Function at 0x41ef40
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x1e68
call fcn.00407b20
push ebx
push ebp
push esi
push edi
mov edi, dword [esp + 0x1e80]
mov ecx, 0x20
mov eax, 0x84
mov word [edi + 0x2c], cx
lea ebx, [edi + 0x2c]
mov word [esp + 0x60], ax
lea ebp, [edi + 0x50]
mov eax, 0x400
mov word [ebp], cx
mov word [edi], cx
mov word [esp + 0x3c], cx
mov word [esp + 0x14], cx
mov dword [edi + 0x74], ecx
xor ecx, ecx
mov word [esp + 0x1150], ax
movzx eax, cl
inc ecx
lea eax, [eax + eax*8]
mov dword [edi + eax*4 + 0x98], 0x20
cmp ecx, 2
jle 0x41ef91
movzx eax, word [0x43276c]
push eax
push 0x43276a
push ebx
mov word [edi + 0x24], 0x2c2e
mov dword [edi + 0x28], 3
call sym.find_string.exe__string_vstring_12
movzx eax, word [0x43276c]
push eax
push 0x43276b
push ebp
call sym.find_string.exe__string_vstring_12
movzx eax, word [0x43276c]
lea esi, [edi + 0x74]
push eax
push str.PSIF
push esi
call sym.find_string.exe__string_vstring_12
movzx eax, word [0x43276c]
lea ecx, [edi + 0x98]
push eax
push 0x43276f
push ecx
call sym.find_string.exe__string_vstring_12
movzx eax, word [0x43276c]
lea ecx, [edi + 0xbc]
push eax
push 0x432770
push ecx
call sym.find_string.exe__string_vstring_12
movzx eax, word [0x43276c]
lea ecx, [edi + 0xe0]
push eax
push 0x432771
push ecx
call sym.find_string.exe__string_vstring_12
mov esi, dword [esp + 0x1e7c]
push edi
push esi
call sym.find_string.exe__string_copy_8
push edi
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0x1150]
push eax
push esi
call sym.find_string.exe__string_copy_8
lea eax, [esp + 0x1150]
push eax
call sym.find_string.exe__string_downcase_4
movzx eax, word [0x432778]
push eax
push str..lan
lea eax, [esp + 0x1158]
push eax
call sym.find_string.exe__string_appendn_12
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x1558]
push eax
push 1
push 0x4356b8
lea eax, [esp + 0x1160]
push eax
call sym.find_string.exe__file_open_read_env_20
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__file_not_found_4
test al, al
jne 0x41f88a
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
je 0x41f188
push 1
call fcn.0040af0c
push eax
push 0xf
push 1
push str.Unable_to_open
call fcn.0040b1a1
movzx ecx, word [edi + 2]
add esp, 0x14
mov eax, ecx
cmp cx, 0x20
jle 0x41f115
movsx eax, cx
push 0x43570c
sub eax, 0x20
push eax
push 0x432790
call fcn.00401410
movzx eax, word [edi + 2]
add esp, 0xc
test ax, ax
jle 0x41f12c
cmp ax, 0x20
jge 0x41f125
movsx esi, ax
jmp 0x41f12e
mov esi, 0x20
jmp 0x41f12e
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [edi + 4]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 0x22
push 1
push 0x432794
call fcn.0040b1a1
push 0x4327b8
call fcn.00401410
add esp, 0x2c
lea eax, [esp + 0xe8]
push 0
push 0x435708
push 0x4356b8
push 0x4356b8
push eax
call sym.find_string.exe__sys_error_print_20
call sym.find_string.exe__sys_bomb_0
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x155c]
push eax
call sym.find_string.exe__file_read_env_12
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__file_eof_4
test al, al
jne 0x41f87d
nop word [eax + eax]
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
je 0x41f1df
lea eax, [esp + 0x1554]
push eax
push edi
call fcn.0041ed50
lea eax, [esp + 0xe8]
mov dword [esp + 0x10], 1
push eax
lea eax, [esp + 0x40]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
je 0x41f222
lea eax, [esp + 0x1554]
push eax
push edi
call fcn.0041ed50
lea eax, [esp + 0x3c]
push eax
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0x38]
push eax
movzx eax, word [0x43277c]
push eax
push str.DECIMAL___________DIGITS_GROUP_CHAR_DIGITS_GROUP_SIZE_EXP10_____________MSG_ESC___________MSG_ECMD_PARM_____MSG_PARM_STRING___MSG_PARM_INT______MSG_PARM_FLOAT____E_
lea eax, [esp + 0x48]
push eax
call sym.find_string.exe__string_tkpick_s_16
mov eax, dword [esp + 0x38]
dec eax
cmp eax, 8
ja case.default.0x41f256
jmp dword [eax*4 + 0x41f898]
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 1
jne 0x41f33f
mov al, byte [esp + 0x18]
mov byte [edi + 0x24], al
jmp 0x41f64e
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 1
jne 0x41f33f
mov al, byte [esp + 0x18]
mov byte [edi + 0x25], al
jmp 0x41f64e
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
lea eax, [esp + 0xe8]
push eax
lea eax, [edi + 0x28]
push eax
lea eax, [esp + 0x1c]
push eax
call sym.find_string.exe__string_t_int_12
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
je 0x41f64e
push 1
call fcn.0040af0c
push eax
push 0xf
push 1
push str.Bad_parameter__
call fcn.0040b1a1
mov ax, word [esp + 0x2a]
add esp, 0x14
cmp ax, 0x20
jle 0x41f37f
cwde
push 0x435710
sub eax, 0x20
push eax
push 0x432828
call fcn.00401410
mov ax, word [esp + 0x22]
add esp, 0xc
test ax, ax
jle 0x41f7c7
cmp ax, 0x20
jge 0x41f7c0
movsx esi, ax
jmp 0x41f7c9
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 0
jle 0x41f33f
push ebx
lea eax, [esp + 0x18]
push eax
call sym.find_string.exe__string_copy_8
jmp 0x41f64e
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0x14]
push eax
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 0
jle 0x41f33f
push ebp
lea eax, [esp + 0x18]
push eax
call sym.find_string.exe__string_copy_8
jmp 0x41f64e
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0x14]
push eax
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 0
jle 0x41f33f
lea eax, [edi + 0x74]
push eax
lea eax, [esp + 0x18]
push eax
call sym.find_string.exe__string_copy_8
jmp 0x41f64e
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0x14]
push eax
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 0
jle 0x41f33f
lea eax, [edi + 0x98]
push eax
lea eax, [esp + 0x18]
push eax
call sym.find_string.exe__string_copy_8
jmp 0x41f64e
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0x14]
push eax
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 0
jle 0x41f33f
lea eax, [edi + 0xbc]
push eax
lea eax, [esp + 0x18]
push eax
call sym.find_string.exe__string_copy_8
jmp 0x41f64e
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0x14]
push eax
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41f33f
cmp word [esp + 0x16], 0
jle 0x41f33f
lea eax, [edi + 0xe0]
push eax
lea eax, [esp + 0x18]
push eax
call sym.find_string.exe__string_copy_8
jmp 0x41f64e
push 1
call fcn.0040af0c
push eax
push 0x1b
push 1
push str.Unrecognized_command_name__
call fcn.0040b1a1
mov ax, word [esp + 0x52]
add esp, 0x14
cmp ax, 0x20
jle 0x41f5ef
cwde
push 0x43570d
sub eax, 0x20
push eax
push 0x4327d8
call fcn.00401410
mov ax, word [esp + 0x4a]
add esp, 0xc
test ax, ax
jle 0x41f606
cmp ax, 0x20
jge 0x41f5ff
movsx esi, ax
jmp 0x41f608
mov esi, 0x20
jmp 0x41f608
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [esp + 0x4c]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 2
push 1
push 0x4327dc
call fcn.0040b1a1
push 0x4327e0
call fcn.00401410
add esp, 0x2c
lea eax, [esp + 0x1554]
push eax
push edi
call fcn.0041ed50
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x18]
push eax
lea eax, [esp + 0x6c]
push eax
call sym.find_string.exe__string_token_16
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__string_eos_4
test al, al
jne 0x41f78c
push 1
call fcn.0040af0c
push eax
push 0x12
push 1
push str.Extraneous_token__
call fcn.0040b1a1
mov ax, word [esp + 0x2a]
add esp, 0x14
cmp ax, 0x20
jle 0x41f6bf
cwde
push 0x43570e
sub eax, 0x20
push eax
push 0x4327f8
call fcn.00401410
mov ax, word [esp + 0x22]
add esp, 0xc
test ax, ax
jle 0x41f6d6
cmp ax, 0x20
jge 0x41f6cf
movsx esi, ax
jmp 0x41f6d8
mov esi, 0x20
jmp 0x41f6d8
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [esp + 0x24]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 0xf
push 1
push str.__for_command__
call fcn.0040b1a1
mov ax, word [esp + 0x66]
add esp, 0x28
cmp ax, 0x20
jle 0x41f72d
cwde
push 0x43570f
sub eax, 0x20
push eax
push 0x43280c
call fcn.00401410
mov ax, word [esp + 0x4a]
add esp, 0xc
test ax, ax
jle 0x41f744
cmp ax, 0x20
jge 0x41f73d
movsx esi, ax
jmp 0x41f746
mov esi, 0x20
jmp 0x41f746
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [esp + 0x4c]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 2
push 1
push 0x432810
call fcn.0040b1a1
push 0x432814
call fcn.00401410
add esp, 0x2c
lea eax, [esp + 0x1554]
push eax
push edi
call fcn.0041ed50
lea eax, [esp + 0xe8]
push eax
lea eax, [esp + 0x64]
push eax
lea eax, [esp + 0x155c]
push eax
call sym.find_string.exe__file_read_env_12
lea eax, [esp + 0xe8]
push eax
call sym.find_string.exe__file_eof_4
test al, al
je 0x41f1c0
jmp 0x41f87d
mov esi, 0x20
jmp 0x41f7c9
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [esp + 0x24]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 0xe
push 1
push str.__to_command__
call fcn.0040b1a1
mov ax, word [esp + 0x66]
add esp, 0x28
cmp ax, 0x20
jle 0x41f81e
cwde
push 0x435711
sub eax, 0x20
push eax
push 0x43283c
call fcn.00401410
mov ax, word [esp + 0x4a]
add esp, 0xc
test ax, ax
jle 0x41f835
cmp ax, 0x20
jge 0x41f82e
movsx esi, ax
jmp 0x41f837
mov esi, 0x20
jmp 0x41f837
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [esp + 0x4c]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 2
push 1
push 0x432840
call fcn.0040b1a1
push 0x432844
call fcn.00401410
add esp, 0x2c
lea eax, [esp + 0x1554]
push eax
push edi
call fcn.0041ed50
lea eax, [esp + 0x1554]
push eax
call sym.find_string.exe__file_close_4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x1e68
ret 8