Function at 0x44b7b0
Capabilities:
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x4c9e58
mov eax, dword fs:[0]
push eax
sub esp, 0x68
push ebx
push ebp
push esi
push edi
mov eax, dword [0x5920a4]
xor eax, esp
push eax
lea eax, [esp + 0x7c]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [esi + 0x18]
test edi, edi
je 0x4e8093
mov ebp, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
cmp ebp, eax
jae 0x44c064
mov ecx, dword [esp + 0x90]
lea edx, [ecx + ebp]
cmp edx, eax
ja 0x44c056
mov dword [esp + 0x90], ecx
mov ecx, dword [edi + 0x10]
test ecx, ecx
mov ebx, dword [esp + 0x8c]
je 0x4e80ca
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
cmp eax, 0x44b470
jne 0x4e80de
mov ecx, dword [ecx + 0xc]
push ecx
call fcn.004c03ea
add esp, 4
cmp eax, ebp
jne 0x44c044
mov ecx, dword [edi + 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 4]
cmp eax, 0x44ab90
jne 0x4e80e5
mov eax, dword [ecx + 0xc]
mov ecx, dword [esp + 0x90]
push eax
push ecx
push 1
push ebx
call fcn.004c0237
add esp, 0x10
cmp byte [esi + 0x94], 0
mov dword [esp + 0x8c], eax
je 0x44b8c4
mov edx, ebx
mov ebx, dword [esi + 0x1c]
mov ecx, ebx
shr ecx, 3
lea ebp, [ebx + eax*8]
and ecx, 0x3f
cmp ebp, ebx
mov edi, eax
jb 0x4e80f5
mov ebx, eax
shr ebx, 0x1d
add dword [esi + 0x20], ebx
test eax, eax
mov dword [esi + 0x1c], ebp
je 0x44b8c4
mov bl, byte [edx]
mov byte [esi + ecx + 0x34], bl
sub edi, 1
add ecx, 1
add edx, 1
cmp ecx, 0x40
mov dword [esp + 0x1c], edi
mov dword [esp + 0x18], edx
je 0x44b8dd
test edi, edi
jne 0x44b8a4
add dword [esi + 0x14], eax
mov ecx, dword [esp + 0x7c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x74
ret 8
xor ecx, ecx
lea eax, [esi + 0x36]
movzx edi, byte [eax - 1]
xor edx, edx
mov dh, byte [eax + 1]
add ecx, 1
add eax, 4
mov dl, byte [eax - 4]
shl edx, 8
or edx, edi
movzx edi, byte [eax - 6]
shl edx, 8
or edx, edi
cmp ecx, 0x10
mov dword [esp + ecx*4 + 0x38], edx
jb 0x44b8e2
mov eax, dword [esi + 0x28]
mov edi, dword [esi + 0x2c]
mov edx, dword [esi + 0x30]
mov ecx, dword [esi + 0x24]
mov ebx, eax
not ebx
and ebx, edx
mov ebp, edi
and ebp, eax
or ebx, ebp
add ebx, ecx
mov ecx, dword [esp + 0x3c]
lea ecx, [ebx + ecx - 0x28955b88]
rol ecx, 7
add ecx, eax
mov ebp, eax
and ebp, ecx
mov ebx, ecx
not ebx
and ebx, edi
or ebx, ebp
add ebx, dword [esp + 0x40]
lea edx, [ebx + edx - 0x173848aa]
rol edx, 0xc
add edx, ecx
mov ebx, edx
not ebx
and ebx, eax
mov ebp, edx
and ebp, ecx
or ebx, ebp
add ebx, dword [esp + 0x44]
mov ebp, edx
lea edi, [ebx + edi + 0x242070db]
ror edi, 0xf
add edi, edx
and ebp, edi
mov ebx, edi
