Function at 0x420cfb
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov dword [ebp - 0x10], 0xbb90c67c
mov esi, dword [ebp - 0x34]
xor ebx, ebx
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x10]
cmp eax, 0xe0f47d0a
jle 0x420d6b
cmp eax, 0x337bd74e
jg 0x420dc7
cmp eax, 0x9d05031
jle 0x420e57
cmp eax, 0x24c4ac5e
jg 0x420f5b
cmp eax, 0x9d05032
je 0x421060
cmp eax, 0x1300cda0
jne 0x420d16
imul eax, dword [ebp - 0x14], 0x6c00000
add eax, 0x2a200000
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x48c37501
jmp 0x420d16
cmp eax, 0xac5fe778
jg 0x420e08
cmp eax, 0x9187a370
jle 0x420e84
cmp eax, 0x99afacd3
jg 0x420fa5
cmp eax, 0x9187a371
je 0x42108f
cmp eax, 0x968581c2
jne 0x420d16
mov cl, byte [ebp - 0x16]
cmp byte [ebp - 0x17], 0
mov eax, 0x892dc24b
jne 0x420db5
mov eax, 0x27da3245
test cl, cl
jne 0x42123c
mov eax, 0x27da3245
jmp 0x42123c
cmp eax, 0x48c37500
jle 0x420ec4
cmp eax, 0x66d8f921
jg 0x420fe3
cmp eax, 0x48c37501
je 0x4210a8
cmp eax, 0x573d535a
jne 0x420d16
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x9d05032
jmp 0x420d16
cmp eax, 0xbb90c67b
jle 0x420f09
cmp eax, 0xd7f59a14
jg 0x421008
cmp eax, 0xbb90c67c
je 0x4210b4
cmp eax, 0xc1f8ed49
jne 0x420d16
imul esi, esi, 0x67
add esi, 0xffffff75
mov eax, 0xd9f4c74f
cmp esi, 0x408
jae 0x420e4f
mov eax, 0x99afacd4
shr esi, 3
jmp 0x42123c
cmp eax, 0xeb8fa61e
jle 0x42102c
cmp eax, 0xeb8fa61f
je 0x4210cc
cmp eax, 0xfc661b1c
jne 0x420d16
mov dword [ebp - 0x10], 0x9187a371
jmp 0x420d16
cmp eax, 0x892dc24b
je 0x4210ed
cmp eax, 0x8a09f1a1
je 0x421100
cmp eax, 0x8a50d471
jne 0x420d16
shl esi, 7
add esi, 0xffffff28
mov eax, 0x968581c2
cmp esi, 0x8e
jl 0x420fd9
jmp 0x42123c
cmp eax, 0x337bd74f
je 0x421117
cmp eax, 0x3e11c0be
je 0x42113f
cmp eax, 0x43c33c99
jne 0x420d16
shr esi, 0xf
add esi, 0xffffff20
mov eax, 0x99afacd4
cmp esi, 0xd6
jae 0x42123c
mov eax, 0x968581c2
jmp 0x42123c
cmp eax, 0xac5fe779
je 0x421151
cmp eax, 0xb76d1135
je 0x42115d
cmp eax, 0xbab04675
jne 0x420d16
mov eax, dword [ebp - 0x14]
shr eax, 7
and eax, 0x7ff
mov dword [ebp - 0x14], eax
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0xc1
dec edx
mov eax, 0x38e745d6
cmp ecx, edx
je 0x42123c
mov eax, 0xe0f47d0b
jmp 0x42123c
cmp eax, 0x24c4ac5f
je 0x421191
cmp eax, 0x27da3245
jne 0x420d16
mov eax, dword [ebp - 0x14]
shr eax, 8
mov ecx, eax
imul ecx, eax
shl eax, 0xb
imul edx, ecx, 0x78bd
dec edx
or eax, 0x99
mov dword [ebp - 0x14], eax
mov eax, 0x3e11c0be
cmp edx, ecx
je 0x42123c
mov eax, 0xfc661b1c
jmp 0x42123c
cmp eax, 0x99afacd4
je 0x4211ac
cmp eax, 0xa32a6cc8
jne 0x420d16
mov eax, esi
shl eax, 4
add esi, eax
add esi, 0xebe
mov eax, 0x87e8b295
cmp esi, 0x86
jae 0x42123c
mov eax, 0x99afacd4
jmp 0x42123c
cmp eax, 0x66d8f922
je 0x421203
cmp eax, 0x73342376
