Function at 0x443dd7
Capabilities:
Read file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
push ebx
push esi
push edi
mov dword [ebp - 0x28], ecx
push ecx
lea ecx, [ebp - 0x60]
call fcn.0042c9fa
lea eax, [ebp + 8]
push eax
call fcn.0042609c
pop ecx
lea ecx, [ebp - 0x24]
call fcn.0042aeb8
lea ecx, [ebp - 0x2c]
call fcn.0042aeb8
lea ecx, [ebp - 0x50]
call fcn.0042aeb8
lea ecx, [ebp - 0x14]
call fcn.0042aeb8
mov eax, dword [ebp + 8]
push 1
push 0x2c
pop edi
mov dword [ebp - 0x1c], eax
push edi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.0043e2e9
push 0
lea ecx, [ebp - 0x24]
push ecx
push eax
call fcn.0042d669
mov ecx, dword [ebp - 0x24]
xor eax, eax
mov ax, word [ecx]
add esp, 0xc
xor esi, esi
test ax, ax
mov byte [ebp - 2], 0
mov byte [ebp - 5], 0
mov edx, ecx
je 0x443e77
call fcn.00426083
test al, al
je 0x443e61
mov esi, edx
inc edx
inc edx
mov ax, word [edx]
test ax, ax
jne 0x443e56
test esi, esi
je 0x443e77
and word [esi], ax
mov ecx, dword [ebp - 0x24]
inc esi
inc esi
test esi, esi
mov eax, ecx
mov dword [ebp + 8], eax
je 0x443edd
cmp word [ecx], 0x2a
jne 0x443edd
cmp word [eax + 2], 0x2d
je 0x443edd
push 6
lea eax, [ebp + 8]
push eax
push str.nobom
call fcn.0042c7e8
add esp, 0xc
test al, al
je 0x443eaa
mov byte [ebp - 5], 1
jmp 0x443ed1
push 0xa
lea eax, [ebp + 8]
push eax
push str.transonly
call fcn.0042c7e8
add esp, 0xc
test al, al
je 0x443ec7
mov byte [ebp - 2], 1
jmp 0x443ed1
lea eax, [ebp + 8]
push eax
call fcn.00403b20
pop ecx
mov eax, dword [ebp + 8]
cmp word [eax], 0x2a
mov ecx, dword [ebp - 0x24]
je 0x443e86
xor ebx, ebx
cmp esi, ebx
mov byte [ebp - 4], 0
mov byte [ebp - 7], 0
mov byte [ebp - 6], 0
mov byte [ebp + 0xb], 0
mov byte [ebp - 8], 0
mov byte [ebp - 3], 0
je 0x443f1b
push esi
lea ecx, [ebp - 0x48]
call fcn.00434695
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x48], ecx
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x24], eax
call fcn.0042602e
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
cmp word [edx], di
lea eax, [edx + 2]
mov dword [ebp - 0x54], eax
jne 0x443f4c
push 1
mov dword [ebp - 0x1c], eax
push edi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.0043e2e9
push ebx
lea ecx, [ebp - 0x2c]
push ecx
push eax
call fcn.0042d6bc
mov ecx, dword [ebp - 0x24]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp word [eax], di
jne 0x443f78
add dword [ebp - 0x1c], 2
push 1
push edi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.0043e2e9
push ebx
lea ecx, [ebp - 0x50]
push ecx
push eax
call fcn.0042d669
mov ecx, dword [ebp - 0x24]
add esp, 0xc
mov eax, dword [ebp - 0x1c]
cmp word [eax], di
jne 0x443fa4
add dword [ebp - 0x1c], 2
push 1
push edi
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
call fcn.0043e2e9
push ebx
lea ecx, [ebp - 0x14]
push ecx
push eax
call fcn.0042d669
mov ecx, dword [ebp - 0x24]
add esp, 0xc
mov ax, word [ecx]
cmp ax, bx
je 0x4446db
mov edx, dword [ebp - 0x2c]
cmp word [edx], bx
je 0x4446db
mov edi, dword [ebp - 0x50]
cmp word [edi], bx
je 0x4446db
mov edx, dword [ebp - 0x14]
cmp word [edx], bx
je 0x4446db
cmp ax, 0x2a
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x34], ebx
mov esi, ecx
mov byte [ebp - 1], 0
jne 0x444019
cmp word [ecx + 2], ax
jne 0x444009
mov byte [ebp - 4], al
mov byte [ebp - 6], al
lea esi, [ecx + 4]
jmp 0x44401c
cmp ax, 0x2a
jne 0x444019
mov al, byte [ecx]
mov byte [ebp - 4], al
lea esi, [ecx + 2]
jmp 0x44401c
mov al, byte [ebp - 7]
cmp word [esi], 0x2d
jne 0x444026
mov al, byte [esi]
inc esi
inc esi
test al, al
jne 0x444034
mov esi, 0x80070057
jmp 0x4446de
push esi
push 0x481088
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x44404e
mov byte [ebp - 1], 1
jmp 0x444162
push esi
push str.ANSI
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x444068
and dword [ebp - 0x20], 0
jmp 0x444162
push esi
push 0x48107c
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x444085
mov dword [ebp - 0x20], 0x3a8
jmp 0x444162
push esi
push str.BIG5
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x4440a2
mov dword [ebp - 0x20], 0x3b6
jmp 0x444162
push esi
push str.UTF8
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x4440bf
mov dword [ebp - 0x20], 0xfde9
jmp 0x444162
push esi
push str.UTF7
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x4440dc
mov dword [ebp - 0x20], 0xfde8
jmp 0x444162
push esi
push str.UNICODE
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x4440f6
mov dword [ebp - 0x18], 0x4b0
jmp 0x444162
push esi
push 0x481058
call fcn.00426fa9
test al, al
pop ecx
pop ecx
jne 0x4440ed
push esi
push str.UNICODEB
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x444121
mov dword [ebp - 0x18], 0x4b1
jmp 0x444162
push esi
push str.UNIB
call fcn.00426fa9
test al, al
pop ecx
pop ecx
jne 0x444118
xor ecx, ecx
mov cx, word [esi]
push ecx
call fcn.0042aa31
add esp, 4
test al, al
je 0x444150
push esi
call fcn.0042b5a7
pop ecx
mov dword [ebp - 0x20], eax
jmp 0x444162
test cx, cx
jne 0x44402a
xor eax, eax
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], eax
mov ax, word [edi]
cmp ax, 0x2a
jne 0x444190
cmp word [edi + 2], ax
jne 0x44417e
mov byte [ebp + 0xb], al
mov cl, al
mov byte [ebp - 3], al
add edi, 4
jmp 0x444193
cmp ax, 0x2a
jne 0x444190
mov al, byte [edi]
mov byte [ebp + 0xb], al
mov cl, al
add edi, 2
jmp 0x444193
mov cl, byte [ebp - 8]
cmp word [edi], 0x2d
jne 0x44419d
mov cl, byte [edi]
inc edi
inc edi
test cl, cl
je 0x44402a
push edi
push str.ANSI
call fcn.00426fa9
test al, al
pop ecx
pop ecx
mov ebx, 0x47e5d8
mov esi, 0x47e5dc
je 0x4441c9
and dword [ebp - 0x30], 0
jmp 0x4442de
push edi
push 0x48107c
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x4441e6
mov dword [ebp - 0x30], 0x3a8
jmp 0x4442de
push edi
push str.BIG5
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x444203
mov dword [ebp - 0x30], 0x3b6
jmp 0x4442de
push edi
push str.UTF8
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x44422e
mov dword [ebp - 0x30], 0xfde9
mov dword [ebp - 0x34], 0x47e5e0
mov dword [ebp - 0x3c], 3
jmp 0x4442de
push edi
push str.UTF7
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x44424b
mov dword [ebp - 0x30], 0xfde8
jmp 0x4442de
push edi
push str.UNICODE
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x44426f
mov dword [ebp - 0x38], 0x4b0
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x3c], 2
jmp 0x4442de
push edi
push 0x481058
call fcn.00426fa9
test al, al
pop ecx
pop ecx
jne 0x44425c
push edi
push str.UNICODEB
call fcn.00426fa9
test al, al
pop ecx
pop ecx
jne 0x4442a2
push edi
push str.UNIB
call fcn.00426fa9
test al, al
pop ecx
pop ecx
je 0x4442ae
mov dword [ebp - 0x38], 0x4b1
mov dword [ebp - 0x34], esi
jmp 0x444266
xor ecx, ecx
mov cx, word [edi]
push ecx
call fcn.0042aa31
add esp, 4
test al, al
je 0x4442cc
push edi
call fcn.0042b5a7
pop ecx
mov dword [ebp - 0x30], eax
jmp 0x4442de
test cx, cx
jne 0x44402a
xor eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x44], eax
cmp byte [ebp - 5], 0
je 0x4442e8
and dword [ebp - 0x34], 0
xor edi, edi
lea ecx, [ebp - 0xc]
mov dword [ebp - 0x10], edi
call fcn.0042adba
xor esi, esi
cmp byte [ebp - 4], 0
mov byte [ebp - 5], 0
jne 0x44448f
mov eax, dword [ebp - 0x54]
push 1
mov dword [ebp - 0x1c], eax
push 0x2c
lea eax, [ebp - 0x1c]
push eax
lea ecx, [ebp - 0x60]
mov dword [ebp - 0x40], edi
call fcn.0043e2e9
push edi
lea ecx, [ebp - 0x2c]
push ecx
push eax
call fcn.0042d669
push dword [ebp - 0x2c]
call fcn.0040ca55
add esp, 0x10
push edi
push 0x80
push 3
push edi
push 7
push 0x80000000
push eax
lea ecx, [ebp - 0x40]
call fcn.00403b3c
mov esi, dword [ebp - 0x40]
cmp esi, edi
jne 0x444361
lea ecx, [ebp - 0x40]
call fcn.004029f8
jmp 0x4446cb
push 2
xor ebx, ebx
push ebx
push ebx
push esi
call fcn.00426f04
push 1
push ebx
push ebx
push esi
call fcn.00426f04
push ebx
push ebx
push ebx
push esi
mov edi, eax
call fcn.00426f04
add esp, 0x30
lea eax, [edi + 0xa]
push eax
lea ecx, [ebp - 0xc]
call fcn.0042adfe
mov eax, dword [ebp - 0xc]
mov byte [eax + 2], bl
mov eax, dword [ebp - 0xc]
mov byte [eax + 1], bl
mov eax, dword [ebp - 0xc]
push ebx
lea ecx, [ebp - 0x54]
push ecx
mov byte [eax], bl
mov eax, dword [ebp - 0xc]
or dword [ebp - 0x54], 0xffffffff
push edi
push eax
push esi
mov dword [ebp - 0x1c], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [ebp - 0x54]
cmp esi, ebx
jl 0x444354
cmp byte [ebp - 1], bl
mov eax, dword [ebp - 0xc]
mov byte [esi + eax + 2], bl
mov eax, dword [ebp - 0xc]
mov byte [esi + eax + 1], bl
mov eax, dword [ebp - 0xc]
mov byte [esi + eax], bl
jne 0x4443e3
cmp dword [ebp - 0x18], 0x4b0
jne 0x444408
push 2
push 0x47e5d8
push dword [ebp - 0x1c]
call fcn.00426123
add esp, 0xc
test eax, eax
jne 0x444402
mov dword [ebp - 0x18], 0x4b0
jmp 0x44442e
cmp byte [ebp - 1], 0
jne 0x444411
cmp dword [ebp - 0x18], 0x4b1
jne 0x444438
push 2
push 0x47e5dc
push dword [ebp - 0x1c]
call fcn.00426123
add esp, 0xc
test eax, eax
jne 0x444432
mov dword [ebp - 0x18], 0x4b1
push 2
jmp 0x444460
cmp byte [ebp - 1], 0
jne 0x444441
cmp dword [ebp - 0x20], 0xfde9
jne 0x444477
push 3
push 0x47e5e0
push dword [ebp - 0x1c]
call fcn.00426123
add esp, 0xc
test eax, eax
jne 0x444477
mov dword [ebp - 0x20], 0xfde9
push 3
mov eax, dword [ebp - 0x1c]
pop ebx
sub edi, ebx
add edi, 3
push edi
lea ecx, [ebx + eax]
push ecx
push eax
call fcn.00466d00
add esp, 0xc
sub esi, ebx
jns 0x44447d
xor esi, esi
lea ecx, [ebp - 0x40]
call fcn.004029f8
mov ebx, 0x47e5d8
jmp 0x444538
cmp byte [ebp - 6], 0
je 0x4444f7
mov ecx, dword [ebp - 0x28]
push 0
lea eax, [ebp - 0x2c]
push eax
call fcn.00402aa0
mov ecx, dword [ebp - 0x28]
push 0xffffffffffffffff
push 0
push dword [ebp - 0x2c]
call fcn.0040ac3f
mov edi, eax
test edi, edi
lea ecx, [ebp - 0xc]
je 0x4444dc
mov esi, dword [edi + 0xc]
lea eax, [esi + 8]
push eax
call fcn.0042adfe
push esi
push dword [edi + 4]
push dword [ebp - 0xc]
call fcn.004669c0
add esp, 0xc
mov byte [ebp - 5], 1
jmp 0x4444e3
push 8
call fcn.0042adfe
mov eax, dword [ebp - 0xc]
push 8
add eax, esi
push 0
push eax
call fcn.00466780
add esp, 0xc
jmp 0x444538
cmp dword [ebp - 0x48], edi
je 0x444524
push 0xffffffffffffffff
push dword [ebp - 0x2c]
lea ecx, [ebp - 0xc]
call fcn.00409fd6
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
shl esi, 1
lea eax, [esi + 8]
push eax
lea ecx, [ebp - 0xc]
call fcn.0042adfe
jmp 0x444534
push dword [ebp - 0x2c]
lea eax, [ebp - 0xc]
push eax
call fcn.0042e76d
pop ecx
pop ecx
mov esi, eax
mov byte [ebp - 5], 2
test esi, esi
jl 0x4446cb
cmp byte [ebp - 1], 0
je 0x4445cb
cmp byte [ebp - 5], 0
je 0x4445cb
push 2
push ebx
mov ebx, dword [ebp - 0xc]
push ebx
xor edi, edi
call fcn.00426123
add esp, 0xc
test eax, eax
push 2
jne 0x444570
mov dword [ebp - 0x18], 0x4b0
jmp 0x4445aa
push 0x47e5dc
push ebx
call fcn.00426123
add esp, 0xc
test eax, eax
jne 0x44458d
mov dword [ebp - 0x18], 0x4b1
push 2
jmp 0x4445aa
push 3
push 0x47e5e0
push ebx
call fcn.00426123
add esp, 0xc
test eax, eax
jne 0x4445c3
mov dword [ebp - 0x20], 0xfde9
push 3
pop edi
mov eax, esi
sub eax, edi
add eax, 4
push eax
lea eax, [edi + ebx]
push eax
push ebx
call fcn.00466d00
mov ebx, dword [ebp - 0xc]
add esp, 0xc
sub esi, edi
jns 0x4445ce
xor esi, esi
jmp 0x4445ce
mov ebx, dword [ebp - 0xc]
lea ecx, [ebp - 0x1c]
mov dword [ebp - 0x4c], ebx
call fcn.0042aeb8
mov edi, dword [ebp - 0x30]
cmp edi, dword [ebp - 0x20]
jne 0x444675
mov eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x18]
jne 0x444675
cmp byte [ebp - 3], 0
je 0x444611
push 0
lea eax, [ebp - 0x14]
push eax
push esi
push dword [ebp - 0xc]
push dword [ebp - 0x14]
push dword [ebp - 0x28]
call fcn.0043803b
add esp, 0x18
jmp 0x444659
cmp byte [ebp + 0xb], 0
jne 0x444625
push esi
push dword [ebp - 0xc]
lea ecx, [ebp - 0x10]
call fcn.00425f8b
jmp 0x444659
cmp dword [ebp - 0x44], 0
jne 0x444640
push esi
push dword [ebp - 0xc]
lea eax, [ebp - 0x1c]
push eax
call fcn.0042e6e6
add esp, 0xc
push dword [ebp - 0x1c]
jmp 0x44464e
cmp dword [ebp - 0x48], 0
je 0x44464b
push dword [ebp - 0x2c]
jmp 0x44464e
push dword [ebp - 0x4c]
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
call fcn.00429dbf
lea ecx, [ebp - 0x1c]
call fcn.0042602e
lea ecx, [ebp - 0xc]
call fcn.0042602e
lea ecx, [ebp - 0x10]
call fcn.004029f8
xor esi, esi
jmp 0x4446de
cmp dword [ebp - 0x18], 0x4b1
jne 0x444693
push esi
push dword [ebp - 0xc]
mov dword [ebp - 0x18], 0x4b0
call fcn.00428ec8
pop ecx
pop ecx
and esi, 0xfffffffe
cmp byte [ebp + 0xb], 0
jne 0x44470f
push dword [ebp - 0x14]
call fcn.0040ca55
pop ecx
push 0
push 0x80
push 4
push 0
push 7
push 0x40000000
push eax
lea ecx, [ebp - 0x10]
call fcn.00403b3c
cmp dword [ebp - 0x10], 0
jne 0x44470f
lea ecx, [ebp - 0x1c]
call fcn.0042602e
lea ecx, [ebp - 0xc]
call fcn.0042602e
lea ecx, [ebp - 0x10]
call fcn.004029f8
xor esi, esi
inc esi
lea ecx, [ebp - 0x14]
call fcn.0042602e
lea ecx, [ebp - 0x50]
call fcn.0042602e
lea ecx, [ebp - 0x2c]
call fcn.0042602e
lea ecx, [ebp - 0x24]
call fcn.0042602e
lea ecx, [ebp - 0x60]
call fcn.0042602e
pop edi
mov eax, esi
pop esi
pop ebx
leave
ret 8
and dword [ebp - 0x48], 0
mov eax, 0x3a8
cmp edi, eax
mov edi, 0x3b6
jne 0x444726
cmp dword [ebp - 0x20], edi
je 0x444730
cmp dword [ebp - 0x20], eax
jne 0x4447a1
cmp dword [ebp - 0x30], edi
jne 0x4447a1
cmp byte [ebp - 2], 0
je 0x44473a
mov byte [ebp - 2], 3
lea ecx, [ebp - 0x40]
call fcn.0042adba
xor eax, eax
cmp dword [ebp - 0x30], edi
sete al
push eax
lea eax, [ebp - 0x40]
push eax
push dword [ebp - 0xc]
call fcn.0042e808
mov ecx, dword [ebp - 0x40]
mov eax, dword [ebp - 0xc]
add esp, 0xc
push ecx
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x40], eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp byte [ebp - 2], 3
mov ebx, dword [ebp - 0xc]
mov esi, eax
jne 0x444799
cmp byte [ebp + 0xb], 0
jne 0x444799
test esi, esi
jle 0x44478c
push esi
push ebx
lea ecx, [ebp - 0x10]
call fcn.00425f8b
lea ecx, [ebp - 0x40]
call fcn.0042602e
jmp 0x444933
lea ecx, [ebp - 0x40]
call fcn.0042602e
mov edi, esi
shr edi, 1
cmp dword [ebp - 0x18], 0
jne 0x4447e1
lea edi, [esi + 0xa]
lea eax, [edi + 0xa]
push eax
lea ecx, [ebp - 0x1c]
call fcn.0042aeff
mov ebx, dword [ebp - 0x1c]
push edi
push ebx
push esi
push dword [ebp - 0xc]
push 0
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov edi, eax
test edi, edi
jge 0x4447d6
xor edi, edi
lea esi, [edi + edi]
and word [ebx + esi], 0
mov dword [ebp - 0x4c], ebx
cmp dword [ebp - 0x38], 0x4b1
jne 0x4447f3
push esi
push ebx
call fcn.00428ec8
pop ecx
pop ecx
xor eax, eax
cmp dword [ebp - 0x38], eax
jle 0x444884
cmp byte [ebp - 3], al
je 0x444825
push eax
lea eax, [ebp - 0x14]
push eax
push esi
push ebx
push dword [ebp - 0x14]
push dword [ebp - 0x28]
call fcn.0043803b
add esp, 0x18
lea ecx, [ebp - 0x48]
call fcn.0042602e
jmp 0x444659
cmp byte [ebp + 0xb], 0
jne 0x44484e
cmp esi, eax
jle 0x444933
cmp dword [ebp - 0x34], 0
je 0x444847
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x10]
push dword [ebp - 0x34]
call fcn.00425f8b
push esi
push ebx
jmp 0x4448e7
cmp dword [ebp - 0x44], eax
jne 0x444889
lea ecx, [ebp + 8]
call fcn.0042aeb8
push edi
lea eax, [ebp + 8]
push ebx
push eax
call fcn.0042e747
mov ecx, dword [ebp - 0x28]
add esp, 0xc
push dword [ebp + 8]
push dword [ebp - 0x14]
call fcn.00429dbf
lea ecx, [ebp + 8]
call fcn.0042602e
jmp 0x444933
cmp dword [ebp - 0x44], eax
je 0x444891
push dword [ebp - 0x4c]
jmp 0x444928
shr esi, 1
lea edi, [esi + esi*2]
lea edi, [edi + edi + 0xa]
lea eax, [edi + 1]
push eax
lea ecx, [ebp - 0x48]
call fcn.0042adfe
xor eax, eax
push eax
push eax
push edi
mov edi, dword [ebp - 0x48]
push edi
push esi
push ebx
push eax
push dword [ebp - 0x30]
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
mov esi, eax
test esi, esi
jge 0x4448c3
xor esi, esi
cmp byte [ebp + 0xb], 0
mov byte [edi + esi], 0
jne 0x4448f1
test esi, esi
jle 0x444933
cmp dword [ebp - 0x34], 0
je 0x4448e5
push dword [ebp - 0x3c]
lea ecx, [ebp - 0x10]
push dword [ebp - 0x34]
call fcn.00425f8b
push esi
push edi
lea ecx, [ebp - 0x10]
call fcn.00425f8b
jmp 0x444933
cmp byte [ebp - 3], 0
je 0x444917
mov esi, dword [ebp - 0x14]
push 0
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push eax
push edi
push esi
push dword [ebp - 0x28]
call fcn.0043803b
add esp, 0x18
jmp 0x444933
push esi
lea eax, [ebp - 0x1c]
push edi
push eax
call fcn.0042e6e6
add esp, 0xc
push dword [ebp - 0x1c]
push dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
call fcn.00429dbf
xor esi, esi
cmp dword [ebp - 0x10], esi
je 0x444943
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
lea ecx, [ebp - 0x48]
call fcn.0042602e
lea ecx, [ebp - 0x1c]
call fcn.0042602e
lea ecx, [ebp - 0xc]
call fcn.0042602e
lea ecx, [ebp - 0x10]
call fcn.004029f8
jmp 0x4446de