Function at 0x444020
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x566d06
push eax
mov dword fs:[0], esp
sub esp, 0x1e4
push ebx
push ebp
push esi
push edi
mov edi, ecx
xor ebx, ebx
lea esi, [edi + 0x48]
mov dword [edi + 0x470], ebx
mov ecx, esi
call fcn.004149a0
test eax, eax
jle 0x4445d7
push ebx
mov ecx, esi
call fcn.00414160
mov esi, eax
mov eax, dword [esi + 0x44]
cmp dword [eax + 0x18], 3
jne 0x4440ac
lea ecx, [esp + 0x10]
push ecx
mov ecx, esi
call fcn.00434d20
mov eax, dword [eax]
mov ecx, 0x66d030
push eax
mov dword [esp + 0x200], 0
call fcn.004d1fa0
lea ecx, [esp + 0x10]
mov ebp, eax
mov dword [esp + 0x1fc], 0xffffffff
call fcn.00530b8f
test ebp, ebp
jne 0x4440c0
lea esi, [edi + 0x48]
inc ebx
mov ecx, esi
call fcn.004149a0
cmp ebx, eax
jl 0x44405b
jmp 0x4445d7
mov ecx, dword [esi + 0x14]
mov eax, dword [esi + 0x10]
test ecx, ecx
jl 0x4445d7
jg 0x4440d9
cmp eax, 2
jbe 0x4445d7
mov ebp, ecx
mov ecx, 0x66d030
mov ebx, eax
call fcn.004d15f0
shl eax, 0xa
cdq
cmp ebp, edx
jl 0x4441a7
jg 0x4440fd
cmp ebx, eax
jbe 0x4441a7
cmp dword [edi + 0x3a4], 0xffffffff
jne 0x444191
mov edx, dword [0x5d2d10]
mov dword [esp + 0x10], edx
mov ebp, dword [esi + 0x10]
mov ebx, dword [esi + 0x14]
lea eax, [esp + 0x14]
mov ecx, esi
push eax
mov dword [esp + 0x200], 1
call fcn.00434d20
mov eax, dword [eax]
push ebx
push ebp
push eax
lea ecx, [esp + 0x1c]
push 0xf32a
push ecx
mov byte [esp + 0x210], 2
call fcn.00528836
add esp, 0x14
lea ecx, [esp + 0x14]
mov byte [esp + 0x1fc], 1
call fcn.00530b8f
mov edx, dword [esp + 0x10]
push 0
push 0x24
push edx
call fcn.0053a94a
xor ecx, ecx
cmp eax, 6
sete cl
mov dword [edi + 0x3a4], ecx
lea ecx, [esp + 0x10]
mov dword [esp + 0x1fc], 0xffffffff
call fcn.00530b8f
mov edx, dword [edi + 0x3a4]
xor eax, eax
cmp edx, 1
sete al
test eax, eax
je 0x4445d7
mov edx, dword [0x5d7f1c]
lea eax, [esp + 0x18]
push edx
push eax
call fcn.0049f540
add esp, 8
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1fc], 3
mov eax, dword [ecx - 8]
test eax, eax
jne 0x44423b
mov edx, dword [0x5d2d10]
mov dword [esp + 0x1c], edx
mov byte [esp + 0x1fc], 4
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
lea eax, [esp + 0x20]
push 0x9b
push eax
call fcn.00528836
add esp, 0xc
mov ecx, edi
call fcn.00435370
mov ecx, eax
call fcn.0047f3d0
test eax, eax
je 0x444232
call fcn.004a58e0
mov ecx, dword [esp + 0x1c]
mov esi, eax
push 2
push ecx
mov ebx, dword [esi]
mov ecx, edi
call fcn.00435370
mov ecx, eax
call fcn.0047f3d0
push eax
mov ecx, esi
call dword [ebx + 0x64]
lea ecx, [esp + 0x1c]
jmp 0x4445b6
lea ecx, [esp + 0x24]
call fcn.0047d420
mov bl, 5
mov ecx, edi
mov byte [esp + 0x1fc], bl
call fcn.00435370
mov ecx, eax
call fcn.0047f160
mov edx, dword [esi + 0x44]
mov ebp, eax
xor ecx, ecx
mov eax, dword [edx + 0x18]
test eax, eax
sete cl
push ecx
push ecx
mov edx, esp
mov dword [esp + 0x1c], esp
push edx
mov ecx, esi
call fcn.00434d20
lea eax, [esp + 0x28]
lea ecx, [edi + 0x450]
push eax
call fcn.0048bad0
push 0x10002
mov ecx, edi
mov byte [esp + 0x200], 6
call fcn.00435370
mov ecx, eax
call fcn.0047f1f0
push 3
mov ecx, edi
call fcn.00435370
mov ecx, eax
call fcn.0047f240
mov ecx, dword [esp + 0x20]
push ecx
mov ecx, edi
call fcn.00435370
mov ecx, eax
call fcn.0047f300
mov edx, dword [esp + 0x18]
mov ecx, edi
push edx
call fcn.00435370
mov ecx, eax
call fcn.0047f340
lea eax, [esp + 0x24]
mov ecx, edi
push eax
call fcn.00435370
mov ecx, eax
call fcn.0047f630
mov eax, dword [esp + 0x1c4]
and al, 0xef
mov dword [esp + 0x1c4], eax
call fcn.004a58e0
mov edx, dword [eax]
lea ecx, [esp + 0x24]
push ecx
push ebp
mov ecx, eax
call dword [edx + 8]
test eax, eax
jne 0x44431b
mov ecx, edi
call fcn.004419b0
lea ecx, [esp + 0x20]
mov byte [esp + 0x1fc], bl
call fcn.00530b8f
lea ecx, [esp + 0x1d4]
mov byte [esp + 0x1fc], 0xc
call fcn.00530b8f
lea ecx, [esp + 0x1d0]
mov byte [esp + 0x1fc], 0xb
call fcn.00530b8f
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x1fc], 0xa
call fcn.00530b8f
lea ecx, [esp + 0x1c8]
mov byte [esp + 0x1fc], 9
call fcn.00530b8f
lea edx, [esp + 0x14c]
mov dword [esp + 0x14], edx
lea ecx, [esp + 0x170]
mov byte [esp + 0x1fc], 0xe
call fcn.0052bdc6
lea ecx, [esp + 0x154]
mov byte [esp + 0x1fc], 0xd
call fcn.0052bdc6
lea ecx, [esp + 0x150]
mov byte [esp + 0x1fc], 8
call fcn.00530b8f
lea eax, [esp + 0xb8]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x11c]
mov byte [esp + 0x1fc], 0x13
call fcn.00530b8f
lea ecx, [esp + 0x118]
mov byte [esp + 0x1fc], 0x12
call fcn.00530b8f
lea ecx, [esp + 0x114]
mov byte [esp + 0x1fc], 0x11
call fcn.00530b8f
lea ecx, [esp + 0x110]
mov byte [esp + 0x1fc], 0x10
call fcn.00530b8f
lea ecx, [esp + 0xf4]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x100]
mov byte [esp + 0x1fc], 0x15
call fcn.00530b8f
lea ecx, [esp + 0xfc]
mov byte [esp + 0x1fc], 0x14
call fcn.00530b8f
lea ecx, [esp + 0xf8]
mov byte [esp + 0x1fc], 0xf
call fcn.00530b8f
lea edx, [esp + 0xbc]
mov dword [esp + 0x14], edx
lea ecx, [esp + 0xe0]
mov byte [esp + 0x1fc], 0x19
call fcn.0052b98b
lea ecx, [esp + 0xdc]
mov byte [esp + 0x1fc], 0x18
call fcn.00530b8f
lea ecx, [esp + 0xcc]
mov byte [esp + 0x1fc], 0x17
call fcn.00530b8f
lea ecx, [esp + 0xc8]
mov byte [esp + 0x1fc], 0x16
call fcn.00530b8f
lea ecx, [esp + 0xc4]
mov byte [esp + 0x1fc], 7
call fcn.00530b8f
lea eax, [esp + 0x28]
mov dword [esp + 0x14], eax
lea ecx, [esp + 0x8c]
mov byte [esp + 0x1fc], 0x1e
call fcn.00530b8f
lea ecx, [esp + 0x88]
mov byte [esp + 0x1fc], 0x1d
call fcn.00530b8f
lea ecx, [esp + 0x84]
mov byte [esp + 0x1fc], 0x1c
call fcn.00530b8f
lea ecx, [esp + 0x80]
mov byte [esp + 0x1fc], 0x1b
call fcn.00530b8f
lea ecx, [esp + 0x64]
mov dword [esp + 0x10], ecx
lea ecx, [esp + 0x70]
mov byte [esp + 0x1fc], 0x20
call fcn.00530b8f
lea ecx, [esp + 0x6c]
mov byte [esp + 0x1fc], 0x1f
call fcn.00530b8f
lea ecx, [esp + 0x68]
mov byte [esp + 0x1fc], 0x1a
call fcn.00530b8f
lea edx, [esp + 0x2c]
mov dword [esp + 0x14], edx
lea ecx, [esp + 0x50]
mov byte [esp + 0x1fc], 0x24
call fcn.0052b98b
lea ecx, [esp + 0x4c]
mov byte [esp + 0x1fc], 0x23
call fcn.00530b8f
lea ecx, [esp + 0x3c]
mov byte [esp + 0x1fc], 0x22
call fcn.00530b8f
lea ecx, [esp + 0x38]
mov byte [esp + 0x1fc], 0x21
call fcn.00530b8f
lea ecx, [esp + 0x34]
mov byte [esp + 0x1fc], 3
call fcn.00530b8f
lea ecx, [esp + 0x18]
mov dword [esp + 0x1fc], 0xffffffff
call fcn.00530b8f
mov ecx, dword [esp + 0x1f4]
pop edi
pop esi
pop ebp
mov dword fs:[0], ecx
pop ebx
add esp, 0x1f0
ret