Function at 0x44f580
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov edx, 0x42
mov ebp, esp
push ebx
movzx eax, ax
sub esp, 0x64
mov dword [esp + 8], edx
lea edx, [ebp - 0x58]
xor ebx, ebx
mov dword [esp + 4], edx
mov dword [esp], eax
call 0x450670
sub esp, 0xc
test eax, eax
mov edx, 0x1f
mov ecx, 1
jne 0x44f5bc
jmp 0x44f5f4
add ecx, ecx
dec edx
js 0x44f5ca
cmp byte [ebp + edx - 0x58], 0x41
jne 0x44f5b7
or ebx, ecx
add ecx, ecx
dec edx
jns 0x44f5bc
cmp dword [ebx], 0x3c
jne 0x44f5d6
mov eax, ebx
mov ebx, dword [ebp - 4]
leave
ret
mov dword [esp], 0x46f824
mov edx, 0xea
mov eax, 0x46f854
mov dword [esp + 8], edx
mov dword [esp + 4], eax
call 0x450020
mov dword [esp], str.des_cfb1
mov ebx, 0xe4
mov ecx, 0x46f854
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
call 0x450020
lea esi, [esi]
lea edi, [edi]
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0xcc
mov ecx, dword [0x474390]
test ecx, ecx
je 0x44f63e
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [ebp - 0x68], 0x41414141
mov eax, dword [0x46f800]
lea esi, [ebp - 0x68]
mov dword [ebp - 0x64], 0x41414141
mov dword [ebp - 0x60], 0x41414141
mov dword [ebp - 0x48], eax
mov eax, dword [0x46f804]
mov dword [ebp - 0x5c], 0x41414141
mov dword [ebp - 0x58], 0x41414141
mov dword [ebp - 0x44], eax
mov eax, dword [0x46f808]
mov dword [ebp - 0x54], 0x41414141
mov dword [ebp - 0x50], 0x41414141
mov dword [ebp - 0x40], eax
mov eax, dword [0x46f80c]
mov dword [ebp - 0x4c], 0x41414141
mov dword [ebp - 0x3c], eax
mov eax, dword [0x46f810]
mov dword [ebp - 0x38], eax
mov eax, dword [0x46f814]
mov dword [ebp - 0x34], eax
mov eax, dword [str.aes_256_cfb1]
mov dword [ebp - 0x30], eax
mov eax, dword [0x46f81c]
mov dword [ebp - 0x2c], eax
movzx eax, word [0x46f820]
mov word [ebp - 0x28], ax
mov dword [esp], esi
call 0x450680
movzx eax, ax
sub esp, 4
test eax, eax
mov dword [ebp - 0xbc], eax
jne 0x44f81a
mov dword [esp], 0x3c
call 0x450050
test eax, eax
mov ebx, eax
je 0x44f84e
cld
mov edi, eax
mov eax, dword [ebp - 0xbc]
mov ecx, 0xf
rep stosd dword es:[edi], eax
mov dword [ebx + 4], fcn.0044f4a0
mov ecx, 1
mov dword [ebx + 8], 0x44e970
mov eax, dword [0x4741a0]
mov dword [ebx], 0x3c
mov edx, dword [0x4741a4]
mov dword [ebx + 0x28], 0
mov dword [ebx + 0x14], eax
mov eax, dword [0x45e8b0]
mov dword [ebx + 0x18], edx
mov edx, dword [0x45e8b4]
mov dword [ebx + 0x1c], eax
mov eax, dword [0x4741b0]
mov dword [ebx + 0x20], edx
mov dword [ebx + 0x30], 0xffffffff
mov dword [ebx + 0x2c], eax
mov edx, dword [0x45e8bc]
mov eax, dword [0x45e8b8]
mov dword [ebx + 0x38], edx
mov edx, 0x1f
mov dword [ebx + 0x34], eax
lea esi, [esi]
mov eax, ebx
and eax, ecx
cmp eax, 1
sbb eax, eax
and al, 0x20
add ecx, ecx
add al, 0x41
mov byte [ebp + edx - 0xb8], al
dec edx
jns 0x44f770
mov eax, dword [0x46f800]
mov dword [ebp - 0x98], eax
mov eax, dword [0x46f804]
mov dword [ebp - 0x94], eax
mov eax, dword [0x46f808]
mov dword [ebp - 0x90], eax
mov eax, dword [0x46f80c]
mov dword [ebp - 0x8c], eax
mov eax, dword [0x46f810]
mov dword [ebp - 0x88], eax
mov eax, dword [0x46f814]
mov dword [ebp - 0x84], eax
mov eax, dword [str.aes_256_cfb1]
mov dword [ebp - 0x80], eax
mov eax, dword [0x46f81c]
mov dword [ebp - 0x7c], eax
movzx eax, word [0x46f820]
mov word [ebp - 0x78], ax
lea eax, [ebp - 0xb8]
mov dword [esp], eax
call 0x450690
movzx edi, ax
sub esp, 4
test edi, edi
jne 0x44f83f
xor edx, edx
test edx, edx
jne 0x44f821
mov dword [esp], ebx
call 0x44fdc0
mov dword [esp], esi
call 0x450680
sub esp, 4
movzx eax, ax
call fcn.0044f580
mov ebx, eax
mov dword [0x474390], ebx
lea eax, [ebx + 4]
mov dword [0x474380], eax
lea eax, [ebx + 8]
mov dword [0x4743a0], eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, edi
call fcn.0044f580
cmp eax, ebx
mov edx, edi
jne 0x44f7fe
jmp 0x44f800
call 0x4500a0
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop