Function at 0x44bb10
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
mov eax, dword fs:[0]
push 0x576303
push eax
mov eax, 0x27e4
mov dword fs:[0], esp
call fcn.0053f480
push ebx
push ebp
push esi
push edi
xor edi, edi
lea ecx, [esp + 0x58c]
push edi
call fcn.004e3e50
mov ecx, dword [0x733f14]
mov esi, dword [0x7378fc]
or eax, 0xffffffff
mov dword [esp + 0x27fc], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edi
mov dword [esp + 0x10], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x24], ecx
push edi
push edi
push edi
mov dword [0x750fc8], edi
push edi
mov dword [esi + 0x18], edi
mov dword [esi + 0x3bc0], edi
push edi
mov byte [esp + 0x2810], 1
mov dword [esp + 0x40], edi
mov dword [0x750fc4], eax
call fcn.00446100
push esi
call fcn.0053e740
add esp, 0x18
test eax, eax
je 0x44c131
mov ebx, dword [esp + 0x2804]
push ebx
call fcn.0041d000
mov ecx, eax
mov eax, dword [esi + 0x29c]
add esp, 4
cmp eax, 0x64
mov dword [esp + 0x20], ecx
je 0x44bbee
mov edx, dword [esi + 0x2c0]
test edx, edx
jne 0x44bbee
mov edx, dword [esi + 0x2c4]
test edx, edx
jne 0x44bbee
mov dl, byte [esi + 0x2bc]
test dl, dl
je 0x44bc7b
mov edi, dword [esi + 0x2c0]
mov edx, dword [esi + 0x2b8]
xor ecx, ecx
test edi, edi
jne 0x44bc09
cmp byte [esi + 0x2bc], 0
je 0x44bc0e
mov ecx, 1
mov ebp, dword [edx + 0xc]
cmp ecx, ebp
jge 0x44bc44
cmp eax, 0x64
je 0x44bc38
test edi, edi
jne 0x44bc38
cmp dword [esi + 0x2c4], edi
jne 0x44bc38
cmp byte [esi + 0x2bc], 0
je 0x44bc3f
cmp byte [edx + ecx + 0x24], 6
je 0x44bc77
jmp 0x44bc3f
cmp byte [edx + ecx + 0x24], 1
je 0x44bc77
inc ecx
cmp ecx, ebp
jl 0x44bc15
push str.There_is_no_tracks_in_the_image_file.
push 0x113
call fcn.0051faa0
push eax
lea edx, [esp + 0x30]
push 0x675770
push edx
call fcn.00557b5d
mov eax, dword [esp + 0x38]
push 0
push eax
call fcn.004f3450
add esp, 0x1c
jmp 0x44c131
mov ecx, dword [esp + 0x20]
cmp eax, 0x64
je 0x44bca3
mov edx, dword [esi + 0x3a90]
test edx, edx
jne 0x44bca3
cmp dword [0x78ca5c], 1
jne 0x44bcad
mov edx, dword [0x78ca58]
mov eax, dword [edx + 0x20]
cmp eax, 0xffffffff
jne 0x44bcb6
jmp 0x44bcad
mov edx, dword [esi + 0x3bf0]
test edx, edx
je 0x44bcb6
push ecx
call fcn.0041d070
add esp, 4
mov ecx, dword [esi + 0x3ab8]
test ecx, ecx
jne 0x44bd75
cmp dword [esi + 0x29c], 0x65
je 0x44bd75
mov ecx, dword [esi + 0x5c]
test ecx, ecx
jne 0x44bce6
mov ecx, dword [esi + 0x17c]
test ecx, ecx
je 0x44bd75
cmp eax, 2
je 0x44bd75
push 0
push 0x41
push str.Some_advanced_features__such_as_password_protection_and_multiple_volume_support_has_been_enabled._You_need_save_the_image_file_to_a_DAA_file.
push 0x7e
call fcn.0051faa0
add esp, 8
push eax
call fcn.005647c7
cmp eax, 1
push ebx
jne 0x44bd76
lea ecx, [esp + 0x24]
call fcn.0055ae5f
mov eax, dword [0x733f14]
mov dword [esp + 0x14], eax
push 1
lea ecx, [esp + 0x18]
push 0x674108
lea edx, [esp + 0x28]
push ecx
push edx
mov byte [esp + 0x280c], 3
call fcn.004f78b0
lea eax, [esp + 0x24]
push eax
call fcn.004f7d50
mov edi, eax
add esp, 0x14
lea ecx, [esp + 0x14]
mov dword [esp + 0x18], edi
mov byte [esp + 0x27fc], 2
call fcn.0055adeb
lea ecx, [esp + 0x20]
mov byte [esp + 0x27fc], 1
call fcn.0055adeb
jmp 0x44bd84
push ebx
call fcn.0053f4af
mov edi, eax
add esp, 4
mov dword [esp + 0x18], edi
lea ecx, [esp + 0x1c]
lea edx, [esp + 0x10]
push ecx
push edx
push edi
call fcn.0044b690
add esp, 0xc
cmp eax, 0xffffffff
mov dword [esp + 0x14], eax
je 0x44c131
mov eax, dword [esp + 0x10]
push 0x200
push eax
push 0x85a5a0
call fcn.00540068
mov ecx, dword [esi + 0xc]
push ecx
call fcn.004f5720
mov edx, dword [esp + 0x20]
push edx
call fcn.0053f4af
xor ebp, ebp
mov dword [esi + 0xc], eax
mov dword [0x85abe4], ebp
mov eax, dword [esi + 0x3a90]
add esp, 0x14
cmp eax, ebp
je 0x44be5f
mov ecx, dword [esi]
cmp ecx, ebp
je 0x44be5f
mov eax, dword [esi + 0xc]
cmp eax, ebp
je 0x44be5f
push eax
push ecx
call fcn.0053f51d
add esp, 8
test eax, eax
jne 0x44be5f
mov eax, dword [esi + 0x14]
push eax
call fcn.004f5730
push ebx
call fcn.004f5890
add esp, 8
cmp eax, ebp
mov dword [esi + 0x14], eax
push ebx
jne 0x44be38
call fcn.004f2e00
push ebx
call fcn.004f5860
add esp, 8
cmp eax, ebp
mov dword [esi + 0x14], eax
jne 0x44c131
push ebp
call dword [sym.imp.KERNEL32.dll_ExitProcess]
call fcn.004f3d20
add esp, 4
cmp eax, ebp
mov dword [esi + 0x18], eax
jne 0x44be92
push ebx
mov dword [0x85ac64], 2
call fcn.004f2e00
add esp, 4
jmp 0x44c131
mov ecx, dword [esp + 0x10]
push ecx
call fcn.004f3cc0
add esp, 4
cmp eax, ebp
mov dword [esp + 0x28], eax
jne 0x44be83
mov dword [0x85ac64], 2
jmp 0x44c131
mov edi, dword [esp + 0x14]
mov dword [esi + 0x18], eax
mov dword [esi + 0x28c], edi
jmp 0x44be96
mov edi, dword [esp + 0x14]
push esi
call fcn.004f5550
add esp, 4
test eax, eax
jne 0x44beb2
mov dword [0x85ac64], 2
jmp 0x44c131
push esi
call fcn.004af6f0
add esp, 4
test eax, eax
je 0x44bf71
push ebp
push 1
lea ecx, [esp + 0x38]
call fcn.004a9420
lea ecx, [esp + 0x30]
mov byte [esp + 0x27fc], 4
mov dword [esp + 0xa4], esi
call fcn.0055b97c
cmp dword [esp + 0xb0], ebp
jne 0x44bf38
mov dword [0x85ac64], 2
lea ecx, [esp + 0x120]
mov byte [esp + 0x27fc], 6
call fcn.004ebf90
lea ecx, [esp + 0xb4]
mov byte [esp + 0x27fc], 5
call fcn.004ebf90
lea ecx, [esp + 0x30]
mov byte [esp + 0x27fc], 1
call fcn.004e3a60
jmp 0x44c131
lea ecx, [esp + 0x120]
