Function at 0x444b00
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
xor edi, edi
push esi
push ebx
sub esp, 0x5c
mov dword [ebp - 0x48], ecx
mov byte [ebp - 0x35], 0
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x3c], edi
lea esi, [esi]
lea esi, [esi]
lea esi, [edi + 1]
movzx esi, si
mov dword [esp], esi
mov ecx, dword [ebp + 8]
call fcn.0041c750
sub esp, 4
mov ebx, eax
mov dword [esp + 4], ebx
mov eax, 0xa
mov dword [esp + 8], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call fcn.0044e6f0
mov eax, str._RawNL
mov dword [esp + 4], eax
mov dword [esp], ebx
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x444b88
mov eax, dword [ebp - 0x3c]
inc eax
movzx eax, ax
mov dword [ebp - 0x3c], eax
mov edi, esi
jmp 0x444b30
mov eax, str._CharSet
mov dword [esp + 4], eax
lea eax, [ebp - 0x2c]
mov dword [esp], eax
call dword [sym.imp.msvcrt.dll__wcsicmp]
test eax, eax
jne 0x444bf8
mov eax, dword [ebp - 0x40]
inc eax
movzx eax, ax
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x35]
mov dword [esp + 4], eax
lea eax, [ebx + 0x12]
mov dword [esp], eax
call fcn.0044cfc0
movzx eax, ax
mov dword [ebp - 0x44], eax
cmp eax, 0xffff
jne 0x444b7e
mov dword [esp + 8], ebx
mov edi, str._appendfile:_Invalid_parameter___ls___n
mov dword [esp + 4], edi
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.00403350
mov ebx, 0x32
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [ebp - 0x4c], edi
mov ecx, dword [ebp + 8]
mov edi, dword [ebp - 0x3c]
call fcn.0041c390
lea edx, [esi + 2]
cmp edx, eax
jne 0x444d28
mov dword [esp], esi
mov esi, 0x4bd966
mov ecx, dword [ebp + 8]
call fcn.0041c750
mov dword [ebp - 0x34], 0
mov word [ebp - 0x30], 0
sub esp, 4
mov ebx, eax
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.0044ebb0
mov dword [esp], eax
xor ecx, ecx
mov edx, 1
mov dword [esp + 4], ecx
lea ecx, [ebp - 0x34]
mov dword [esp + 8], edx
call fcn.0044d270
sub esp, 0xc
test al, al
je 0x444da4
movzx eax, word [ebp - 0x30]
cmp eax, 0xfde9
je 0x444d50
or eax, 1
cmp eax, 0x2ee1
je 0x444d50
cmp eax, 0x4b1
je 0x444d50
mov esi, dword [ebp - 0x40]
test esi, esi
je 0x444c9a
mov eax, dword [ebp - 0x44]
mov word [ebp - 0x30], ax
mov eax, dword [ebp - 0x4c]
add eax, 2
movzx eax, ax
mov dword [esp], eax
mov ecx, dword [ebp + 8]
call fcn.0041c750
sub esp, 4
mov esi, eax
cmp byte [ebp - 0x35], 0
jne 0x444d65
mov dword [esp], esi
mov eax, 0xffffffff
test edi, edi
mov dword [esp + 4], eax
lea ecx, [ebp - 0x34]
je 0x444d59
call fcn.0044d3a0
sub esp, 8
test al, al
je 0x444d82
mov dword [esp + 0xc], esi
mov ecx, str._appendfile:___ls____ls__n
mov dword [esp + 8], ebx
mov dword [esp + 4], ecx
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.00402fc0
xor ebx, ebx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], 0
test eax, eax
je 0x444be7
mov dword [esp], eax
call sub.msvcrt.dll_fclose
lea esp, [ebp - 0xc]
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret 4
mov dword [esp], 0
mov ecx, dword [ebp + 8]
call fcn.0041c750
sub esp, 4
mov dword [esp], eax
mov ecx, dword [ebp - 0x48]
call fcn.0044bd20
sub esp, 4
jmp 0x444be2
mov byte [ebp - 0x35], 0
jmp 0x444c8c
call fcn.0044d470
nop
jmp 0x444cd9
movzx eax, word [ebp - 0x30]
cmp eax, 0x4b1
je 0x444e28
cmp eax, 0xfde9
je 0x444df0
cmp eax, 0x4b0
je 0x444dbe
mov dword [esp + 8], ebx
mov ebx, str._appendfile:_error_writing_to___ls_._n
mov dword [esp + 4], ebx
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.00403350
mov ebx, 0x32
jmp 0x444d02
mov dword [esp + 8], ebx
mov edi, 0x4bd96c
mov dword [esp + 4], edi
mov eax, dword [ebp - 0x48]
mov dword [esp], eax
call fcn.00403350
jmp 0x444d9a
mov eax, dword [ebp - 0x34]
mov dword [esp], 0x4ce550
mov dword [esp + 0xc], eax
mov eax, 2
mov dword [esp + 8], eax
mov eax, 1
mov dword [esp + 4], eax
call sub.msvcrt.dll_fwrite
cmp eax, 2
je 0x444cbd
jmp 0x444d82
mov eax, dword [ebp - 0x34]
mov edx, 3
mov ecx, 1
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], 0x4ce548
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fwrite
cmp eax, 3
je 0x444cbd
jmp 0x444d82
mov eax, dword [ebp - 0x34]
mov dword [esp], 0x4ce54c
mov dword [esp + 0xc], eax
mov eax, 2
mov dword [esp + 8], eax
mov eax, 1
mov dword [esp + 4], eax
call sub.msvcrt.dll_fwrite
jmp 0x444de3