Function at 0x42442b
Capabilities:
Write file on windows

Disassembly:
push 0x908
mov eax, 0x44ce6f
call fcn.0043056f
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x8f4], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0x8f8], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x8e0], eax
xor eax, eax
mov dword [ebp - 0x860], 7
mov dword [ebp - 0x864], ebx
mov word [ebp - 0x874], ax
lea eax, [ebp - 0x874]
mov dword [ebp - 4], ebx
push eax
push 0x404b90
push 0x2a
mov dword [ebp - 0x8d8], ebx
call fcn.0042dd76
add esp, 0xc
test al, al
jne 0x4244a8
push ebx
push 1
lea ecx, [ebp - 0x874]
call fcn.0040f2f2
mov al, 1
jmp 0x424920
cmp dword [ebp - 0x860], 8
mov eax, dword [ebp - 0x874]
jae 0x4244bd
lea eax, [ebp - 0x874]
push 0xa
push ebx
push eax
call fcn.00431588
mov edi, eax
add esp, 0xc
test edi, edi
je 0x424493
xor eax, eax
push 0x7fe
mov word [ebp - 0x810], ax
lea eax, [ebp - 0x80e]
push ebx
push eax
call fcn.00431050
add esp, 0xc
lea eax, [ebp - 0x810]
mov ecx, 0x800
mov byte [eax], bl
inc eax
dec ecx
jne 0x4244f8
mov esi, ebx
xor ebx, ebx
inc ebx
mov dword [ebp - 0x8e4], esi
test edi, edi
jle 0x4248f9
and dword [ebp - 0x830], 0
xor eax, eax
mov dword [ebp - 0x82c], 7
mov word [ebp - 0x840], ax
push 0x404b9c
lea ecx, [ebp - 0x88c]
mov byte [ebp - 4], bl
call fcn.0040e1c3
push 0xa
push 0x400
lea eax, [ebp - 0x810]
mov byte [ebp - 4], 2
push eax
push esi
call fcn.00433131
add esp, 0x10
test eax, eax
jne 0x4248ca
lea eax, [ebp - 0x810]
push eax
call fcn.0040f51e
pop ecx
push eax
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x88c]
call fcn.00411ffc
cmp dword [ebp - 0x878], 8
mov eax, dword [ebp - 0x88c]
jae 0x424596
lea eax, [ebp - 0x88c]
lea ecx, [ebp - 0x840]
push ecx
push eax
push 0x2a
call fcn.0042dd76
add esp, 0xc
test al, al
je 0x4248ca
push 0x404bac
lea ecx, [ebp - 0x85c]
call fcn.0040e1c3
lea eax, [ebp - 0x810]
mov byte [ebp - 4], 3
push eax
call fcn.0040f51e
pop ecx
push eax
lea eax, [ebp - 0x810]
push eax
lea ecx, [ebp - 0x85c]
call fcn.00411ffc
and dword [ebp - 0x8d8], 0
cmp dword [ebp - 0x848], 8
mov eax, dword [ebp - 0x85c]
jae 0x424600
lea eax, [ebp - 0x85c]
lea ecx, [ebp - 0x8d8]
push ecx
push 0
push eax
push 0x2a
push dword [0x454364]
call fcn.0042cf76
add esp, 0x14
cmp eax, 0xea
jne 0x4248bc
cmp dword [ebp - 0x8d8], 0
je 0x4248bc
xor eax, eax
lea ecx, [ebp - 0x8f0]
mov byte [ebp - 0x8d9], al
mov dword [ebp - 0x8f0], eax
mov dword [ebp - 0x8ec], eax
mov dword [ebp - 0x8e8], eax
lea eax, [ebp - 0x8d9]
push eax
push dword [ebp - 0x8d8]
call fcn.004270f7
cmp dword [ebp - 0x848], 8
mov eax, dword [ebp - 0x85c]
mov byte [ebp - 4], 4
jae 0x42467d
lea eax, [ebp - 0x85c]
lea ecx, [ebp - 0x8d8]
push ecx
push dword [ebp - 0x8f0]
push eax
push 0x2a
push dword [0x454364]
call fcn.0042cf76
add esp, 0x14
xor edx, edx
xor eax, eax
mov dword [ebp - 0x818], edx
mov word [ebp - 0x828], ax
push 7
pop esi
mov dword [ebp - 0x814], esi
cmp dword [ebp - 0x82c], 8
mov ecx, dword [ebp - 0x840]
mov byte [ebp - 4], 5
jae 0x4246ce
lea ecx, [ebp - 0x840]
mov eax, dword [ebp - 0x8f4]
cmp dword [eax + 0x14], 8
jb 0x4246dc
mov eax, dword [eax]
push edx
push ecx
push eax
push edx
lea eax, [ebp - 0x828]
push eax
call fcn.0042de0a
xor ecx, ecx
mov dword [ebp - 0x890], esi
xor eax, eax
mov dword [ebp - 0x894], ecx
add esp, 0x14
mov word [ebp - 0x8a4], ax
mov dword [ebp - 0x8a8], esi
mov dword [ebp - 0x8ac], ecx
mov word [ebp - 0x8bc], ax
mov dword [ebp - 0x8c0], esi
mov dword [ebp - 0x8c4], ecx
mov word [ebp - 0x8d4], ax
cmp dword [ebp - 0x814], 8
mov eax, dword [ebp - 0x828]
mov byte [ebp - 4], 8
jae 0x424745
lea eax, [ebp - 0x828]
push ecx
push ecx
lea ecx, [ebp - 0x8bc]
push ecx
lea ecx, [ebp - 0x8a4]
push ecx
push eax
call fcn.0042e4bf
mov ecx, dword [ebp - 0x8bc]
add esp, 0x14
cmp dword [ebp - 0x8a8], 8
jae 0x424773
lea ecx, [ebp - 0x8bc]
cmp dword [ebp - 0x890], 8
mov eax, dword [ebp - 0x8a4]
jae 0x424788
lea eax, [ebp - 0x8a4]
push 0
push 0
push ecx
push eax
lea eax, [ebp - 0x8d4]
push eax
call fcn.0042de0a
mov eax, dword [ebp - 0x8d4]
add esp, 0x14
cmp dword [ebp - 0x8c0], 8
jae 0x4247b2
lea eax, [ebp - 0x8d4]
push eax
call fcn.0042c255
cmp dword [ebp - 0x814], 8
mov eax, dword [ebp - 0x828]
pop ecx
jae 0x4247ce
lea eax, [ebp - 0x828]
xor ecx, ecx
push ecx
push 0x80
push 2
push ecx
push ecx
push 0x40000000
push eax
call dword [0x4534fc]
mov esi, eax
cmp esi, 0xffffffff
je 0x424818
and dword [ebp - 0x844], 0
lea eax, [ebp - 0x844]
push 0
push eax
push dword [ebp - 0x8d8]
push dword [ebp - 0x8f0]
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x424926
mov ecx, dword [ebp - 0x8f8]
lea eax, [ebp - 0x840]
push eax
call fcn.0041b2e3
mov ecx, dword [ebp - 0x8e0]
lea eax, [ebp - 0x828]
push eax
call fcn.0041b2e3
cmp esi, 0xffffffff
je 0x424848
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
lea ecx, [ebp - 0x8d4]
push esi
push ebx
call fcn.0040f2f2
push esi
push ebx
lea ecx, [ebp - 0x8bc]
call fcn.0040f2f2
push esi
push ebx
lea ecx, [ebp - 0x8a4]
call fcn.0040f2f2
push esi
push ebx
lea ecx, [ebp - 0x828]
call fcn.0040f2f2
lea ecx, [ebp - 0x8f0]
call fcn.00411f1c
push esi
push ebx
lea ecx, [ebp - 0x85c]
call fcn.0040f2f2
push esi
push ebx
lea ecx, [ebp - 0x88c]
call fcn.0040f2f2
push esi
push ebx
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 0
call fcn.0040f2f2
mov esi, dword [ebp - 0x8e4]
jmp 0x4248ea
push 0
push ebx
lea ecx, [ebp - 0x85c]
call fcn.0040f2f2
push 0
push ebx
lea ecx, [ebp - 0x88c]
call fcn.0040f2f2
push 0
push ebx
lea ecx, [ebp - 0x840]
mov byte [ebp - 4], 0
call fcn.0040f2f2
inc esi
mov dword [ebp - 0x8e4], esi
cmp esi, edi
jl 0x424511
mov ecx, dword [ebp - 0x8e0]
push 0x18
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
pop ecx
cdq
idiv ecx
push 0
cmp eax, edi
lea ecx, [ebp - 0x874]
push 1
sete bl
call fcn.0040f2f2
mov al, bl
call fcn.0043051e
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov edi, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x814], 8
mov ecx, dword [ebp - 0x828]
jae 0x42494a
lea ecx, [ebp - 0x828]
cmp dword [ebp - 0x82c], 8
mov eax, dword [ebp - 0x840]
jae 0x42495f
lea eax, [ebp - 0x840]
push ecx
push eax
push 0x58f
lea eax, [ebp - 0x914]
push edi
push eax
call fcn.0040e1f4
add esp, 0x14
lea eax, [ebp - 0x914]
push 0x44decc
push eax
call fcn.004304a7
int3