Function at 0x443860
Capabilities:
Encode data using xor
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5ac3cb
mov eax, dword fs:[0]
push eax
push ebx
mov eax, 0x1330
call fcn.005a80c0
mov eax, dword [0x5fa040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
mov dword [ebp - 0x1330], edi
mov edx, dword [edi + 0x30]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x131c], edx
mov esi, 0x200
mov dword [ebp - 0x1324], eax
mov dword [ebp - 0x1320], 0
jmp 0x4438e6
mov edx, dword [ebp - 0x131c]
mov eax, dword [edx]
lea edi, [ebp - 0x1328]
mov ecx, SysReAllocString
cmp esi, ecx
push edi
cmovb ecx, esi
push ecx
push dword [ebp - 0x1324]
push edx
call dword [eax + 0xc]
mov edx, dword [ebp - 0x1320]
mov ecx, eax
mov eax, dword [ebp - 0x1328]
add edx, eax
add dword [ebp - 0x1324], eax
sub esi, eax
mov edi, dword [ebp - 0x1330]
mov dword [ebp - 0x1320], edx
test ecx, ecx
jne 0x4445b2
test eax, eax
je 0x443938
test esi, esi
jne 0x4438e0
xor ecx, ecx
cmp edx, 0x200
setne cl
jne 0x4445b2
lea ecx, [ebp - 0x218]
mov eax, dword [ecx]
cmp eax, dword [0x5c106c]
jne 0x4445ab
mov eax, dword [ecx + 4]
cmp eax, dword [0x5c1070]
jne 0x4445ab
mov eax, 8
mov dword [ebp - 0x1320], eax
nop word [eax + eax]
movzx eax, word [ebp + eax - 0x218]
mov dword [ebp - 0x131c], eax
add eax, 0xffffffe0
cmp ax, 0x5f
ja 0x4439de
mov eax, dword [edi + 0x124]
lea esi, [edi + 0x11c]
cmp eax, dword [esi + 4]
jne 0x4439af
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov eax, dword [esi]
mov edx, dword [ebp - 0x131c]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov eax, dword [ebp - 0x1320]
add eax, 2
mov dword [esi + 4], ecx
mov dword [ebp - 0x1320], eax
cmp eax, 0x200
jb 0x443980
xor ecx, ecx
mov dword [edi + 0xf0], 0x100000
lea eax, [ebp - 0x12a8]
mov dword [edi + 0xf4], 0
mov dword [ebp - 0x1328], ecx
mov dword [ebp - 0x131c], eax
lea eax, [ecx + 1]
mov ecx, dword [edi + 0x30]
shl eax, 0x10
push 0
push eax
call fcn.00430da0
add esp, 8
test eax, eax
jne 0x4445b4
mov edx, dword [edi + 0x30]
lea eax, [ebp - 0x1218]
mov dword [ebp - 0x1340], edx
mov esi, 0x1000
mov dword [ebp - 0x1324], eax
mov dword [ebp - 0x1320], 0
jmp 0x443a56
mov edx, dword [ebp - 0x1340]
mov eax, dword [edx]
lea edi, [ebp - 0x132c]
mov ecx, SysReAllocString
cmp esi, ecx
push edi
cmovb ecx, esi
push ecx
push dword [ebp - 0x1324]
push edx
call dword [eax + 0xc]
mov edx, dword [ebp - 0x1320]
mov ecx, eax
mov eax, dword [ebp - 0x132c]
add edx, eax
add dword [ebp - 0x1324], eax
sub esi, eax
mov edi, dword [ebp - 0x1330]
mov dword [ebp - 0x1320], edx
test ecx, ecx
jne 0x4445b2
test eax, eax
je 0x443aa8
test esi, esi
jne 0x443a50
xor ecx, ecx
cmp edx, 0x1000
setne cl
jne 0x4445b2
cmp dword [ebp - 0x1218], 0x64616568
jne 0x4445ab
mov esi, dword [ebp - 0x1214]
lea edx, [ebp - 0x1218]
mov dword [ebp - 0x1214], 0
mov ecx, 0xffffffff
movzx eax, byte [edx]
inc edx
xor eax, ecx
shr ecx, 8
movzx eax, al
xor ecx, dword [eax*4 + 0x602e40]
lea eax, [ebp - 0x218]
cmp edx, eax
jne 0x443ae4
not ecx
cmp ecx, esi
jne 0x4445ab
cmp word [ebp - 0x11d6], 1
mov esi, dword [ebp - 0x131c]
movups xmm0, xmmword [ebp - 0x1208]
mov eax, dword [ebp - 0x1210]
mov ecx, dword [ebp - 0x120c]
mov edx, dword [ebp - 0x11d4]
mov dword [esi], eax
mov eax, dword [ebp - 0x11cc]
mov dword [esi + 4], ecx
mov ecx, dword [ebp - 0x11d0]
movups xmmword [esi + 0x18], xmm0
movups xmm0, xmmword [ebp - 0x11f8]
movups xmmword [esi + 0x28], xmm0
movups xmm0, xmmword [ebp - 0x11e8]
movups xmmword [esi + 0x38], xmm0
mov dword [esi + 8], edx
mov dword [esi + 0x10], ecx
mov dword [esi + 0x14], eax
jne 0x4445ab
test edx, 0xfffff
jne 0x4445ab
and ecx, 0xfffff
or ecx, 0
jne 0x4445ab
mov ecx, dword [ebp - 0x1328]
add esi, 0x48
inc ecx
mov dword [ebp - 0x131c], esi
mov dword [ebp - 0x1328], ecx
cmp ecx, 2
jb 0x443a06
mov edx, dword [ebp - 0x12a4]
mov esi, dword [ebp - 0x125c]
mov eax, dword [ebp - 0x1260]
mov ecx, dword [ebp - 0x12a8]
cmp edx, esi
jb 0x443bda
ja 0x443c86
cmp ecx, eax
ja 0x443c86
cmp edx, esi
ja 0x443be5
jb 0x443bda
cmp ecx, eax
jae 0x443be7
lea ecx, [ebp - 0x1260]
jmp 0x443c8c
cmp ecx, eax
jne 0x4445ab
cmp edx, esi
jne 0x4445ab
mov eax, dword [ebp - 0x12a0]
cmp eax, dword [ebp - 0x1258]
jne 0x4445ab
mov eax, dword [ebp - 0x1298]
cmp eax, dword [ebp - 0x1250]
jne 0x4445ab
mov eax, dword [ebp - 0x1294]
cmp eax, dword [ebp - 0x124c]
jne 0x4445ab
lea eax, [ebp - 0x1248]
mov dword [ebp - 0x131c], 0
mov dword [ebp - 0x1328], eax
lea ecx, [eax - 0x48]
mov edx, eax
mov esi, 0xc
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x4445ab
add ecx, 4
add edx, 4
sub esi, 4
jae 0x443c50
mov ecx, dword [ebp - 0x131c]
mov eax, dword [ebp - 0x1328]
inc ecx
add eax, 0x10
mov dword [ebp - 0x131c], ecx
mov dword [ebp - 0x1328], eax
cmp ecx, 3
jb 0x443c41
lea ecx, [ebp - 0x12a8]
movups xmm0, xmmword [ecx]
mov eax, dword [ecx + 8]
movups xmmword [edi + 0xa0], xmm0
movups xmm0, xmmword [ecx + 0x10]
movups xmmword [edi + 0xb0], xmm0
movups xmm0, xmmword [ecx + 0x20]
movups xmmword [edi + 0xc0], xmm0
movups xmm0, xmmword [ecx + 0x30]
movups xmmword [edi + 0xd0], xmm0
movq xmm0, qword [ecx + 0x40]
movq qword [edi + 0xe0], xmm0
test eax, eax
je 0x443d5f
add dword [edi + 0xf0], eax
mov edx, dword [ecx + 0x14]
adc dword [edi + 0xf4], 0
add eax, dword [ecx + 0x10]
adc edx, 0
cmp dword [edi + 0x3c], edx
ja 0x443cf7
jb 0x443cf1
cmp dword [edi + 0x38], eax
jae 0x443cf7
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], edx
xor eax, eax
nop dword [eax]
cmp byte [ecx + eax + 0x38], 0
jne 0x443d0f
inc eax
cmp eax, 0x10
jb 0x443d00
jmp 0x443d5f
cmp dword [edi + 0x114], 0
mov byte [edi + 0x128], 1
je 0x443d4f
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x443d37
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.non_empty_LOG_was_not_replayed
lea ecx, [edi + 0x110]
call fcn.0046d3b0
or ecx, 0xffffffff
mov dword [ebp - 0x1338], 0
mov dword [ebp - 0x1320], ecx
mov dword [ebp - 4], 0
push 0x20000
mov dword [ebp - 0x1334], 0
call fcn.0058813f
mov ecx, dword [edi + 0x30]
add esp, 4
mov dword [ebp - 0x1338], eax
mov dword [ebp - 0x1334], 0x20000
push 0
push 0x30000
call fcn.00430da0
mov esi, eax
add esp, 8
test esi, esi
jne 0x444599
mov edx, dword [edi + 0x30]
mov esi, 0x20000
mov eax, dword [ebp - 0x1338]
mov dword [ebp - 0x132c], edx
mov dword [ebp - 0x1324], eax
mov dword [ebp - 0x131c], 0
jmp 0x443de8
mov edx, dword [ebp - 0x132c]
mov eax, dword [edx]
lea edi, [ebp - 0x1340]
mov ecx, SysReAllocString
cmp esi, ecx
push edi
cmovb ecx, esi
push ecx
push dword [ebp - 0x1324]
push edx
call dword [eax + 0xc]
mov ecx, dword [ebp - 0x1340]
sub esi, ecx
mov edx, dword [ebp - 0x131c]
add dword [ebp - 0x1324], ecx
add edx, ecx
mov edi, dword [ebp - 0x1330]
mov dword [ebp - 0x1328], eax
mov dword [ebp - 0x131c], edx
test eax, eax
jne 0x444593
test ecx, ecx
je 0x443e3e
test esi, esi
jne 0x443de2
xor eax, eax
cmp edx, 0x20000
setne al
mov dword [ebp - 0x1328], eax
jne 0x444593
mov eax, dword [ebp - 0x1338]
mov esi, 0xfffc
mov dword [ebp - 0x1328], 1
mov ecx, eax
lea edx, [eax + 0x10000]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x443e85
add ecx, 4
add edx, 4
sub esi, 4
jae 0x443e72
jmp 0x443ed8
cmp dword [edi + 0x114], 0
je 0x443ebe
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x443ea6
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.Region_tables_mismatch
lea ecx, [edi + 0x110]
call fcn.0046d3b0
mov dword [ebp - 0x1328], 2
xor esi, esi
lea ecx, [ebp - 0x1318]
mov dword [ebp - 0x1324], esi
or eax, 0xffffffff
mov dword [ebp - 0x131c], ecx
nop
push dword [ebp - 0x1338]
mov dword [ebp - 0x132c], eax
call fcn.00442770
test al, al
je 0x443f1a
mov ecx, dword [ebp - 0x132c]
mov eax, esi
test ecx, ecx
cmovns eax, ecx
mov dword [ebp - 0x1320], eax
jmp 0x443f6f
cmp dword [edi + 0x114], 0
je 0x443f53
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x443f3b
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.Incorrect_region_table
lea ecx, [edi + 0x110]
call fcn.0046d3b0
mov esi, dword [ebp - 0x1324]
mov eax, dword [ebp - 0x1320]
mov ecx, dword [ebp - 0x131c]
inc esi
add ecx, 0x38
mov dword [ebp - 0x1324], esi
mov dword [ebp - 0x131c], ecx
cmp esi, dword [ebp - 0x1328]
jb 0x443ef0
test eax, eax
jns 0x443faf
push dword [ebp - 0x1338]
mov esi, 1
call fcn.00588148
add esp, 4
mov eax, esi
jmp 0x4445b4
mov dword [ebp - 4], 0xffffffff
push dword [ebp - 0x1338]
call fcn.00588148
mov eax, dword [edi + 0x3c]
add esp, 4
mov edx, dword [edi + 0x38]
mov dword [ebp - 0x131c], eax
test eax, eax
ja 0x443ffb
jb 0x443fde
cmp edx, 0x100000
jae 0x443ffb
mov dword [edi + 0x38], 0x100000
mov edx, 0x100000
mov dword [edi + 0x3c], 0
mov dword [ebp - 0x131c], 0
mov ecx, dword [ebp - 0x1320]
lea esi, [ebp - 0x1318]
lea eax, [ecx*8]
sub eax, ecx
mov ecx, dword [edi + 0xf0]
add ecx, dword [esi + eax*8 + 0x10]
mov dword [edi + 0xf0], ecx
mov ecx, dword [esi + eax*8 + 0xc]
lea esi, [esi + eax*8]
mov eax, dword [edi + 0xf4]
adc eax, dword [esi + 0x14]
mov dword [edi + 0xf4], eax
mov eax, dword [esi + 8]
cmp dword [ebp - 0x131c], ecx
ja 0x44404d
jb 0x444047
cmp edx, eax
jae 0x44404d
mov dword [edi + 0x38], eax
mov dword [edi + 0x3c], ecx
cmp byte [esi + 1], 0
je 0x4445ab
cmp dword [esi + 0x30], 0
je 0x4445ab
mov dword [ebp - 0x1338], 0
mov dword [ebp - 0x1334], 0
mov dword [ebp - 4], 1
push dword [esi + 0x2c]
mov ecx, dword [edi + 0x30]
push dword [esi + 0x28]
