 0x1b060e43
mov dword [ebp - 0x244], 0x1005701
mov dword [ebp - 0x1c0], 0x1a021043
mov word [ebp - 0x1bc], 0x54
mov byte [ebp - 0x1ba], 1
mov dword [ebp - 0x200], 0xd171f11
mov dword [ebp - 0x1fc], 0x5050354
mov word [ebp - 0x1f8], 0x19
mov byte [ebp - 0x1f6], 1
nop dword [eax]
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x1c0], al
inc ecx
cmp ecx, 5
jb 0x44a070
push ecx
lea eax, [ebp - 0x1bb]
mov byte [ebp - 0x1ba], 0
push eax
lea eax, [ebp - 0x1c0]
push eax
lea ecx, [ebp - 0x380]
call fcn.0045a4c0
mov byte [ebp - 4], 5
cmp byte [ebp - 0x1f6], 0
je 0x44a0c9
xor ecx, ecx
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x200], al
inc ecx
cmp ecx, 9
jb 0x44a0b1
mov byte [ebp - 0x1f6], 0
push ecx
lea eax, [ebp - 0x1f7]
push eax
lea eax, [ebp - 0x200]
push eax
lea ecx, [ebp - 0x368]
call fcn.0045a4c0
lea eax, [ebp - 0x380]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0x368]
push eax
push dword [ebp - 0x230]
lea ecx, [ebp - 0x398]
call fcn.0045c800
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0x354]
cmp ecx, 0xf
jbe 0x44a144
mov edx, dword [ebp - 0x368]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a13a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x36c]
mov dword [ebp - 0x358], 0
mov dword [ebp - 0x354], 0xf
mov byte [ebp - 0x368], 0
cmp ecx, 0xf
jbe 0x44a19d
mov edx, dword [ebp - 0x380]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a193
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x370], 0
mov dword [ebp - 0x36c], 0xf
mov byte [ebp - 0x380], 0
lea eax, [edi + 0x48]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x398]
call fcn.004573a0
mov dword [ebp - 0x2fc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x30c], xmm0
mov dword [ebp - 0x2f8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x30c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2fc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x248]
mov byte [ebp - 4], 8
push eax
lea edx, [ebp - 0x30c]
lea ecx, [ebp - 0x4a0]
call fcn.0044b9b0
add esp, 4
mov esi, eax
mov byte [ebp - 4], 9
lea eax, [ebp - 0xb8]
cmp dword [ebp - 0xa4], 0xf
mov edx, dword [esi + 0x10]
cmova eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x208], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x270], eax
sub eax, edx
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x1b8], edx
cmp ecx, eax
ja 0x44a2bd
cmp dword [ebp - 0x270], 0xf
lea eax, [edx + ecx]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [ebp - 0x204], esi
jbe 0x44a293
mov eax, dword [esi]
mov dword [ebp - 0x204], eax
push ecx
push dword [ebp - 0x208]
add eax, edx
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x274]
add esp, 0xc
add eax, dword [ebp - 0x204]
mov ecx, dword [ebp - 0x1b8]
mov byte [eax + ecx], 0
jmp 0x44a2db
push ecx
push dword [ebp - 0x208]
mov byte [ebp - 0x1b8], 0
push dword [ebp - 0x1b8]
push ecx
mov ecx, esi
call fcn.0045b0f0
mov esi, eax
mov dword [ebp - 0x2e4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2f4], xmm0
mov dword [ebp - 0x2e0], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x2f4], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2e4], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea eax, [ebp - 0x254]
mov byte [ebp - 4], 0xa
