Function at 0x44a5d6
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x10004]
mov eax, 0x10004
call fcn.00470530
push 0xffffffffffffffff
push 0x497999
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x4b7f60]
xor eax, ebp
mov dword [ebp + 0x10000], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 0x1000c]
mov dword [ebp - 0x34], edi
mov esi, dword [ebp + 0x10010]
mov dword [ebp - 0x3c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
push ebx
push 0x10000
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x30]
call fcn.00451759
mov dword [ebp - 0x14], 0x65ef0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x30]
call fcn.00451962
mov eax, dword [edi + 0x1c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x30]
call fcn.00451962
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.0042e0ee
mov dword [ebp - 0x20], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x90]
push eax
mov ecx, edi
call fcn.0044a417
push eax
lea ecx, [ebp - 0x18]
call fcn.00449f71
test al, al
je 0x44a894
lea ecx, [ebp - 0x18]
call fcn.00491ae0
cmp dword [eax + 0x18], 8
jb 0x44a6ad
mov edi, dword [eax + 4]
jmp 0x44a6b0
lea edi, [eax + 4]
test edi, edi
je 0x44a6bf
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44a6c3
xor eax, eax
jmp 0x44a6de
lea esi, [eax + eax]
mov eax, esi
call fcn.0046fd40
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449e5a
push eax
lea ecx, [ebp - 0x6c]
call fcn.004023e0
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044a525
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00452e1a
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004027b4
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027b4
lea ecx, [ebp - 0x18]
call fcn.00491ae0
cmp dword [eax + 0x54], 8
jb 0x44a72d
mov edi, dword [eax + 0x40]
jmp 0x44a730
lea edi, [eax + 0x40]
test edi, edi
je 0x44a73f
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44a743
xor eax, eax
jmp 0x44a75e
lea esi, [eax + eax]
mov eax, esi
call fcn.0046fd40
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449e5a
push eax
lea ecx, [ebp - 0x6c]
call fcn.004023e0
push eax
lea ecx, [ebp - 0x30]
call fcn.00452e1a
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027b4
lea ecx, [ebp - 0x18]
call fcn.00491ae0
add eax, 0x58
push eax
lea ecx, [ebp - 0x30]
call fcn.00451962
lea ecx, [ebp - 0x18]
call fcn.00491ae0
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x30]
call fcn.00451962
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x18]
call fcn.00491ae0
mov ecx, eax
add ecx, 0x1c
call fcn.0042e0ee
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.00491ae0
mov ecx, eax
add ecx, 0x1c
call fcn.0044a417
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x48]
call fcn.00491a46
test al, al
jne 0x44a87e
lea ecx, [ebp - 0x48]
call fcn.00491ae0
cmp dword [eax + 0x18], 8
jb 0x44a801
mov edi, dword [eax + 4]
jmp 0x44a804
lea edi, [eax + 4]
test edi, edi
je 0x44a813
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44a817
xor eax, eax
jmp 0x44a832
lea esi, [eax + eax]
mov eax, esi
call fcn.0046fd40
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449e5a
push eax
lea ecx, [ebp - 0x88]
call fcn.004023e0
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0044a525
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00452e1a
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027b4
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004027b4
lea ecx, [ebp - 0x48]
call fcn.00449f86
inc dword [ebp - 0x1c]
jmp 0x44a7da
lea ecx, [ebp - 0x18]
call fcn.00449fd5
inc dword [ebp - 0x20]
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x34]
jmp 0x44a67b
cmp dword [esi + 0x18], 8
jb 0x44a89f
mov edi, dword [esi + 4]
jmp 0x44a8a2
lea edi, [esi + 4]
test edi, edi
je 0x44a8b1
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44a8b5
xor eax, eax
jmp 0x44a8d0
lea esi, [eax + eax]
mov eax, esi
call fcn.0046fd40
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449e5a
push 0x4a2514
push eax
call fcn.004718c7
pop ecx
pop ecx
mov esi, eax
test esi, esi
je 0x44a905
push esi
lea ecx, [ebp - 0x30]
call fcn.004517a4
push eax
push 1
lea eax, [ebp]
push eax
call fcn.00471781
push esi
call fcn.004715a3
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea esp, [ebp - 0xa4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x10000]
xor ecx, ebp
call fcn.0046d79a
add ebp, 0x10004
leave
ret