Function at 0x44e790
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x50f0fd
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x18c
mov al, byte [0x5cf290]
push ebx
xor ebx, ebx
push ebp
push esi
cmp al, bl
push edi
mov dword [esp + 0x14], ecx
je 0x44e7c5
push 0xffffffffffffffff
call fcn.005009bb
cmp edx, ebx
jne 0x44ea57
mov edi, 0x531a9c
or ecx, 0xffffffff
xor eax, eax
push fcn.0046ebb0
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push fcn.0046e990
mov eax, ecx
mov esi, edi
mov edi, 0x531894
push 5
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
push 4
and ecx, 3
rep movsb byte es:[edi], byte [esi]
lea ecx, [esp + 0x4c]
push ecx
call fcn.00500422
mov dword [esp + 0x24], 1
mov dword [esp + 0x2c], ebx
push 0x531a98
lea ecx, [esp + 0x28]
mov dword [esp + 0x1a8], ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x34], 0x531a94
mov dword [esp + 0x38], 0x5413c8
mov dword [esp + 0x3c], ebx
call fcn.0044e550
lea edx, [esp + 0x24]
lea ecx, [esp + 0x1c]
push ebx
mov dword [esp + 0x28], 2
mov dword [esp + 0x30], ebx
mov dword [esp + 0x20], 0x51782c
mov dword [esp + 0x24], ebx
call fcn.0044edb0
mov ebp, eax
cmp ebp, ebx
mov dword [esp + 0x10], ebx
je 0x44e8ba
lea edx, [ebp + ebp*4]
shl edx, 4
push edx
call fcn.004fff6b
add esp, 4
mov esi, eax
lea ecx, [esp + 0x7c]
mov dword [esp + 0x10], esi
push 0x50
push ebp
push ebx
push esi
push 0x4f
call fcn.0044e340
lea edx, [esp + 0x24]
lea ecx, [esp + 0x7c]
push ebx
call fcn.0044edb0
mov ebp, eax
push fcn.0050d670
push 0x50
push ebp
push esi
call fcn.00500d48
add esp, 0x10
mov edx, 0x100
lea ecx, [esp + 0x9c]
call fcn.00465900
lea eax, [esp + 0x9c]
push 0x20
push ebx
push 0x531a90
push ebx
push 1
push eax
call fcn.004d23a0
mov ecx, eax
call fcn.004d26a0
cmp al, bl
mov byte [0x5cf290], al
jne 0x44e9f5
mov edi, dword [esp + 0x14]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x9c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x20
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0xa0]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
mov edi, str..ZIP
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x531a90
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
lea eax, [esp + 0xac]
push 1
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.004d23a0
mov ecx, eax
call fcn.004d26a0
cmp al, bl
mov byte [0x5cf290], al
jne 0x44e9f5
mov edi, dword [esp + 0x14]
or ecx, 0xffffffff
xor eax, eax
lea edx, [esp + 0x9c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x20
mov eax, ecx
mov esi, edi
mov edi, edx
lea edx, [esp + 0xa0]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
xor eax, eax
and ecx, 3
push ebx
rep movsb byte es:[edi], byte [esi]
mov edi, str..DAT
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push 0x531a90
mov esi, edi
mov edi, edx
mov edx, ecx
or ecx, 0xffffffff
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
push ebx
and ecx, 3
lea eax, [esp + 0xac]
push 1
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.004d23a0
mov ecx, eax
call fcn.004d26a0
mov byte [0x5cf290], al
call fcn.004d23a0
cmp ebp, ebx
mov edi, eax
jbe 0x44ea28
mov esi, dword [esp + 0x10]
push 0x20
push ebx
push 0x531a90
push ebx
push 1
push esi
mov ecx, edi
call fcn.004d26a0
test al, al
je 0x44ea22
mov byte [0x5cf290], 1
add esi, 0x50
dec ebp
jne 0x44ea04