push eax
lea edx, [ebp - 0x2f4]
lea ecx, [ebp - 0x488]
call fcn.0044bad0
add esp, 4
mov esi, eax
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x3c]
cmp dword [ebp - 0x28], 0xf
mov edx, dword [esi + 0x10]
cmova eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x204], eax
mov eax, dword [esi + 0x14]
mov dword [ebp - 0x1b8], eax
sub eax, edx
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x270], edx
cmp ecx, eax
ja 0x44a3c1
cmp dword [ebp - 0x1b8], 0xf
lea eax, [ecx + edx]
mov dword [esi + 0x10], eax
mov eax, esi
mov dword [ebp - 0x208], esi
jbe 0x44a397
mov eax, dword [esi]
mov dword [ebp - 0x208], eax
push ecx
push dword [ebp - 0x204]
add eax, edx
push eax
call sub.VCRUNTIME140.dll_memmove
mov eax, dword [ebp - 0x274]
add esp, 0xc
add eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x270]
mov byte [eax + ecx], 0
jmp 0x44a3df
push ecx
push dword [ebp - 0x204]
mov byte [ebp - 0x1b8], 0
push dword [ebp - 0x1b8]
push ecx
mov ecx, esi
call fcn.0045b0f0
mov esi, eax
mov dword [ebp - 0x2cc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2dc], xmm0
mov dword [ebp - 0x2c8], 0
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x2dc], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x2cc], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea eax, [ebp - 0x240]
mov byte [ebp - 4], 0xc
push eax
lea edx, [ebp - 0x2dc]
lea ecx, [ebp - 0x470]
call fcn.0044b9b0
add esp, 4
push dword [ebp - 0x27c]
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.00457330
mov dword [ebp - 0x2b4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x2c4], xmm0
mov dword [ebp - 0x2b0], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x2c4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x2b4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
lea eax, [ebp - 0x26c]
mov byte [ebp - 4], 0xe
push eax
lea edx, [ebp - 0x2c4]
lea ecx, [ebp - 0x458]
call fcn.0044bc60
add esp, 4
lea ecx, [edi + 0x18]
mov byte [ebp - 4], 0xf
push ecx
mov ecx, eax
call fcn.004573a0
mov dword [ebp - 0x90], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x8c], 0
mov esi, 0x1fff8000
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xa0], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x90], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x444]
cmp ecx, 0xf
jbe 0x44a552
mov edx, dword [ebp - 0x458]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a548
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x448], 0
mov dword [ebp - 0x444], 0xf
mov byte [ebp - 0x458], 0
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x2b0]
cmp ecx, 0xf
jbe 0x44a5ab
mov edx, dword [ebp - 0x2c4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a5a1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x2b4], 0
mov dword [ebp - 0x2b0], 0xf
mov byte [ebp - 0x2c4], 0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x45c]
cmp ecx, 0xf
jbe 0x44a604
mov edx, dword [ebp - 0x470]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a5fa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x460], 0
mov dword [ebp - 0x45c], 0xf
mov byte [ebp - 0x470], 0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x2c8]
cmp ecx, 0xf
jbe 0x44a65d
mov edx, dword [ebp - 0x2dc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a653
