Function at 0x40447c
Capabilities:
Write file on windows

Disassembly:
push ebp
sub esp, 0x68
push 0x1c
mov eax, 0x45d3fa
call fcn.00443770
lea ecx, [ebp]
call fcn.004211f8
xor ebx, ebx
push 0x47cb9c
lea ecx, [ebp + 0x64]
mov dword [ebp - 4], ebx
call fcn.00402ed7
mov eax, dword [ebp + 0x64]
mov byte [ebp - 4], 1
cmp dword [eax - 0xc], ebx
jne 0x4044df
lea ecx, [eax - 0x10]
call fcn.004010f6
xor esi, esi
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp]
call fcn.00421328
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 4
xor edi, edi
inc edi
push edi
lea eax, [ebp + 0x68]
push eax
lea ecx, [ebp + 0x64]
call fcn.0040308c
mov esi, 0x463424
push esi
mov ecx, eax
mov byte [ebp - 4], 2
call fcn.00402cb3
mov ecx, dword [ebp + 0x68]
test eax, eax
setne byte [ebp + 0x5f]
add ecx, 0xfffffff0
mov byte [ebp - 4], 1
call fcn.004010f6
cmp byte [ebp + 0x5f], 0
je 0x404524
push esi
lea ecx, [ebp + 0x64]
call fcn.00403269
push str.VDESK_ABCHINA
lea ecx, [ebp + 0x64]
call fcn.00403269
push str..CFG
lea ecx, [ebp + 0x64]
call fcn.00403269
mov esi, dword [ebp + 0x64]
push 0x46345c
lea eax, [ebp + 0x60]
push esi
push eax
mov dword [ebp + 0x60], ebx
call fcn.00445ca0
add esp, 0xc
test eax, eax
je 0x404569
lea ecx, [esi - 0x10]
call fcn.004010f6
mov esi, edi
jmp 0x4044bc
cmp dword [ebp + 0x60], ebx
jne 0x404576
lea ecx, [esi - 0x10]
jmp 0x4044b5
lea ecx, [ebp]
call fcn.00421204
push str.VDESK_CONFIG
lea ecx, [ebp - 0x28]
call fcn.00403364
lea eax, [ebp - 0x28]
push eax
lea ecx, [ebp]
mov byte [ebp - 4], 3
call fcn.004212a6
push ebx
push edi
lea ecx, [ebp - 0x28]
mov dword [ebp + 0x68], eax
mov byte [ebp - 4], 1
call fcn.004014f6
cmp dword [ebp + 0x68], ebx
jne 0x4045bc
push dword [ebp + 0x60]
call fcn.0044588c
pop ecx
jmp 0x40456e
cmp dword [ebp + 0x74], ebx
je 0x404602
push 0x463458
lea ecx, [ebp + 0x20]
call fcn.00403364
push str.USE_VDESK
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 4
call fcn.00403364
mov ecx, dword [ebp + 0x68]
lea eax, [ebp + 0x20]
push eax
lea eax, [ebp + 0x3c]
push eax
mov byte [ebp - 4], 5
call fcn.0042101d
push ebx
push edi
lea ecx, [ebp + 0x3c]
call fcn.004014f6
lea ecx, [ebp + 0x20]
jmp 0x404641
push 0x463428
lea ecx, [ebp + 0x3c]
call fcn.00403364
push str.USE_VDESK
lea ecx, [ebp + 0x20]
mov byte [ebp - 4], 6
call fcn.00403364
mov ecx, dword [ebp + 0x68]
lea eax, [ebp + 0x3c]
push eax
lea eax, [ebp + 0x20]
push eax
mov byte [ebp - 4], 7
call fcn.0042101d
push ebx
push edi
lea ecx, [ebp + 0x20]
call fcn.004014f6
lea ecx, [ebp + 0x3c]
push ebx
push edi
mov byte [ebp - 4], 1
call fcn.004014f6
push ebx
lea ecx, [ebp]
call fcn.0041f92c
mov edi, eax
cmp edi, ebx
je 0x4045b1
push edi
call fcn.00425fde
push edi
push ebx
push eax
mov dword [ebp + 0x74], eax
call fcn.00443310
add esp, 0x10
push dword [ebp + 0x74]
lea ecx, [ebp]
call fcn.0041f92c
mov eax, edi
cdq
and edx, 7
add eax, edx
sar eax, 3
lea esi, [eax*8 + 8]
push esi
call fcn.00425fde
push esi
mov ebx, eax
push 0
push ebx
mov dword [ebp + 0x58], ebx
call fcn.00443310
push edi
push dword [ebp + 0x74]
push esi
push ebx
call fcn.00442e5a
add esp, 0x20
push esi
push edi
push 8
lea eax, [ebx + edi]
push eax
call fcn.0041090f
test al, al
jne 0x4046f3
push ebx
call fcn.00425fd3
xor esi, esi
cmp dword [ebp + 0x74], esi
pop ecx
je 0x4046da
push dword [ebp + 0x74]
call fcn.00425fd3
pop ecx
push dword [ebp + 0x60]
call fcn.0044588c
pop ecx
mov ecx, dword [ebp + 0x64]
add ecx, 0xfffffff0
call fcn.004010f6
jmp 0x4044bc
push esi
call fcn.00425fde
push esi
xor edi, edi
push edi
push eax
mov dword [ebp + 0x68], eax
call fcn.00443310
add esp, 0x10
mov ebx, 0x100
lea eax, [ebx + edi]
cmp eax, esi
jle 0x404719
mov ebx, esi
sub ebx, edi
mov eax, dword [ebp + 0x58]
push str.EnterSafe_2010Feitian__0
add eax, edi
push ebx
push eax
mov eax, dword [ebp + 0x68]
add eax, edi
push eax
call fcn.0041062b
add edi, ebx
cmp ebx, 0x100
jge 0x40470e
push dword [ebp + 0x60]
push esi
xor esi, esi
inc esi
push esi
push dword [ebp + 0x68]
call fcn.00445e8d
push dword [ebp + 0x68]
call fcn.00425fd3
add esp, 0x14
cmp dword [ebp + 0x74], 0
jmp 0x4046cf