Function at 0x423030
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x28
mov dword [ebp - 0x10], 0xd84d8ba6
mov esi, dword [ebp - 0x30]
xor edi, edi
mov eax, dword [ebp - 0x10]
cmp eax, 0xfceca296
jg 0x42308b
cmp eax, 0xbe5659ca
jg 0x4230f4
cmp eax, 0x9e8b0306
jg 0x423197
cmp eax, 0x8b644bae
jg 0x423317
cmp eax, 0x802ad5a3
je 0x4234bf
cmp eax, 0x82a9b641
jne 0x423045
mov dword [ebp - 0x10], 0x9e8b0307
jmp 0x423045
cmp eax, 0x2a72de9b
jle 0x42312c
cmp eax, 0x5ac41d5b
jg 0x42322e
cmp eax, 0x3e942281
jg 0x4233ec
cmp eax, 0x2a72de9c
je 0x4235b2
cmp eax, 0x3c1bbca1
jne 0x423045
mov eax, dword [ebp - 0x14]
mov ecx, 0xffffff43
add eax, ecx
mov ecx, eax
shr ecx, 0xe
imul ecx, ecx
shr eax, 0x1c
imul edx, ecx, 0x7d3f
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0xc477d7bf
cmp ecx, edx
je 0x42354f
mov eax, 0x3e942282
jmp 0x42354f
cmp eax, 0xce3864f6
jg 0x4231ef
cmp eax, 0xcb0f296f
jg 0x42333c
cmp eax, 0xbe5659cb
je 0x4234ef
cmp eax, 0xca5ed588
jne 0x423647
mov dword [ebp - 0x10], 0x10c0eff8
jmp 0x423045
cmp eax, 0x10c0eff7
jle 0x423275
cmp eax, 0x17b292b0
jg 0x4232b7
cmp eax, 0x10c0eff8
je 0x42349e
cmp eax, 0x15aeb714
jne 0x423045
imul eax, dword [ebp - 0x14], 0x3ffc
shr eax, 0xb
mov ecx, eax
shl ecx, 7
sub ecx, eax
sub ecx, eax
mov edx, eax
imul edx, eax
imul ebx, edx, 0x57ab
dec ebx
add ecx, 0xffff9d12
mov dword [ebp - 0x14], ecx
mov eax, 0xbdef6eaf
cmp edx, ebx
je 0x42354f
mov eax, 0xcb0f2970
jmp 0x42354f
cmp eax, 0xb4122f9f
jg 0x42336a
cmp eax, 0x9e8b0307
je 0x423528
cmp eax, 0xa80953d8
jne 0x423045
add esi, 0xffffff6e
shr esi, 8
and esi, 0xfffffff8
push esi
push 0x5ab7
push 0x273a
call fcn.0042149d
add esp, 0xc
mov eax, 0xbe5659cb
cmp esi, 0x3d
jb 0x42354f
mov eax, 0xee355f59
jmp 0x42354f
cmp eax, 0xee355f58
jg 0x4233a4
cmp eax, 0xce3864f7
je 0x42353a
cmp eax, 0xd84d8ba6
jne 0x423045
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x10], 0xfceca297
jmp 0x423045
cmp eax, 0x76530f7a
jg 0x423451
cmp eax, 0x5ac41d5c
je 0x4235cb
cmp eax, 0x5d07fa1d
jne 0x423045
mov eax, esi
shr eax, 4
mov ecx, 0x27e595f9
cmp esi, 0x1920
jae 0x423266
mov ecx, 0x2a72de9c
add eax, 0xffffff41
mov dword [ebp - 0x10], ecx
mov esi, eax
jmp 0x423045
cmp eax, 0x7e19441
jg 0x42347e
cmp eax, 0xfceca297
je 0x42362e
cmp eax, 0x21397d3
jne 0x423045
imul esi, esi, 0x7c000
mov eax, 0xeffc43e
add esi, 0xfb5e4000
je 0x42354f
mov eax, 0x198ecc9f
jmp 0x42354f
cmp eax, 0x17b292b1
je 0x4234b3
cmp eax, 0x27e595f9
jne 0x423045
push dword [ebp - 0x20]
push dword [ebp - 0x1c]
push dword [ebp + 8]
call fcn.0042149d
add esp, 0xc
push edi
push 0x80
push 2
push edi
push edi
push 0x40000000
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 0xffffffff
setne byte [ebp - 0x15]
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x10], 0x15aeb714
jmp 0x423045
cmp eax, 0x8b644baf
je 0x423557
cmp eax, 0x99b67fbc
jne 0x423045
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0x2a72de9c
jmp 0x423045
cmp eax, 0xcb0f2970
je 0x423572
cmp eax, 0xcb21ae9c
jne 0x423045
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0x5ac41d5c
jmp 0x423045
cmp eax, 0xb4122fa0
je 0x423586
cmp eax, 0xbdef6eaf
jne 0x423045
imul esi, esi, 0xb4
add esi, 0xffff72ac
mov eax, 0x27e595f9
cmp esi, 0x66
jge 0x42354f
mov eax, 0xce3864f7
jmp 0x42354f
cmp eax, 0xee355f59
je 0x423592
cmp eax, 0xfc5c6eb7
jne 0x423045
mov ebx, esi
shr ebx, 0xa
add ebx, 0x2b
push ebx
call fcn.00419967
add esp, 4
call fcn.00429697
mov eax, 0x10c0eff8
cmp esi, 0x2f400
jae 0x4233e2
mov eax, 0xcb0f2970
mov dword [ebp - 0x10], eax
mov esi, ebx
jmp 0x423045
cmp eax, 0x3e942282
je 0x4235ea
cmp eax, 0x46bb92a1
jne 0x423045
imul esi, esi, 0x46000000
add esi, 0xf6b40000
push 0x44c0
push esi
push 0x57b6
call fcn.004210c4
add esp, 0xc
push 0x5c21
push 0x4774
push 0x31a6
push esi
call fcn.0041be0d
add esp, 0x10
mov eax, 0x27e595f9
cmp esi, 0xd
jl 0x42354f
mov eax, 0x2a72de9c
jmp 0x42354f
cmp eax, 0x76530f7b
je 0x4235f9
cmp eax, 0x7983cfac
jne 0x423045
push dword [ebp - 0x28]
call fcn.0045e17d
add esp, 4
mov dword [ebp - 0x10], 0x7e19442
jmp 0x423045
cmp eax, 0xeffc43e
jne 0x42363a
shl esi, 0x1c
add esi, 0x10000000
mov dword [ebp - 0x10], 0xfc5c6eb7
jmp 0x423045
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov dword [ebp - 0x10], 0x76530f7b
jmp 0x423045
mov dword [ebp - 0x10], 0xb4122fa0
jmp 0x423045
mov eax, dword [ebp - 0x14]
lea ecx, [eax - 0xa3]
imul ecx, ecx
add eax, eax
add eax, 0xfffffe87
imul edx, ecx, 0x5813
shr eax, 0xd
dec edx
mov dword [ebp - 0x14], eax
mov eax, 0x2a72de9c
cmp ecx, edx
je 0x42354f
mov eax, 0x27e595f9
jmp 0x42354f
mov al, byte [ebp - 0x15]
mov dl, byte [ebp - 0x16]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x34], 0
mov ecx, 0x3c1bbca1
jg 0x42350d
mov ecx, 0x82a9b641
test dl, dl
jne 0x423516
mov ecx, 0x82a9b641
test al, al
jne 0x423626
mov ecx, 0x82a9b641
jmp 0x423626
cmp dword [ebp - 0x28], 0
mov eax, 0x7e19442
je 0x42354f
mov eax, 0x7983cfac
jmp 0x42354f
shl esi, 3
mov eax, 0x2a72de9c
and esi, 0xffffff00
je 0x42354f
mov eax, 0x5d07fa1d
mov dword [ebp - 0x10], eax
jmp 0x423045
imul eax, dword [ebp - 0x14], 0x1900
add eax, 0x988a0
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0xcb21ae9c
jmp 0x423045
cmp dword [ebp - 0x28], 0
setne byte [ebp - 0x16]
mov dword [ebp - 0x10], 0xbe5659cb
jmp 0x423045
mov dword [ebp - 0x10], 0xee355f59
jmp 0x423045
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x34]
push dword [ebp - 0x28]
push dword [ebp - 0x2c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x10], 0x8b644baf
jmp 0x423045
mov eax, dword [ebp - 0x1c]
mov dword [eax], edi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov dword [eax], edi
mov dword [ebp - 0x10], 0x802ad5a3
jmp 0x423045
mov eax, dword [ebp - 0x14]
add eax, 0xffffffce
shr eax, 0xd
lea eax, [eax*4 + 0xb9]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], 0x7983cfac
jmp 0x423045
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0xca5ed588
jmp 0x423045
mov eax, dword [ebp - 0x14]
shl eax, 4
add eax, 0xffffff83
shr eax, 0xe
imul ecx, eax, 0x956a
imul eax, eax
imul edx, eax, 0x795
dec edx
mov dword [ebp - 0x14], ecx
mov ecx, 0xcb0f2970
cmp edx, eax
je 0x423626
mov ecx, 0x17b292b1
mov dword [ebp - 0x10], ecx
jmp 0x423045
mov dword [ebp - 0x10], 0x99b67fbc
jmp 0x423045
cmp eax, 0x7e19442
jne 0x423045
jmp 0x423669
cmp eax, 0xc477d7bf
jne 0x423045
shl esi, 3
and esi, 0xfffe0000
mov dword [ebp - 0x30], esi
push esi
push 0x36b
call fcn.00417a81
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x1c]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret