Function at 0x44775f
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x74]
sub esp, 0xa5c
mov eax, dword [section..cdata]
push ebx
mov ebx, ecx
mov dword [ebp + 0x70], eax
mov eax, dword [ebx + 0x2208]
push esi
xor ecx, ecx
cmp eax, 2
push edi
mov dword [ebp - 0x9dc], ecx
mov esi, 0x4054b4
je 0x447794
mov esi, 0x4054c4
cmp byte [ebx + 0x1c], 0
mov eax, dword [ebx + 0x1fd8]
lea edi, [ebp - 0x1d8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebx + 0x1fdc]
mov dword [ebp - 0x1bc], eax
mov eax, dword [ebx + 0x1fd0]
mov dword [ebp - 0x1c8], eax
mov eax, dword [ebx + 0x1fd4]
mov dword [ebp - 0x1c4], eax
je 0x4477e7
mov eax, dword [ebp + 0x7c]
cmp eax, dword [ebx + 0x1478]
jne 0x4477e7
mov dword [ebp - 0x1b8], ecx
jmp 0x447801
lea esi, [ebx + 0x1ff4]
cmp dword [esi], ecx
jne 0x4477f9
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov dword [esi], eax
mov eax, dword [esi]
mov dword [ebp - 0x1b8], eax
lea eax, [ebx + 0x2000]
push eax
push 0x104
lea eax, [ebp - 0x1b4]
push eax
call fcn.0040bcb7
lea edx, [ebx + 0x1fe0]
xor eax, eax
cmp dword [edx], eax
jne 0x447851
cmp dword [ebx + 0x1fe4], eax
jne 0x447851
cmp dword [ebx + 0x1fe8], eax
jne 0x447851
cmp dword [ebx + 0x1fec], eax
jne 0x447851
cmp dword [ebx + 0x1ff0], eax
jne 0x447851
push 5
pop ecx
mov esi, 0x4054d8
mov edi, edx
rep movsd dword es:[edi], dword [esi]
push 5
pop ecx
push eax
mov esi, edx
lea edi, [ebp + 0x54]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebx + 0x1ff8]
push eax
push eax
push dword [ebp + 0x7c]
mov dword [ebp + 0x68], ecx
mov ecx, dword [ebx + 0x1ffc]
mov dword [ebp + 0x6c], ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x44789d
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00430d77
xor edi, edi
cmp eax, edi
pop ecx
mov dword [ebp - 0x9dc], eax
jl 0x447a3a
jmp 0x44789f
xor edi, edi
lea eax, [ebp - 0x9e8]
push eax
call fcn.0041d7d7
cmp eax, edi
pop ecx
mov dword [ebp - 0x9e4], eax
jne 0x4478c0
mov dword [ebp - 0x9dc], 0x8007000e
cmp dword [ebp - 0x9dc], edi
jl 0x447978
lea esi, [ebx + 0x1e]
cmp esi, edi
je 0x44791c
lea eax, [ebp - 0x5d8]
push eax
lea eax, [ebp - 0x3d8]
push eax
push edi
push edi
push esi
call dword [sym.imp.MSVCRT.dll__wsplitpath]
add esp, 0x14
lea eax, [ebp - 0x3d8]
push eax
mov edi, 0x200
push edi
lea eax, [ebp - 0x9d8]
push eax
call fcn.0040bcb7
lea eax, [ebp - 0x5d8]
push eax
push edi
lea eax, [ebp - 0x9d8]
push eax
call fcn.0042cab9
xor edi, edi
movzx eax, word [ebp + 0x54]
movzx ecx, word [ebp + 0x58]
shl eax, 0x10
or eax, ecx
neg esi
sbb esi, esi
lea ecx, [ebp - 0x9d8]
and esi, ecx
mov cx, word [ebp - 0x1b4]
neg cx
push esi
lea edx, [ebp - 0x1b4]
sbb ecx, ecx
and ecx, edx
movzx edx, word [ebp + 0x60]
push ecx
push dword [ebp - 0x1b8]
movzx ecx, word [ebp + 0x5c]
shl ecx, 0x10
or ecx, edx
push ecx
push eax
push dword [ebp + 0x64]
push eax
push dword [ebp - 0x9e8]
push dword [ebp - 0x9e4]
call fcn.0041fdb7
add esp, 0x24
mov eax, dword [0x493a9c]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
add eax, 0x248
xor ecx, ecx
test eax, eax
setge cl
dec ecx
mov dword [ebx + 0x1494], ecx
mov eax, dword [0x493a9c]
add eax, 0x248
cmp dword [ebp - 0x9dc], edi
mov dword [ebx + 0x1490], eax
jl 0x4479ec
push edi
lea eax, [ebp - 0x9e0]
push eax
push dword [ebp - 0x9e8]
push dword [ebp - 0x9e4]
push dword [ebp + 0x7c]
call esi
test eax, eax
je 0x4479d9
mov eax, dword [ebp - 0x9e0]
cmp eax, dword [ebp - 0x9e8]
je 0x4479ec
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00430d77
pop ecx
mov dword [ebp - 0x9dc], eax
push dword [ebp - 0x9e4]
call dword [sym.imp.MSVCRT.dll_free]
cmp dword [ebp - 0x9dc], edi
pop ecx
jl 0x447a3a
push edi
lea eax, [ebp - 0x9e0]
push eax
mov edi, 0x248
push edi
lea eax, [ebp - 0x1d8]
push eax
push dword [ebp + 0x7c]
call esi
test eax, eax
je 0x447a27
cmp dword [ebp - 0x9e0], edi
je 0x447a3a
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
call fcn.00430d77
pop ecx
mov dword [ebp - 0x9dc], eax
mov ecx, dword [ebp + 0x70]
mov eax, dword [ebp - 0x9dc]
pop edi
pop esi
pop ebx
call fcn.0046e295
add ebp, 0x74
leave
ret 4