Function at 0x44a700
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x465b74
mov eax, dword fs:[0]
push eax
sub esp, 0x80
mov eax, dword [0x49001c]
xor eax, esp
mov dword [esp + 0x78], eax
push ebx
push esi
push edi
mov eax, dword [0x49001c]
xor eax, esp
push eax
lea eax, [esp + 0x90]
mov dword fs:[0], eax
mov edi, ecx
mov esi, edi
mov dword [esp + 0x24], edi
call fcn.00449fd0
xor eax, eax
mov dword [edi + 0x690], eax
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], eax
mov dword [esp + 0x98], eax
mov ecx, dword [edi + 0x688]
mov ecx, dword [ecx]
lea eax, [edi + 0x684]
mov ebx, eax
mov esi, ecx
mov dword [esp + 0x1c], ebx
mov dword [esp + 0x20], esi
nop
test ebx, ebx
mov ecx, dword [edi + 0x688]
lea eax, [edi + 0x684]
mov dword [esp + 0x18], ecx
je 0x44a798
cmp ebx, eax
je 0x44a79e
call dword [0x469f94]
cmp esi, dword [esp + 0x18]
je 0x44a885
test ebx, ebx
jne 0x44a7b2
call dword [0x469f94]
cmp esi, dword [ebx + 4]
jne 0x44a7bd
call dword [0x469f94]
mov edx, dword [esi + 0x10]
movzx ecx, word [edx + 0x22]
mov eax, 0x51eb851f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp eax, 4
jne 0x44a86f
cmp esi, dword [ebx + 4]
jne 0x44a7e9
call dword [0x469f94]
mov ecx, dword [esi + 0x10]
cmp byte [ecx + 0xf8], 0
jne 0x44a86f
cmp esi, dword [ebx + 4]
jne 0x44a800
call dword [0x469f94]
mov edx, dword [esi + 0x10]
cmp byte [edx + 0x20], 0
je 0x44a86f
cmp dword [ebp + 8], 0
je 0x44a82e
cmp esi, dword [ebx + 4]
jne 0x44a81a
call dword [0x469f94]
mov eax, dword [esi + 0x10]
movzx eax, word [eax + 0x22]
cdq
mov ecx, 0x64
idiv ecx
cmp dword [ebp + 8], edx
jne 0x44a86f
cmp esi, dword [ebx + 4]
jne 0x44a844
call dword [0x469f94]
cmp esi, dword [ebx + 4]
jne 0x44a844
call dword [0x469f94]
mov edx, dword [esi + 0x10]
mov eax, dword [edx]
mov dword [esp + 0x4c], eax
lea eax, [esp + 0x4c]
push eax
lea ecx, [esp + 0x5c]
mov esi, edx
push ecx
lea ebx, [edi + 0x69c]
mov dword [esp + 0x58], esi
call fcn.0044d030
add dword [edi + 0x690], 1
lea esi, [esp + 0x1c]
call fcn.0044dab0
mov esi, dword [esp + 0x20]
mov ebx, dword [esp + 0x1c]
jmp 0x44a780
lea edx, [edi + 0x69c]
push edx
lea eax, [esp + 0x44]
push eax
call fcn.0044cfa0
mov byte [esp + 0x98], 1
mov edx, dword [edi + 0x6a8]
mov eax, dword [edx + 4]
lea ecx, [edi + 0x6a8]
call eax
mov ecx, dword [edi + 0x72c]
test ecx, ecx
je 0x44acec
mov edx, dword [edi + 0x730]
sub edx, ecx
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
je 0x44acec
xor esi, esi
cmp ebx, esi
jbe 0x44acec
mov dword [esp + 0x10], esi
test ecx, ecx
je 0x44a90b
mov edx, dword [edi + 0x730]
sub edx, ecx
mov eax, 0x38e38e39
imul edx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x44a911
call dword [0x469f94]
mov ecx, dword [edi + 0x72c]
mov edx, dword [esp + 0x10]
cmp dword [edx + ecx], 1
je 0x44a932
add dword [esp + 0x10], 0x24
add esi, 1
cmp esi, ebx
