Function at 0x44e7f0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5fb880
mov eax, dword fs:[0]
push eax
sub esp, 0xc
push ebx
push esi
push edi
mov eax, dword [0x686bb0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [esi + 0x98]
test eax, eax
je 0x44e8f1
cmp byte [esi + 1], 0
je 0x44e8f1
mov byte [eax], 0
mov edi, dword [esi + 0x98]
test edi, edi
je 0x44e8f1
mov ecx, edi
mov dword [ebp - 4], 0
call fcn.00470740
mov byte [ebp - 4], 1
mov ecx, dword [edi + 0x54]
test ecx, ecx
je 0x44e87a
mov eax, dword [0x6d4050]
test eax, eax
je 0x44e86b
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov byte [ebp - 4], 2
mov ecx, dword [edi + 0x48]
test ecx, ecx
je 0x44e8a3
mov eax, dword [0x6d4050]
test eax, eax
je 0x44e894
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [edi + 0x3c]
test ecx, ecx
je 0x44e8cc
mov eax, dword [0x6d4050]
test eax, eax
je 0x44e8bd
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x6d4050]
test eax, eax
je 0x44e8e2
dec dword [eax + 0x374]
push dword [0x6d4048]
push edi
call fcn.004490f0
add esp, 8
cmp byte [esi], 0
mov dword [esi + 0x98], 0
je 0x44f0b9
cmp byte [esi + 0x2dc8], 0
je 0x44e969
mov edi, dword [esi + 0x20]
test edi, edi
je 0x44e969
mov ebx, dword [0x6d4050]
lea ecx, [ebp - 0x10]
mov dword [0x6d4050], esi
mov dword [esi + 0x2dcc], 0
mov dword [ebp - 0x10], 0
call fcn.0045bc50
mov edx, 0x6708e4
mov dword [ebp - 0x14], eax
mov ecx, edi
call fcn.00449820
mov edi, eax
test edi, edi
je 0x44e96f
push edi
push dword [ebp - 0x10]
push 1
push dword [ebp - 0x14]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
jmp 0x44e96f
mov ebx, dword [0x6d4050]
mov dword [0x6d4050], esi
call fcn.0045dd20
xor edi, edi
mov dword [0x6d4050], ebx
cmp dword [esi + 0x2da0], edi
jle 0x44e9ac
nop word [eax + eax]
mov eax, dword [esi + 0x2da8]
mov ecx, dword [eax + edi*8 + 4]
test ecx, ecx
je 0x44e9a3
call fcn.00465e90
inc edi
cmp edi, dword [esi + 0x2da0]
jl 0x44e990
xor edi, edi
cmp dword [esi + 0x2df4], edi
jle 0x44e9e3
xor ebx, ebx
nop dword [eax + eax]
mov eax, dword [esi + 0x2dfc]
add eax, ebx
cmp dword [eax], 6
jne 0x44e9d7
push eax
mov eax, dword [eax + 8]
push esi
call eax
add esp, 8
inc edi
add ebx, 0x10
cmp edi, dword [esi + 0x2df4]
jl 0x44e9c0
xor edi, edi
cmp dword [esi + 0x1a84], edi
jle 0x44ea2b
nop dword [eax]
mov eax, dword [esi + 0x1a8c]
mov ebx, dword [eax + edi*4]
test ebx, ebx
je 0x44ea22
mov ecx, ebx
call fcn.0044ba70
mov eax, dword [0x6d4050]
test eax, eax
je 0x44ea13
dec dword [eax + 0x374]
push dword [0x6d4048]
push ebx
call fcn.004490f0
add esp, 8
inc edi
cmp edi, dword [esi + 0x1a84]
jl 0x44e9f0
mov ecx, dword [esi + 0x1a8c]
test ecx, ecx
je 0x44ea71
mov eax, dword [0x6d4050]
mov dword [esi + 0x1a88], 0
mov dword [esi + 0x1a84], 0
test eax, eax
je 0x44ea58
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1a8c], 0
mov ecx, dword [esi + 0x1a98]
test ecx, ecx
je 0x44eab7
mov eax, dword [0x6d4050]
mov dword [esi + 0x1a94], 0
mov dword [esi + 0x1a90], 0
test eax, eax
je 0x44ea9e
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1a98], 0
mov ecx, dword [esi + 0x1aa4]
test ecx, ecx
je 0x44eafd
mov eax, dword [0x6d4050]
mov dword [esi + 0x1aa0], 0
mov dword [esi + 0x1a9c], 0
test eax, eax
je 0x44eae4
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1aa4], 0
mov dword [esi + 0x1ac4], 0
mov ecx, dword [esi + 0x1ab0]
test ecx, ecx
je 0x44eb4d
mov eax, dword [0x6d4050]
mov dword [esi + 0x1aac], 0
mov dword [esi + 0x1aa8], 0
test eax, eax
je 0x44eb34
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1ab0], 0
mov ecx, dword [esi + 0x1abc]
test ecx, ecx
je 0x44eb93
mov eax, dword [0x6d4050]
mov dword [esi + 0x1ab8], 0
mov dword [esi + 0x1ab4], 0
test eax, eax
je 0x44eb7a
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1abc], 0
mov dword [esi + 0x1c48], 0
mov dword [esi + 0x1ad0], 0
mov dword [esi + 0x1acc], 0
mov dword [esi + 0x1ac8], 0
mov dword [esi + 0x1b44], 0
mov dword [esi + 0x1b30], 0
mov dword [esi + 0x1ad8], 0
mov ecx, dword [esi + 0x1bf4]
test ecx, ecx
je 0x44ec1f
mov eax, dword [0x6d4050]
mov dword [esi + 0x1bf0], 0
mov dword [esi + 0x1bec], 0
test eax, eax
je 0x44ec06
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1bf4], 0
mov ecx, dword [esi + 0x1c00]
test ecx, ecx
je 0x44ec65
mov eax, dword [0x6d4050]
mov dword [esi + 0x1bfc], 0
mov dword [esi + 0x1bf8], 0
test eax, eax
je 0x44ec4c
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1c00], 0
mov ecx, dword [esi + 0x1c0c]
test ecx, ecx
je 0x44ecab
mov eax, dword [0x6d4050]
mov dword [esi + 0x1c08], 0
mov dword [esi + 0x1c04], 0
test eax, eax
je 0x44ec92
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1c0c], 0
mov ecx, dword [esi + 0x1c18]
test ecx, ecx
je 0x44ecf1
mov eax, dword [0x6d4050]
mov dword [esi + 0x1c14], 0
mov dword [esi + 0x1c10], 0
test eax, eax
je 0x44ecd8
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1c18], 0
mov ecx, dword [esi + 0x1c24]
test ecx, ecx
je 0x44ed37
mov eax, dword [0x6d4050]
mov dword [esi + 0x1c20], 0
mov dword [esi + 0x1c1c], 0
test eax, eax
je 0x44ed1e
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1c24], 0
xor edi, edi
mov dword [esi + 0x1c40], 0
mov dword [esi + 0x1c3c], 0
mov dword [esi + 0x1c38], 0
cmp dword [esi + 0x1c28], edi
jle 0x44ed77
nop
mov ecx, dword [esi + 0x1c30]
mov ecx, dword [ecx + edi*4]
call fcn.00465d30
inc edi
cmp edi, dword [esi + 0x1c28]
jl 0x44ed60
mov ecx, dword [esi + 0x1c30]
test ecx, ecx
je 0x44edbd
mov eax, dword [0x6d4050]
mov dword [esi + 0x1c2c], 0
mov dword [esi + 0x1c28], 0
test eax, eax
je 0x44eda4
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1c30], 0
lea ecx, [esi + 0x1e20]
call fcn.004654f0
mov ecx, dword [esi + 0x1e44]
test ecx, ecx
je 0x44ee0e
mov eax, dword [0x6d4050]
mov dword [esi + 0x1e40], 0
mov dword [esi + 0x1e3c], 0
test eax, eax
je 0x44edf5
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1e44], 0
mov ecx, dword [esi + 0x1e50]
test ecx, ecx
je 0x44ee54
mov eax, dword [0x6d4050]
mov dword [esi + 0x1e4c], 0
mov dword [esi + 0x1e48], 0
test eax, eax
je 0x44ee3b
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1e50], 0
mov ecx, dword [esi + 0x2d78]
test ecx, ecx
je 0x44ee9a
mov eax, dword [0x6d4050]
mov dword [esi + 0x2d74], 0
mov dword [esi + 0x2d70], 0
test eax, eax
je 0x44ee81
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x2d78], 0
mov ecx, dword [esi + 0x2d84]
test ecx, ecx
je 0x44eee0
mov eax, dword [0x6d4050]
mov dword [esi + 0x2d80], 0
mov dword [esi + 0x2d7c], 0
test eax, eax
je 0x44eec7
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x2d84], 0
mov ecx, dword [esi + 0x1e70]
test ecx, ecx
je 0x44ef26
mov eax, dword [0x6d4050]
mov dword [esi + 0x1e6c], 0
mov dword [esi + 0x1e68], 0
test eax, eax
je 0x44ef0d
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1e70], 0
mov ecx, dword [esi + 0x1e7c]
test ecx, ecx
je 0x44ef6c
mov eax, dword [0x6d4050]
mov dword [esi + 0x1e78], 0
mov dword [esi + 0x1e74], 0
test eax, eax
je 0x44ef53
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1e7c], 0
mov ecx, dword [esi + 0x1e88]
test ecx, ecx
je 0x44efb2
mov eax, dword [0x6d4050]
mov dword [esi + 0x1e84], 0
mov dword [esi + 0x1e80], 0
test eax, eax
je 0x44ef99
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x1e88], 0
mov ecx, dword [esi + 0x2df0]
test ecx, ecx
je 0x44eff8
mov eax, dword [0x6d4050]
mov dword [esi + 0x2dec], 0
mov dword [esi + 0x2de8], 0
test eax, eax
je 0x44efdf
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x2df0], 0
mov ecx, dword [esi + 0x2de4]
test ecx, ecx
je 0x44f03e
mov eax, dword [0x6d4050]
mov dword [esi + 0x2de0], 0
mov dword [esi + 0x2ddc], 0
test eax, eax
je 0x44f025
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x2de4], 0
cmp dword [esi + 0x2e08], 0
je 0x44f070
mov edi, dword [esi + 0x2e08]
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp edi, eax
je 0x44f066
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [esi + 0x2e08], 0
mov ecx, dword [esi + 0x2e14]
test ecx, ecx
je 0x44f0b6
mov eax, dword [0x6d4050]
mov dword [esi + 0x2e10], 0
mov dword [esi + 0x2e0c], 0
test eax, eax
je 0x44f09d
dec dword [eax + 0x374]
push dword [0x6d4048]
push ecx
call fcn.004490f0
add esp, 8
mov dword [esi + 0x2e14], 0
mov byte [esi], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret