Function at 0x44aec0
Capabilities:
Check if file exists
Link many functions at runtime

Disassembly:
push 0xffffffffffffffff
push 0x5a5eb8
mov eax, dword fs:[0]
push eax
sub esp, 8
push ebx
push esi
push edi
mov eax, dword [0x61ac94]
xor eax, esp
push eax
lea eax, [esp + 0x18]
mov dword fs:[0], eax
cmp dword [0x61e7a8], 0
jne 0x44b121
cmp dword [0x61e7c8], 0
mov ebx, dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov esi, dword [sym.imp.KERNEL32.dll_GetProcAddress]
jne 0x44afa4
lea eax, [esp + 0x10]
push eax
call fcn.0044ae90
mov ecx, dword [esp + 0x14]
push ecx
mov dword [esp + 0x28], 0
call fcn.004887d0
add esp, 8
test eax, eax
je 0x44af3d
mov edx, dword [esp + 0x10]
push edx
call ebx
mov dword [0x61e7c8], eax
jmp 0x44af42
mov eax, dword [0x61e7c8]
test eax, eax
je 0x44af7c
push str.SetArpState
push eax
call esi
mov dword [0x61e7cc], eax
mov eax, dword [0x61e7c8]
push str.GetArpState
push eax
call esi
cmp dword [0x61e7cc], 0
mov dword [0x61e7d0], eax
je 0x44af7c
test eax, eax
je 0x44af7c
mov dword [0x61e7c4], 1
mov eax, dword [esp + 0x10]
add eax, 0xfffffff0
mov dword [esp + 0x20], 0xffffffff
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44afa4
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
xor edi, edi
cmp dword [0x61e7ac], edi
jne 0x44b121
lea ecx, [esp + 0x10]
push ecx
call fcn.0044ae60
mov edx, dword [esp + 0x14]
push edx
mov dword [esp + 0x28], 1
call fcn.004887d0
add esp, 8
test eax, eax
je 0x44afe1
mov eax, dword [esp + 0x10]
push eax
call ebx
mov dword [0x61e7ac], eax
cmp dword [0x61e7ac], 0
je 0x44afef
mov edi, 1
mov eax, dword [esp + 0x10]
or ebx, 0xffffffff
add eax, 0xfffffff0
mov dword [esp + 0x20], ebx
lea ecx, [eax + 0xc]
mov edx, ebx
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x44b015
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
test edi, edi
je 0x44b121
mov ecx, dword [0x61e7ac]
push str.CreateFireWallStateQuick2
push ecx
call esi
test eax, eax
je 0x44b036
call eax
mov dword [0x61e7bc], eax
mov edx, dword [0x61e7ac]
push str.CreateFireWallState2
push edx
call esi
test eax, eax
je 0x44b04f
call eax
mov dword [0x61e7b0], eax
mov eax, dword [0x61e7ac]
push str.CreateFireWallState3
push eax
call esi
test eax, eax
je 0x44b067
call eax
mov dword [0x61e7b4], eax
mov ecx, dword [0x61e7ac]
push str.CreateFireWallState4
push ecx
call esi
test eax, eax
je 0x44b080
call eax
mov dword [0x61e7b8], eax
mov edx, dword [0x61e7ac]
push str.CreateFireWallStateQuick3
push edx
call esi
test eax, eax
je 0x44b0fb
call eax
mov dword [0x61e7c0], eax
test eax, eax
je 0x44b0fb
call fcn.004781a0
test eax, eax
je 0x44b0fb
call fcn.00478410
test eax, eax
jne 0x44b0fb
lea eax, [esp + 0x14]
push str.ipcNetDefender.dll
push eax
call fcn.00426c60
add esp, 8
mov ecx, dword [esp + 0x14]
push ecx
mov dword [esp + 0x24], 2
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
jne 0x44b0ee
mov ecx, dword [0x61e7c0]
mov edx, dword [ecx]
mov eax, dword [edx]
call eax
mov dword [0x61e7c0], 0
lea ecx, [esp + 0x14]
mov dword [esp + 0x20], ebx
call fcn.0040c150
cmp dword [0x61e7b0], 0
je 0x44b121
cmp dword [0x61e7bc], 0
je 0x44b121
mov dword [0x61e7a8], 1
call fcn.004752d0
mov dword [0x61e7a4], eax
mov ecx, dword [esp + 0x18]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add esp, 0x14
ret