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x2cc], 0
mov dword [ebp - 0x2c8], 0xf
mov byte [ebp - 0x2dc], 0
mov byte [ebp - 4], 0x15
mov ecx, dword [ebp - 0x474]
cmp ecx, 0xf
jbe 0x44a6b6
mov edx, dword [ebp - 0x488]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a6ac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x478], 0
mov dword [ebp - 0x474], 0xf
mov byte [ebp - 0x488], 0
mov byte [ebp - 4], 0x16
mov ecx, dword [ebp - 0x2e0]
cmp ecx, 0xf
jbe 0x44a70f
mov edx, dword [ebp - 0x2f4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a705
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x2e4], 0
mov dword [ebp - 0x2e0], 0xf
mov byte [ebp - 0x2f4], 0
mov byte [ebp - 4], 0x17
mov ecx, dword [ebp - 0x48c]
cmp ecx, 0xf
jbe 0x44a768
mov edx, dword [ebp - 0x4a0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a75e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x490], 0
mov dword [ebp - 0x48c], 0xf
mov byte [ebp - 0x4a0], 0
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x2f8]
cmp ecx, 0xf
jbe 0x44a7c1
mov edx, dword [ebp - 0x30c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a7b7
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x2fc], 0
mov dword [ebp - 0x2f8], 0xf
mov byte [ebp - 0x30c], 0
mov byte [ebp - 4], 0x19
mov ecx, dword [ebp - 0x384]
cmp ecx, 0xf
jbe 0x44a81a
mov edx, dword [ebp - 0x398]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a810
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push dword [ebp - 0x1b4]
mov dword [ebp - 0x388], 0
mov dword [ebp - 0x384], 0xf
mov byte [ebp - 0x398], 0
call fcn.00472b80
sub esp, 0x14
lea eax, [edi + 0x60]
mov ecx, esp
mov dword [ebp - 0x1b4], esp
push eax
call fcn.004574d0
sub esp, 0x18
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0xa0]
mov ecx, esp
push eax
call fcn.004574d0
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x19
call fcn.00451500
add esp, 0x30
mov byte [ebp - 4], 0x1b
cmp dword [ebp - 0x44], 0x10
movaps xmm0, xmmword [0x4e6c30]
movups xmmword [ebp - 0x524], xmm0
mov byte [ebp - 0x514], 1
jne 0x44a8dc
lea eax, [ebp - 0x4b8]
push eax
lea ecx, [ebp - 0x524]
call fcn.0044bd80
mov esi, 0x1fffc000
cmp dword [eax + 0x14], 0xf
mov edx, dword [eax + 0x10]
jbe 0x44a8b9
mov eax, dword [eax]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
push eax
call fcn.00462b50
add esp, 8
mov byte [ebp - 0x1ad], 1
test al, al
jne 0x44a8e3
mov byte [ebp - 0x1ad], 0
test esi, 0x4000
je 0x44a946
mov ecx, dword [ebp - 0x4a4]
and esi, 0xffffbfff
cmp ecx, 0xf
jbe 0x44a92b
mov edx, dword [ebp - 0x4b8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44a921
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x4a8], 0
mov dword [ebp - 0x4a4], 0xf
mov byte [ebp - 0x4b8], 0
cmp byte [ebp - 0x1ad], 0
je 0x44a9b8
movaps xmm0, xmmword [0x4e7140]
lea ecx, [ebp - 0x570]
movups xmmword [ebp - 0x570], xmm0
push 0x10
movaps xmm0, xmmword [0x4e7350]
movups xmmword [ebp - 0x560], xmm0
push 0
movaps xmm0, xmmword [0x4e73a0]
movups xmmword [ebp - 0x550], xmm0
mov dword [ebp - 0x530], 0x89c2d7
movaps xmm0, xmmword [0x4e72e0]
movups xmmword [ebp - 0x540], xmm0
mov byte [ebp - 0x52c], 1
call fcn.0044be20
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
sub esp, 0x28
lea edx, [ebp - 0x54]
mov eax, esp
lea ecx, [ebp - 0x70]
push 0
push 1
mov dword [eax + 0x24], 0
call fcn.0045a5d0
add esp, 0x30
mov byte [ebp - 4], 0x1c
xor ecx, ecx
mov dword [ebp - 0x1e8], 0x1b140308
mov dword [ebp - 0x1e4], 0xe0d08
mov byte [ebp - 0x1e0], 1
nop word [eax + eax]
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x1e8], al
inc ecx
cmp ecx, 7
jb 0x44aa00
push ecx
lea eax, [ebp - 0x1e1]
mov byte [ebp - 0x1e0], 0
push eax
lea eax, [ebp - 0x1e8]
push eax
lea ecx, [ebp - 0x3b0]
call fcn.0045a4c0
or esi, 0x80000000
lea eax, [ebp - 0x3b0]
mov byte [ebp - 4], 0x1d
push eax
lea ecx, [ebp - 0x70]
call fcn.004567d0
lea ecx, [ebp - 0xd0]
push ecx
mov ecx, eax
call fcn.0045f4e0
or esi, 0x40000000
mov byte [ebp - 4], 0x1f
mov ecx, dword [ebp - 0x39c]
cmp ecx, 0xf
jbe 0x44aa9d
mov edx, dword [ebp - 0x3b0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44aa93
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
push 0xb0
lea eax, [ebp - 0x190]
mov dword [ebp - 0x3a0], 0
push 0
push eax
mov dword [ebp - 0x39c], 0xf
mov byte [ebp - 0x3b0], 0
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x190], 0x4e4c50
lea ecx, [ebp - 0x128]
mov dword [ebp - 0x180], 0x4e4c28
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::constructor_void_]
push 0
lea eax, [ebp - 0x178]
mov byte [ebp - 4], 0x20
or esi, 0x20000000
lea ecx, [ebp - 0x190]
push eax
mov dword [ebp - 0x1b4], esi
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::constructor_class_std::basic_streambuf_char__struct_std::char_traits_char____]
mov dword [ebp - 4], 0x21
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x194], eax
lea ecx, [ebp - 0x178]
call dword [sym.imp.MSVCP140.dll_protected:_void___thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::constructor_void_]
mov dword [ebp - method.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringbuf_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0
mov byte [ebp - 4], 0x22
xorps xmm0, xmm0
movq qword [ebp - 0x20], xmm0
mov dword [ebp - 0x18], 0
push 0x20
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.004cac75
xorps xmm0, xmm0
mov dword [ebp - 0x20], eax
add esp, 4
lea esi, [eax + 0x20]
mov dword [ebp - 0x18], esi
movups xmmword [eax], xmm0
movups xmmword [eax + 0x10], xmm0
mov dword [ebp - 0x1c], esi
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x54]
mov ecx, dword [ebp - 0x20]
sub esi, ecx
cmp dword [ebp - 0x40], 0xf
cmova eax, dword [ebp - 0x54]
cmp dword [edi + 0x44], 0xf
jbe 0x44abd6
mov edx, dword [edi + 0x30]
mov dword [ebp - 0x278], edx
mov edx, dword [edi + 0x40]
push esi
push ecx
push dword [ebp - 0x44]
mov ecx, dword [ebp - 0x278]
push eax
call fcn.00466b50
mov eax, dword [ebp - 0x1c]
add esp, 0x10
mov edi, dword [ebp - 0x20]
mov dword [ebp - 0x1b4], eax
cmp edi, eax
je 0x44ac67
nop dword [eax]
mov al, byte [edi]
lea ecx, [ebp - 0x180]
push 0x446df0
mov byte [ebp - 0x1ad], al
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::ios_base_____cdecl___class_std::ios_base___]
mov esi, eax
lea eax, [ebp - 0x6d0]
push 0
push 2
push eax
mov ecx, dword [esi]
mov ecx, dword [ecx + 4]
mov byte [ecx + esi + 0x40], 0x30
call dword [sym.imp.MSVCP140.dll_struct_std::_Smanip_long_long___int64_____cdecl_std::setw_long_long___int64__]
add esp, 0xc
mov ecx, dword [eax]
push dword [eax + 0xc]
push dword [eax + 8]
mov eax, dword [esi]
mov eax, dword [eax + 4]
add eax, esi
push eax
call ecx
movzx eax, byte [ebp - 0x1ad]
add esp, 0xc
mov ecx, esi
push eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___int_]
inc edi
cmp edi, dword [ebp - 0x1b4]
jne 0x44ac00
cmp dword [0x4ef64c], 0xf
lea eax, [ebp - 0x3c8]
mov esi, 0x4ef638
lea ecx, [ebp - 0x178]
cmova esi, dword [0x4ef638]
push eax
call fcn.00458860
mov ecx, dword [ebp - 0x3b4]
lea eax, [ebp - 0x3c8]
mov edx, dword [ebp - 0x3c8]
cmp ecx, 0xf
movd xmm1, dword [esi]
cmova eax, edx
punpcklbw xmm1, xmm1
punpcklwd xmm1, xmm1
psrad xmm1, 0x18
movd xmm0, dword [eax]
punpcklbw xmm0, xmm0
punpcklwd xmm0, xmm0
psrad xmm0, 0x18
xorps xmm1, xmm0
movaps xmm0, xmm1
psrldq xmm0, 8
orps xmm1, xmm0
movups xmm0, xmm1
psrldq xmm0, 4
orps xmm1, xmm0
movd esi, xmm1
jbe 0x44ad0e
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44ad04
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x3b8], 0
mov dword [ebp - 0x3b4], 0xf
mov byte [ebp - 0x3c8], 0
test esi, esi
je 0x44ad7f
sub esp, 0x18
mov eax, accept
mov ecx, esp
mov dword [ebp - 0x1b4], ecx
mov edx, dword [ebp - 0xc0]
sub eax, edx
cmp eax, 0x6b
jb 0x44b7f8
cmp dword [ebp - 0xbc], 0xf
lea eax, [ebp - 0xd0]
push edx
cmova eax, dword [ebp - 0xd0]
push eax
push 0x6b
push str.Signature_checksum_failed._Request_was_tampered_with_or_session_ended_most_likely.__echo:__echo_Message:
push ecx
push dword [ebp - 0x230]
call fcn.0045c9e0
call fcn.00451b10
add esp, 0x18
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x4c8]
call fcn.00456cb0
push str.success
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x24
call fcn.0045a100
mov edi, dword [ebp - 0x230]
xor edx, edx
push str.message
cmp byte [eax], 4
lea ecx, [eax + 8]
cmovne ecx, edx
mov al, byte [ecx]
lea ecx, [ebp - 0x4c8]
mov byte [edi + 0x198], al
call fcn.0045a100
cmp byte [eax], 3
jne 0x44add5
mov eax, dword [eax + 8]
jmp 0x44add7
xor eax, eax
cmp dword [eax + 0x14], 0xf
mov ecx, eax
jbe 0x44ade1
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [edi + 0x19c]
call fcn.00459c20
lea ecx, [ebp - 0x4c8]
mov byte [ebp - 4], 0x23
call fcn.00456c50
mov dword [ebp - 0x1dc], 0xb041316
xor ecx, ecx
mov dword [ebp - 0x1d8], 0x18190c
mov byte [ebp - 0x1d4], 1
nop dword [eax]
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x1dc], al
inc ecx
cmp ecx, 7
jb 0x44ae20
push ecx
lea eax, [ebp - 0x1d5]
mov byte [ebp - 0x1d4], 0
push eax
lea eax, [ebp - 0x1dc]
push eax
lea ecx, [ebp - 0x3e0]
call fcn.0045a4c0
lea eax, [ebp - 0x3e0]
mov byte [ebp - 4], 0x25
push eax
lea ecx, [ebp - 0x70]
call fcn.004567d0
xor edx, edx
cmp byte [eax], 4
lea ecx, [eax + 8]
cmovne ecx, edx
mov al, byte [ecx]
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x3cc]
mov byte [ebp - 0x1ad], al
cmp ecx, 0xf
jbe 0x44aebc
mov edx, dword [ebp - 0x3e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44aeac
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
mov al, byte [ebp - 0x1ad]
add esp, 8
mov dword [ebp - 0x3d0], 0
mov dword [ebp - 0x3cc], 0xf
mov byte [ebp - 0x3e0], 0
test al, al
je 0x44b3eb