not ebx
and ebx, ecx
or ebx, ebp
add ebx, dword [esp + 0x48]
lea eax, [ebx + eax - 0x3e423112]
ror eax, 0xa
add eax, edi
mov dword [esp + 0x90], eax
mov ebx, edi
and ebx, dword [esp + 0x90]
not eax
and eax, edx
or eax, ebx
add eax, dword [esp + 0x4c]
lea ecx, [eax + ecx - 0xa83f051]
mov eax, dword [esp + 0x90]
rol ecx, 7
add ecx, eax
mov ebx, ecx
not ebx
and ebx, edi
mov ebp, eax
and ebp, ecx
or ebx, ebp
add ebx, dword [esp + 0x50]
lea edx, [ebx + edx + 0x4787c62a]
rol edx, 0xc
add edx, ecx
mov ebx, edx
not ebx
and ebx, eax
mov ebp, edx
and ebp, ecx
or ebx, ebp
add ebx, dword [esp + 0x54]
mov ebp, edx
lea edi, [ebx + edi - 0x57cfb9ed]
ror edi, 0xf
add edi, edx
mov ebx, edi
not ebx
and ebx, ecx
and ebp, edi
or ebx, ebp
add ebx, dword [esp + 0x58]
lea eax, [ebx + eax - 0x2b96aff]
ror eax, 0xa
add eax, edi
mov dword [esp + 0x90], eax
not eax
and eax, edx
mov ebx, edi
and ebx, dword [esp + 0x90]
or eax, ebx
add eax, dword [esp + 0x5c]
lea ecx, [eax + ecx + 0x698098d8]
mov eax, dword [esp + 0x90]
rol ecx, 7
add ecx, eax
mov ebp, eax
and ebp, ecx
mov ebx, ecx
not ebx
and ebx, edi
or ebx, ebp
add ebx, dword [esp + 0x60]
lea edx, [ebx + edx - 0x74bb0851]
rol edx, 0xc
add edx, ecx
mov ebx, edx
not ebx
and ebx, eax
mov ebp, edx
and ebp, ecx
or ebx, ebp
add ebx, dword [esp + 0x64]
mov ebp, edx
lea edi, [ebx + edi - 0xa44f]
ror edi, 0xf
add edi, edx
and ebp, edi
mov ebx, edi
not ebx
and ebx, ecx
or ebx, ebp
add ebx, dword [esp + 0x68]
lea eax, [ebx + eax - 0x76a32842]
ror eax, 0xa
add eax, edi
mov dword [esp + 0x90], eax
not eax
and eax, edx
mov ebx, edi
and ebx, dword [esp + 0x90]
or eax, ebx
add eax, dword [esp + 0x6c]
mov ebx, dword [esp + 0x90]
lea ecx, [eax + ecx + 0x6b901122]
rol ecx, 7
add ecx, ebx
mov ebp, ebx
and ebp, ecx
mov eax, ecx
not eax
and eax, edi
or eax, ebp
add eax, dword [esp + 0x70]
lea edx, [eax + edx - 0x2678e6d]
rol edx, 0xc
add edx, ecx
mov eax, edx
not eax
mov ebp, eax
and ebp, ebx
mov ebx, edx
and ebx, ecx
or ebp, ebx
add ebp, dword [esp + 0x74]
lea edi, [edi + ebp - 0x5986bc72]
ror edi, 0xf
add edi, edx
mov ebx, edi
not ebx
mov dword [esp + 0x14], ebx
and ebx, ecx
and eax, edi
mov ebp, edx
and ebp, edi
or ebx, ebp
add ebx, dword [esp + 0x78]
mov ebp, dword [esp + 0x90]
lea ebx, [ebx + ebp + 0x49b40821]
ror ebx, 0xa
add ebx, edi
mov ebp, edx
and ebp, ebx
or eax, ebp
add eax, dword [esp + 0x40]
mov ebp, edi
lea ecx, [eax + ecx - 0x9e1da9e]
mov eax, dword [esp + 0x14]
and eax, ebx
rol ecx, 5
add ecx, ebx
and ebp, ecx
or eax, ebp
add eax, dword [esp + 0x54]
lea edx, [eax + edx - 0x3fbf4cc0]
rol edx, 9
add edx, ecx
mov eax, ebx
not eax
and eax, ecx
mov ebp, edx
and ebp, ebx
or eax, ebp
add eax, dword [esp + 0x68]
lea edi, [eax + edi + 0x265e5a51]
mov eax, ecx
not eax
and eax, edx
rol edi, 0xe
add edi, edx
mov ebp, edi
and ebp, ecx
or eax, ebp
add eax, dword [esp + 0x3c]
mov ebp, edx
lea ebx, [eax + ebx - 0x16493856]
ror ebx, 0xc
add ebx, edi
mov eax, edx
not eax
and eax, edi
and ebp, ebx
or eax, ebp
add eax, dword [esp + 0x50]
lea ecx, [eax + ecx - 0x29d0efa3]
rol ecx, 5
add ecx, ebx
mov dword [esp + 0x90], ecx
mov ecx, edi
not ecx
and ecx, ebx
mov eax, edi
and eax, dword [esp + 0x90]
or ecx, eax
add ecx, dword [esp + 0x64]
mov eax, dword [esp + 0x90]
lea edx, [ecx + edx + 0x2441453]
rol edx, 9
add edx, eax
mov ecx, ebx
not ecx
and ecx, eax
mov ebp, edx
and ebp, ebx
or ecx, ebp
add ecx, dword [esp + 0x78]
not eax
lea edi, [ecx + edi - 0x275e197f]
rol edi, 0xe
add edi, edx
and eax, edx
mov ecx, edi
and ecx, dword [esp + 0x90]
or eax, ecx
add eax, dword [esp + 0x4c]
mov ecx, edx
lea ebx, [eax + ebx - 0x182c0438]
ror ebx, 0xc
add ebx, edi
and ecx, ebx
mov eax, edx
not eax
and eax, edi
or eax, ecx
add eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x90]
lea eax, [eax + ecx + 0x21e1cde6]
rol eax, 5
add eax, ebx
mov dword [esp + 0x90], eax
mov eax, edi
not eax
and eax, ebx
mov ecx, edi
and ecx, dword [esp + 0x90]
or eax, ecx
add eax, dword [esp + 0x74]
mov ecx, ebx
lea edx, [eax + edx - 0x3cc8f82a]
mov eax, dword [esp + 0x90]
not ecx
and ecx, eax
rol edx, 9
add edx, eax
mov ebp, edx
and ebp, ebx
or ecx, ebp
add ecx, dword [esp + 0x48]
not eax
lea edi, [ecx + edi - 0xb2af279]
and eax, edx
rol edi, 0xe
add edi, edx
mov ecx, edi
and ecx, dword [esp + 0x90]
or eax, ecx
add eax, dword [esp + 0x5c]
mov ecx, edx
lea ebx, [eax + ebx + 0x455a14ed]
ror ebx, 0xc
add ebx, edi
and ecx, ebx
mov eax, edx
not eax
and eax, edi
or eax, ecx
add eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x90]
lea eax, [eax + ecx - 0x561c16fb]
rol eax, 5
add eax, ebx
mov dword [esp + 0x90], eax
mov eax, edi
mov ecx, edi
and ecx, dword [esp + 0x90]
not eax
and eax, ebx
or eax, ecx
add eax, dword [esp + 0x44]
mov ecx, ebx
lea edx, [eax + edx - 0x3105c08]
mov eax, dword [esp + 0x90]
rol edx, 9
add edx, eax
not ecx
and ecx, eax
mov ebp, edx
and ebp, ebx
or ecx, ebp
add ecx, dword [esp + 0x58]
lea edi, [ecx + edi + 0x676f02d9]
rol edi, 0xe
add edi, edx
not eax
and eax, edx
mov ecx, edi
and ecx, dword [esp + 0x90]
or eax, ecx
add eax, dword [esp + 0x6c]
mov ecx, dword [esp + 0x90]
lea ebx, [eax + ebx - 0x72d5b376]
ror ebx, 0xc
add ebx, edi
mov eax, edx
xor eax, edi
xor eax, ebx
add eax, dword [esp + 0x50]
lea eax, [eax + ecx - 0x5c6be]
rol eax, 4
add eax, ebx
mov ecx, edi
xor ecx, ebx
xor ecx, eax
add ecx, dword [esp + 0x5c]
lea edx, [ecx + edx - 0x788e097f]
rol edx, 0xb
add edx, eax
mov ecx, edx
xor ecx, ebx
xor ecx, eax
add ecx, dword [esp + 0x68]
lea edi, [ecx + edi + 0x6d9d6122]
rol edi, 0x10
add edi, edx
mov ecx, edx
xor ecx, edi
mov dword [esp + 0x90], ecx
xor ecx, eax
add ecx, dword [esp + 0x74]
lea ebx, [ecx + ebx - 0x21ac7f4]
mov ecx, dword [esp + 0x90]
ror ebx, 9
add ebx, edi
xor ecx, ebx
add ecx, dword [esp + 0x40]
lea eax, [ecx + eax - 0x5b4115bc]
rol eax, 4
add eax, ebx
mov ecx, edi
xor ecx, ebx
xor ecx, eax
add ecx, dword [esp + 0x4c]
lea edx, [ecx + edx + 0x4bdecfa9]
rol edx, 0xb
add edx, eax
mov ecx, edx
xor ecx, ebx
xor ecx, eax
add ecx, dword [esp + 0x58]
mov ebp, edx
lea edi, [ecx + edi - 0x944b4a0]
rol edi, 0x10
add edi, edx
xor ebp, edi
mov ecx, ebp
xor ecx, eax
add ecx, dword [esp + 0x64]
lea ecx, [ecx + ebx - 0x41404390]
ror ecx, 9
add ecx, edi
xor ebp, ecx
add ebp, dword [esp + 0x70]
mov ebx, edi
lea eax, [eax + ebp + 0x289b7ec6]
rol eax, 4
xor ebx, ecx
add eax, ecx
xor ebx, eax
add ebx, dword [esp + 0x3c]
lea edx, [ebx + edx - 0x155ed806]
rol edx, 0xb
add edx, eax
mov ebx, edx
xor ebx, ecx
xor ebx, eax
add ebx, dword [esp + 0x48]
lea edi, [ebx + edi - 0x2b10cf7b]
rol edi, 0x10
add edi, edx
mov ebx, edx
xor ebx, edi
mov ebp, ebx
xor ebp, eax
add ebp, dword [esp + 0x54]
lea ecx, [ecx + ebp + 0x4881d05]
ror ecx, 9
add ecx, edi
xor ebx, ecx
add ebx, dword [esp + 0x60]
lea eax, [ebx + eax - 0x262b2fc7]
rol eax, 4
add eax, ecx
mov ebx, edi
xor ebx, ecx
xor ebx, eax
add ebx, dword [esp + 0x6c]
lea edx, [ebx + edx - 0x1924661b]
rol edx, 0xb
add edx, eax
mov ebx, edx
xor ebx, ecx
xor ebx, eax
add ebx, dword [esp + 0x78]
lea edi, [ebx + edi + 0x1fa27cf8]
rol edi, 0x10
add edi, edx
mov ebx, edx
xor ebx, edi
xor ebx, eax
add ebx, dword [esp + 0x44]
lea ecx, [ebx + ecx - 0x3b53a99b]
ror ecx, 9
add ecx, edi
mov ebx, edx
not ebx
or ebx, ecx
xor ebx, edi
add ebx, dword [esp + 0x3c]
lea eax, [ebx + eax - 0xbd6ddbc]
rol eax, 6
add eax, ecx
mov ebx, edi
not ebx
or ebx, eax
xor ebx, ecx
add ebx, dword [esp + 0x58]
lea edx, [ebx + edx + 0x432aff97]
rol edx, 0xa
add edx, eax
mov ebx, ecx
not ebx
or ebx, edx
xor ebx, eax
add ebx, dword [esp + 0x74]
lea edi, [ebx + edi - 0x546bdc59]
rol edi, 0xf
add edi, edx
mov ebx, eax
not ebx
or ebx, edi
xor ebx, edx
add ebx, dword [esp + 0x50]
lea ecx, [ebx + ecx - 0x36c5fc7]
ror ecx, 0xb
add ecx, edi
mov ebx, edx
not ebx
or ebx, ecx
xor ebx, edi
add ebx, dword [esp + 0x6c]
lea eax, [ebx + eax + 0x655b59c3]
rol eax, 6
mov ebx, edi
add eax, ecx
not ebx
or ebx, eax
xor ebx, ecx
add ebx, dword [esp + 0x48]
lea edx, [ebx + edx - 0x70f3336e]
rol edx, 0xa
add edx, eax
mov ebx, ecx
not ebx
or ebx, edx
xor ebx, eax
add ebx, dword [esp + 0x64]
lea edi, [ebx + edi - 0x100b83]
mov ebx, eax
not ebx
rol edi, 0xf
add edi, edx
or ebx, edi
xor ebx, edx
add ebx, dword [esp + 0x40]
lea ecx, [ebx + ecx - 0x7a7ba22f]
ror ecx, 0xb
add ecx, edi
mov ebx, edx
not ebx
or ebx, ecx
xor ebx, edi
add ebx, dword [esp + 0x5c]
lea eax, [ebx + eax + 0x6fa87e4f]
rol eax, 6
add eax, ecx
mov ebx, edi
not ebx
or ebx, eax
xor ebx, ecx
add ebx, dword [esp + 0x78]
lea edx, [ebx + edx - 0x1d31920]
rol edx, 0xa
add edx, eax
mov ebx, ecx
not ebx
or ebx, edx
xor ebx, eax
add ebx, dword [esp + 0x54]
lea edi, [ebx + edi - 0x5cfebcec]
mov ebx, eax
rol edi, 0xf
add edi, edx
not ebx
or ebx, edi
xor ebx, edx
add ebx, dword [esp + 0x70]
lea ebx, [ebx + ecx + 0x4e0811a1]
ror ebx, 0xb
add ebx, edi
mov ecx, edx
not ecx
or ecx, ebx
xor ecx, edi
add ecx, dword [esp + 0x4c]
lea ecx, [ecx + eax - 0x8ac817e]
rol ecx, 6
add ecx, ebx
mov eax, edi
not eax
or eax, ecx
xor eax, ebx
add eax, dword [esp + 0x68]
lea edx, [eax + edx - 0x42c50dcb]
rol edx, 0xa
add edx, ecx
mov eax, ebx
not eax
or eax, edx
xor eax, ecx
add eax, dword [esp + 0x44]
lea edi, [eax + edi + 0x2ad7d2bb]
mov eax, dword [esi + 0x24]
rol edi, 0xf
add edi, edx
add eax, ecx
mov dword [esi + 0x24], eax
mov eax, dword [esi + 0x2c]
not ecx
or ecx, edi
xor ecx, edx
add ecx, dword [esp + 0x60]
add eax, edi
lea ecx, [ecx + ebx - 0x14792c6f]
ror ecx, 0xb
add ecx, dword [esi + 0x28]
mov dword [esi + 0x2c], eax
mov eax, dword [esi + 0x30]
add eax, edx
mov edx, dword [esp + 0x18]
add ecx, edi
mov edi, dword [esp + 0x1c]
mov dword [esi + 0x28], ecx
mov dword [esi + 0x30], eax
mov eax, dword [esp + 0x8c]
xor ecx, ecx
jmp 0x44b8c0
mov ecx, dword [edi + 0x10]
mov edx, dword [ecx]
mov eax, dword [edx + 0xc]
push 0
push ebp
call eax
jmp 0x44b841
sub eax, ebp
mov dword [esp + 0x90], eax
jmp 0x44b80b
xor eax, eax
jmp 0x44b8c7
push 0x560f54
lea ecx, [esp + 0x24]
call fcn.0044ca60
lea eax, [esp + 0x20]
push eax
lea ecx, [esp + 0x40]
push ecx
mov dword [esp + 0x8c], 0
call fcn.0051d2d7
push 0x57f0d0
lea edx, [esp + 0x40]
push edx
call fcn.004ad7ab
push 1
push 0
push 0
push 0
push 0
call fcn.0052092b
jmp 0x44b86b
call eax
jmp 0x44b839
mov edx, dword [esp + 0x90]
push edx
push ebx
call eax
jmp 0x44b86b
add dword [esi + 0x20], 1
jmp 0x44b895