jb 0x44a8ea
jmp 0x44acec
mov eax, ecx
test eax, eax
mov dword [esp + 0x10], esi
je 0x44a959
mov ecx, dword [edi + 0x730]
sub ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x44a95f
call dword [0x469f94]
mov ecx, dword [edi + 0x72c]
lea eax, [esi + esi*8]
add eax, eax
add eax, eax
mov dword [esp + 0x54], eax
lea eax, [eax + ecx + 4]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0x44acec
mov eax, dword [eax + 8]
sub eax, ecx
sar eax, 2
mov dword [esp + 0x4c], eax
je 0x44acec
test eax, eax
mov dword [esp + 0x2c], 0
jbe 0x44acec
mov eax, dword [edi + 0x72c]
test eax, eax
je 0x44a9ca
mov ecx, dword [edi + 0x730]
sub ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jb 0x44a9d0
call dword [0x469f94]
mov esi, dword [edi + 0x72c]
add esi, dword [esp + 0x54]
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x44a9ef
mov eax, dword [esi + 0xc]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x2c], eax
jb 0x44a9f5
call dword [0x469f94]
mov eax, dword [esp + 0x2c]
mov ebx, dword [esi + 8]
add eax, eax
add eax, eax
mov dword [esp + 0x28], eax
add ebx, eax
lea eax, [esp + 0x1c]
lea esi, [esp + 0x40]
call fcn.0042cd90
cmp dword [esp + 0x1c], 0
mov esi, dword [esp + 0x44]
je 0x44aa28
lea edx, [esp + 0x40]
cmp dword [esp + 0x1c], edx
je 0x44aa2e
call dword [0x469f94]
cmp dword [esp + 0x20], esi
je 0x44acd7
push 0x624
call fcn.0045cf9e
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
mov byte [esp + 0x98], 2
je 0x44aa5f
push eax
call fcn.00448db0
mov ebx, eax
jmp 0x44aa61
xor ebx, ebx
test ebx, ebx
mov byte [esp + 0x98], 1
je 0x44acec
push 0x1f0
call fcn.0045cf9e
add esp, 4
mov dword [esp + 0x14], eax
test eax, eax
mov byte [esp + 0x98], 3
je 0x44aa98
push eax
call fcn.00449990
mov esi, eax
jmp 0x44aa9a
xor esi, esi
mov byte [esp + 0x98], 1
mov edi, dword [esp + 0x1c]
test edi, edi
jne 0x44aab0
call dword [0x469f94]
mov eax, dword [esp + 0x20]
cmp eax, dword [edi + 4]
jne 0x44aabf
call dword [0x469f94]
mov ecx, dword [esp + 0x20]
mov edi, dword [ecx + 0x10]
call fcn.0044af70
mov edx, dword [esp + 0x24]
push ebx
push edx
mov dword [ebx + 0x61c], esi
call fcn.0044b280
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x1c]
cmp eax, dword [ecx + 4]
jne 0x44aaef
call dword [0x469f94]
mov esi, dword [esp + 0x20]
mov edx, dword [esi + 0x10]
mov eax, dword [edx]
push eax
lea edi, [esp + 0x70]
call fcn.004351a0
add esp, 4
mov ecx, edi
push ecx
mov byte [esp + 0x9c], 4
call dword [0x4695dc]
add esp, 4
test al, al
je 0x44ab79
cmp dword [esp + 0x84], 8
mov eax, dword [esp + 0x70]
jae 0x44ab2f
lea eax, [esp + 0x70]
push eax
lea esi, [ebx + 0x5e4]
push str.file_s
push esi
call dword [0x4695d4]
add esp, 0xc
push str._encrypttrue
mov ecx, esi
call dword [0x469ee0]
mov ecx, dword [ebx + 0x550]
test ecx, ecx
je 0x44ab63
push esi
call dword [0x469980]
mov ecx, ebx
call dword [0x469d80]
mov edx, dword [ebx]
mov eax, dword [edx + 0x11c]
mov ecx, ebx
call eax
jmp 0x44abd7
mov ecx, dword [esp + 0x1c]
cmp esi, dword [ecx + 4]
jne 0x44ab88
call dword [0x469f94]
mov edx, dword [esp + 0x34]
test edx, edx
mov edi, dword [esi + 0x10]
mov esi, dword [esp + 0x38]
je 0x44abb8
mov ecx, dword [esp + 0x3c]
mov eax, esi
sub eax, edx
sub ecx, edx
sar eax, 2
sar ecx, 2
cmp eax, ecx
jae 0x44abb8
mov edx, dword [edi]
mov dword [esi], edx
add esi, 4
mov dword [esp + 0x38], esi
jmp 0x44abd7
cmp edx, esi
jbe 0x44abc2
call dword [0x469f94]
push esi
lea eax, [esp + 0x34]
push eax
push edi
lea eax, [esp + 0x70]
push eax
lea eax, [esp + 0x40]
call fcn.0044d180
mov ecx, dword [esp + 0x24]
mov eax, dword [ecx + 0x72c]
test eax, eax
je 0x44ac04
mov ecx, dword [ecx + 0x730]
sub ecx, eax
mov eax, 0x38e38e39
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [esp + 0x10], eax
jb 0x44ac0a
call dword [0x469f94]
mov ecx, dword [esp + 0x24]
mov esi, dword [ecx + 0x72c]
add esi, dword [esp + 0x54]
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x44ac2d
mov eax, dword [esi + 0xc]
sub eax, ecx
sar eax, 2
cmp dword [esp + 0x2c], eax
jb 0x44ac33
call dword [0x469f94]
mov ebx, dword [esp + 0x44]
mov ecx, dword [ebx + 4]
mov esi, dword [esi + 8]
add esi, dword [esp + 0x28]
mov eax, ecx
cmp byte [eax + 0x15], 0
mov dword [esp + 0x28], ebx
jne 0x44ac66
mov edx, dword [esi]
nop
cmp edx, dword [eax + 0xc]
jae 0x44ac5d
mov dword [esp + 0x28], eax
mov eax, dword [eax]
jmp 0x44ac60
mov eax, dword [eax + 8]
cmp byte [eax + 0x15], 0
je 0x44ac50
mov eax, ecx
cmp byte [eax + 0x15], 0
jne 0x44ac84
mov esi, dword [esi]
cmp dword [eax + 0xc], esi
jae 0x44ac7a
mov eax, dword [eax + 8]
jmp 0x44ac7e
mov ebx, eax
mov eax, dword [eax]
cmp byte [eax + 0x15], 0
je 0x44ac70
mov edx, dword [esp + 0x4c]
mov eax, dword [esp + 0x28]
push edx
push eax
lea esi, [esp + 0x48]
mov eax, esi
push eax
push ebx
push esi
lea edi, [esp + 0x28]
mov dword [esp + 0x28], 0
call fcn.0044db80
mov ecx, dword [esp + 0x3c]
add esp, 0x14
push ecx
mov eax, esi
push eax
push ebx
push esi
lea edx, [esp + 0x68]
push edx
mov edi, esi
call fcn.0044d270
lea ecx, [esp + 0x6c]
mov byte [esp + 0x98], 1
call dword [0x469f00]
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x2c]
add eax, 1
cmp eax, dword [esp + 0x4c]
mov dword [esp + 0x2c], eax
jb 0x44a9a1
mov eax, dword [esp + 0x44]
mov ecx, dword [eax]
lea eax, [esp + 0x40]
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], eax
mov edi, edi
test eax, eax
mov esi, dword [esp + 0x44]
je 0x44ad10
lea edx, [esp + 0x40]
cmp eax, edx
je 0x44ad16
call dword [0x469f94]
cmp dword [esp + 0x18], esi
je 0x44aeeb
push 0x624
call fcn.0045cf9e
add esp, 4
mov dword [esp + 0x4c], eax
test eax, eax
mov byte [esp + 0x98], 5
je 0x44ad47
push eax
call fcn.00448db0
mov ebx, eax
