Function at 0x4467b3
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0xa5c
mov eax, dword [0x492bc0]
push ebx
mov ebx, ecx
mov dword [ebp + 0x70], eax
mov eax, dword [ebx + 0x2208]
push esi
xor ecx, ecx
cmp eax, 2
push edi
mov dword [ebp - 0x9dc], ecx
mov esi, 0x40546c
je 0x4467e8
mov esi, 0x40547c
cmp byte [ebx + 0x1c], 0
mov eax, dword [ebx + 0x1fd8]
lea edi, [ebp - 0x1d8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebx + 0x1fdc]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebx + 0x1fd0]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebx + 0x1fd4]
mov dword [ebp - 0x1c4], eax
je 0x44683b
mov eax, dword [ebp + 0x7c]
cmp eax, dword [ebx + 0x1478]
jne 0x44683b
mov dword [ebp - 0x1b8], ecx
jmp 0x446855
lea esi, [ebx + 0x1ff4]
cmp dword [esi], ecx
jne 0x44684d
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov dword [esi], eax
mov eax, dword [esi]
mov dword [ebp - 0x1b8], eax
lea eax, [ebx + 0x2000]
push eax
push 0x104
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040ac17
lea edx, [ebx + 0x1fe0]
xor eax, eax
cmp dword [edx], eax
jne 0x4468a5
cmp dword [ebx + 0x1fe4], eax
jne 0x4468a5
cmp dword [ebx + 0x1fe8], eax
jne 0x4468a5
cmp dword [ebx + 0x1fec], eax
jne 0x4468a5
cmp dword [ebx + 0x1ff0], eax
jne 0x4468a5
push 5
pop ecx
mov esi, 0x405490
mov edi, edx
rep movsd dword es:[edi], dword [esi]
push 5
pop ecx
push eax
mov esi, edx
lea edi, [ebp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x1ff8]
push eax
push eax
push dword [ebp + 0x7c]
mov dword [ebp + 0x68], ecx
mov ecx, dword [ebx + 0x1ffc]
mov dword [ebp + 0x6c], ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x4468f1
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0042f6c9
xor edi, edi
cmp eax, edi
pop ecx
mov dword [ebp - 0x9dc], eax
jl 0x446a8e
jmp 0x4468f3
xor edi, edi
lea eax, [ebp - 0x9e8]
push eax
call fcn.0041c29e
cmp eax, edi
pop ecx
mov dword [ebp - 0x9e4], eax
jne 0x446914
mov dword [ebp - 0x9dc], 0x8007000e
cmp dword [ebp - 0x9dc], edi
jl 0x4469cc
lea esi, [ebx + 0x1e]
cmp esi, edi
je 0x446970
lea eax, [ebp - 0x5d8]
push eax
lea eax, [ebp - 0x3d8]
push eax
push edi
push edi
push esi
call dword [sym.imp.MSVCRT.dll__wsplitpath]
add esp, 0x14
lea eax, [ebp - 0x3d8]
push eax
mov edi, 0x200
push edi
lea eax, [ebp - 0x9d8]
push eax
call fcn.0040ac17
lea eax, [ebp - 0x5d8]
push eax
push edi
lea eax, [ebp - 0x9d8]
push eax
call fcn.0042b4bb
xor edi, edi
movzx eax, word [ebp + 0x54]
movzx ecx, word [ebp + 0x58]
shl eax, 0x10
or eax, ecx
neg esi
sbb esi, esi
lea ecx, [ebp - 0x9d8]
and esi, ecx
mov cx, word [ebp - 0x1b4]
neg cx
push esi
lea edx, [ebp - 0x1b4]
sbb ecx, ecx
and ecx, edx
movzx edx, word [ebp + 0x60]
push ecx
push dword [ebp - 0x1b8]
movzx ecx, word [ebp + 0x5c]
shl ecx, 0x10
or ecx, edx
push ecx
push eax
push dword [ebp + 0x64]
push eax
push dword [ebp - 0x9e8]
push dword [ebp - 0x9e4]
call fcn.0041e81f
add esp, 0x24
mov eax, dword [0x491a9c]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
add eax, 0x248
xor ecx, ecx
test eax, eax
setge cl
dec ecx
mov dword [ebx + 0x1494], ecx
mov eax, dword [0x491a9c]
add eax, 0x248
cmp dword [ebp - 0x9dc], edi
mov dword [ebx + 0x1490], eax
jl 0x446a40
push edi
lea eax, [ebp - 0x9e0]
push eax
push dword [ebp - 0x9e8]
push dword [ebp - 0x9e4]
push dword [ebp + 0x7c]
call esi
test eax, eax
je 0x446a2d
mov eax, dword [ebp - 0x9e0]
cmp eax, dword [ebp - 0x9e8]
je 0x446a40
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0042f6c9
pop ecx
mov dword [ebp - 0x9dc], eax
push dword [ebp - 0x9e4]
call dword [sym.imp.MSVCRT.dll_free]
cmp dword [ebp - 0x9dc], edi
pop ecx
jl 0x446a8e
push edi
lea eax, [ebp - 0x9e0]
push eax
mov edi, 0x248
push edi
lea eax, [ebp - 0x1d8]
push eax
push dword [ebp + 0x7c]
call esi
test eax, eax
je 0x446a7b
cmp dword [ebp - 0x9e0], edi
je 0x446a8e
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.0042f6c9
pop ecx
mov dword [ebp - 0x9dc], eax
mov ecx, dword [ebp + 0x70]
mov eax, dword [ebp - 0x9dc]
pop edi
pop esi
pop ebx
call fcn.0046cd1e
add ebp, 0x74
leave
ret 4