Function at 0x404860
Capabilities:
Contain obfuscated stackstrings
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10c
mov eax, dword [0x4bb924]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push 0
push 0x80
push 1
push 0
push 0
push 0xc0000000
push str.public.key
mov dword [ebp - 0x68], 0x1026030
mov dword [ebp - 0x64], 0x6103000
mov dword [ebp - 0x60], 0x48862a07
mov dword [ebp - 0x5c], 0x1023dce
mov dword [ebp - 0x58], 0x812b0506
mov dword [ebp - 0x54], 0x4230004
mov dword [ebp - 0x50], 0x2473049
mov dword [ebp - 0x4c], 0x42040101
mov dword [ebp - 0x48], 0x99ae9300
mov dword [ebp - 0x44], 0xdb95f041
mov dword [ebp - 0x40], 0x8c631cc1
mov dword [ebp - 0x3c], 0xeadce39b
mov dword [ebp - 0x38], 0x84f0ffa3
mov dword [ebp - 0x34], 0xa77eedd7
mov dword [ebp - 0x30], 0xf780b90c
mov dword [ebp - 0x2c], 0x4b51fc4a
mov dword [ebp - 0x28], 0xef5569f8
mov dword [ebp - 0x24], 0x2bed12b9
mov dword [ebp - 0x20], 0xcc288fb5
mov dword [ebp - 0x1c], 0x3892c805
mov dword [ebp - 0x18], 0x3a1dcb6b
mov dword [ebp - 0x14], 0x712f2809
mov dword [ebp - 0x10], 0xa9cf9d93
mov dword [ebp - 0xc], 0x84d46d0b
mov word [ebp - 8], 0xf274
mov dword [ebp - 0x108], 0x309b8130
mov dword [ebp - 0x104], 0x2a070610
mov dword [ebp - 0x100], 0x3dce4886
mov dword [ebp - 0xfc], 0x5060102
mov dword [ebp - 0xf8], 0x4812b
mov dword [ebp - 0xf4], 0x86810323
mov dword [ebp - 0xf0], 0xf9000400
mov dword [ebp - 0xec], 0x61e1a626
mov dword [ebp - 0xe8], 0x927994af
mov dword [ebp - 0xe4], 0x52197c99
mov dword [ebp - 0xe0], 0x503f9c55
mov dword [ebp - 0xdc], 0x8ea1d982
mov dword [ebp - 0xd8], 0x770a83c7
mov dword [ebp - 0xd4], 0x21d1346
mov dword [ebp - 0xd0], 0xf7dbf3f0
mov dword [ebp - 0xcc], 0x839a4cb
mov dword [ebp - 0xc8], 0x56adeaea
mov dword [ebp - 0xc4], 0xa7a7fbe9
mov dword [ebp - 0xc0], 0xd632b9a0
mov dword [ebp - 0xbc], 0x37b795ca
mov dword [ebp - 0xb8], 0xaa8cc35d
mov dword [ebp - 0xb4], 0x529b23ab
mov dword [ebp - 0xb0], 0x9caa5fb6
mov dword [ebp - 0xac], 0xc26cb001
mov dword [ebp - 0xa8], 0x9f682769
mov dword [ebp - 0xa4], 0x428a252a
mov dword [ebp - 0xa0], 0xd573224
mov dword [ebp - 0x9c], 0x5af636be
mov dword [ebp - 0x98], 0x714636fb
mov dword [ebp - 0x94], 0x90874283
mov dword [ebp - 0x90], 0x42a3e20b
mov dword [ebp - 0x8c], 0xa58644ac
mov dword [ebp - 0x88], 0x264d0c5a
mov dword [ebp - 0x84], 0x5d928088
mov dword [ebp - 0x80], 0xbbb786dc
mov dword [ebp - 0x7c], 0xe2d417b1
mov dword [ebp - 0x78], 0xc4ac0366
mov dword [ebp - 0x74], 0x83795ce2
mov dword [ebp - 0x70], 0xd83c2d5e
mov word [ebp - 0x6c], 0x4237
mov dword [ebp - 0x10c], 0
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
lea eax, [ebp - 0x10c]
push 0
push eax
push 0x9e
lea eax, [ebp - 0x108]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0
push 0x80
push 1
push 0
push 0
push 0xc0000000
push str.private.key
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov esi, eax
lea eax, [ebp - 0x10c]
push 0
push eax
push 0x62
lea eax, [ebp - 0x68]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop esi
call fcn.00462c85
mov esp, ebp
pop ebp
ret