mov dword [ebp - 0x22c], 0x3b10030b
xor ecx, ecx
mov dword [ebp - 0x228], 0x518190c
mov dword [ebp - 0x224], 0x1000002
nop
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x22c], al
inc ecx
cmp ecx, 0xa
jb 0x44af00
push ecx
lea eax, [ebp - 0x222]
mov byte [ebp - 0x221], 0
push eax
lea eax, [ebp - 0x22c]
push eax
lea ecx, [ebp - 0x3f8]
call fcn.0045a4c0
lea eax, [ebp - 0x3f8]
mov byte [ebp - 4], 0x26
push eax
lea ecx, [ebp - 0x70]
call fcn.004567d0
xor edx, edx
cmp byte [eax], 4
lea ecx, [eax + 8]
cmovne ecx, edx
mov al, byte [ecx]
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x3e4]
mov byte [ebp - 0x1ad], al
cmp ecx, 0xf
jbe 0x44af9c
mov edx, dword [ebp - 0x3f8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44af8c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
mov al, byte [ebp - 0x1ad]
add esp, 8
mov dword [ebp - 0x3e8], 0
mov dword [ebp - 0x3e4], 0xf
mov byte [ebp - 0x3f8], 0
test al, al
je 0x44afc3
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov dword [ebp - 0x220], 0x1b140316
xor ecx, ecx
mov dword [ebp - 0x21c], 0x5050500
mov word [ebp - 0x218], 9
mov byte [ebp - 0x216], 1
nop dword [eax]
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x220], al
inc ecx
cmp ecx, 9
jb 0x44aff0
push ecx
lea eax, [ebp - 0x217]
mov byte [ebp - 0x216], 0
push eax
lea eax, [ebp - 0x220]
push eax
lea ecx, [ebp - 0x410]
call fcn.0045a4c0
lea eax, [ebp - 0x410]
mov byte [ebp - 4], 0x27
push eax
lea ecx, [ebp - 0x70]
call fcn.004567d0
cmp byte [eax], 3
jne 0x44b03f
mov eax, dword [eax + 8]
jmp 0x44b041
xor eax, eax
cmp dword [eax + 0x14], 0xf
mov ecx, eax
jbe 0x44b04b
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [edi + 0x1b4]
call fcn.00459c20
mov byte [ebp - 4], 0x23
mov ecx, dword [ebp - 0x3fc]
cmp ecx, 0xf
jbe 0x44b098
mov edx, dword [ebp - 0x410]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b08e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x400], 0
xor ecx, ecx
mov dword [ebp - 0x3fc], 0xf
mov byte [ebp - 0x410], 0
mov byte [0x4f068d], 1
mov dword [ebp - 0x1f4], 0x1171604
mov dword [ebp - 0x1f0], 0x40c07
mov byte [ebp - 0x1ec], 1
nop word [eax + eax]
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x1f4], al
inc ecx
cmp ecx, 7
jb 0x44b0e0
push ecx
lea eax, [ebp - 0x1ed]
mov byte [ebp - 0x1ec], 0
push eax
lea eax, [ebp - 0x1f4]
push eax
lea ecx, [ebp - 0x428]
call fcn.0045a4c0
sub esp, 0x10
mov byte [ebp - 4], 0x28
lea eax, [ebp - 0x428]
mov esi, esp
lea ecx, [ebp - 0x70]
push eax
call fcn.004567d0
push eax
mov ecx, esi
call fcn.00456cb0
mov ecx, edi
call fcn.004484a0
mov ecx, dword [ebp - 0x414]
cmp ecx, 0xf
jbe 0x44b173
mov edx, dword [ebp - 0x428]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b169
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x418], 0
mov dword [ebp - 0x414], 0xf
mov byte [ebp - 0x428], 0
mov ecx, dword [ebp - 0x20]
test ecx, ecx
je 0x44b1d7
mov edx, dword [ebp - 0x18]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x44b1b8
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push edx
push ecx
call fcn.004ca5d3
add esp, 8
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x190]
mov eax, dword [eax + 4]
