Function at 0x41dd56
Capabilities:
Write file on windows

Disassembly:
push 0x56c
mov eax, 0x443671
call fcn.00429926
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0x10]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp + 0xc]
lea ecx, [ebp - 0x49c]
mov dword [ebp - 0x540], eax
mov dword [ebp - 0x53c], esi
call fcn.00408032
lea eax, [ebp - 0x49c]
push eax
xor ebx, ebx
push 0x403968
push 0x2a
mov dword [ebp - 4], ebx
mov dword [ebp - 0x530], ebx
call fcn.0042663c
add esp, 0xc
test al, al
jne 0x41ddc5
push ebx
push 1
lea ecx, [ebp - 0x49c]
call fcn.00407cc4
mov al, 1
jmp 0x41e209
cmp dword [ebp - 0x484], 0x10
mov eax, dword [ebp - 0x498]
jae 0x41ddda
lea eax, [ebp - 0x498]
push 0xa
push ebx
push eax
call fcn.00429ec5
add esp, 0xc
mov dword [ebp - 0x538], eax
cmp eax, ebx
je 0x41ddb0
push 0x3ff
lea eax, [ebp - 0x40f]
push ebx
push eax
mov byte [ebp - 0x410], bl
call fcn.004299e0
add esp, 0xc
mov ecx, 0x400
lea eax, [ebp - 0x410]
mov byte [eax], bl
inc eax
dec ecx
jne 0x41de16
cmp dword [ebp - 0x538], ebx
mov dword [ebp - 0x534], ebx
jle 0x41e1dc
push 8
pop edi
push 0x403960
lea ecx, [ebp - 0x480]
call fcn.0040a2a8
push 0xa
lea eax, [ebp - 0x410]
push eax
push dword [ebp - 0x534]
mov byte [ebp - 4], 1
call fcn.0041b2d7
add esp, 0xc
push eax
lea ecx, [ebp - 0x480]
call fcn.0040a1bb
lea ecx, [ebp - 0x448]
call fcn.00408032
cmp dword [ebp - 0x468], 0x10
mov eax, dword [ebp - 0x47c]
mov byte [ebp - 4], 2
jae 0x41de8c
lea eax, [ebp - 0x47c]
lea ecx, [ebp - 0x448]
push ecx
push eax
push 0x2a
call fcn.0042663c
add esp, 0xc
test al, al
je 0x41e1a5
push 0x403954
lea ecx, [ebp - 0x464]
call fcn.0040a2a8
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x464]
mov byte [ebp - 4], 3
call fcn.0040a1bb
cmp dword [ebp - 0x44c], 0x10
mov eax, dword [ebp - 0x460]
mov dword [ebp - 0x530], ebx
jae 0x41dee7
lea eax, [ebp - 0x460]
lea ecx, [ebp - 0x530]
push ecx
push ebx
push eax
push 0x2a
push dword [0x44b7d8]
call fcn.004234db
add esp, 0x14
cmp eax, 0xea
jne 0x41e197
cmp dword [ebp - 0x530], ebx
je 0x41e197
lea eax, [ebp - 0x529]
push eax
push dword [ebp - 0x530]
lea ecx, [ebp - 0x558]
mov byte [ebp - 0x529], bl
call fcn.004230e5
cmp dword [ebp - 0x44c], 0x10
mov eax, dword [ebp - 0x460]
mov byte [ebp - 4], 4
jae 0x41df4e
lea eax, [ebp - 0x460]
lea ecx, [ebp - 0x530]
push ecx
push dword [ebp - 0x554]
push eax
push 0x2a
push dword [0x44b7d8]
call fcn.004234db
add esp, 0x14
lea ecx, [ebp - 0x42c]
call fcn.0040805d
lea ecx, [ebp - 0x4f0]
call fcn.0040805d
cmp dword [ebp - 0x430], 0x10
mov eax, dword [ebp - 0x444]
mov byte [ebp - 4], 6
jae 0x41df9b
lea eax, [ebp - 0x444]
lea ecx, [ebp - 0x4f0]
push ecx
push eax
call fcn.00426002
pop ecx
pop ecx
mov ecx, dword [ebp - 0x4ec]
cmp dword [ebp - 0x4d8], edi
jae 0x41dfbe
lea ecx, [ebp - 0x4ec]
mov eax, dword [ebp - 0x544]
cmp dword [eax + 0x18], edi
jb 0x41dfce
mov eax, dword [eax + 4]
jmp 0x41dfd1
add eax, 4
push ebx
push ecx
push eax
lea eax, [ebp - 0x42c]
push ebx
push eax
call fcn.00427f2a
add esp, 0x14
lea ecx, [ebp - 0x50c]
call fcn.0040805d
lea ecx, [ebp - 0x4d4]
call fcn.0040805d
lea ecx, [ebp - 0x4b8]
call fcn.0040805d
mov eax, dword [ebp - 0x428]
mov byte [ebp - 4], 9
cmp dword [ebp - 0x414], edi
jae 0x41e01d
lea eax, [ebp - 0x428]
push ebx
push ebx
lea ecx, [ebp - 0x4d4]
push ecx
lea ecx, [ebp - 0x50c]
push ecx
push eax
call fcn.00427e1c
mov ecx, dword [ebp - 0x4d0]
add esp, 0x14
cmp dword [ebp - 0x4bc], edi
jae 0x41e04a
lea ecx, [ebp - 0x4d0]
mov eax, dword [ebp - 0x508]
cmp dword [ebp - 0x4f4], edi
jae 0x41e05e
lea eax, [ebp - 0x508]
push ebx
push ebx
push ecx
push eax
lea eax, [ebp - 0x4b8]
push eax
call fcn.00427f2a
mov eax, dword [ebp - 0x4b4]
add esp, 0x14
cmp dword [ebp - 0x4a0], edi
jae 0x41e085
lea eax, [ebp - 0x4b4]
push eax
call fcn.00428310
mov eax, dword [ebp - 0x428]
pop ecx
cmp dword [ebp - 0x414], edi
jae 0x41e0a0
lea eax, [ebp - 0x428]
push ebx
push 0x80
push 2
push ebx
push ebx
push 0x40000000
push eax
call dword [0x44b2b0]
mov esi, eax
cmp esi, 0xffffffff
je 0x41e0e6
push ebx
lea eax, [ebp - 0x548]
push eax
push dword [ebp - 0x530]
mov dword [ebp - 0x548], ebx
push dword [ebp - 0x554]
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp eax, ebx
je 0x41e20f
mov ecx, dword [ebp - 0x540]
lea eax, [ebp - 0x448]
push eax
call fcn.0041330d
mov ecx, dword [ebp - 0x53c]
lea eax, [ebp - 0x42c]
push eax
call fcn.00418811
cmp esi, 0xffffffff
je 0x41e116
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
push ebx
inc esi
push esi
lea ecx, [ebp - 0x4b8]
call fcn.00407d16
push ebx
push esi
lea ecx, [ebp - 0x4d4]
call fcn.00407d16
push ebx
push esi
lea ecx, [ebp - 0x50c]
call fcn.00407d16
push ebx
push esi
lea ecx, [ebp - 0x4f0]
call fcn.00407d16
push ebx
push esi
lea ecx, [ebp - 0x42c]
call fcn.00407d16
lea ecx, [ebp - 0x558]
call fcn.00409751
push ebx
push esi
lea ecx, [ebp - 0x464]
call fcn.00407cc4
push ebx
push esi
lea ecx, [ebp - 0x448]
call fcn.00407cc4
push ebx
push esi
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], bl
call fcn.00407cc4
mov esi, dword [ebp - 0x53c]
jmp 0x41e1c4
push ebx
push 1
lea ecx, [ebp - 0x464]
call fcn.00407cc4
push ebx
push 1
lea ecx, [ebp - 0x448]
call fcn.00407cc4
push ebx
push 1
lea ecx, [ebp - 0x480]
mov byte [ebp - 4], bl
call fcn.00407cc4
inc dword [ebp - 0x534]
mov eax, dword [ebp - 0x534]
cmp eax, dword [ebp - 0x538]
jl 0x41de31
mov eax, dword [esi + 8]
sub eax, dword [esi + 4]
push 0x1c
pop ecx
cdq
idiv ecx
push ebx
push 1
lea ecx, [ebp - 0x49c]
cmp eax, dword [ebp - 0x538]
sete byte [ebp - 0x529]
call fcn.00407cc4
mov al, byte [ebp - 0x529]
call fcn.004299b8
ret
call dword [sym.imp.KERNEL32.dll_GetLastError]
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x528]
call fcn.00408032
mov eax, dword [ebp - 0x428]
mov byte [ebp - 4], 0xa
cmp dword [ebp - 0x414], edi
jae 0x41e241
lea eax, [ebp - 0x428]
lea ecx, [ebp - 0x528]
push ecx
push eax
call fcn.00425f89
cmp dword [ebp - 0x510], 0x10
pop ecx
pop ecx
mov ecx, dword [ebp - 0x524]
jae 0x41e265
lea ecx, [ebp - 0x524]
cmp dword [ebp - 0x430], 0x10
mov eax, dword [ebp - 0x444]
jae 0x41e27a
lea eax, [ebp - 0x444]
push ecx
push eax
push 0x58f
lea eax, [ebp - 0x578]
push ebx
push eax
call fcn.0040832c
add esp, 0x14
push 0x44482c
lea eax, [ebp - 0x578]
push eax
call fcn.004293cc
int3