Function at 0x44c9b4
Capabilities:
Get file size
Write file on windows

Disassembly:
push 0x84
mov eax, 0x4ad9c6
call fcn.00473d21
mov edi, ecx
cmp dword [edi + 0x38], 0
mov ebx, dword [ebp + 8]
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x84], ecx
jne 0x44c9ea
xor eax, eax
jmp 0x44cc8b
lea ecx, [ebp - 0x7c]
push ecx
lea ecx, [ebp - 0x78]
push ecx
push eax
mov ecx, edi
call fcn.0044d947
test al, al
je 0x44ca07
mov dword [edi + 0x44], 0xffffff9c
jmp 0x44c9e3
push 0x58
call fcn.00474bb7
pop ecx
mov dword [ebp - 0x7c], eax
and dword [ebp - 4], 0
test eax, eax
je 0x44ca28
push dword [edi + 0x5c]
mov ecx, eax
call fcn.0044c226
mov esi, eax
jmp 0x44ca2a
xor esi, esi
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
inc ecx
cmp byte [edi + 0x3e], 0
je 0x44ca3b
mov word [esi + 0x44], cx
cmp byte [edi + 0x3c], 0
je 0x44ca77
cmp byte [edi + 0x3d], 0
jne 0x44ca63
mov ecx, dword [ebp - 0x80]
call fcn.0044970c
lea ecx, [ebx + 4]
cmp dword [ecx + 0x14], 8
jb 0x44ca5a
mov ecx, dword [ecx]
push eax
push ecx
call fcn.0040fb73
pop ecx
pop ecx
xor eax, eax
cmp byte [edi + 0x3d], al
mov ecx, esi
setne al
inc eax
push eax
call fcn.0044dd1b
xor ecx, ecx
inc ecx
lea eax, [ebx + 4]
cmp dword [eax + 0x14], 8
jb 0x44ca82
mov eax, dword [eax]
mov ebx, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 3
push 0
push ecx
push SysReAllocString
push eax
call ebx
mov dword [ebp - 0x78], eax
cmp eax, 0xffffffff
jne 0x44cac8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 0x44], eax
test esi, esi
je 0x44c9e3
mov ecx, esi
call fcn.0044c58a
push esi
call fcn.00472d16
pop ecx
jmp 0x44c9e3
lea eax, [edi + 8]
cmp dword [eax + 0x14], 8
jb 0x44cad3
mov eax, dword [eax]
push 0
push 0x80
push 3
push 0
push 3
push 0x40000000
push eax
call ebx
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x44cb03
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x78]
mov dword [edi + 0x44], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x44caad
push dword [ebp - 0x80]
mov ecx, esi
call fcn.00411b2a
push 0
push dword [ebp - 0x78]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push dword [ebp - 0x78]
mov dword [esi + 0x38], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0
push dword [edi + 0x40]
mov ecx, edi
push ebx
call fcn.0044df28
test eax, eax
jne 0x44cb43
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x44cab5
mov eax, dword [edi + 0x58]
inc eax
push eax
lea eax, [ebp - 0x74]
push eax
mov ecx, edi
call fcn.0044d8f9
push 0
lea eax, [ebp - 0x90]
push eax
push dword [edi + 0x4c]
lea eax, [ebp - 0x74]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 2
push 0
push 0
push ebx
mov ecx, edi
call fcn.0044df28
test eax, eax
je 0x44c9e3
push ebx
mov ecx, edi
call fcn.0044df12
push ebx
mov ecx, esi
mov dword [ebp - 0x7c], eax
call fcn.0044df6e
test eax, eax
jne 0x44cb37
mov ecx, esi
call fcn.0044d351
add eax, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x84]
mov dword [esi + 0x48], eax
test ecx, ecx
je 0x44cbbd
push dword [esi + 0x38]
mov eax, dword [ecx]
push 0
call dword [eax]
mov ecx, dword [ebp - 0x84]
cmp byte [edi + 0x3e], 0
push ecx
mov ecx, edi
jne 0x44cbd5
push ebx
push esi
push dword [ebp - 0x88]
call fcn.0044c890
jmp 0x44cc21
and dword [ebp - 0x78], 0
lea eax, [ebp - 0x78]
push eax
push ebx
push esi
push dword [ebp - 0x88]
call fcn.0044c84b
mov eax, dword [ebp - 0x78]
push 0
push 0
push dword [ebp - 0x7c]
mov ecx, edi
push ebx
mov dword [esi + 0x38], eax
call fcn.0044df28
push ebx
mov ecx, esi
call fcn.0044df6e
mov dword [ebp - 0x7c], eax
test eax, eax
jne 0x44cb37
push 2
push eax
push eax
push ebx
mov ecx, edi
call fcn.0044df28
mov eax, dword [ebp - 0x7c]
test eax, eax
jne 0x44cb37
mov ecx, dword [ebp - 0x84]
test ecx, ecx
je 0x44cc3d
push dword [esi + 0x38]
mov eax, dword [ecx]
push dword [esi + 0x38]
call dword [eax]
push 1
push dword [ebp - 0x80]
lea ecx, [ebp - 0x44]
call fcn.004112ff
mov dword [ebp - 4], 1
mov dword [ebp - 0x14], esi
mov dword [ebp - 4], 2
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x8c]
push eax
lea ecx, [edi + 0x54]
call fcn.0044c0ae
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x7c], ecx
or dword [ebp - 4], 0xffffffff
call fcn.00401b80
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
inc eax
call fcn.00473cd0
ret 0xc