mov dword [ebp + eax - method.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.virtual_0], vtable.std::basic_stringstream_char__struct_std::char_traits_char___class_std::allocator_char__.0
mov eax, dword [ebp - 0x190]
mov ecx, dword [eax + 4]
lea eax, [ecx - 0x68]
mov dword [ebp + ecx - 0x194], eax
lea ecx, [ebp - 0x178]
call fcn.004563c0
lea ecx, [ebp - 0x170]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_iostream_char__struct_std::char_traits_char__::destructor_void_]
lea ecx, [ebp - 0x128]
call dword [sym.imp.MSVCP140.dll_public_virtual:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::destructor_void_]
mov ecx, dword [ebp - 0xbc]
cmp ecx, 0xf
jbe 0x44b25b
mov edx, dword [ebp - 0xd0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b251
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0xf
mov byte [ebp - 0xd0], 0
call fcn.00456c50
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x44b2b2
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b2a8
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov ecx, dword [ebp - 0x8c]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
cmp ecx, 0xf
jbe 0x44b2fe
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b2f4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], 0
cmp ecx, 0xf
jbe 0x44b353
mov edx, dword [ebp - 0xb8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b349
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov ecx, dword [ebp - 0x28]
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0xf
mov byte [ebp - 0xb8], 0
cmp ecx, 0xf
jbe 0x44b39e
mov edx, dword [ebp - 0x3c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b394
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0xf
mov byte [ebp - 0x3c], 0
cmp ecx, 0xf
jbe 0x44b76e
mov edx, dword [ebp - 0x88]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b764
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x44b764
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
xorps xmm0, xmm0
mov dword [ebp - 0x214], 0x911080c
push 0x18
mov dword [ebp - 0x210], 0x1a0f0305
mov dword [ebp - 0x20c], 0x1001c08
movq qword [ebp - 0x330], xmm0
mov byte [ebp - 0x338], 3
movlpd qword [ebp - 0x5c], xmm0
call fcn.004cac75
mov edx, eax
add esp, 4
lea eax, [ebp - 0x21]
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x5c], eax
mov byte [ebp - 4], 0x29
cmp byte [ebp - 0x209], 0
je 0x44b45c
xor ecx, ecx
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x214], al
inc ecx
cmp ecx, 0xa
jb 0x44b444
mov byte [ebp - 0x209], 0
push ecx
lea eax, [ebp - 0x20a]
mov ecx, edx
push eax
lea eax, [ebp - 0x214]
push eax
call fcn.0045a4c0
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x330], eax
mov byte [ebp - 4], 0x2a
xor ecx, ecx
mov dword [ebp - 0x1d0], 0x1b140308
mov dword [ebp - 0x1cc], 0xe0d08
mov byte [ebp - 0x1c8], 1
mov al, cl
add al, 0x65
xor byte [ebp + ecx - 0x1d0], al
inc ecx
cmp ecx, 7
jb 0x44b4a3
push ecx
lea eax, [ebp - 0x1c9]
mov byte [ebp - 0x1c8], 0
push eax
lea eax, [ebp - 0x1d0]
push eax
lea ecx, [ebp - 0x440]
call fcn.0045a4c0
lea eax, [ebp - 0x440]
mov byte [ebp - 4], 0x2b
push eax
lea ecx, [ebp - 0x70]
call fcn.004567d0
lea edx, [ebp - 0x338]
mov ecx, eax
call fcn.004564b0
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x42c]
mov byte [ebp - 0x1ad], al
cmp ecx, 0xf
