Function at 0x7ca000
Capabilities:
Write file on windows

Disassembly:
mov dword [0x7aa008], 0x78
mov dword [0x7aa00c], 0x6e
mov dword [0x7aa014], 0x6a7498
mov dword [0x7aa010], 0x7ca600
call fcn.007aa130
mov edi, 0x7caf30
call fcn.007ca6b5
mov dword [0x7caef0], 0x7caf2c
mov edi, 0x7caf00
call fcn.007ca6b5
add edi, 4
cmp edi, 0x7caf30
jl 0x7ca046
pushal
push 0x24
push 0x5a
push 0x8c
push 0x3c
mov eax, dword [0x7aa004]
mov dword [eax + 0x30], 0x1f
mov dword [eax + 0x34], 0x1f
mov dword [eax + 0x38], 0x1f
mov dword [eax + 0x3c], 0xff
call fcn.00586d50
mov eax, dword [0x7aa004]
mov dword [eax + 0x30], 0x9f
mov dword [eax + 0x34], 0x9f
mov dword [eax + 0x38], 0x9f
mov dword [eax + 0x3c], 0xff
push 0x20
push 0x56
push 0x8e
push 0x3e
mov eax, dword [0x7aa004]
call fcn.00586d50
mov eax, dword [0x7aa004]
mov dword [eax + 0x30], 0xff
mov dword [eax + 0x34], 0xff
mov dword [eax + 0x38], 0xff
mov dword [eax + 0x3c], 0xff
push 0x24
push 0x5a
push 0x8c
push 0xbe
mov eax, dword [0x7aa004]
mov dword [eax + 0x30], 0x1f
mov dword [eax + 0x34], 0x1f
mov dword [eax + 0x38], 0x1f
mov dword [eax + 0x3c], 0xff
call fcn.00586d50
mov eax, dword [0x7aa004]
mov dword [eax + 0x30], 0x9f
mov dword [eax + 0x34], 0x9f
mov dword [eax + 0x38], 0x9f
mov dword [eax + 0x3c], 0xff
push 0x20
push 0x56
push 0x8e
push 0xc0
mov eax, dword [0x7aa004]
call fcn.00586d50
mov eax, dword [0x7aa004]
mov dword [eax + 0x30], 0xff
mov dword [eax + 0x34], 0xff
mov dword [eax + 0x38], 0xff
mov dword [eax + 0x3c], 0xff
popal
mov dword [0x7aa008], 0x4c
mov dword [0x7aa00c], 0xa0
mov dword [0x7aa014], 0x6a7498
mov dword [0x7aa010], 0x7ca613
call fcn.007aa130
mov dword [0x7aa008], 0xce
mov dword [0x7aa00c], 0xa0
mov dword [0x7aa014], 0x6a7498
mov dword [0x7aa010], 0x7ca61d
call fcn.007aa130
cmp dword [0x7caa24], 0
je 0x7ca209
sub dword [0x7caa24], 1
mov dword [0x7aa008], 0x13c
mov dword [0x7aa00c], 0xa0
mov dword [0x7aa014], 0x6a7498
mov dword [0x7aa010], 0x7ca646
call fcn.007aa130
cmp dword [0x7caa28], 0
je 0x7ca24a
sub dword [0x7caa28], 1
mov dword [0x7aa008], 0x13c
mov dword [0x7aa00c], 0xa0
mov dword [0x7aa014], 0x6a7498
mov dword [0x7aa010], 0x7ca653
call fcn.007aa130
cmp dword [0x7c4fe8], 1
jne 0x7ca3e0
mov eax, dword [0x6a9ec0]
mov eax, dword [eax + 0x320]
cmp dword [eax + 0xe4], 0x8c
jl 0x7ca3e0
cmp dword [eax + 0xe4], 0xb0
jg 0x7ca3e0
cmp dword [eax + 0xe0], 0x3c
jl 0x7ca365
cmp dword [eax + 0xe0], 0x96
jg 0x7ca365
cmp dword [0x7c9004], 0
jne 0x7ca2b1
call fcn.007c9200
mov dword [0x7c9100], 0x4c
mov eax, dword [0x7caef0]
mov eax, dword [eax]
mov ebx, dword [0x7c50f0]
mov dword [eax + 0x154], ebx
mov dword [0x7c911c], eax
mov dword [0x7c9120], 0xc8
push 0x7c9100
call dword [0x7c9004]
test eax, eax
je 0x7ca3e0
mov dword [0x7caa28], 0x46
mov eax, dword [0x7caef0]
mov eax, dword [eax]
call fcn.007ca669
mov dword [eax], 0x6569782e
mov dword [eax + 4], 0x796964
pushal
push 0
push 0
push 1
push 0
push 3
push 0x40000000
mov eax, dword [0x7caef0]
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [0x7ca3e1], eax
push 0
push 0x7caa2c
push 0x1d00
push 0x7c5000
push dword [0x7ca3e1]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [0x7ca3e1]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
popal
jmp 0x7ca3e0
cmp dword [eax + 0xe0], 0xbe
jl 0x7ca3e0
cmp dword [eax + 0xe0], 0x118
jg 0x7ca3e0
cmp dword [0x7c9008], 0
jne 0x7ca397
call fcn.007c9235
mov dword [0x7c9100], 0x4c
mov eax, dword [0x7caef0]
mov eax, dword [eax]
mov dword [0x7c911c], eax
mov dword [0x7c9120], 0xc8
push 0x7c9100
call dword [0x7c9008]
test eax, eax
je 0x7ca3e0
mov eax, dword [0x7caef0]
mov eax, dword [eax]
call fcn.007ca669
mov eax, dword [0x7caef0]
call fcn.007ca3e5
ret