Function at 0x42d6d0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58a36d
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x600f80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00425ba2
cmp eax, 7
jl 0x42e0f9
push 0x104
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.00540250
add esp, 0xc
lea ecx, [ebp - 0x14c]
call fcn.0042d180
cmp dword [eax + 0x14], 0x10
jb 0x42d734
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x118]
push 0x104
push eax
call fcn.0053d744
add esp, 0x10
cmp dword [ebp - 0x138], 0x10
jb 0x42d762
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x14c]
push eax
call fcn.00430c20
cmp dword [eax + 0x14], 0x10
jb 0x42d776
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x118]
push 0x104
push eax
call fcn.0053d744
add esp, 0x10
cmp dword [ebp - 0x138], 0x10
jb 0x42d7a4
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
push 0
push 0x5dbe89
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004085a0
lea eax, [ebp - 0x194]
mov dword [ebp - 4], 0
push eax
call fcn.00430e10
mov esi, eax
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 1
push eax
call fcn.00430d60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x17c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42d86e
cmp dword [ebp - 0x11c], 0x10
jb 0x42d847
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x168], 0x10
jb 0x42d885
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42d8b7
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x138], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42d8e9
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42d91f
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431010
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 4
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42d9b5
cmp dword [ebp - 0x11c], 0x10
jb 0x42d98e
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42d9cc
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42d9fe
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42da30
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42da66
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x42dace
cmp dword [ebp - 0x134], 0
je 0x42dace
lea eax, [ebp - 0x194]
push eax
call fcn.00431200
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 7
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
mov byte [ebp - 4], 9
jmp 0x42db09
lea eax, [ebp - 0x194]
push eax
call fcn.00431430
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0xa
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
mov byte [ebp - 4], 0xc
push esi
mov edx, eax
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42db64
cmp dword [ebp - 0x11c], 0x10
jb 0x42db3d
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42db7b
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov byte [ebp - 0x14c], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
jb 0x42dbad
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov byte [ebp - 0x164], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
jb 0x42dbdf
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov byte [ebp - 0x17c], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
jb 0x42dc15
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431620
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0xd
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42dcab
cmp dword [ebp - 0x11c], 0x10
jb 0x42dc84
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42dcc2
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42dcf4
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42dd26
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42dd5c
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431710
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0x10
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42ddf2
cmp dword [ebp - 0x11c], 0x10
jb 0x42ddcb
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42de09
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42de3b
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42de6d
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42dea3
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.004318d0
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0x13
push eax
call fcn.00431820
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42df39
cmp dword [ebp - 0x11c], 0x10
jb 0x42df12
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42df50
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42df82
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42dfb4
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42dfea
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431b00
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x14c]
call fcn.00433ed0
add esp, 4
lea ecx, [ebp - 0x130]
push eax
call fcn.004205c0
cmp dword [ebp - 0x138], 0x10
jb 0x42e032
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42e064
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x42e0e2
mov edx, dword [ebp - 0x11c]
lea ecx, [ebp - 0x130]
cmp edx, 0x10
mov dword [ebp - 0x134], 0
cmovae ecx, dword [ebp - 0x130]
lea ebx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42e0b0
sub ecx, ebx
lea eax, [ebp - 0x130]
push 0
cmp edx, 0x10
lea edx, [ebp - 0x134]
push edx
cmovae eax, dword [ebp - 0x130]
push ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x11c], 0x10
jb 0x42e0f9
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053cd12
mov esp, ebp
pop ebp
ret