jbe 0x44b539
mov edx, dword [ebp - 0x440]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x44b52f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44b3e5
push ecx
push edx
call fcn.004ca5d3
add esp, 8
lea ecx, [ebp - 0x338]
mov dword [ebp - 0x430], 0
mov dword [ebp - 0x42c], 0xf
mov byte [ebp - 0x440], 0
mov byte [ebp - 4], 0x23
call fcn.00456c50
cmp byte [ebp - 0x1ad], 0
je 0x44b18e
lea eax, [ebp - 0x588]
mov dword [ebp - 0x260], 0x6100901
push eax
lea ecx, [ebp - 0x260]
mov dword [ebp - 0x25c], 0x80a0505
mov word [ebp - 0x258], 0x100
call fcn.00456490
lea eax, [ebp - 0x588]
mov byte [ebp - 4], 0x2c
push eax
lea ecx, [ebp - 0x70]
call fcn.004567d0
lea ecx, [ebp - 0x1a8]
push ecx
mov ecx, eax
call fcn.0045a2f0
lea ecx, [ebp - 0x588]
call fcn.00457440
mov edx, 0x4de8ae
lea ecx, [ebp - 0x1a8]
call fcn.0045a0c0
test al, al
je 0x44b721
movaps xmm0, xmmword [0x4e6d30]
lea ecx, [ebp - 0x6c0]
movups xmmword [ebp - 0x6c0], xmm0
push 0x10
movaps xmm0, xmmword [0x4e7360]
movups xmmword [ebp - 0x6b0], xmm0
push 0
movaps xmm0, xmmword [0x4e72a0]
movups xmmword [ebp - 0x6a0], xmm0
mov dword [ebp - 0x590], 0xe1fbe2f6
movaps xmm0, xmmword [0x4e7300]
movups xmmword [ebp - 0x690], xmm0
mov word [ebp - 0x58c], 0xb7
movaps xmm0, xmmword [0x4e7310]
movups xmmword [ebp - 0x680], xmm0
mov byte [ebp - 0x58a], 1
movaps xmm0, xmmword [0x4e72c0]
movups xmmword [ebp - 0x670], xmm0
movaps xmm0, xmmword [0x4e7390]
movups xmmword [ebp - 0x660], xmm0
movaps xmm0, xmmword [0x4e7260]
movups xmmword [ebp - 0x650], xmm0
movaps xmm0, xmmword [0x4e7270]
movups xmmword [ebp - 0x640], xmm0
movaps xmm0, xmmword [0x4e71f0]
movups xmmword [ebp - 0x630], xmm0
movaps xmm0, xmmword [0x4e7200]
movups xmmword [ebp - 0x620], xmm0
movaps xmm0, xmmword [0x4e7110]
movups xmmword [ebp - 0x610], xmm0
movaps xmm0, xmmword [0x4e71e0]
movups xmmword [ebp - 0x600], xmm0
movaps xmm0, xmmword [0x4e6d90]
movups xmmword [ebp - 0x5f0], xmm0
movaps xmm0, xmmword [0x4e6d60]
movups xmmword [ebp - 0x5e0], xmm0
movaps xmm0, xmmword [str.17y.39:0]
movups xmmword [ebp - 0x5d0], xmm0
movaps xmm0, xmmword [0x4e6d50]
movups xmmword [ebp - 0x5c0], xmm0
movaps xmm0, xmmword [0x4e7340]
movups xmmword [ebp - 0x5b0], xmm0
movaps xmm0, xmmword [0x4e7380]
movups xmmword [ebp - 0x5a0], xmm0
call fcn.0044bfe0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x44b75c
lea ecx, [ebp - 0x1a8]
call fcn.004572e0
lea ecx, [ebp - 0x238]
mov dword [ebp - 0x238], 0x602160a
mov edx, eax
mov word [ebp - 0x234], 0x100
call fcn.0044c1a0
push 1
push 0
push 0
push edx
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push ecx
push edx
call fcn.004ca5d3
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.004ca5c5
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
movaps xmm0, xmmword [0x4e7150]
lea ecx, [ebp - 0x510]
movups xmmword [ebp - 0x510], xmm0
push 0x10
movaps xmm0, xmmword [0x4e7290]
movups xmmword [ebp - 0x500], xmm0
push 0
movaps xmm0, xmmword [0x4e73b0]
movups xmmword [ebp - 0x4f0], xmm0
mov dword [ebp - 0x4d0], 0xcb89c8cc
movaps xmm0, xmmword [0x4e72f0]
movups xmmword [ebp - 0x4e0], xmm0
mov dword [ebp - 0x4cc], 0x100dad9
call fcn.0044b800
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
call fcn.00446680
int3