Function at 0x426d50
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x35c
mov eax, dword [0x4c4024]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0xc]
push esi
push edi
mov edi, ecx
cmp dword [edi + 4], 0xffffffff
je 0x426dc4
mov eax, dword [edi]
mov dword [ebp - 0x358], eax
test eax, eax
je 0x426dc4
mov esi, dword [eax + 0x7c]
test esi, esi
je 0x426dc4
mov eax, dword [esi]
test eax, eax
je 0x426d93
push eax
call fcn.0047e30b
add esp, 4
cmp dword [esi + 0x40], 0
mov dword [esi], 0
je 0x426da7
lea ecx, [esi + 4]
call fcn.00424b40
push esi
mov dword [esi + 0x40], 0
call fcn.0047e30b
mov eax, dword [ebp - 0x358]
add esp, 4
mov dword [eax + 0x7c], 0
mov esi, dword [edi]
mov ecx, dword [ebp + 8]
mov dword [edi + 4], 0xffffffff
cmp ecx, dword [esi + 4]
jl 0x426ded
mov eax, 0x10000
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042ca6a
mov esp, ebp
pop ebp
ret 0x10
cmp ecx, dword [esi + 0x10]
jge 0x426e28
test esi, esi
je 0x426e28
mov eax, dword [esi + 0x24]
lea edx, [esi + 0x28]
sub esp, 0x10
mov dword [esi + 0x14], eax
lea eax, [esi + 0x78]
mov dword [esi + 0x10], 0
mov ecx, esi
push 0
push 0
push eax
call fcn.004257c0
xor ecx, ecx
add esp, 0x1c
test eax, eax
sete cl
mov dword [esi + 0x18], ecx
mov ecx, dword [ebp + 8]
mov esi, dword [edi]
cmp dword [esi + 0x10], ecx
jge 0x426e83
nop
test esi, esi
je 0x426e7c
cmp dword [esi + 0x18], 0
je 0x426e7c
mov edx, dword [esi + 0x10]
inc edx
cmp edx, dword [esi + 4]
je 0x426e7c
mov ecx, dword [esi + 0x50]
sub esp, 0x10
mov eax, dword [esi + 0x48]
add ecx, 0x2e
add ecx, dword [esi + 0x4c]
add eax, ecx
mov dword [esi + 0x10], edx
add dword [esi + 0x14], eax
lea edx, [esi + 0x28]
push 0
lea eax, [esi + 0x78]
mov ecx, esi
push 0
push eax
call fcn.004257c0
xor ecx, ecx
add esp, 0x1c
test eax, eax
sete cl
mov dword [esi + 0x18], ecx
mov ecx, dword [ebp + 8]
mov esi, dword [edi]
cmp dword [esi + 0x10], ecx
jl 0x426e30
lea eax, [ebp - 0x350]
push eax
push ecx
mov ecx, edi
call fcn.004264b0
test byte [ebp - 0x248], 0x10
mov al, byte [ebx]
je 0x426eef
cmp al, 0x2f
je 0x426ed1
cmp al, 0x5c
je 0x426ed1
test al, al
je 0x426eaf
cmp byte [ebx + 1], 0x3a
je 0x426ed1
lea ecx, [edi + 0x140]
mov edx, ebx
call fcn.00426c40
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042ca6a
mov esp, ebp
pop ebp
ret 0x10
xor ecx, ecx
mov edx, ebx
call fcn.00426c40
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042ca6a
mov esp, ebp
pop ebp
ret 0x10
mov edx, ebx
mov ecx, ebx
test al, al
je 0x426f0d
cmp al, 0x2f
je 0x426f02
cmp al, 0x5c
je 0x426f02
inc ecx
jmp 0x426f07
lea edx, [ecx + 1]
mov ecx, edx
mov al, byte [ecx]
test al, al
jne 0x426ef7
lea esi, [ebp - 0x110]
mov ecx, ebx
sub esi, ebx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [ecx + esi - 1], al
test al, al
jne 0x426f17
cmp edx, ebx
jne 0x426f30
mov byte [ebp - 0x110], al
jmp 0x426f62
mov eax, edx
sub eax, ebx
cmp eax, 0x104
jae 0x427128
mov byte [ebp + eax - 0x110], 0
mov al, byte [ebp - 0x110]
cmp al, 0x2f
je 0x426f88
cmp al, 0x5c
je 0x426f88
test al, al
je 0x426f62
cmp byte [ebp - 0x10f], 0x3a
je 0x426f88
push edx
lea eax, [ebp - 0x110]
push eax
lea esi, [edi + 0x140]
push esi
lea eax, [ebp - 0x218]
push str._s_s_s
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x14
jmp 0x426fa7
push edx
lea eax, [ebp - 0x110]
push eax
lea eax, [ebp - 0x218]
push 0x4bd1a0
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
xor esi, esi
lea edx, [ebp - 0x110]
mov ecx, esi
call fcn.00426c40
push 0
push dword [ebp - 0x248]
lea eax, [ebp - 0x218]
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x426ff3
mov eax, 0x200
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0042ca6a
mov esp, ebp
pop ebp
ret 0x10
mov edx, dword [edi + 0x138]
mov ecx, dword [edi]
call fcn.00425f40
cmp dword [edi + 0x13c], 0
jne 0x42701c
push 0x4000
call fcn.0042d1e6
add esp, 4
mov dword [edi + 0x13c], eax
mov dword [ebp - 0x358], 0
nop word [eax + eax]
mov edx, dword [edi + 0x13c]
lea eax, [ebp - 0x351]
mov ecx, dword [edi]
push eax
push 0x4000
call fcn.00426140
mov esi, eax
add esp, 8
cmp esi, 0xffffff96
je 0x4270b7
test esi, esi
js 0x427081
jle 0x427074
push 0
lea eax, [ebp - 0x21c]
push eax
push esi
push dword [edi + 0x13c]
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x42708d
cmp byte [ebp - 0x351], 0
jne 0x427099
test esi, esi
jne 0x427030
mov dword [ebp - 0x358], 0x5000000
jmp 0x4270c1
mov dword [ebp - 0x358], 0x400
jmp 0x4270c1
lea eax, [ebp - 0x234]
push eax
lea eax, [ebp - 0x244]
push eax
lea eax, [ebp - 0x23c]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_SetFileTime]
jmp 0x4270c1
mov dword [ebp - 0x358], 0x1000
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edi, dword [edi]
test edi, edi
je 0x42710f
mov esi, dword [edi + 0x7c]
test esi, esi
je 0x42710f
mov eax, dword [esi]
test eax, eax
je 0x4270e4
push eax
call fcn.0047e30b
add esp, 4
cmp dword [esi + 0x40], 0
mov dword [esi], 0
je 0x4270f8
lea ecx, [esi + 4]
call fcn.00424b40
push esi
mov dword [esi + 0x40], 0
call fcn.0047e30b
add esp, 4
mov dword [edi + 0x7c], 0
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x358]
xor ecx, ebp
pop edi
pop esi
pop ebx
call fcn.0042ca6a
mov esp, ebp
pop ebp
ret 0x10
call fcn.0042cbcb
int3