Function at 0x44a160
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x28f8
call fcn.004c0c80
mov eax, dword [0x4eb984]
xor eax, esp
mov dword [esp + 0x28f4], eax
push ebx
push esi
mov esi, ecx
push esi
lea eax, [esp + 0x900]
push str._sShellNew
push eax
mov edx, 0x800
mov byte [0x4ea188], 0x52
mov byte [0x4ea170], 0x50
call fcn.00495190
add esp, 0xc
cmp byte [esp + 0x2904], 0
push esi
je 0x44a47a
call fcn.00448e00
test al, al
jne 0x44a2f1
push 0x200
push 0x4d79fc
lea ecx, [esp + 0x504]
push ecx
push 0x4d79fc
push esi
push 0x80000000
call fcn.0046bfb0
push 0x200
push 0x4d79fc
lea edx, [esp + 0x104]
push edx
push str.Content_Type
push esi
push 0x80000000
call fcn.0046bfb0
push 0x800
push 0x4d79fc
lea eax, [esp + 0x1904]
push eax
push str.FileName
lea ecx, [esp + 0x90c]
push ecx
push 0x80000000
call fcn.0046bfb0
push 0xa
push 0x4d79fc
lea edx, [esp + 0xf0]
push edx
push str.NullFile
lea eax, [esp + 0x90c]
push eax
push 0x80000000
call fcn.0046bfb0
push esi
lea ecx, [esp + 0x4c]
push str.Setup_s
push ecx
mov edx, 0x50
mov bl, al
call fcn.00495190
add esp, 0xc
push esi
push 0x80000000
call fcn.0046bce0
movzx edx, al
push edx
push str.Exist
lea eax, [esp + 0x50]
push eax
call fcn.0046c510
lea ecx, [esp + 0x4fc]
push ecx
push str.Type
lea edx, [esp + 0x50]
push edx
call fcn.0046c4f0
lea eax, [esp + 0xfc]
push eax
push str.Content
lea ecx, [esp + 0x50]
push ecx
call fcn.0046c4f0
cmp word [esp + 0x18fc], 0
jne 0x44a2da
test bl, bl
je 0x44a2da
push 0x4d7800
push str.ShellNew
lea edx, [esp + 0x50]
push edx
jmp 0x44a2ec
lea eax, [esp + 0x18fc]
push eax
push str.ShellNew
lea ecx, [esp + 0x50]
push ecx
call fcn.0046c4f0
cmp byte [esp + 0x2910], 0
mov eax, str.WinRAR.ZIP
jne 0x44a305
mov eax, 0x4d9c2c
push eax
push 0x4d79fc
push esi
push 0x80000000
call fcn.0046bf40
push str.Content_Type
push esi
push 0x80000000
call fcn.0046bbc0
mov bl, byte [esp + 0x290c]
test bl, bl
je 0x44a39b
push edi
call fcn.0044b030
mov edi, eax
neg edi
sbb edi, edi
and edi, 0xffffffba
add edi, 0x64
xor esi, esi
test edi, edi
jle 0x44a39a
lea esp, [esp]
push esi
lea edx, [esp + 0x10]
push str..r_02d
push edx
mov edx, 0x20
call fcn.00495190
add esp, 0xc
push 0x4d9c2c
push 0x4d79fc
lea eax, [esp + 0x14]
push eax
push 0x80000000
call fcn.0046bf40
push str.Content_Type
lea ecx, [esp + 0x10]
push ecx
push 0x80000000
call fcn.0046bbc0
inc esi
cmp esi, edi
jl 0x44a350
pop edi
cmp byte [esp + 0x2908], 0
je 0x44a6d5
cmp byte [esp + 0x2910], 0
jne 0x44a3bb
test bl, bl
je 0x44a6d5
lea edx, [esp + 0x8fc]
push edx
push 0x80000000
call fcn.0046bb10
push 0x800
lea eax, [esp + 0x1900]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
mov eax, str.rarnew.dat
test bl, bl
jne 0x44a3f0
mov eax, str.zipnew.dat
push 0x800
push eax
lea ecx, [esp + 0x1904]
push ecx
call fcn.00460500
lea edx, [esp + 0x18fc]
push edx
call fcn.0043ca60
test al, al
jne 0x44a456
push 0x4d83b4
lea eax, [esp + 0x1900]
push eax
call fcn.0043c890
mov esi, eax
test esi, esi
je 0x44a456
push esi
test bl, bl
je 0x44a43c
push 0x14
push 1
push 0x4ea188
jmp 0x44a445
push 0x16
push 1
push 0x4ea170
call fcn.004c3690
add esp, 0x10
push esi
call fcn.004c34b2
add esp, 4
lea ecx, [esp + 0x18fc]
push ecx
push str.FileName
lea edx, [esp + 0x904]
push edx
push 0x80000000
call fcn.0046bf40
jmp 0x44a6d5
lea eax, [esp + 0x4c]
push str.Setup_s
push eax
mov edx, 0x50
call fcn.00495190
add esp, 0xc
push esi
call fcn.00448e00
test al, al
je 0x44a6d5
push 1
push str.Exist
lea ecx, [esp + 0x50]
push ecx
call fcn.0046c5f0
push 0x200
push 0x4d79fc
lea edx, [esp + 0x104]
push edx
test eax, eax
push str.Type
lea eax, [esp + 0x58]
push eax
setne bl
call fcn.0046c5c0
push 0x4d9c2c
lea ecx, [esp + 0x100]
push ecx
call fcn.00486990
test eax, eax
je 0x44a502
push str.WinRAR.ZIP
lea edx, [esp + 0x100]
push edx
call fcn.00486990
test eax, eax
jne 0x44a50c
xor eax, eax
mov word [esp + 0xfc], ax
push 0x200
push 0x4d79fc
lea ecx, [esp + 0x504]
push ecx
push str.Content
lea edx, [esp + 0x58]
push edx
call fcn.0046c5c0
test bl, bl
je 0x44a60c
lea eax, [esp + 0xfc]
push eax
push 0x4d79fc
push esi
push 0x80000000
call fcn.0046bf40
cmp word [esp + 0x4fc], 0
je 0x44a572
lea ecx, [esp + 0x4fc]
push ecx
push str.Content_Type
push esi
push 0x80000000
call fcn.0046bf40
jmp 0x44a582
push str.Content_Type
push esi
push 0x80000000
call fcn.0046bbc0
push 0x800
push 0x4d79fc
lea edx, [esp + 0x1904]
push edx
push str.ShellNew
lea eax, [esp + 0x58]
push eax
call fcn.0046c5c0
push str.FileName
lea ecx, [esp + 0x900]
push ecx
push 0x80000000
call fcn.0046bbc0
mov ax, word [esp + 0x18fc]
test ax, ax
je 0x44a63e
cmp ax, 0x2a
jne 0x44a5eb
push 0x4d79fc
push str.NullFile
lea edx, [esp + 0x904]
push edx
push 0x80000000
call fcn.0046bf40
jmp 0x44a63e
lea eax, [esp + 0x18fc]
push eax
push str.FileName
lea ecx, [esp + 0x904]
push ecx
push 0x80000000
call fcn.0046bf40
jmp 0x44a63e
lea edx, [esp + 0x8fc]
push edx
push 0x80000000
call fcn.0046bb10
push 0x4d79fc
push 0x4d79fc
push esi
push 0x80000000
call fcn.0046bf40
push esi
push 0x80000000
call fcn.0046bb10
cmp byte [esp + 0x290c], 0
je 0x44a6d5
xor esi, esi
mov edi, edi
push esi
lea eax, [esp + 0xc]
push str..r_02d
push eax
mov edx, 0x20
call fcn.00495190
add esp, 0xc
test bl, bl
je 0x44a6bc
cmp word [esp + 0xfc], 0
je 0x44a6bc
lea ecx, [esp + 0xfc]
push ecx
push 0x4d79fc
lea edx, [esp + 0x10]
push edx
push 0x80000000
call fcn.0046bf40
cmp word [esp + 0x4fc], 0
je 0x44a6cb
lea eax, [esp + 0x4fc]
push eax
push str.Content_Type
lea ecx, [esp + 0x10]
push ecx
push 0x80000000
call fcn.0046bf40
jmp 0x44a6cb
lea edx, [esp + 8]
push edx
push 0x80000000
call fcn.0046bb10
inc esi
cmp esi, 0x64
jl 0x44a650
mov ecx, dword [esp + 0x28fc]
pop esi
pop ebx
xor ecx, esp
call fcn.004c0c62
add esp, 0x28f8
ret 0x10