Function at 0x449a6d
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x10004]
mov eax, 0x10004
call fcn.0046f9c0
push 0xffffffffffffffff
push 0x496e09
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x4b7f10]
xor eax, ebp
mov dword [ebp + 0x10000], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 0x1000c]
mov dword [ebp - 0x34], edi
mov esi, dword [ebp + 0x10010]
mov dword [ebp - 0x3c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
push ebx
push 0x10000
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x30]
call fcn.00450be4
mov dword [ebp - 0x14], 0x65ef0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x30]
call fcn.00450ded
mov eax, dword [edi + 0x1c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x30]
call fcn.00450ded
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.00449898
mov dword [ebp - 0x20], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x90]
push eax
mov ecx, edi
call fcn.004498ae
push eax
lea ecx, [ebp - 0x18]
call fcn.0044939d
test al, al
je 0x449d2b
lea ecx, [ebp - 0x18]
call fcn.00449401
cmp dword [eax + 0x18], 8
jb 0x449b44
mov edi, dword [eax + 4]
jmp 0x449b47
lea edi, [eax + 4]
test edi, edi
je 0x449b56
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x449b5a
xor eax, eax
jmp 0x449b75
lea esi, [eax + eax]
mov eax, esi
call fcn.0046f1d0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449286
push eax
lea ecx, [ebp - 0x6c]
call fcn.004023fc
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.004499bc
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.004522a5
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004027d0
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027d0
lea ecx, [ebp - 0x18]
call fcn.00449401
cmp dword [eax + 0x54], 8
jb 0x449bc4
mov edi, dword [eax + 0x40]
jmp 0x449bc7
lea edi, [eax + 0x40]
test edi, edi
je 0x449bd6
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x449bda
xor eax, eax
jmp 0x449bf5
lea esi, [eax + eax]
mov eax, esi
call fcn.0046f1d0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449286
push eax
lea ecx, [ebp - 0x6c]
call fcn.004023fc
push eax
lea ecx, [ebp - 0x30]
call fcn.004522a5
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027d0
lea ecx, [ebp - 0x18]
call fcn.00449401
add eax, 0x58
push eax
lea ecx, [ebp - 0x30]
call fcn.00450ded
lea ecx, [ebp - 0x18]
call fcn.00449401
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x30]
call fcn.00450ded
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x18]
call fcn.00449401
mov ecx, eax
add ecx, 0x1c
call fcn.00449898
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.00449401
mov ecx, eax
add ecx, 0x1c
call fcn.004498ae
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x48]
call fcn.0043f7c2
test al, al
jne 0x449d15
lea ecx, [ebp - 0x48]
call fcn.00449401
cmp dword [eax + 0x18], 8
jb 0x449c98
mov edi, dword [eax + 4]
jmp 0x449c9b
lea edi, [eax + 4]
test edi, edi
je 0x449caa
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x449cae
xor eax, eax
jmp 0x449cc9
lea esi, [eax + eax]
mov eax, esi
call fcn.0046f1d0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449286
push eax
lea ecx, [ebp - 0x88]
call fcn.004023fc
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.004499bc
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.004522a5
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004027d0
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004027d0
lea ecx, [ebp - 0x48]
call fcn.004493b2
inc dword [ebp - 0x1c]
jmp 0x449c71
lea ecx, [ebp - 0x18]
call fcn.00449430
inc dword [ebp - 0x20]
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x34]
jmp 0x449b12
cmp dword [esi + 0x18], 8
jb 0x449d36
mov edi, dword [esi + 4]
jmp 0x449d39
lea edi, [esi + 4]
test edi, edi
je 0x449d48
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x449d4c
xor eax, eax
jmp 0x449d67
lea esi, [eax + eax]
mov eax, esi
call fcn.0046f1d0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.00449286
push 0x4a23e4
push eax
call fcn.00470d57
pop ecx
pop ecx
mov esi, eax
test esi, esi
je 0x449d9c
push esi
lea ecx, [ebp - 0x30]
call fcn.00450c2f
push eax
push 1
lea eax, [ebp]
push eax
call fcn.00470c11
push esi
call fcn.00470a33
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea esp, [ebp - 0xa4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x10000]
xor ecx, ebp
call fcn.0046cc2a
add ebp, 0x10004
leave
ret