Function at 0x4208cc
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x44048d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x7c4
mov dword [ebp - 0x7c8], ecx
cmp dword [ebp + 0xc], 0
jne 0x4208fd
xor eax, eax
jmp 0x420d0c
mov ecx, dword [ebp + 0xc]
call fcn.00403929
push eax
call fcn.0040bae5
add esp, 4
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jne 0x42091e
xor eax, eax
jmp 0x420d0c
push 0x20
call fcn.004075f0
mov dword [ebp - 0x7bc], eax
mov dword [ebp - 4], 0
cmp dword [ebp - 0x7bc], 0
je 0x42094e
mov ecx, dword [ebp - 0x7bc]
call fcn.00401e38
mov dword [ebp - 0x7cc], eax
jmp 0x420958
mov dword [ebp - 0x7cc], 0
mov eax, dword [ebp - 0x7cc]
mov dword [ebp - 0x7b8], eax
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x7b8]
mov dword [ebp - 0x3ac], ecx
mov edx, dword [ebp - 0x10]
push edx
mov ecx, dword [ebp - 0x3ac]
call fcn.00402456
mov ecx, dword [ebp - 0x3ac]
call fcn.0040355f
mov dword [ebp - 0x39c], eax
mov ecx, dword [ebp - 0x3ac]
call fcn.004035b2
mov dword [ebp - 0x398], eax
mov ecx, dword [ebp - 0x3ac]
call fcn.0040350e
and eax, 0xffff
cmp eax, 8
je 0x4209ca
push 8
mov ecx, dword [ebp - 0x3ac]
call fcn.004071ff
push 0x80
push 0
lea eax, [ebp - 0x394]
push eax
call sub.MSVCRT.dll_memset
add esp, 0xc
mov byte [ebp - 0x394], 0xa
mov byte [ebp - 0x393], 5
mov byte [ebp - 0x392], 1
mov byte [ebp - 0x391], 8
mov word [ebp - 0x390], 0
mov word [ebp - 0x38e], 0
mov ecx, dword [ebp - 0x39c]
sub ecx, 1
mov word [ebp - 0x38c], cx
mov edx, dword [ebp - 0x398]
sub edx, 1
mov word [ebp - 0x38a], dx
mov byte [ebp - 0x384], 0
mov byte [ebp - 0x383], 0
mov byte [ebp - 0x382], 0
mov byte [ebp - 0x381], 0xff
mov byte [ebp - 0x380], 0xff
mov byte [ebp - 0x37f], 0xff
mov byte [ebp - 0x354], 0
mov byte [ebp - 0x353], 1
mov ax, word [ebp - 0x39c]
mov word [ebp - 0x352], ax
mov word [ebp - 0x350], 1
lea ecx, [ebp - 0x7b0]
push ecx
push 0x100
push 0
mov ecx, dword [ebp - 0x3ac]
call fcn.0040345d
mov ecx, eax
call fcn.00407980
mov dword [ebp - 0x3a8], 0
jmp 0x420ab8
mov edx, dword [ebp - 0x3a8]
add edx, 1
mov dword [ebp - 0x3a8], edx
cmp dword [ebp - 0x3a8], 0x100
jge 0x420b1d
mov eax, dword [ebp - 0x3a8]
imul eax, eax, 3
mov ecx, dword [ebp - 0x3a8]
mov dl, byte [ebp + ecx*4 - 0x7b0]
mov byte [ebp + eax - 0x314], dl
mov eax, dword [ebp - 0x3a8]
imul eax, eax, 3
mov ecx, dword [ebp - 0x3a8]
mov dl, byte [ebp + ecx*4 - 0x7af]
mov byte [ebp + eax - 0x313], dl
mov eax, dword [ebp - 0x3a8]
imul eax, eax, 3
mov ecx, dword [ebp - 0x3a8]
mov dl, byte [ebp + ecx*4 - 0x7ae]
mov byte [ebp + eax - 0x312], dl
jmp 0x420aa9
mov ecx, dword [ebp - 0x3ac]
call fcn.00403929
push eax
call fcn.0040bae5
add esp, 4
mov dword [ebp - 0x3b0], eax
mov eax, dword [ebp - 0x3ac]
mov dword [ebp - 0x7c4], eax
mov ecx, dword [ebp - 0x7c4]
mov dword [ebp - 0x7c0], ecx
cmp dword [ebp - 0x7c0], 0
je 0x420b73
push 1
mov edx, dword [ebp - 0x7c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x7c0]
call dword [eax + 4]
mov dword [ebp - 0x7d0], eax
jmp 0x420b7d
mov dword [ebp - 0x7d0], 0
mov ecx, dword [ebp - 0x3b0]
push ecx
call dword [sym.imp.KERNEL32.dll_GlobalLock]
mov dword [ebp - 0x7b4], eax
mov edx, dword [ebp - 0x7b4]
push edx
call fcn.00408276
add esp, 4
mov dword [ebp - 0x3a0], eax
mov eax, dword [ebp - 0x7b4]
push eax
call fcn.004084cb
add esp, 4
mov word [ebp - 0x14], ax
push 0x447190
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.MSVCRT.dll_fopen]
add esp, 8
mov dword [ebp - 0x3a4], eax
cmp dword [ebp - 0x3a4], 0
jne 0x420bfa
mov edx, dword [ebp - 0x3b0]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x3b0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
jmp 0x420d0c
mov ecx, dword [ebp - 0x3a4]
push ecx
push 1
push 0x80
lea edx, [ebp - 0x394]
push edx
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov eax, dword [ebp - 0x398]
sub eax, 1
mov dword [ebp - 0x3a8], eax
jmp 0x420c38
mov ecx, dword [ebp - 0x3a8]
sub ecx, 1
mov dword [ebp - 0x3a8], ecx
cmp dword [ebp - 0x3a8], 0
jl 0x420cad
mov edx, dword [ebp - 0x3a4]
push edx
mov eax, dword [ebp - 0x14]
and eax, 0xffff
mov ecx, dword [ebp - 0x3a8]
imul ecx, eax
mov edx, dword [ebp - 0x3a0]
add edx, ecx
push edx
mov eax, dword [ebp - 0x352]
and eax, 0xffff
push eax
call fcn.0041ff90
add esp, 0xc
test eax, eax
jne 0x420ca8
mov ecx, dword [ebp - 0x3a4]
push ecx
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
mov edx, dword [ebp - 0x3b0]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x3b0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
xor eax, eax
jmp 0x420d0c
jmp 0x420c29
mov ecx, dword [ebp - 0x3a4]
push ecx
push 0xc
call dword [sym.imp.MSVCRT.dll_fputc]
add esp, 8
mov edx, dword [ebp - 0x3a4]
push edx
push 0x300
push 1
lea eax, [ebp - 0x314]
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
add esp, 0x10
mov ecx, dword [ebp - 0x3a4]
push ecx
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 4
mov edx, dword [ebp - 0x3b0]
push edx
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
mov eax, dword [ebp - 0x3b0]
push eax
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret 8