Function at 0x447d30
Capabilities:
Write file on windows

Disassembly:
push ebp
push edi
xor edi, edi
push esi
xor esi, esi
push ebx
mov ebx, eax
sub esp, 0x5c
mov eax, dword [eax]
mov dword [esp + 0x2c], edx
mov edx, dword [ebx + 4]
mov dword [esp + 0x30], eax
mov eax, dword [ebx + 0x18]
mov dword [esp + 0x34], edx
mov edx, dword [eax + 0x10]
mov ebp, edx
or ebp, ecx
je 0x447df2
test edx, edx
je 0x447d84
mov edx, dword [eax + 0x14]
test edx, edx
je 0x447d78
add eax, 0x14
mov dword [esp], edx
mov dword [esp + 4], eax
call fcn.0041d440
add esp, 0x5c
mov eax, esi
mov edx, edi
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x38], ecx
mov ecx, dword [esp + 0x34]
mov eax, dword [eax + 0x88]
mov dword [esp + 0x48], edx
lea edx, [esp + 0x48]
mov dword [esp + 8], 8
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0x4c], ecx
call fcn.0042ade0
mov ecx, dword [esp + 0x38]
test eax, eax
je 0x447e20
mov eax, dword [ebx + 0x18]
or ecx, dword [eax + 0x10]
jne 0x447d62
mov ecx, esi
or ecx, edi
jne 0x447d62
mov eax, dword [esp + 0x2c]
mov dword [esp], eax
call fcn.00414000
mov esi, eax
mov eax, edx
mov edi, edx
or eax, esi
jne 0x447f50
mov eax, dword [ebx + 0x18]
jmp 0x447d62
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x38], ecx
mov dword [esp], eax
call fcn.00413ff0
mov ecx, dword [esp + 0x38]
mov esi, eax
mov eax, edx
mov edi, edx
or eax, esi
jne 0x447ec0
mov eax, dword [ebx + 0x18]
mov edx, dword [eax + 0x10]
jmp 0x447d5e
mov edx, dword [ebx + 4]
mov eax, dword [ebx]
mov dword [esp + 0x3c], ecx
mov dword [esp], 2
mov dword [esp + 0x34], edx
mov edx, dword [fcn.004a1b90]
mov dword [esp + 0x30], eax
mov dword [esp + 0x38], edx
call edx
mov ecx, dword [esp + 0x34]
mov edx, dword [esp + 0x30]
mov dword [esp + 0x14], ebx
mov dword [esp + 8], 0x53ded9
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edx
mov dword [esp + 4], 0x53dee4
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov edx, dword [esp + 0x38]
mov dword [esp], 2
mov dword [esp + 0x30], edx
call edx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov edx, dword [esp + 0x30]
mov dword [esp], 2
call edx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov ecx, dword [esp + 0x3c]
jmp 0x447dc2
mov dword [esp + 4], edx
mov dword [esp], esi
mov dword [esp + 0x3c], ecx
call fcn.0041d490
mov ebp, dword [fcn.004a1b90]
mov dword [esp], 2
mov dword [esp + 0x38], eax
call ebp
mov edx, dword [esp + 0x38]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x53dea0
mov dword [esp + 0x10], edx
mov dword [esp + 4], 0x53dea8
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebp
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebp
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov eax, dword [ebx + 0x18]
mov ecx, dword [esp + 0x3c]
mov edx, dword [eax + 0x10]
jmp 0x447d5e
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.0041d490
mov ebp, dword [fcn.004a1b90]
mov dword [esp], 2
mov dword [esp + 0x2c], eax
call ebp
mov edx, dword [esp + 0x2c]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x53dea0
mov dword [esp + 0x10], edx
mov dword [esp + 4], 0x53df38
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebp
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x53ded6
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebp
mov dword [esp], eax
call sub.msvcrt.dll_fflush
jmp 0x447dea