Function at 0x4533ba
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x10004]
mov eax, 0x10004
call fcn.00479650
push 0xffffffffffffffff
push 0x4a0b49
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x4c2f90]
xor eax, ebp
mov dword [ebp + 0x10000], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 0x1000c]
mov dword [ebp - 0x34], edi
mov esi, dword [ebp + 0x10010]
mov dword [ebp - 0x3c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
push ebx
push 0x10000
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x30]
call fcn.0045a50d
mov dword [ebp - 0x14], 0x65ef0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x30]
call fcn.0045a716
mov eax, dword [edi + 0x1c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x30]
call fcn.0045a716
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.004532a1
mov dword [ebp - 0x20], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x90]
push eax
mov ecx, edi
call fcn.004531e5
push eax
lea ecx, [ebp - 0x18]
call fcn.00452d19
test al, al
je 0x453678
lea ecx, [ebp - 0x18]
call fcn.0049ac6a
cmp dword [eax + 0x18], 8
jb 0x453491
mov edi, dword [eax + 4]
jmp 0x453494
lea edi, [eax + 4]
test edi, edi
je 0x4534a3
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x4534a7
xor eax, eax
jmp 0x4534c2
lea esi, [eax + eax]
mov eax, esi
call fcn.00478fa0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00452c02
push eax
lea ecx, [ebp - 0x6c]
call fcn.00402429
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.00453309
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.0045bbce
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004027fd
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027fd
lea ecx, [ebp - 0x18]
call fcn.0049ac6a
cmp dword [eax + 0x54], 8
jb 0x453511
mov edi, dword [eax + 0x40]
jmp 0x453514
lea edi, [eax + 0x40]
test edi, edi
je 0x453523
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x453527
xor eax, eax
jmp 0x453542
lea esi, [eax + eax]
mov eax, esi
call fcn.00478fa0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00452c02
push eax
lea ecx, [ebp - 0x6c]
call fcn.00402429
push eax
lea ecx, [ebp - 0x30]
call fcn.0045bbce
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027fd
lea ecx, [ebp - 0x18]
call fcn.0049ac6a
add eax, 0x58
push eax
lea ecx, [ebp - 0x30]
call fcn.0045a716
lea ecx, [ebp - 0x18]
call fcn.0049ac6a
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x30]
call fcn.0045a716
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x18]
call fcn.0049ac6a
mov ecx, eax
add ecx, 0x1c
call fcn.004532a1
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.0049ac6a
mov ecx, eax
add ecx, 0x1c
call fcn.004531e5
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x48]
call fcn.00431189
test al, al
jne 0x453662
lea ecx, [ebp - 0x48]
call fcn.0049ac6a
cmp dword [eax + 0x18], 8
jb 0x4535e5
mov edi, dword [eax + 4]
jmp 0x4535e8
lea edi, [eax + 4]
test edi, edi
je 0x4535f7
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x4535fb
xor eax, eax
jmp 0x453616
lea esi, [eax + eax]
mov eax, esi
call fcn.00478fa0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00452c02
push eax
lea ecx, [ebp - 0x88]
call fcn.00402429
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.00453309
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.0045bbce
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027fd
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004027fd
lea ecx, [ebp - 0x48]
call fcn.00452d2e
inc dword [ebp - 0x1c]
jmp 0x4535be
lea ecx, [ebp - 0x18]
call fcn.00452d7d
inc dword [ebp - 0x20]
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x34]
jmp 0x45345f
cmp dword [esi + 0x18], 8
jb 0x453683
mov edi, dword [esi + 4]
jmp 0x453686
lea edi, [esi + 4]
test edi, edi
je 0x453695
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x453699
xor eax, eax
jmp 0x4536b4
lea esi, [eax + eax]
mov eax, esi
call fcn.00478fa0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00452c02
push 0x4ad038
push eax
call fcn.0047a957
pop ecx
pop ecx
mov esi, eax
test esi, esi
je 0x4536e9
push esi
lea ecx, [ebp - 0x30]
call fcn.0045a558
push eax
push 1
lea eax, [ebp]
push eax
call fcn.0047a811
push esi
call fcn.0047a633
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea esp, [ebp - 0xa4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x10000]
xor ecx, ebp
call fcn.0047654a
add ebp, 0x10004
leave
ret