Function at 0x4407c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push 0xffffffffffffffff
push 0x47b8c8
mov eax, dword fs:[0]
push eax
sub esp, 0x28
push ebx
push ebp
push esi
push edi
mov eax, dword [0x536400]
xor eax, esp
push eax
lea eax, [esp + 0x3c]
mov dword fs:[0], eax
mov esi, ecx
mov ebx, dword [esp + 0x58]
test bl, bl
mov edi, dword [esp + 0x50]
mov byte [esi + 0x41], bl
mov dword [esi + 0x108], 0
je 0x440827
movzx ecx, byte [esi + 0x7a]
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ecx
push str.m_srcAes
mov ecx, edi
call edx
mov ecx, dword [esi + 0x48]
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ecx
push str.m_srcAesAlgorithm
mov ecx, edi
call edx
cmp byte [esi + 0x7a], 0
mov byte [esp + 0x58], 0
je 0x44083d
cmp dword [esi + 0x48], 4
jne 0x44083d
mov byte [esp + 0x58], 1
push ebx
push edi
mov ecx, esi
call fcn.0043fdf0
test al, al
jne 0x44085f
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
push str.AES_decryption_failed.
mov ecx, edi
call edx
xor al, al
jmp 0x440b72
cmp dword [esi + 0xb0], 0
jne 0x44086c
mov byte [esi + 0x78], 0
push edi
mov ecx, esi
call fcn.004400e0
test al, al
jne 0x44088d
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
push str.Password_decode_failed__Zip_2.0_legacy_encryption_.
mov ecx, edi
call edx
xor al, al
jmp 0x440b72
cmp byte [esi + 0x41], 0
je 0x4408e2
movzx ecx, byte [esi + 0x78]
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ecx
push str.srcIsCompressed
mov ecx, edi
call edx
movzx ecx, byte [esi + 0x79]
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ecx
push str.destIsCompressed
mov ecx, edi
call edx
movzx ecx, byte [esp + 0x58]
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ecx
push str.originallyWinZipAesEncrypted
mov ecx, edi
call edx
mov ecx, dword [esi + 0xb0]
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ecx
push str.actualCompressionMethod
mov ecx, edi
call edx
mov al, byte [esi + 0x78]
test al, al
je 0x440a6e
cmp byte [esi + 0x79], 0
je 0x440a1a
cmp byte [esp + 0x58], 0
je 0x4409d4
cmp dword [esi + 0xb0], 0
je 0x440977
lea ecx, [esi + 0xc0]
call fcn.0041f240
test eax, eax
jbe 0x440977
cmp byte [esi + 0x41], 0
je 0x440930
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push 1
push str.InflateToTemp8
mov ecx, edi
call edx
push 8
push edi
mov ecx, esi
call fcn.0043e210
cmp byte [esi + 0x41], 0
mov bl, al
je 0x44094b
mov eax, dword [edi]
mov edx, dword [eax + 0x24]
mov ecx, edi
call edx
test bl, bl
jne 0x440977
mov ecx, dword [esp + 0x54]
mov eax, dword [edi]
mov edx, dword [eax + 0x2c]
push ecx
push str.calledFrom
mov ecx, edi
call edx
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
push str.Failed_to_inflate_WinZip_AES_encrypted_data_to_temp
mov ecx, edi
call edx
xor al, al
jmp 0x440b72
cmp byte [esi + 0x41], 0
je 0x44098d
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push 1
push 0x4b7574
mov ecx, edi
call edx
mov edx, dword [esp + 0x4c]
push edi
lea eax, [esi + 0x100]
push eax
lea ecx, [esi + 0xf8]
push ecx
push edx
mov ecx, esi
call fcn.0043fb20
cmp byte [esi + 0x41], 0
mov bl, al
je 0x4409b9
mov eax, dword [edi]
mov edx, dword [eax + 0x24]
mov ecx, edi
call edx
test bl, bl
jne 0x440b07
mov eax, dword [edi]
mov edx, dword [eax + 0x10]
push str.Uncompressed_to_compressed_failed.__after_WinZip_AES_decryption_
mov ecx, edi
call edx
jmp 0x440b07
cmp byte [esi + 0x41], 0
je 0x4409ea
mov eax, dword [edi]
mov edx, dword [eax + 0x20]
push 1
push 0x4b752c
mov ecx, edi
call edx
mov eax, dword [esp + 0x4c]
push edi
push eax
mov ecx, esi
call fcn.00440650
cmp byte [esi + 0x41], 0
mov bl, al
je 0x440a08
mov edx, dword [edi]
mov eax, dword [edx + 0x24]
mov ecx, edi
call eax
test bl, bl
jne 0x440b07
push str.Compressed_to_compressed_failed.
jmp 0x440afe
test al, al
je 0x440a6e
cmp byte [esi + 0x79], 0
jne 0x440a6a
cmp byte [esi + 0x41], 0
je 0x440a3a
mov edx, dword [edi]
mov eax, dword [edx + 0x20]
push 1
push 0x4b7504
mov ecx, edi
call eax
mov ecx, dword [esp + 0x4c]
push edi
push ecx
mov ecx, esi
call fcn.0043fce0
cmp byte [esi + 0x41], 0
mov bl, al
je 0x440a58
mov edx, dword [edi]
mov eax, dword [edx + 0x24]
mov ecx, edi
call eax
test bl, bl
jne 0x440b07
push str.Compressed_to_uncompressed_failed.
jmp 0x440afe
test al, al
jne 0x440ac1
cmp byte [esi + 0x79], 0
je 0x440ac1
cmp byte [esi + 0x41], 0
je 0x440a8a
mov edx, dword [edi]
mov eax, dword [edx + 0x20]
push 1
push 0x4b7574
mov ecx, edi
call eax
mov eax, dword [esp + 0x4c]
push edi
lea ecx, [esi + 0x100]
push ecx
lea edx, [esi + 0xf8]
push edx
push eax
mov ecx, esi
call fcn.0043fb20
cmp byte [esi + 0x41], 0
mov bl, al
je 0x440ab6
mov edx, dword [edi]
mov eax, dword [edx + 0x24]
mov ecx, edi
call eax
test bl, bl
jne 0x440b07
push str.Uncompressed_to_compressed_failed.
jmp 0x440afe
cmp byte [esi + 0x41], 0
je 0x440ad7
mov edx, dword [edi]
mov eax, dword [edx + 0x20]
push 1
push 0x4b74b8
mov ecx, edi
call eax
mov ecx, dword [esp + 0x4c]
push edi
push ecx
mov ecx, esi
call fcn.0043fd20
cmp byte [esi + 0x41], 0
mov bl, al
je 0x440af5
mov edx, dword [edi]
mov eax, dword [edx + 0x24]
mov ecx, edi
call eax
test bl, bl
jne 0x440b07
push str.Uncompressed_to_uncompressed_failed.
mov edx, dword [edi]
mov eax, dword [edx + 0x10]
mov ecx, edi
call eax
cmp byte [esi + 0x7b], 0
je 0x440b70
cmp byte [esi + 0x41], 0
je 0x440b2d
mov ebp, dword [edi]
lea ecx, [esi + 0x80]
call fcn.0040a520
mov edx, dword [ebp + 0x28]
push eax
push str.deletingTempFile
mov ecx, edi
call edx
lea ecx, [esi + 0x80]
call fcn.0040a520
push eax
call fcn.0041e120
add esp, 4
test eax, eax
jne 0x440b70
lea ecx, [esp + 0x14]
call fcn.004089c0
lea ecx, [esp + 0x14]
mov dword [esp + 0x44], 0
call fcn.00409ae0
lea ecx, [esp + 0x14]
mov dword [esp + 0x44], 0xffffffff
call fcn.00408bf0
mov al, bl
mov ecx, dword [esp + 0x3c]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x34
ret 0x10