call fcn.00430da0
add esp, 8
mov dword [ebp - 0x1320], eax
test eax, eax
jne 0x4440f2
mov edx, dword [esi + 0x30]
push edx
mov dword [ebp - 0x1334], eax
call fcn.0058813f
mov ecx, dword [esi + 0x30]
add esp, 4
mov dword [ebp - 0x1334], ecx
mov edx, eax
mov dword [ebp - 0x131c], ecx
lea ecx, [ebp - 0x131c]
mov dword [ebp - 0x1338], eax
push ecx
mov ecx, dword [edi + 0x30]
call fcn.00558f10
add esp, 4
mov dword [ebp - 0x1320], eax
test eax, eax
jne 0x4440f2
mov edx, dword [esi + 0x30]
cmp edx, dword [ebp - 0x131c]
setne al
mov dword [ebp - 0x1320], eax
test eax, eax
je 0x44410d
push dword [ebp - 0x1338]
mov esi, dword [ebp - 0x1320]
call fcn.00588148
add esp, 4
mov eax, esi
jmp 0x4445b4
push edx
push dword [ebp - 0x1338]
lea ecx, [edi + 0x60]
call fcn.004429d0
test al, al
jne 0x44413a
push dword [ebp - 0x1338]
mov esi, 1
call fcn.00588148
add esp, 4
mov eax, esi
jmp 0x4445b4
mov dword [ebp - 4], 0xffffffff
push dword [ebp - 0x1338]
call fcn.00588148
add esp, 4
cmp byte [esi], 0
je 0x4445ab
cmp dword [esi + 0x20], 0
je 0x4445ab
push dword [esi + 0x1c]
mov ecx, dword [edi + 0x30]
push dword [esi + 0x18]
call fcn.00430da0
add esp, 8
test eax, eax
jne 0x4445b4
push dword [esi + 0x20]
lea eax, [edi + 0x40]
mov ecx, edi
push eax
call fcn.00442f90
test eax, eax
jne 0x4445b4
mov ecx, edi
call fcn.004433d0
test al, al
je 0x4445ab
mov ecx, edi
call fcn.004436b0
test al, al
jne 0x4441f4
cmp dword [edi + 0x114], 0
je 0x4441e4
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x4441cc
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.BAT_overlap
lea ecx, [edi + 0x110]
call fcn.0046d3b0
xor eax, eax
mov dword [ebp - 0x131c], eax
cmp dword [edi + 0x94], eax
jbe 0x44434a
mov ecx, dword [edi + 0x90]
mov dword [ebp - 0x1328], ecx
nop dword [eax]
nop dword [eax + eax]
mov ecx, dword [ecx]
mov edi, 0x70
mov dword [ebp - 0x1320], ecx
mov esi, str.parent_linkage
mov dl, 0x70
mov ecx, dword [ecx]
cmp di, word [ecx]
mov edi, dword [ebp - 0x1330]
jne 0x44425a
test dl, dl
je 0x44427d
mov dl, byte [esi + 1]
inc esi
add ecx, 2
movzx eax, dl
cmp ax, word [ecx]
je 0x444241
mov eax, dword [ebp - 0x131c]
mov ecx, dword [ebp - 0x1328]
inc eax
add ecx, 4
mov dword [ebp - 0x131c], eax
mov dword [ebp - 0x1328], ecx
cmp eax, dword [edi + 0x94]
jb 0x444220
jmp 0x44434a
mov eax, dword [ebp - 0x1320]
cmp dword [eax + 0x10], 0x26
jne 0x444342
mov ecx, dword [eax + 0xc]
cmp word [ecx], 0x7b
jne 0x444342
cmp word [ecx + 0x4a], 0x7d
jne 0x444342
xor esi, esi
mov ecx, 1
nop dword [eax]
cmp ecx, 9
je 0x444323
cmp ecx, 0xe
je 0x444323
cmp ecx, 0x13
je 0x444323
cmp ecx, 0x18
je 0x444323
mov eax, dword [eax + 0xc]
lea edx, [eax + ecx*2]
movzx eax, word [edx]
sub eax, 0x30
cmp eax, 9
jbe 0x4442e3
add eax, 0xffffffef
and eax, 0xffffffdf
cmp eax, 5
ja 0x444342
add eax, 0xa
movzx edx, word [edx + 2]
sub edx, 0x30
cmp edx, 9
jbe 0x4442fd
add edx, 0xffffffef
and edx, 0xffffffdf
cmp edx, 5
ja 0x444342
add edx, 0xa
shl eax, 4
or eax, edx
jl 0x444342
mov edx, esi
cmp esi, 8
jae 0x444316
cmp esi, 4
sbb edx, edx
and edx, 2
inc edx
xor edx, esi
inc esi
mov byte [edi + edx + 0x12a], al
add ecx, 2
jmp 0x44432e
mov eax, dword [eax + 0xc]
cmp word [eax + ecx*2], 0x2d
jne 0x444342
inc ecx
cmp ecx, 0x25
jae 0x44433e
mov eax, dword [ebp - 0x1320]
jmp 0x4442b0
mov al, 1
jmp 0x444344
xor al, al
mov byte [edi + 0x13a], al
xor eax, eax
mov dword [ebp - 0x133c], str.relative_path
mov dword [ebp - 0x1338], str.volume_path
mov dword [ebp - 0x1334], str.absolute_win32_path
mov dword [ebp - 0x1324], eax
xor esi, esi
mov dword [ebp - 0x1320], esi
cmp dword [edi + 0x94], esi
jbe 0x444428
mov eax, dword [ebp + eax*4 - 0x133c]
mov ecx, dword [edi + 0x90]
mov dword [ebp - 0x132c], eax
mov dword [ebp - 0x131c], ecx
nop dword [eax]
mov edx, eax
mov eax, dword [ecx]
mov esi, dword [eax]
mov al, byte [edx]
movzx ecx, al
cmp cx, word [esi]
jne 0x4443c3
test al, al
je 0x4443ef
mov al, byte [edx + 1]
inc edx
add esi, 2
movzx ecx, al
cmp cx, word [esi]
je 0x4443b0
mov eax, dword [ebp - 0x1320]
mov ecx, dword [ebp - 0x131c]
inc eax
add ecx, 4
mov dword [ebp - 0x1320], eax
mov dword [ebp - 0x131c], ecx
cmp eax, dword [edi + 0x94]
jae 0x444428
mov eax, dword [ebp - 0x132c]
jmp 0x4443a0
mov esi, dword [ebp - 0x1320]
test esi, esi
js 0x444428
mov eax, dword [ebp - 0x1330]
lea ecx, [edi + 0x13c]
mov eax, dword [eax + 0x90]
mov esi, dword [eax + esi*4]
call fcn.00439780
lea eax, [esi + 0xc]
push eax
lea ecx, [edi + 0x13c]
call fcn.00446920
mov edi, dword [ebp - 0x1330]
mov esi, dword [ebp - 0x1324]
inc esi
mov dword [ebp - 0x1324], esi
mov eax, esi
cmp esi, 3
jb 0x444370
mov eax, dword [edi + 0x70]
mov cl, byte [edi + 0x62]
shr eax, 1
test al, 1
je 0x444536
test cl, cl
jne 0x444497
cmp dword [edi + 0x114], 0
je 0x44448d
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x444475
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.Parent_locator_is_not_defined
jmp 0x444578
cmp byte [edi + 0x13a], 0
jne 0x4444e9
cmp dword [edi + 0x114], 0
je 0x4444d9
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x4444c1
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.Parent_GUID_is_not_defined
lea ecx, [edi + 0x110]
call fcn.0046d3b0
cmp dword [edi + 0x140], 0
jne 0x444583
cmp dword [edi + 0x114], 0
je 0x44452f
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x444517
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.Parent_VHDX_file_name_is_not_defined
jmp 0x444578
test cl, cl
je 0x444583
cmp dword [edi + 0x114], 0
je 0x444573
mov eax, dword [edi + 0x118]
lea esi, [edi + 0x110]
cmp eax, dword [esi + 4]
jne 0x44455b
mov ecx, esi
call fcn.0046cdb0
mov ecx, dword [esi + 4]
mov edx, 0xa
mov eax, dword [esi]
mov word [eax + ecx*2], dx
inc ecx
xor edx, edx
mov word [eax + ecx*2], dx
mov dword [esi + 4], ecx
push str.Unexpected_parent_locator
lea ecx, [edi + 0x110]
call fcn.0046d3b0
mov eax, dword [edi + 0x78]
mov ecx, dword [edi + 0x7c]
mov dword [edi + 0x28], eax
xor eax, eax
mov dword [edi + 0x2c], ecx
jmp 0x4445b4
mov esi, dword [ebp - 0x1328]
push dword [ebp - 0x1338]
call fcn.00588148
add esp, 4
mov eax, esi
jmp 0x4445b4
mov eax, 1
jmp 0x4445b4
mov eax, ecx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00587d99
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret