Function at 0x44db54
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
push ebx
push esi
push edi
mov dword [ebp - 0x24], ecx
push ecx
lea ecx, [ebp - 0x64]
call fcn.00434bb0
lea eax, [ebp + 8]
push eax
call fcn.0042dd40
pop ecx
lea ecx, [ebp - 0x50]
call fcn.00432cb7
lea ecx, [ebp - 0x28]
call fcn.00432cb7
lea ecx, [ebp - 0x4c]
call fcn.00432cb7
lea ecx, [ebp - 0x14]
call fcn.00432cb7
mov eax, dword [ebp + 8]
push 1
mov dword [ebp - 0x1c], eax
push 0x2c
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0043eb85
xor ebx, ebx
push ebx
lea ecx, [ebp - 0x50]
push ecx
push eax
call fcn.0043541b
mov esi, dword [ebp - 0x50]
xor eax, eax
mov ax, word [esi]
add esp, 0xc
xor edi, edi
cmp ax, bx
mov byte [ebp - 2], bl
mov byte [ebp - 5], bl
mov ecx, esi
je 0x44dbee
call fcn.00402b57
test al, al
je 0x44dbdb
mov edi, ecx
inc ecx
inc ecx
mov ax, word [ecx]
cmp ax, bx
jne 0x44dbd0
cmp edi, ebx
je 0x44dbee
mov word [edi], bx
inc edi
inc edi
cmp edi, ebx
mov eax, esi
mov dword [ebp + 8], eax
je 0x44dc51
cmp word [esi], 0x2a
jne 0x44dc51
cmp word [eax + 2], 0x2d
je 0x44dc51
push 6
lea eax, [ebp + 8]
push eax
push str.nobom
call fcn.004349fd
add esp, 0xc
test al, al
je 0x44dc21
mov byte [ebp - 5], 1
jmp 0x44dc48
push 0xa
lea eax, [ebp + 8]
push eax
push str.transonly
call fcn.004349fd
add esp, 0xc
test al, al
je 0x44dc3e
mov byte [ebp - 2], 1
jmp 0x44dc48
lea eax, [ebp + 8]
push eax
call fcn.0040417e
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2a
je 0x44dbfd
cmp edi, ebx
mov byte [ebp - 4], 0
mov byte [ebp - 7], 0
mov byte [ebp - 6], 0
mov byte [ebp + 0xb], 0
mov byte [ebp - 8], 0
mov byte [ebp - 3], 0
je 0x44dc89
push edi
lea ecx, [ebp - 0x48]
call fcn.0043ccfc
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], esi
mov esi, eax
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x50], esi
call fcn.0042dd2d
mov ecx, dword [ebp - 0x1c]
cmp word [ecx], 0x2c
lea eax, [ecx + 2]
mov dword [ebp - 0x58], eax
jne 0x44dcb9
push 1
mov dword [ebp - 0x1c], eax
push 0x2c
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0043eb85
push ebx
lea ecx, [ebp - 0x28]
push ecx
push eax
call fcn.004354d7
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp word [eax], 0x2c
jne 0x44dce4
add dword [ebp - 0x1c], 2
push 1
push 0x2c
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0043eb85
push ebx
lea ecx, [ebp - 0x4c]
push ecx
push eax
call fcn.0043541b
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp word [eax], 0x2c
jne 0x44dd0f
add dword [ebp - 0x1c], 2
push 1
push 0x2c
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x64]
call fcn.0043eb85
push ebx
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.0043541b
add esp, 0xc
mov ax, word [esi]
cmp ax, bx
je 0x44e442
mov ecx, dword [ebp - 0x28]
cmp word [ecx], bx
je 0x44e442
mov ecx, dword [ebp - 0x4c]
cmp word [ecx], bx
je 0x44e442
mov edx, dword [ebp - 0x14]
cmp word [edx], bx
je 0x44e442
xor edi, edi
cmp ax, 0x2a
mov dword [ebp - 0x20], edi
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x30], edi
mov ebx, ecx
mov byte [ebp - 1], 0
jne 0x44dd86
cmp word [esi + 2], ax
jne 0x44dd76
mov byte [ebp - 4], al
mov byte [ebp - 6], al
add esi, 4
jmp 0x44dd89
cmp ax, 0x2a
jne 0x44dd86
mov al, byte [esi]
mov byte [ebp - 4], al
add esi, 2
jmp 0x44dd89
mov al, byte [ebp - 7]
cmp word [esi], 0x2d
jne 0x44dd93
mov al, byte [esi]
inc esi
inc esi
test al, al
jne 0x44dda1
mov esi, 0x80070057
jmp 0x44e445
push esi
push 0x495cec
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44ddbb
mov byte [ebp - 1], 1
jmp 0x44dece
push esi
push str.ANSI
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44ddd4
mov dword [ebp - 0x20], edi
jmp 0x44dece
push esi
push 0x495ce8
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44ddf1
mov dword [ebp - 0x20], 0x3a8
jmp 0x44dece
push esi
push str.BIG5
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44de0e
mov dword [ebp - 0x20], 0x3b6
jmp 0x44dece
push esi
push str.UTF8
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44de2b
mov dword [ebp - 0x20], 0xfde9
jmp 0x44dece
push esi
push str.UTF7
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44de48
mov dword [ebp - 0x20], 0xfde8
jmp 0x44dece
push esi
push str.UNICODE
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44de62
mov dword [ebp - 0x18], 0x4b0
jmp 0x44dece
push esi
push 0x48f594
call fcn.0042ece0
test al, al
pop ecx
pop ecx
jne 0x44de59
push esi
push str.UNICODEB
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44de8d
mov dword [ebp - 0x18], 0x4b1
jmp 0x44dece
push esi
push str.UNIB
call fcn.0042ece0
test al, al
pop ecx
pop ecx
jne 0x44de84
xor ecx, ecx
mov cx, word [esi]
push ecx
call fcn.0041030b
add esp, 4
test al, al
je 0x44debc
push esi
call fcn.0043377a
pop ecx
mov dword [ebp - 0x20], eax
jmp 0x44dece
cmp cx, di
jne 0x44dd97
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], eax
mov edx, dword [ebp - 0x4c]
mov ax, word [edx]
cmp ax, 0x2a
jne 0x44deff
cmp word [edx + 2], ax
jne 0x44deed
mov byte [ebp + 0xb], al
mov cl, al
mov byte [ebp - 3], al
lea ebx, [edx + 4]
jmp 0x44df02
cmp ax, 0x2a
jne 0x44deff
mov al, byte [edx]
mov byte [ebp + 0xb], al
mov cl, al
lea ebx, [edx + 2]
jmp 0x44df02
mov cl, byte [ebp - 8]
cmp word [ebx], 0x2d
jne 0x44df0c
mov cl, byte [ebx]
inc ebx
inc ebx
test cl, cl
je 0x44dd97
push ebx
push str.ANSI
call fcn.0042ece0
test al, al
pop ecx
pop ecx
mov esi, 0x493050
mov edi, 0x493054
je 0x44df38
and dword [ebp - 0x2c], 0
jmp 0x44e04d
push ebx
push 0x495ce8
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44df55
mov dword [ebp - 0x2c], 0x3a8
jmp 0x44e04d
push ebx
push str.BIG5
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44df72
mov dword [ebp - 0x2c], 0x3b6
jmp 0x44e04d
push ebx
push str.UTF8
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44df9d
mov dword [ebp - 0x2c], 0xfde9
mov dword [ebp - 0x30], 0x493058
mov dword [ebp - 0x3c], 3
jmp 0x44e04d
push ebx
push str.UTF7
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44dfba
mov dword [ebp - 0x2c], 0xfde8
jmp 0x44e04d
push ebx
push str.UNICODE
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44dfde
mov dword [ebp - 0x34], 0x4b0
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x3c], 2
jmp 0x44e04d
push ebx
push 0x48f594
call fcn.0042ece0
test al, al
pop ecx
pop ecx
jne 0x44dfcb
push ebx
push str.UNICODEB
call fcn.0042ece0
test al, al
pop ecx
pop ecx
jne 0x44e011
push ebx
push str.UNIB
call fcn.0042ece0
test al, al
pop ecx
pop ecx
je 0x44e01d
mov dword [ebp - 0x34], 0x4b1
mov dword [ebp - 0x30], edi
jmp 0x44dfd5
xor ecx, ecx
mov cx, word [ebx]
push ecx
call fcn.0041030b
add esp, 4
test al, al
je 0x44e03b
push ebx
call fcn.0043377a
pop ecx
mov dword [ebp - 0x2c], eax
jmp 0x44e04d
test cx, cx
jne 0x44dd97
xor eax, eax
inc eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x44], eax
cmp byte [ebp - 5], 0
je 0x44e057
and dword [ebp - 0x30], 0
xor edi, edi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x10], edi
call fcn.00432b41
xor esi, esi
cmp byte [ebp - 4], 0
mov byte [ebp - 5], 0
jne 0x44e1f4
mov eax, dword [ebp - 0x58]
push 1
mov dword [ebp - 0x1c], eax
push 0x2c
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x40], edi
call fcn.0043eb85
push edi
lea ecx, [ebp - 0x28]
push ecx
push eax
call fcn.0043541b
push dword [ebp - 0x28]
call fcn.0040e84c
add esp, 0x10
push edi
push 0x80
push 3
push edi
push 7
push 0x80000000
push eax
lea ecx, [ebp - 0x40]
call fcn.004041da
mov esi, dword [ebp - 0x40]
cmp esi, edi
jne 0x44e0d0
lea ecx, [ebp - 0x40]
call fcn.00402ad9
jmp 0x44e432
push 2
xor edi, edi
push edi
push edi
push esi
call fcn.0042ec1a
push 1
push edi
push edi
push esi
call fcn.0042ec1a
push edi
push edi
push edi
push esi
mov ebx, eax
call fcn.0042ec1a
add esp, 0x30
lea eax, [ebx + 0xa]
push eax
lea ecx, [ebp - 0xc]
call fcn.00432b85
mov edi, dword [ebp - 0xc]
push 0
lea eax, [ebp - 0x54]
push eax
push ebx
mov byte [edi + 2], 0
mov byte [edi + 1], 0
push edi
mov byte [edi], 0
or dword [ebp - 0x54], 0xffffffff
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [ebp - 0x54]
test eax, eax
mov esi, eax
jl 0x44e0c3
and dword [ebp - 0x38], 0
add eax, edi
cmp byte [ebp - 1], 0
mov byte [eax + 2], 0
mov byte [eax + 1], 0
mov byte [eax], 0
jne 0x44e14a
cmp dword [ebp - 0x18], 0x4b0
jne 0x44e174
push 2
push 0x493050
push edi
call fcn.0042ddc7
add esp, 0xc
test eax, eax
jne 0x44e16e
mov dword [ebp - 0x18], 0x4b0
mov dword [ebp - 0x38], 2
jmp 0x44e1cb
cmp byte [ebp - 1], 0
jne 0x44e17d
cmp dword [ebp - 0x18], 0x4b1
jne 0x44e1a0
push 2
push 0x493054
push edi
call fcn.0042ddc7
add esp, 0xc
test eax, eax
jne 0x44e19a
mov dword [ebp - 0x18], 0x4b1
jmp 0x44e165
cmp byte [ebp - 1], 0
jne 0x44e1a9
cmp dword [ebp - 0x20], 0xfde9
jne 0x44e1e0
push 3
push 0x493058
push edi
call fcn.0042ddc7
add esp, 0xc
test eax, eax
jne 0x44e1e0
mov dword [ebp - 0x20], 0xfde9
mov dword [ebp - 0x38], 3
mov eax, dword [ebp - 0x38]
sub ebx, eax
add ebx, 3
push ebx
add eax, edi
push eax
push edi
call fcn.0047a350
add esp, 0xc
sub esi, dword [ebp - 0x38]
jns 0x44e1e7
xor esi, esi
lea ecx, [ebp - 0x40]
call fcn.00402ad9
jmp 0x44e2b5
cmp byte [ebp - 6], 0
je 0x44e271
mov ecx, dword [ebp - 0x24]
push 0
lea eax, [ebp - 0x28]
push eax
call fcn.00402bfa
mov ecx, dword [ebp - 0x24]
push 0xffffffffffffffff
push 0
push dword [ebp - 0x28]
call fcn.0040c526
mov ebx, eax
test ebx, ebx
lea ecx, [ebp - 0xc]
je 0x44e255
mov esi, dword [ebx + 0xc]
and esi, 0x3fffffff
lea eax, [esi + 8]
push eax
call fcn.00432b85
mov edi, dword [ebp - 0xc]
push 8
lea eax, [esi + edi]
push 0
push eax
call fcn.00479cf0
push esi
push dword [ebx + 4]
push edi
call fcn.0047a010
add esp, 0x18
mov byte [ebp - 5], 1
jmp 0x44e25f
push 8
call fcn.00432b85
mov edi, dword [ebp - 0xc]
push 8
lea eax, [esi + edi]
push 0
push eax
call fcn.00479cf0
add esp, 0xc
jmp 0x44e2b5
cmp dword [ebp - 0x48], edi
je 0x44e29e
push 0xffffffffffffffff
push dword [ebp - 0x28]
lea ecx, [ebp - 0xc]
call fcn.00432ddd
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
shl esi, 1
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0xc]
call fcn.00432b85
jmp 0x44e2ae
push dword [ebp - 0x28]
lea eax, [ebp - 0xc]
push eax
call fcn.00436994
pop ecx
pop ecx
mov esi, eax
mov edi, dword [ebp - 0xc]
mov byte [ebp - 5], 2
test esi, esi
jl 0x44e432
cmp byte [ebp - 1], 0
je 0x44e340
cmp byte [ebp - 5], 0
je 0x44e340
push 2
push 0x493050
push edi
xor ebx, ebx
call fcn.0042ddc7
add esp, 0xc
test eax, eax
push 2
jne 0x44e2ea
mov dword [ebp - 0x18], 0x4b0
jmp 0x44e324
push 0x493054
push edi
call fcn.0042ddc7
add esp, 0xc
test eax, eax
jne 0x44e307
mov dword [ebp - 0x18], 0x4b1
push 2
jmp 0x44e324
push 3
push 0x493058
push edi
call fcn.0042ddc7
add esp, 0xc
test eax, eax
jne 0x44e33a
mov dword [ebp - 0x20], 0xfde9
push 3
pop ebx
mov eax, esi
sub eax, ebx
add eax, 4
push eax
lea eax, [ebx + edi]
push eax
push edi
call fcn.0047a350
add esp, 0xc
sub esi, ebx
jns 0x44e340
xor esi, esi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x58], edi
call fcn.00432cb7
mov ebx, dword [ebp - 0x2c]
cmp ebx, dword [ebp - 0x20]
jne 0x44e3de
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x18]
jne 0x44e3de
cmp byte [ebp - 3], 0
je 0x44e380
push 0
lea eax, [ebp - 0x14]
push eax
push esi
push edi
push dword [ebp - 0x14]
push dword [ebp - 0x24]
call fcn.00441ec3
add esp, 0x18
jmp 0x44e3c2
cmp byte [ebp + 0xb], 0
jne 0x44e392
push esi
push edi
lea ecx, [ebp - 0x10]
call fcn.0042dc90
jmp 0x44e3c2
cmp dword [ebp - 0x44], 0
jne 0x44e3ab
push esi
lea eax, [ebp - 0x1c]
push edi
push eax
call fcn.0043690d
add esp, 0xc
push dword [ebp - 0x1c]
jmp 0x44e3b7
cmp dword [ebp - 0x48], 0
je 0x44e3b6
push dword [ebp - 0x28]
jmp 0x44e3b7
push edi
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
call fcn.00432698
lea ecx, [ebp - 0x1c]
call fcn.0042dd2d
lea ecx, [ebp - 0xc]
call fcn.0042dd2d
lea ecx, [ebp - 0x10]
call fcn.00402ad9
xor esi, esi
jmp 0x44e445
cmp dword [ebp - 0x18], 0x4b1
jne 0x44e3fa
push esi
push edi
mov dword [ebp - 0x18], 0x4b0
call fcn.00431514
pop ecx
pop ecx
and esi, 0xfffffffe
cmp byte [ebp + 0xb], 0
jne 0x44e476
push dword [ebp - 0x14]
call fcn.0040e84c
pop ecx
push 0
push 0x80
push 4
push 0
push 7
push 0x40000000
push eax
lea ecx, [ebp - 0x10]
call fcn.004041da
cmp dword [ebp - 0x10], 0
jne 0x44e476
lea ecx, [ebp - 0x1c]
call fcn.0042dd2d
lea ecx, [ebp - 0xc]
call fcn.0042dd2d
lea ecx, [ebp - 0x10]
call fcn.00402ad9
xor esi, esi
inc esi
lea ecx, [ebp - 0x14]
call fcn.0042dd2d
lea ecx, [ebp - 0x4c]
call fcn.0042dd2d
lea ecx, [ebp - 0x28]
call fcn.0042dd2d
lea ecx, [ebp - 0x50]
call fcn.0042dd2d
lea ecx, [ebp - 0x64]
call fcn.0042dd2d
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 8
and dword [ebp - 0x48], 0
mov eax, 0x3a8
cmp ebx, eax
mov ebx, 0x3b6
jne 0x44e48d
cmp dword [ebp - 0x20], ebx
je 0x44e497
cmp dword [ebp - 0x20], eax
jne 0x44e505
cmp dword [ebp - 0x2c], ebx
jne 0x44e505
cmp byte [ebp - 2], 0
je 0x44e4a1
mov byte [ebp - 2], 3
lea ecx, [ebp - 0x40]
call fcn.00432b41
xor eax, eax
cmp dword [ebp - 0x2c], ebx
sete al
push eax
lea eax, [ebp - 0x40]
push eax
push edi
call fcn.00436a2f
mov eax, edi
mov edi, dword [ebp - 0x40]
add esp, 0xc
push edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x40], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [ebp - 2], 3
mov esi, eax
mov dword [ebp - 0x38], edi
jne 0x44e4fd
cmp byte [ebp + 0xb], 0
jne 0x44e4fd
test esi, esi
jle 0x44e4f0
push esi
push edi
lea ecx, [ebp - 0x10]
call fcn.0042dc90
lea ecx, [ebp - 0x40]
call fcn.0042dd2d
jmp 0x44e6a2
lea ecx, [ebp - 0x40]
call fcn.0042dd2d
mov ebx, esi
shr ebx, 1
cmp dword [ebp - 0x18], 0
jne 0x44e548
lea ebx, [esi + 0xa]
lea eax, [ebx + 0xa]
push eax
lea ecx, [ebp - 0x1c]
call fcn.00432cfe
push ebx
push dword [ebp - 0x1c]
push esi
push edi
push 0
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ebx, eax
test ebx, ebx
jge 0x44e537
xor ebx, ebx
mov eax, dword [ebp - 0x1c]
lea esi, [ebx + ebx]
and word [eax + esi], 0
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x34], 0x4b1
jne 0x44e55c
push esi
push dword [ebp - 0x38]
call fcn.00431514
pop ecx
pop ecx
xor eax, eax
cmp dword [ebp - 0x34], eax
jle 0x44e5f3
cmp byte [ebp - 3], al
je 0x44e590
push eax
lea eax, [ebp - 0x14]
push eax
push esi
push dword [ebp - 0x38]
push dword [ebp - 0x14]
push dword [ebp - 0x24]
call fcn.00441ec3
add esp, 0x18
lea ecx, [ebp - 0x48]
call fcn.0042dd2d
jmp 0x44e3c2
cmp byte [ebp + 0xb], 0
jne 0x44e5bb
cmp esi, eax
jle 0x44e6a2
cmp dword [ebp - 0x30], 0
je 0x44e5b2
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x10]
push dword [ebp - 0x30]
call fcn.0042dc90
push esi
push dword [ebp - 0x38]
jmp 0x44e658
cmp dword [ebp - 0x44], eax
jne 0x44e5f8
lea ecx, [ebp + 8]
call fcn.00432cb7
push ebx
push dword [ebp - 0x38]
lea eax, [ebp + 8]
push eax
call fcn.0043696e
mov ecx, dword [ebp - 0x24]
add esp, 0xc
push dword [ebp + 8]
push dword [ebp - 0x14]
call fcn.00432698
lea ecx, [ebp + 8]
call fcn.0042dd2d
jmp 0x44e6a2
cmp dword [ebp - 0x44], eax
je 0x44e600
push dword [ebp - 0x58]
jmp 0x44e697
shr esi, 1
lea edi, [esi + esi*2]
lea edi, [edi + edi + 0xa]
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x48]
call fcn.00432b85
xor ebx, ebx
push ebx
push ebx
push edi
mov edi, dword [ebp - 0x48]
push edi
push esi
push dword [ebp - 0x38]
push ebx
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
cmp esi, ebx
jge 0x44e634
xor esi, esi
cmp byte [ebp + 0xb], 0
mov byte [edi + esi], 0
jne 0x44e662
cmp esi, ebx
jle 0x44e6a2
cmp dword [ebp - 0x30], 0
je 0x44e656
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x10]
push dword [ebp - 0x30]
call fcn.0042dc90
push esi
push edi
lea ecx, [ebp - 0x10]
call fcn.0042dc90
jmp 0x44e6a2
cmp byte [ebp - 3], 0
je 0x44e686
push ebx
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push edi
push dword [ebp - 0x14]
push dword [ebp - 0x24]
call fcn.00441ec3
add esp, 0x18
jmp 0x44e6a2
push esi
lea eax, [ebp - 0x1c]
push edi
push eax
call fcn.0043690d
add esp, 0xc
push dword [ebp - 0x1c]
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x24]
call fcn.00432698
xor esi, esi
cmp dword [ebp - 0x10], esi
je 0x44e6b2
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea ecx, [ebp - 0x48]
call fcn.0042dd2d
lea ecx, [ebp - 0x1c]
call fcn.0042dd2d
lea ecx, [ebp - 0xc]
call fcn.0042dd2d
lea ecx, [ebp - 0x10]
call fcn.00402ad9
jmp 0x44e445