jne 0x420d16
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x99afacd4
jmp 0x420d16
cmp eax, 0xd7f59a15
je 0x421244
cmp eax, 0xd9f4c74f
jne 0x420d16
mov dword [ebp - 0x10], 0x3e11c0be
xor esi, esi
jmp 0x420d16
cmp eax, 0xe5acd740
jne 0x421253
cmp dword [ebp - 0x28], 0
setne al
and al, byte [ebp - 0x15]
mov byte [ebp - 0x16], al
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0
setg byte [ebp - 0x17]
mov dword [ebp - 0x10], 0x968581c2
jmp 0x420d16
mov eax, dword [ebp - 0x14]
add eax, 0x6f
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x2213
dec edx
shr eax, 6
mov dword [ebp - 0x14], eax
mov eax, 0x573d535a
cmp ecx, edx
je 0x42123c
mov eax, 0x337bd74f
jmp 0x42123c
cmp dword [ebp - 0x28], 0
mov eax, 0xbab04675
je 0x42123c
mov eax, 0xb76d1135
jmp 0x42123c
mov dword [ebp - 0x10], 0x73342376
jmp 0x420d16
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0x3e11c0be
jmp 0x420d16
shl esi, 8
and esi, 0x3ffff00
imul esi, esi, 0xf8
add esi, 0xfffffeb4
mov dword [ebp - 0x10], 0xa32a6cc8
jmp 0x420d16
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x10], 0xd7f59a15
jmp 0x420d16
push dword [ebp - 0x28]
call fcn.0045b269
add esp, 4
mov dword [ebp - 0x10], 0xe0f47d0b
jmp 0x420d16
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [ebp - 0x2c]
call edi
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x8a09f1a1
jmp 0x420d16
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0x1300cda0
jmp 0x420d16
mov dword [ebp - 0x10], 0x573d535a
jmp 0x420d16
mov eax, dword [ebp - 0x14]
add eax, 0x37
mov ecx, eax
imul ecx, eax
shl eax, 0xd
imul edx, ecx, 0x4d0d
dec edx
or eax, 0xe2
mov dword [ebp - 0x14], eax
mov eax, 0x99afacd4
cmp edx, ecx
je 0x42123c
mov eax, 0x8a09f1a1
jmp 0x42123c
imul eax, dword [ebp - 0x14], 0x4d19240
add eax, 0x1e7a
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xe5acd740
jmp 0x420d16
mov eax, dword [ebp - 0x1c]
mov dword [eax], ebx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], ebx
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
push dword [ebp + 8]
call fcn.0041f391
add esp, 0xc
push ebx
push 0x80
push 2
push ebx
push ebx
push 0x40000000
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 0xffffffff
setne byte [ebp - 0x15]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0x24c4ac5f
jmp 0x420d16
imul esi, esi, 0x37
add esi, 0xe9c
push 0x5339
push 0x314
push esi
push 0x1537
call fcn.0041be74
add esp, 0x10
push esi
call fcn.00418b24
add esp, 4
mov eax, 0x3e11c0be
cmp esi, 0x55
jae 0x42123c
mov eax, 0x8a50d471
mov dword [ebp - 0x10], eax
jmp 0x420d16
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xac5fe779
jmp 0x420d16
cmp eax, 0xe0f47d0b
jne 0x420d16
mov dword [ebp - 0x34], esi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret