Function at 0x44f7b0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xd9c
mov eax, dword [0x55e2f4]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
push edi
push 0x5200dc
push esi
mov edi, ecx
call fcn.0042c560
add esp, 8
test eax, eax
je 0x44f7f8
pop edi
mov dword [0x568610], 1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.004e1f40
mov esp, ebp
pop ebp
ret 4
lea eax, [ebp - 0xd90]
push eax
push esi
call fcn.004b5220
mov esi, eax
add esp, 8
test esi, esi
jle 0x4501a8
mov dword [ebp - 0xd8c], 0
nop dword [eax]
movzx eax, word [0x520104]
movups xmm0, xmmword [str._history]
push 0x2e
mov word [ebp - 0xd74], ax
lea eax, [ebp - 0xd72]
push 0
push eax
mov dword [ebp - 0xd88], 0
movups xmmword [ebp - 0xd84], xmm0
call fcn.004e46b0
mov eax, dword [0x520108]
xorps xmm0, xmm0
mov dword [ebp - 0xd44], eax
movzx eax, word [0x52010c]
movq qword [ebp - 0xd3e], xmm0
movups xmm0, xmmword [str._noisocheck]
mov word [ebp - 0xd40], ax
mov eax, dword [0x520128]
movups xmmword [ebp - 0xd2c], xmm0
mov dword [ebp - 0xcec], eax
movq xmm0, qword [0x520120]
movzx eax, word [0x52012c]
movq qword [ebp - 0xd1c], xmm0
xorps xmm0, xmm0
mov word [ebp - 0xce8], ax
mov eax, dword [0x520138]
push 0x34
mov dword [ebp - 0xccc], eax
lea eax, [ebp - 0xcc8]
movups xmmword [ebp - 0xd14], xmm0
push 0
movups xmmword [ebp - 0xd04], xmm0
push eax
movq qword [ebp - 0xcf4], xmm0
movq qword [ebp - 0xce6], xmm0
movq xmm0, qword [str._quit]
mov word [ebp - 0xd36], 0
mov dword [ebp - 0xd34], 0
mov dword [ebp - 0xd30], 1
mov word [ebp - 0xcde], 0
mov dword [ebp - 0xcdc], 0
mov dword [ebp - 0xcd8], 2
movq qword [ebp - 0xcd4], xmm0
call fcn.004e46b0
mov eax, dword [0x52013c]
xorps xmm0, xmm0
mov dword [ebp - 0xc94], eax
movzx eax, word [0x520140]
mov word [ebp - 0xc90], ax
mov eax, dword [0x520154]
movq qword [ebp - 0xc8e], xmm0
movups xmm0, xmmword [str._tokenlib]
push 0x2c
mov dword [ebp - 0xc6c], eax
lea eax, [ebp - 0xc68]
push 0
push eax
mov word [ebp - 0xc86], 0
mov dword [ebp - 0xc84], 0
mov dword [ebp - 0xc80], 3
movups xmmword [ebp - 0xc7c], xmm0
call fcn.004e46b0
xor eax, eax
mov dword [ebp - 0xc28], 4
mov dword [ebp - 0xc3c], eax
xorps xmm0, xmm0
mov dword [ebp - 0xc30], eax
mov dword [ebp - 0xc2c], eax
mov eax, dword [0x520168]
mov dword [ebp - 0xc14], eax
movzx eax, word [0x52016c]
movq qword [ebp - 0xc38], xmm0
movups xmm0, xmmword [str._erasemode]
push 0x2a
mov word [ebp - 0xc10], ax
lea eax, [ebp - 0xc0e]
push 0
push eax
movups xmmword [ebp - 0xc24], xmm0
call fcn.004e46b0
xor eax, eax
mov dword [ebp - 0xbe4], eax
xorps xmm0, xmm0
mov dword [ebp - 0xbd8], eax
mov dword [ebp - 0xbd4], eax
mov eax, dword [0x520180]
mov dword [ebp - 0xbbc], eax
movzx eax, word [0x520184]
movq qword [ebp - 0xbe0], xmm0
movups xmm0, xmmword [str._udiskmode]
push 0x2a
mov word [ebp - 0xbb8], ax
lea eax, [ebp - 0xbb6]
push 0
push eax
mov dword [ebp - 0xbd0], 5
movups xmmword [ebp - 0xbcc], xmm0
call fcn.004e46b0
xor eax, eax
mov dword [ebp - 0xb78], 6
xorps xmm0, xmm0
mov dword [ebp - 0xb8c], eax
mov dword [ebp - 0xb80], eax
mov dword [ebp - 0xb7c], eax
mov eax, dword [0x51fb10]
movq qword [ebp - 0xb88], xmm0
movups xmm0, xmmword [str._acsysenc]
push 0x2c
mov dword [ebp - 0xb64], eax
lea eax, [ebp - 0xb60]
push 0
push eax
movups xmmword [ebp - 0xb74], xmm0
call fcn.004e46b0
mov eax, dword [str.R58]
add esp, 0x48
mov dword [ebp - 0xb34], eax
xorps xmm0, xmm0
movzx eax, word [0x52018c]
mov word [ebp - 0xb30], ax
movzx eax, word [0x5201a0]
movq qword [ebp - 0xb2e], xmm0
movups xmm0, xmmword [str._csysenc]
push 0x2e
mov word [ebp - 0xb0c], ax
lea eax, [ebp - 0xb0a]
push 0
push eax
mov word [ebp - 0xb26], 0
mov dword [ebp - 0xb24], 1
mov dword [ebp - 0xb20], 7
movups xmmword [ebp - 0xb1c], xmm0
call fcn.004e46b0
mov eax, dword [0x5201a4]
xorps xmm0, xmm0
mov dword [ebp - 0xadc], eax
movzx eax, word [0x5201a8]
mov word [ebp - 0xad8], ax
movzx eax, word [0x5201bc]
movq qword [ebp - 0xad6], xmm0
movups xmm0, xmmword [str._dsysenc]
push 0x2e
mov word [ebp - 0xab4], ax
lea eax, [ebp - 0xab2]
push 0
push eax
mov word [ebp - 0xace], 0
mov dword [ebp - 0xacc], 1
mov dword [ebp - 0xac8], 8
movups xmmword [ebp - 0xac4], xmm0
call fcn.004e46b0
mov eax, dword [0x5201c0]
xorps xmm0, xmm0
movq qword [ebp - 0xa7e], xmm0
movups xmm0, xmmword [str._encdev]
mov dword [ebp - 0xa84], eax
movzx eax, word [0x5201c4]
mov word [ebp - 0xa80], ax
mov word [ebp - 0xa76], 0
mov dword [ebp - 0xa74], 1
mov dword [ebp - 0xa70], 9
movups xmmword [ebp - 0xa6c], xmm0
push 0x30
lea eax, [ebp - 0xa5c]
push 0
push eax
call fcn.004e46b0
mov eax, dword [0x51e43c]
xorps xmm0, xmm0
mov dword [ebp - 0xa2c], eax
movzx eax, word [0x51e440]
mov word [ebp - 0xa28], ax
movzx eax, word [0x5201e8]
movq qword [ebp - 0xa26], xmm0
movups xmm0, xmmword [str._isysenc]
push 0x2e
mov word [ebp - 0xa04], ax
lea eax, [ebp - 0xa02]
push 0
push eax
mov word [ebp - 0xa1e], 0
mov dword [ebp - 0xa1c], 1
mov dword [ebp - 0xa18], 0xa
movups xmmword [ebp - 0xa14], xmm0
call fcn.004e46b0
mov eax, dword [0x5201ec]
xorps xmm0, xmm0
mov dword [ebp - 0x9d4], eax
movzx eax, word [0x5201f0]
mov word [ebp - 0x9d0], ax
mov eax, dword [0x520204]
mov dword [ebp - 0x9ac], eax
movzx eax, word [0x520208]
movq qword [ebp - 0x9ce], xmm0
movups xmm0, xmmword [str._prinplace]
push 0x2a
mov word [ebp - 0x9a8], ax
lea eax, [ebp - 0x9a6]
push 0
push eax
mov word [ebp - 0x9c6], 0
mov dword [ebp - 0x9c4], 1
mov dword [ebp - 0x9c0], 0xb
movups xmmword [ebp - 0x9bc], xmm0
call fcn.004e46b0
mov eax, dword [0x51a194]
xorps xmm0, xmm0
mov dword [ebp - 0x97c], eax
movzx eax, word [0x51a198]
mov word [ebp - 0x978], ax
mov eax, dword [0x52021c]
movq qword [ebp - 0x976], xmm0
movups xmm0, xmmword [str._risysenc]
push 0x2c
mov dword [ebp - 0x954], eax
lea eax, [ebp - 0x950]
push 0
push eax
mov word [ebp - 0x96e], 0
mov dword [ebp - 0x96c], 1
mov dword [ebp - 0x968], 0xc
movups xmmword [ebp - 0x964], xmm0
call fcn.004e46b0
mov eax, dword [0x51f5ac]
add esp, 0x48
mov dword [ebp - 0x924], eax
xorps xmm0, xmm0
movzx eax, word [0x51f5b0]
movq qword [ebp - 0x91e], xmm0
movups xmm0, xmmword [str._sysenc]
push 0x30
mov word [ebp - 0x920], ax
lea eax, [ebp - 0x8fc]
push 0
push eax
mov word [ebp - 0x916], 0
mov dword [ebp - 0x914], 1
mov dword [ebp - 0x910], 0xd
movups xmmword [ebp - 0x90c], xmm0
call fcn.004e46b0
mov eax, dword [0x520230]
mov dword [ebp - 0x8cc], eax
movzx eax, word [0x520234]
xorps xmm0, xmm0
mov word [ebp - 0x8c8], ax
mov eax, dword [0x520248]
movq qword [ebp - 0x8c6], xmm0
movups xmm0, xmmword [str._zinplace]
push 0x2c
mov dword [ebp - 0x8a4], eax
lea eax, [ebp - 0x8a0]
push 0
push eax
mov word [ebp - 0x8be], 0
mov dword [ebp - 0x8bc], 1
mov dword [ebp - 0x8b8], 0xe
movups xmmword [ebp - 0x8b4], xmm0
call fcn.004e46b0
mov eax, dword [0x52024c]
xorps xmm0, xmm0
mov dword [ebp - 0x874], eax
movzx eax, word [0x520250]
movq qword [ebp - 0x86e], xmm0
movups xmm0, xmmword [str._format]
push 0x30
mov word [ebp - 0x870], ax
lea eax, [ebp - 0x84c]
push 0
push eax
mov word [ebp - 0x866], 0
mov dword [ebp - 0x864], 1
mov dword [ebp - 0x860], 0xf
movups xmmword [ebp - 0x85c], xmm0
call fcn.004e46b0
mov ecx, dword [ebp - 0xd8c]
xor eax, eax
mov dword [ebp - 0x81c], eax
xorps xmm0, xmm0
mov dword [ebp - 0x810], eax
add esp, 0x24
mov dword [ebp - 0x80c], eax
mov eax, dword [ebp - 0xd90]
movq qword [ebp - 0x818], xmm0
cmp dword [eax + ecx*4], 0
je case.0x44fed9.3499
lea edx, [ebp - 0xd88]
mov dword [ebp - 0xd98], 0x10
mov dword [ebp - 0xd9c], edx
lea edx, [ebp - 0xd94]
push edx
push dword [eax + ecx*4]
lea eax, [ebp - 0xd9c]
push eax
call fcn.004b4eb0
add esp, 0xc
cmp eax, 0xf
ja case.default.0x44fed9
jmp dword [eax*4 + 0x4501f8]
add eax, 0xfffffffa
cmp eax, 7
ja case.0x44fee8.9
jmp dword [eax*4 + 0x450238]
mov dword [0x5703c0], 3
jmp case.0x44fee8.9
mov dword [0x5703c0], 4
jmp case.0x44fee8.9
mov dword [0x5703c0], 5
jmp case.0x44fee8.9
mov dword [0x5703c0], 6
jmp case.0x44fee8.9
mov dword [0x5703c0], 1
jmp case.0x44fee8.9
mov dword [0x5703c0], 2
call fcn.00419e30
test eax, eax
je 0x4501ba
cmp dword [0x559a48], 0
mov dword [0x5703bc], 1
jne 0x44ff62
cmp dword [0x56b53c], 2
je case.0x44fed9.3499
call fcn.00419e30
test eax, eax
jne 0x44ff7e
push eax
push str.SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE
call fcn.00419a00
add esp, 8
jmp case.0x44fed9.3499
mov dword [0x56fb74], 0
mov eax, dword [0x56b53c]
call fcn.004523e0
xor eax, eax
xorps xmm0, xmm0
mov word [0x56b570], ax
movlpd qword [0x56b560], xmm0
movsd qword [0x56b530], xmm0
mov dword [0x56b53c], 2
mov eax, dword [0x56b53c]
neg eax
mov dword [0x559a48], 0
sbb eax, eax
neg eax
mov dword [0x56b550], eax
jmp case.0x44fed9.3499
mov dword [0x56fb68], 1
jmp case.0x44fed9.3499
mov dword [0x56fb6c], 1
jmp case.0x44fed9.3499
mov dword [0x56fb70], 1
jmp case.0x44fed9.3499
mov dword [0x5703dc], 1
jmp case.0x44fed9.3499
push 0x401
lea eax, [ebp - 0x808]
mov dword [0x559a2c], 1
push eax
push esi
lea eax, [ebp - 0xd8c]
push eax
push dword [ebp - 0xd94]
push dword [ebp - 0xd90]
call fcn.004b5190
add esp, 0x18
cmp eax, 1
jne case.0x44fed9.3499
lea eax, [ebp - 0x808]
push 0x520264
push eax
call fcn.004e85f7
add esp, 8
test eax, eax
je 0x45007d
lea eax, [ebp - 0x808]
push 0x520268
push eax
call fcn.004e85f7
add esp, 8
test eax, eax
jne 0x450087
mov dword [0x559a2c], 1
lea eax, [ebp - 0x808]
push 0x520270
push eax
call fcn.004e85f7
add esp, 8
test eax, eax
je 0x4500bb
lea eax, [ebp - 0x808]
push 0x520274
push eax
call fcn.004e85f7
add esp, 8
test eax, eax
jne case.0x44fed9.3499
mov dword [0x559a2c], 0
jmp case.0x44fed9.3499
push 0x401
lea eax, [ebp - 0x808]
push eax
push esi
lea eax, [ebp - 0xd8c]
push eax
push dword [ebp - 0xd94]
push dword [ebp - 0xd90]
call fcn.004b5190
add esp, 0x18
cmp eax, 1
jne 0x450126
xor ecx, ecx
nop dword [eax]
movzx eax, word [ebp + ecx - 0x808]
lea ecx, [ecx + 2]
mov word [ecx + 0x57ec6e], ax
test ax, ax
jne 0x450100
push 0x57ec70
call fcn.0042a830
add esp, 4
jmp case.0x44fed9.3499
push dword [edi + 0x10]
push str.COMMAND_LINE_ERROR
call fcn.00419a00
add esp, 8
jmp case.0x44fed9.3499
push 0x401
lea eax, [ebp - 0x808]
push eax
push esi
lea eax, [ebp - 0xd8c]
push eax
push dword [ebp - 0xd94]
push dword [ebp - 0xd90]
call fcn.004b5190
add esp, 0x18
jmp case.0x44fed9.3499
mov dword [0x56b558], 1
jmp case.0x44fed9.3499
mov dword [0x56b554], 1
mov eax, dword [ebp - 0xd8c]
inc eax
mov dword [ebp - 0xd8c], eax
cmp eax, esi
jl 0x44f820
sub esi, 1
js 0x4501a8
mov eax, dword [ebp - 0xd90]
push dword [eax + esi*4]
call fcn.004ec0b7
add esp, 4
sub esi, 1
jns 0x450192
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.004e1f40
mov esp, ebp
pop ebp
ret 4
push dword [edi + 0x10]
push str.SYSTEM_ENCRYPTION_IN_PROGRESS_ELSEWHERE
call fcn.00419c20
add esp, 8
push 0
call fcn.004f7120
lea eax, [ebp - 0xd9c]
push eax
push 0x4b4d30
push dword [edi + 0x10]
push 0x1fd
push dword [0x568608]
call dword [sym.imp.USER32.dll_DialogBoxParamW]
push 0
call fcn.004f7120
adc al, byte [eax]
inc ebp
add byte [ebx], al
add byte [ebp], al
cmp byte [ecx], al
inc ebp
add dl, cl
add byte [ebp], al
outsb dx, byte [esi]
add dword [ebp], eax
bound eax, qword [ecx]
inc ebp
add al, ah
inc byte [eax + eax - 0x20]
inc byte [eax + eax - 0x20]
inc byte [eax + eax - 0x2a]
inc dword [eax + eax - 0x20]
inc byte [eax + eax - 0xc]
inc dword [eax + eax - 0x20]
inc byte [eax + eax - 0x20]
inc byte [eax + eax - 0x1b]
inc dword [eax + eax + 0x78]
add dword [ebp], eax
sub edi, edi
inc esp
add byte [edi], bl
inc dword [eax + eax - 5]
inc byte [eax + eax + 0x35]
inc dword [eax + eax + 7]
inc dword [eax + eax + 0x35]
inc dword [eax + eax + 0x13]
inc dword [eax + eax - 0x11]
inc byte [eax + eax - 0x34]
int3