jmp 0x44ad49
xor ebx, ebx
test ebx, ebx
mov byte [esp + 0x98], 1
je 0x44aeeb
push 0x1f0
call fcn.0045cf9e
add esp, 4
mov dword [esp + 0x4c], eax
test eax, eax
mov byte [esp + 0x98], 6
je 0x44ad80
push eax
call fcn.00449990
mov esi, eax
jmp 0x44ad82
xor esi, esi
mov byte [esp + 0x98], 1
mov edi, dword [esp + 0x14]
test edi, edi
jne 0x44ad98
call dword [0x469f94]
mov eax, dword [esp + 0x18]
cmp eax, dword [edi + 4]
jne 0x44ada7
call dword [0x469f94]
mov ecx, dword [esp + 0x18]
mov edi, dword [ecx + 0x10]
call fcn.0044af70
mov edx, dword [esp + 0x24]
push ebx
push edx
mov dword [ebx + 0x61c], esi
call fcn.0044b280
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
cmp eax, dword [ecx + 4]
jne 0x44add7
call dword [0x469f94]
mov esi, dword [esp + 0x18]
mov edx, dword [esi + 0x10]
mov eax, dword [edx]
push eax
lea edi, [esp + 0x70]
call fcn.004351a0
add esp, 4
mov ecx, edi
push ecx
mov byte [esp + 0x9c], 7
call dword [0x4695dc]
add esp, 4
test al, al
je 0x44ae61
cmp dword [esp + 0x84], 8
mov eax, dword [esp + 0x70]
jae 0x44ae17
lea eax, [esp + 0x70]
push eax
lea esi, [ebx + 0x5e4]
push str.file_s
push esi
call dword [0x4695d4]
add esp, 0xc
push str._encrypttrue
mov ecx, esi
call dword [0x469ee0]
mov ecx, dword [ebx + 0x550]
test ecx, ecx
je 0x44ae4b
push esi
call dword [0x469980]
mov ecx, ebx
call dword [0x469d80]
mov edx, dword [ebx]
mov eax, dword [edx + 0x11c]
mov ecx, ebx
call eax
jmp 0x44aec3
mov ecx, dword [esp + 0x14]
cmp esi, dword [ecx + 4]
jne 0x44ae70
call dword [0x469f94]
mov edx, dword [esp + 0x34]
test edx, edx
mov ebx, dword [esi + 0x10]
mov edi, dword [esp + 0x38]
je 0x44aea2
mov ecx, dword [esp + 0x3c]
mov eax, edi
sub eax, edx
sub ecx, edx
sar eax, 2
sar ecx, 2
cmp eax, ecx
jae 0x44aea2
mov edx, dword [ebx]
mov eax, edi
add eax, 4
mov dword [edi], edx
mov dword [esp + 0x38], eax
jmp 0x44aec3
cmp edx, edi
mov esi, edi
jbe 0x44aeae
call dword [0x469f94]
push esi
lea eax, [esp + 0x34]
push eax
push ebx
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x40]
call fcn.0044d180
lea ecx, [esp + 0x6c]
mov byte [esp + 0x98], 1
call dword [0x469f00]
lea esi, [esp + 0x14]
call fcn.0044dab0
mov edi, dword [esp + 0x24]
mov eax, dword [esp + 0x14]
jmp 0x44ad00
mov eax, dword [esp + 0x34]
test eax, eax
je 0x44af1e
mov ecx, dword [esp + 0x38]
sub ecx, eax
sar ecx, 2
je 0x44af1e
mov eax, dword [edi + 0x694]
test eax, eax
je 0x44af1e
mov edx, dword [edi + 0x698]
push edx
lea ecx, [esp + 0x34]
mov edi, eax
call fcn.0041ab20
mov edi, dword [esp + 0x24]
lea eax, [esp + 0x40]
mov dword [edi + 0x66c], 0
mov byte [esp + 0x98], 0
call fcn.0044d450
mov eax, dword [esp + 0x34]
test eax, eax
je 0x44af4a
push eax
call fcn.0045cfa4
add esp, 4
mov ecx, dword [esp + 0x90]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x78]
xor ecx, esp
call fcn.0045cf88
mov esp, ebp
pop ebp
ret 4