Function at 0x41ed6a
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x2c
mov dword [ebp - 0x10], 0x7b829d7e
mov edi, dword [ebp - 0x30]
xor esi, esi
mov eax, dword [ebp - 0x10]
cmp eax, 0xa87d952
jg 0x41edf2
cmp eax, 0xc790f37d
jg 0x41ee53
cmp eax, 0x8c9a7c35
jg 0x41eec8
cmp eax, 0x8410c220
jg 0x41eff0
cmp eax, 0x826ee42d
je 0x41f18e
cmp eax, 0x83fc6d78
jne 0x41ed7f
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff39
add eax, ecx
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x37f9
shl eax, 6
dec edx
or eax, 0x15
mov dword [ebp - 0x14], eax
mov eax, 0x375c1a1a
cmp ecx, edx
je 0x41f2ac
mov eax, 0xd914716f
jmp 0x41f2ac
cmp eax, 0x524f7fc5
jg 0x41ee97
cmp eax, 0x1f64fb15
jg 0x41ef22
cmp eax, 0x164f71a0
jg 0x41f0bd
cmp eax, 0xa87d953
je 0x41f2c9
cmp eax, 0x11f24231
jne 0x41ed7f
shl edi, 0xd
add edi, 0x190000
shr edi, 0x18
imul edi, edi, 0xb6
mov eax, 0xe57461c3
cmp edi, 0x4f
jb 0x41f2ac
mov eax, 0x719fe0ff
jmp 0x41f2ac
cmp eax, 0xe57461c2
jle 0x41ef7c
cmp eax, 0xf884d28c
jg 0x41f044
cmp eax, 0xe57461c3
je 0x41f21b
cmp eax, 0xede0b7b1
jne 0x41ed7f
and edi, 0x1fffff
add edi, 0xde
mov dword [ebp - 0x10], 0x7f31619f
jmp 0x41ed7f
cmp eax, 0x79322a21
jle 0x41efa9
cmp eax, 0x7b829d7d
jg 0x41f08f
cmp eax, 0x79322a22
je 0x41f276
cmp eax, 0x7a18dbdd
je 0x41f2bd
jmp 0x41ed7f
cmp eax, 0xc02aa3dd
jg 0x41f01f
cmp eax, 0x8c9a7c36
je 0x41f1c5
cmp eax, 0x8eaab81d
jne 0x41ed7f
mov ecx, dword [ebp - 0x14]
lea eax, [ecx + ecx*8]
imul eax, eax
imul ecx, ecx, 0x7a1
imul edx, eax, 0x270b
dec edx
shr ecx, 0xf
add ecx, 0xffffff75
mov dword [ebp - 0x14], ecx
mov ecx, 0x41e179c3
cmp eax, edx
je 0x41f1fb
mov ecx, 0xc3c216ce
jmp 0x41f1fb
cmp eax, 0x41e179c2
jg 0x41f0df
cmp eax, 0x1f64fb16
je 0x41f2e9
cmp eax, 0x375c1a1a
jne 0x41ed7f
imul edi, edi, 0x2d0300
push 0x27fb
push 0x538b
push edi
push 0x2ea5
call fcn.0041c7ea
add esp, 0x10
mov eax, 0x11f24231
cmp edi, 0xd8
jge 0x41f2ac
mov eax, 0xe57461c3
jmp 0x41f2ac
cmp eax, 0xe2e8a62f
jle 0x41f10c
cmp eax, 0xe2e8a630
je 0x41f16c
cmp eax, 0xe38d4443
jne 0x41ed7f
mov dword [ebp - 0x10], 0x630b484b
jmp 0x41ed7f
cmp eax, 0x6d1dd2c9
jg 0x41f12c
cmp eax, 0x524f7fc6
je 0x41f26a
cmp eax, 0x630b484b
jne 0x41ed7f
mov eax, dword [ebp - 0x2c]
cmp eax, 0xffffffff
setne byte [ebp - 0x15]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0
setne byte [ebp - 0x16]
mov dword [ebp - 0x10], 0x444b1400
jmp 0x41ed7f
cmp eax, 0x8410c221
je 0x41f1d1
cmp eax, 0x84554dd1
jne 0x41ed7f
cmp dword [ebp - 0x28], 0
mov eax, 0x83fc6d78
je 0x41f2ac
mov eax, 0xf884d28d
jmp 0x41f2ac
cmp eax, 0xc02aa3de
je 0x41f203
cmp eax, 0xc3c216ce
jne 0x41ed7f
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x524f7fc6
jmp 0x41ed7f
cmp eax, 0xf884d28d
je 0x41f240
cmp eax, 0x6f32ba4
jne 0x41ed7f
mov eax, dword [ebp - 0x14]
shr eax, 0xd
add eax, 0xce
imul ecx, eax, 0x4f000
imul eax, eax
imul edx, eax, 0x65e9
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0x826ee42d
cmp edx, eax
je 0x41f1fb
mov ecx, 0xd914716f
jmp 0x41f1fb
cmp eax, 0x7f31619f
je 0x41f2b4
cmp eax, 0x7b829d7e
jne 0x41ed7f
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x10], 0xe2e8a630
