Function at 0x44d69c
Capabilities:
Write file on windows

Disassembly:
push ebp
lea ebp, [esp - 0x10004]
mov eax, 0x10004
call fcn.004737a0
push 0xffffffffffffffff
push 0x49b1b9
mov eax, dword fs:[0]
push eax
sub esp, 0x88
mov eax, dword [0x4bca50]
xor eax, ebp
mov dword [ebp + 0x10000], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov edi, dword [ebp + 0x1000c]
mov dword [ebp - 0x34], edi
mov esi, dword [ebp + 0x10010]
mov dword [ebp - 0x3c], esi
xor ebx, ebx
mov dword [ebp - 4], ebx
push ebx
push 0x10000
lea eax, [ebp]
push eax
lea ecx, [ebp - 0x30]
call fcn.0045482e
mov dword [ebp - 0x14], 0x65ef0
lea eax, [ebp - 0x14]
push eax
lea ecx, [ebp - 0x30]
call fcn.00454a37
mov eax, dword [edi + 0x1c]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x38]
push eax
lea ecx, [ebp - 0x30]
call fcn.00454a37
lea eax, [ebp - 0x18]
push eax
mov ecx, edi
call fcn.004958bc
mov dword [ebp - 0x20], ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x90]
push eax
mov ecx, edi
call fcn.0044d4dd
push eax
lea ecx, [ebp - 0x18]
call fcn.0044cfed
test al, al
je 0x44d95a
lea ecx, [ebp - 0x18]
call fcn.0049530d
cmp dword [eax + 0x18], 8
jb 0x44d773
mov edi, dword [eax + 4]
jmp 0x44d776
lea edi, [eax + 4]
test edi, edi
je 0x44d785
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44d789
xor eax, eax
jmp 0x44d7a4
lea esi, [eax + eax]
mov eax, esi
call fcn.00472f70
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.0044ced6
push eax
lea ecx, [ebp - 0x6c]
call fcn.004024f8
push eax
lea eax, [ebp - 0x88]
push eax
call fcn.0044d5eb
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00455eef
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004028c7
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004028c7
lea ecx, [ebp - 0x18]
call fcn.0049530d
cmp dword [eax + 0x54], 8
jb 0x44d7f3
mov edi, dword [eax + 0x40]
jmp 0x44d7f6
lea edi, [eax + 0x40]
test edi, edi
je 0x44d805
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44d809
xor eax, eax
jmp 0x44d824
lea esi, [eax + eax]
mov eax, esi
call fcn.00472f70
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.0044ced6
push eax
lea ecx, [ebp - 0x6c]
call fcn.004024f8
push eax
lea ecx, [ebp - 0x30]
call fcn.00455eef
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004028c7
lea ecx, [ebp - 0x18]
call fcn.0049530d
add eax, 0x58
push eax
lea ecx, [ebp - 0x30]
call fcn.00454a37
lea ecx, [ebp - 0x18]
call fcn.0049530d
mov eax, dword [eax + 0x38]
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
lea ecx, [ebp - 0x30]
call fcn.00454a37
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x18]
call fcn.0049530d
mov ecx, eax
add ecx, 0x1c
call fcn.004958bc
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x18]
call fcn.0049530d
mov ecx, eax
add ecx, 0x1c
call fcn.0044d4dd
and dword [ebp - 0x1c], 0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x48]
call fcn.0044d002
test al, al
jne 0x44d944
lea ecx, [ebp - 0x48]
call fcn.0049530d
cmp dword [eax + 0x18], 8
jb 0x44d8c7
mov edi, dword [eax + 4]
jmp 0x44d8ca
lea edi, [eax + 4]
test edi, edi
je 0x44d8d9
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44d8dd
xor eax, eax
jmp 0x44d8f8
lea esi, [eax + eax]
mov eax, esi
call fcn.00472f70
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.0044ced6
push eax
lea ecx, [ebp - 0x88]
call fcn.004024f8
push eax
lea eax, [ebp - 0x6c]
push eax
call fcn.0044d5eb
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.00455eef
push 0
push 1
lea ecx, [ebp - 0x6c]
call fcn.004028c7
push 0
push 1
lea ecx, [ebp - 0x88]
call fcn.004028c7
lea ecx, [ebp - 0x48]
call fcn.0044d029
inc dword [ebp - 0x1c]
jmp 0x44d8a0
lea ecx, [ebp - 0x18]
call fcn.0044d078
inc dword [ebp - 0x20]
mov esi, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x34]
jmp 0x44d741
cmp dword [esi + 0x18], 8
jb 0x44d965
mov edi, dword [esi + 4]
jmp 0x44d968
lea edi, [esi + 4]
test edi, edi
je 0x44d977
push edi
call ebx
inc eax
cmp eax, 0x3fffffff
jle 0x44d97b
xor eax, eax
jmp 0x44d996
lea esi, [eax + eax]
mov eax, esi
call fcn.00472f70
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
pop ecx
push ecx
push esi
push edi
push eax
call fcn.0044ced6
push 0x4a6a38
push eax
call fcn.00474b37
pop ecx
pop ecx
mov esi, eax
test esi, esi
je 0x44d9cb
push esi
lea ecx, [ebp - 0x30]
call fcn.00454879
push eax
push 1
lea eax, [ebp]
push eax
call fcn.004749f1
push esi
call fcn.00474813
add esp, 0x14
or dword [ebp - 4], 0xffffffff
lea esp, [ebp - 0xa4]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x10000]
xor ecx, ebp
call fcn.0047099a
add ebp, 0x10004
leave
ret