mov byte [esp + 0x27fc], 8
call fcn.004ebf90
lea ecx, [esp + 0xb4]
mov byte [esp + 0x27fc], 7
call fcn.004ebf90
lea ecx, [esp + 0x30]
mov byte [esp + 0x27fc], 1
call fcn.004e3a60
cmp edi, ebp
jne 0x44bf96
mov eax, dword [esi + 0x29c]
cmp eax, 0x97
je 0x44bf8c
cmp eax, 0x65
je 0x44bf8c
cmp eax, 7
jne 0x44bf96
push ebp
push esi
call fcn.00416690
add esp, 8
mov ecx, dword [0x78c448]
mov dword [0x85abe4], ebp
cmp ecx, ebp
je 0x44c0cb
call fcn.00471e60
push str.Save_to:
push 0xaf
call fcn.0051faa0
add esp, 8
lea ecx, [esp + 0x2774]
push eax
call fcn.0055af82
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x2774]
push edx
call fcn.0055b1dc
push edi
call fcn.0041d0e0
add esp, 4
test eax, eax
je 0x44bffc
mov dword [esp + 0x27f0], 0x44c370
jmp 0x44c084
cmp edi, 0x64
jne 0x44c00e
mov dword [esp + 0x27f0], fcn.0044cc20
jmp 0x44c084
cmp dword [esi + 0x2c0], ebp
je 0x44c023
mov dword [esp + 0x27f0], fcn.0044cec0
jmp 0x44c084
cmp dword [esi + 0x2c4], ebp
je 0x44c038
mov dword [esp + 0x27f0], fcn.0044d3c0
jmp 0x44c084
mov al, byte [esi + 0x2bc]
test al, al
je 0x44c04f
mov dword [esp + 0x27f0], fcn.004ad4b0
jmp 0x44c084
cmp dword [esi + 0x3a90], ebp
je 0x44c079
cmp dword [esi + 0x3bf0], ebp
je 0x44c06c
mov dword [esp + 0x27f0], fcn.0044e330
jmp 0x44c084
mov dword [esp + 0x27f0], fcn.0044e130
jmp 0x44c084
mov dword [esp + 0x27f0], fcn.0044c440
push str.Saving_image_file...
push 0x8d
mov dword [esp + 0x1778], 1
call fcn.0051faa0
push eax
lea eax, [esp + 0x1780]
push eax
call fcn.0053f406
add esp, 0x10
lea ecx, [esp + 0x58c]
mov dword [esp + 0x1704], esi
mov dword [esp + 0x27b0], esi
call fcn.0055b97c
jmp 0x44c131
cmp edi, 0x64
jne 0x44c0d8
push ebp
call fcn.0044cc20
jmp 0x44c131
cmp dword [esi + 0x2c0], ebp
je 0x44c0e8
push ebp
call fcn.0044cec0
jmp 0x44c131
cmp dword [esi + 0x2c4], ebp
je 0x44c0f8
push ebp
call fcn.0044d3c0
jmp 0x44c131
mov al, byte [esi + 0x2bc]
test al, al
je 0x44c10a
push ebp
call fcn.004ad4b0
jmp 0x44c131
cmp dword [esi + 0x3a90], ebp
je 0x44c12b
mov eax, dword [esi + 0x3bf0]
push ebp
cmp eax, ebp
je 0x44c124
call fcn.0044e330
jmp 0x44c131
call fcn.0044e130
jmp 0x44c131
push ebp
call fcn.0044c440
mov ecx, dword [esi + 0x18]
push ecx
call fcn.004f5730
xor ebx, ebx
add esp, 4
mov dword [esi + 0x18], ebx
mov eax, dword [esp + 0x1c]
cmp eax, ebx
je 0x44c235
cmp dword [0x750fc4], ebx
jne 0x44c22b
mov edx, dword [esi + 0x14]
push edx
call fcn.004f5730
mov ebp, dword [esp + 0x1c]
mov edi, dword [0x736394]
add esp, 4
mov dword [esi + 0x14], ebx
push ebp
call edi
test eax, eax
jne 0x44c200
push ebp
call fcn.00464240
add esp, 4
cmp ax, bx
je 0x44c1c7
and eax, 0xffff
push eax
push str.The_file_is_mounted_to_the_drive__C:_._Please_umount_the_drive_first.
push 0x253
call fcn.0051faa0
add esp, 8
push eax
lea eax, [esp + 0x194]
push 0x1ff
push eax
call fcn.005410ae
lea ecx, [esp + 0x19c]
push ecx
call fcn.004f2cc0
add esp, 0x14
push ebp
call fcn.004f2e00
push ebp
call fcn.004f5860
mov edx, dword [esi + 0xc]
mov dword [esi + 0x14], eax
push edx
call fcn.004f5720
push ebp
call fcn.0053f4af
add esp, 0x10
mov dword [esi + 0xc], eax
mov eax, dword [esp + 0x10]
push eax
call edi
or ebp, 0xffffffff
mov dword [0x750fc4], ebp
jmp 0x44c2b4
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x10]
push ecx
push edx
call dword [0x736438]
mov eax, dword [esi + 0xc]
push eax
call fcn.004f5720
mov ecx, dword [esp + 0x20]
push ecx
call fcn.0053f4af
add esp, 8
mov dword [esi + 0xc], eax
jmp 0x44c28d
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x44c28d
jmp 0x44c286
cmp dword [esp + 0x28], ebx
je 0x44c28d
mov eax, dword [0x750fc4]
or ebp, 0xffffffff
cmp eax, ebp
jne 0x44c299
mov ecx, dword [esp + 0x14]
mov eax, dword [esi + 0x2a4]
cmp ecx, 2
jne 0x44c282
cmp eax, ebx
je 0x44c282
cmp dword [eax + 0x9c8c], ebx
je 0x44c282
mov ecx, dword [eax + 0x9cc8]
lea edx, [eax + 4]
test edx, edx
je 0x44c2b4
mov ecx, dword [eax + ecx*4 + 4]
cmp ecx, ebx
je 0x44c2b4
cmp dword [eax + 0x9cec], ebx
jne 0x44c2b4
push ecx
jmp 0x44c287
mov eax, dword [esp + 0x10]
push eax
call dword [0x736394]
mov eax, dword [0x750fc4]
or ebp, 0xffffffff
cmp eax, ebp
je 0x44c2b4
mov eax, dword [esp + 0x14]
cmp eax, 1
je 0x44c2a7
cmp eax, 0x64
jne 0x44c2b4
mov ecx, dword [esi + 0xc]
push esi
push ecx
call fcn.00444630
add esp, 8
push esi
call fcn.0042ed70
mov eax, dword [esi + 0x3ab8]
add esp, 4
cmp eax, ebx
je 0x44c2d7
mov edx, dword [esi + 0xc]
push edx
call fcn.0053f4af
add esp, 4
mov edi, eax
jmp 0x44c2db
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 0x18]
push eax
call fcn.004f5720
mov ecx, dword [esp + 0x14]
push ecx
call fcn.004f5720
mov edx, dword [esp + 0x24]
push edx
call fcn.004f5720
push esi
mov dword [0x750fc8], ebx
call fcn.004f55d0
mov eax, dword [0x750fc4]
add esp, 0x10
cmp eax, ebp
je 0x44c31e
cmp edi, ebx
je 0x44c31e
push edi
call fcn.0048d1f0
add esp, 4
push edi
call fcn.004f5720
mov esi, dword [0x750fc4]
add esp, 4
lea ecx, [esp + 0x24]
mov byte [esp + 0x27fc], 0
call fcn.0055adeb
lea ecx, [esp + 0x58c]
mov dword [esp + 0x27fc], ebp
call fcn.004e3f70
mov ecx, dword [esp + 0x27f4]
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x27f0
ret