Function at 0x43a4f2
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
xor ebx, ebx
push ebx
push 0x80
push 2
push ebx
push ebx
push 0x40000000
push dword [0x4d5b14]
mov dword [ebp - 0x20], ecx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0xc], eax
cmp eax, 0xffffffff
jne 0x43a53a
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x43a535
and eax, 0xffff
or eax, 0x80070000
pop ebx
leave
ret 4
push esi
push edi
mov esi, 0x4d2c98
push esi
lea ecx, [ebp - 8]
call fcn.00407700
push esi
lea ecx, [ebp - 4]
call fcn.00407700
mov eax, dword [ebp + 8]
mov esi, dword [eax]
cmp esi, dword [eax + 4]
je 0x43a5f0
mov edi, 0x4c1da0
push str.autoupdate
mov ecx, esi
call fcn.0040b380
test eax, eax
je 0x43a5e1
push edi
lea eax, [ebp - 0x14]
push esi
push eax
call fcn.0040d520
mov eax, dword [eax]
add esp, 0xc
push dword [eax - 0xc]
lea ecx, [ebp - 8]
push eax
call fcn.0041b0e0
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00407c80
push edi
push dword [esi + 0xc]
lea eax, [ebp - 0x1c]
push dword [esi + 8]
push eax
call fcn.00452389
add esp, 0xc
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040d520
mov eax, dword [eax]
add esp, 0xc
push dword [eax - 0xc]
lea ecx, [ebp - 4]
push eax
call fcn.0041b0e0
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00407c80
mov eax, dword [ebp + 8]
add esi, 0x10
cmp esi, dword [eax + 4]
jne 0x43a566
push 0x2c
lea ecx, [ebp - 8]
call fcn.00439b9b
push 0x2c
lea ecx, [ebp - 4]
call fcn.00439b9b
mov eax, dword [ebp - 0x20]
add eax, 0x48
push eax
push 0x4befb8
push 0x4d5b0c
push str._r_ncmdline
lea eax, [ebp - 4]
push eax
push str._r_ncomp_versions
lea eax, [ebp - 8]
push eax
push str.comp_names
lea ecx, [ebp - 0x28]
call fcn.00407520
push eax
lea eax, [ebp - 0x24]
push eax
call fcn.0040d680
add esp, 0xc
push eax
lea eax, [ebp - 0x14]
push eax
call fcn.0040d520
add esp, 0xc
push eax
lea eax, [ebp - 0x18]
push eax
call fcn.0040d680
add esp, 0xc
push eax
lea eax, [ebp - 0x1c]
push eax
call fcn.0040d520
add esp, 0xc
push eax
lea eax, [ebp - 0x20]
push eax
call fcn.0040d680
add esp, 0xc
push eax
lea eax, [ebp + 8]
push eax
call fcn.0040d520
add esp, 0xc
push eax
lea eax, [ebp - 0x2c]
push eax
call fcn.0040d680
mov ecx, dword [ebp + 8]
add esp, 0xc
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 0x20]
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 0x14]
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 0x24]
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffffff0
call fcn.00407c80
push ebx
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 0x10], ebx
push 2
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x4abe10
push dword [ebp - 0xc]
call esi
mov edi, dword [ebp - 0x2c]
mov eax, dword [edi - 0xc]
push ebx
lea ecx, [ebp - 0x10]
push ecx
add eax, eax
push eax
push edi
push dword [ebp - 0xc]
call esi
test eax, eax
jne 0x43a74b
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x43a722
and eax, 0xffff
or eax, 0x80070000
mov ebx, eax
lea ecx, [edi - 0x10]
call fcn.00407c80
mov ecx, dword [ebp - 4]
add ecx, 0xfffffff0
call fcn.00407c80
mov ecx, dword [ebp - 8]
add ecx, 0xfffffff0
call fcn.00407c80
pop edi
mov eax, ebx
pop esi
jmp 0x43a535
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x43a724