Function at 0x42822c
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffffc0
mov dword [ebp - 0xc], ecx
mov dword [ebp - 8], edx
mov dword [ebp - 4], eax
xor eax, eax
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
cmp eax, dword [ebp - 0x3c]
jle 0x428261
mov eax, dword [ebp - 0x34]
add eax, 0x1f4
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
call fcn.00404c64
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x20]
jne 0x428276
imul eax, dword [ebp - 0x24], 0xbb
mov dword [ebp - 0x20], eax
mov eax, 0x3ff
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jne 0x428240
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
imul dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
sub dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
sub dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x14], 0x2d5
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
imul eax, dword [ebp - 0x14], 0x2c1
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x3c], 0x2a5
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x3c], 0x2aa
mov dword [ebp - 0x38], eax
cmp dword [0x4ad7a8], 0
jne 0x428344
mov edx, 0x72adfe
mov eax, dword [0x4ad6a8]
call fcn.004225e0
mov dword [0x4ad7a8], eax
mov eax, dword [ebp - 0x38]
sub eax, 0x264
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x289
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x28d
mov dword [ebp - 0x34], eax
push 0
lea eax, [ebp - 0x10]
push eax
mov eax, dword [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
push eax
mov eax, dword [ebp - 4]
push eax
call sub.kernel32.dll_WriteFile_2
test eax, eax
jne 0x4283d4
imul eax, dword [ebp - 0x3c], 0x2b9
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x3c], eax
xor eax, eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x38]
sub eax, 0x252
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
sub eax, 0x257
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x23b
mov dword [ebp - 0x30], eax
fild dword [ebp - 0x2c]
call fcn.00404c70
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x2c]
call fcn.00404c70
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x30]
call fcn.00404c70
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x2c]
call fcn.00404c70
mov dword [ebp - 0x28], eax
fild dword [ebp - 0x2c]
call fcn.00404c70
mov dword [ebp - 0x28], eax
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x279
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x28]
jne 0x428431
fild dword [ebp - 0x28]
call fcn.00404c64
mov dword [ebp - 0x24], eax
mov eax, 0x23
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
add eax, 0x3e7
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x18]
sub dword [ebp - 0x14], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jne 0x428410
mov eax, 0x4e
sub eax, dword [ebp - 0x18]
cmp eax, 0xc8
jge 0x428473
lea ecx, [ebp - 0x18]
lea edx, [ebp - 0x14]
lea eax, [ebp - 0x3c]
call fcn.00427640
imul eax, dword [ebp - 0x14], 0x2d7
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x3c], 0x2bf
mov dword [ebp - 0x38], eax
imul eax, dword [ebp - 0x3c], 0x2a3
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x287
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
sub eax, 0x26c
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x230
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x38]
add eax, 0x234
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 0x1f8
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
call fcn.00404c64
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 0x1fc
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
call fcn.00404c64
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
add eax, 0x1e0
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
add eax, 0x1a4
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
call fcn.00404c64
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x30]
add eax, 4
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
call fcn.00404c70
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
add eax, 0x1cd
mov dword [ebp - 0x40], eax
fild dword [ebp - 0x40]
call fcn.00404c64
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x10]
mov esp, ebp
pop ebp
ret