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x44ea39
push eax
call fcn.004ffee0
add esp, 4
push fcn.0046ebb0
push 5
lea ecx, [esp + 0x44]
push 4
push ecx
mov dword [esp + 0x1b4], 0xffffffff
call fcn.005004a4
mov edi, dword [esp + 0x14]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov eax, dword [esp + 0x1ac]
mov edx, ecx
mov esi, edi
mov edi, 0x531894
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
cmp eax, ebx
rep movsb byte es:[edi], byte [esi]
jne 0x44ecef
mov esi, 1
push ebx
push esi
push str.Enumerating_Zip_Files
mov ecx, 0x5d1288
call fcn.00499370
lea eax, [esp + 0x68]
push fcn.0046ebb0
push fcn.0046e990
push 5
push 4
push eax
call fcn.00500422
mov dword [esp + 0x50], esi
mov dword [esp + 0x58], ebx
mov eax, 0x5413c8
push 0x531a64
lea ecx, [esp + 0x54]
mov dword [esp + 0x1a8], esi
mov dword [esp + 0x58], ebx
mov dword [esp + 0x60], eax
mov dword [esp + 0x64], eax
mov dword [esp + 0x68], ebx
call fcn.0044e550
lea ecx, [esp + 0x7c]
mov dword [esp + 0x50], ebx
call fcn.004518c0
lea ecx, [esp + 0x50]
mov byte [esp + 0x1a4], 2
push ecx
lea ecx, [esp + 0x80]
call fcn.004519c0
mov ebp, eax
cmp ebp, ebx
push ebx
push esi
je 0x44ecab
mov ecx, 0x5cf270
call fcn.00470660
mov ecx, 0x5d1288
push eax
call fcn.00499370
call fcn.004d23a0
xor esi, esi
cmp ebp, ebx
mov dword [esp + 0x18], eax
jbe 0x44ec3b
lea edx, [esp + 0x10]
push esi
push edx
lea ecx, [esp + 0x84]
call fcn.00451a40
lea ecx, [esp + 0x14]
mov byte [esp + 0x1a4], 3
call fcn.0046e990
lea ecx, [esp + 0x10]
mov byte [esp + 0x1a4], 4
call fcn.00470670
sub eax, 4
lea ecx, [esp + 0x10]
push eax
lea eax, [esp + 0x20]
push eax
call fcn.0044ed10
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x1a8], 5
call fcn.00470b10
lea ecx, [esp + 0x1c]
mov byte [esp + 0x1a4], 4
call fcn.0046ebb0
lea ecx, [esp + 0x14]
push 0x531a90
call fcn.00470d50
cmp esi, ebx
lea ecx, [esp + 0x10]
jne 0x44ebdd
call fcn.00470660
lea ecx, [esp + 0x14]
mov edi, eax
push ebx
push 1
call fcn.00470660
push eax
push 1
push 1
jmp 0x44ebf4
call fcn.00470660
lea ecx, [esp + 0x14]
mov edi, eax
push ebx
push 1
call fcn.00470660
push eax
push 1
push ebx
mov ecx, dword [esp + 0x2c]
push edi
call fcn.004d26a0
mov dl, byte [0x5cf290]
or dl, al
cmp al, bl
mov byte [0x5cf290], dl
je 0x44ec45
lea ecx, [esp + 0x14]
mov byte [esp + 0x1a4], 3
call fcn.0046ebb0
lea ecx, [esp + 0x10]
mov byte [esp + 0x1a4], 2
call fcn.0046ebb0
inc esi
cmp esi, ebp
jb 0x44eb44
push ebx
push 1
mov ecx, 0x5cf268
jmp 0x44ecb0
lea ecx, [esp + 0x18]
call fcn.0046e990
lea ecx, [esp + 0x14]
mov byte [esp + 0x1a4], 6
call fcn.00470660
mov ecx, 0x5cf278
mov esi, eax
call fcn.00470660
lea ecx, [esp + 0x10]
mov edi, eax
call fcn.00470660
lea ecx, [esp + 0x18]
push eax
push esi
push edi
push ecx
call fcn.00470090
add esp, 0x10
mov ecx, 0x5cf280
call fcn.00470660
lea ecx, [esp + 0x18]
mov esi, eax
call fcn.00470660
mov edx, eax
mov ecx, esi
call fcn.00465a30
push 0xffffffffffffffff
call fcn.005009bb
mov ecx, 0x5cf288
call fcn.00470660
mov ecx, 0x5d1288
push eax
call fcn.00499370
lea ecx, [esp + 0x7c]
mov byte [esp + 0x1a4], 1
call fcn.00451900
lea edx, [esp + 0x68]
mov dword [esp + 0x1a4], 0xffffffff
push fcn.0046ebb0
push 5
push 4
push edx
call fcn.005004a4
mov ecx, dword [esp + 0x19c]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x198
ret 4