jmp 0x41ed7f
cmp eax, 0x164f71a1
je 0x41f300
cmp eax, 0x1b9c2852
jne 0x41ed7f
mov dword [ebp - 0x10], 0x84554dd1
jmp 0x41ed7f
cmp eax, 0x41e179c3
je 0x41f30c
cmp eax, 0x444b1400
jne 0x41ed7f
mov al, byte [ebp - 0x15]
and al, byte [ebp - 0x16]
and al, 1
mov byte [ebp - 0x17], al
mov dword [ebp - 0x10], 0xe57461c3
jmp 0x41ed7f
cmp eax, 0xc790f37e
jne 0x41f344
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x6d1dd2ca
jmp 0x41ed7f
cmp eax, 0x6d1dd2ca
jne 0x41f351
mov eax, dword [ebp - 0x14]
shr eax, 2
imul eax, eax, 0x45
shr eax, 4
mov ecx, eax
imul ecx, eax
imul edx, ecx, 0x3dfd
dec edx
shl eax, 0xc
mov dword [ebp - 0x14], eax
mov eax, 0xc790f37e
cmp edx, ecx
je 0x41f2ac
mov eax, 0x164f71a1
jmp 0x41f2ac
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], esi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], esi
mov dword [ebp - 0x10], 0x7a18dbdd
jmp 0x41ed7f
imul edi, edi, 0x6f5d
add edi, 0xffffff47
push edi
push 0x5ef
push 0x239f
push 0x40a1
call fcn.00417582
add esp, 0x10
mov eax, 0x630b484b
cmp edi, 0x77
jb 0x41f263
jmp 0x41f2ac
mov dword [ebp - 0x10], 0xa87d953
jmp 0x41ed7f
mov eax, dword [ebp - 0x14]
shr eax, 0xd
add eax, 0xffffffd7
imul ecx, eax, 0x1900
imul eax, eax
imul edx, eax, 0x2e7b
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xe2e8a630
cmp edx, eax
je 0x41f1fb
mov ecx, 0xe38d4443
mov dword [ebp - 0x10], ecx
jmp 0x41ed7f
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x1f64fb16
jmp 0x41ed7f
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
mov eax, 0x8eaab81d
jg 0x41f233
mov eax, 0x1b9c2852
cmp byte [ebp - 0x17], 0
jne 0x41f2ac
mov eax, 0x1b9c2852
jmp 0x41f2ac
imul ecx, dword [ebp - 0x14], 0xb8
shr ecx, 0xf
lea eax, [ecx - 0x45]
imul ecx, ecx
imul edx, ecx, 0x4d95
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xede0b7b1
cmp edx, ecx
je 0x41f2ac
mov eax, 0x1f64fb16
jmp 0x41f2ac
mov dword [ebp - 0x10], 0xc790f37e
jmp 0x41ed7f
imul ebx, edi, 0x11a00000
add ebx, 0xffa37800
mov edi, ebx
shr edi, 0xb
call fcn.00417574
push edi
push 0x3122
call fcn.00413f85
add esp, 8
mov eax, 0xe2e8a630
cmp ebx, 0x70001
jae 0x41f2ac
mov eax, 0x41e179c3
mov dword [ebp - 0x10], eax
jmp 0x41ed7f
shr edi, 0xc
add edi, 0xfa
mov dword [ebp - 0x10], 0x41e179c3
jmp 0x41ed7f
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x34]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x10], 0xc02aa3de
jmp 0x41ed7f
push dword [ebp - 0x28]
call fcn.0044f33c
add esp, 4
mov dword [ebp - 0x10], 0x6f32ba4
jmp 0x41ed7f
mov dword [ebp - 0x10], 0x8c9a7c36
jmp 0x41ed7f
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
push dword [ebp + 8]
call fcn.0041d5d7
add esp, 0xc
push esi
push 0x80
push 2
push esi
push esi
push 0x40000000
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x10], 0x8410c221
jmp 0x41ed7f
cmp eax, 0xd914716f
jne 0x41ed7f
jmp 0x41f380
cmp eax, 0x719fe0ff
jne 0x41ed7f
shr edi, 7
imul eax, edi, 0x4c20
add eax, 0xffe69764
mov dword [ebp - 0x30], eax
push dword [ebp - 0x34]
push eax
push 0x28dc
push 0xf47
call fcn.00419f23
mov dword [ebp - 0x30], edi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret