Function at 0x421277
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffeec
push esi
push edi
push 4
push dword [ebp + 8]
call sub.user32.dll_GetWindowLongA
mov dword [ebp - 0x104], eax
push 0x19000
push 0x40
call fcn.00401030
mov dword [ebp - 0x108], eax
push dword [ebp - 0x108]
call sub.kernel32.dll_GlobalLock
mov esi, dword [ebp - 0x104]
mov word [0x451958], 0xa
mov word [0x45195a], 0
push 0
push 0x421218
push dword [ebp + 8]
push 0x451940
push dword [0x453904]
call sub.user32.dll_CreateDialogIndirectParamA
push dword [0x45ee06]
pop dword [0x4a02a6]
push dword [0x45ee0a]
pop dword [0x4a02aa]
mov eax, dword [esi + 0x68]
mov word [0x451958], ax
pushal
lea esi, [esi + 0x48]
mov edi, 0x45195a
call sub.kernel32.dll_GetACP
push 0x20
push edi
push 0x20
push esi
push 0
push eax
call sub.kernel32.dll_MultiByteToWideChar
popal
push 0
push 0x421218
push dword [ebp + 8]
push 0x451940
push dword [0x453904]
call sub.user32.dll_CreateDialogIndirectParamA
mov edi, dword [ebp - 0x108]
add esi, 0x90
call fcn.00420c88
add esi, 0x175
mov eax, dword [esi]
or eax, eax
jne 0x421345
mov esi, dword [ebp - 0x104]
add esi, 0x90
call fcn.00420f3a
mov edi, eax
add esi, 0x175
mov dword [ebp - 0x10c], 0
push dword [ebp + 8]
push dword [ebp - 0x10c]
call fcn.0041bc95
or eax, eax
je 0x4213a4
push 0xffffffffffffffeb
push eax
call sub.user32.dll_GetWindowLongA
mov esi, eax
call fcn.00420f3a
mov edi, eax
inc dword [ebp - 0x10c]
jmp 0x421379
push 0x44f092
push edi
call fcn.00420b04
add edi, eax
mov eax, 0xa0d
stosd dword es:[edi], eax
cmp dword [ebp + 0xc], 0
je 0x4214f8
push 0x45de5e
lea eax, [ebp - 0x100]
push eax
call fcn.004010a7
lea eax, [ebp - 0x100]
push eax
call fcn.004010ef
lea edi, [ebp - 0x100]
add edi, eax
mov al, 0x52
stosb byte es:[edi], al
mov al, 0x65
stosb byte es:[edi], al
mov al, 0x73
stosb byte es:[edi], al
mov al, 0x5c
stosb byte es:[edi], al
push 0x45cf22
call fcn.004010ef
mov esi, 0x45cf22
add esi, eax
dec esi
mov al, byte [esi]
cmp al, 0x5c
jne 0x421403
inc esi
xor edx, edx
mov al, byte [esi]
cmp al, 0x2e
jne 0x421415
mov edx, edi
mov byte [edi], al
inc esi
inc edi
or al, al
jne 0x42140d
or edx, edx
je 0x421423
mov edi, edx
mov al, 0x44
stosb byte es:[edi], al
mov al, 0x6c
stosb byte es:[edi], al
mov al, 0x67
stosb byte es:[edi], al
mov al, 0x2e
stosb byte es:[edi], al
mov al, 0x72
stosb byte es:[edi], al
mov al, 0x63
stosb byte es:[edi], al
mov al, 0
stosb byte es:[edi], al
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
lea eax, [ebp - 0x100]
push eax
call sub.kernel32.dll_CreateFileA
cmp eax, 0xffffffff
je 0x4214c3
mov dword [ebp - 0x110], eax
push dword [ebp - 0x108]
call fcn.004010ef
mov dword [ebp - 0x114], eax
push 0
lea eax, [ebp - 0x114]
push eax
push dword [ebp - 0x114]
push dword [ebp - 0x108]
push dword [ebp - 0x110]
call sub.kernel32.dll_WriteFile
push dword [ebp - 0x110]
call sub.kernel32.dll_CloseHandle
inc dword [0x44f339]
push 0x2000
lea eax, [ebp - 0x100]
push eax
push 1
push 0x48e
push dword [0x4538b0]
call fcn.00408423
jmp 0x42151f
push 0x44ece9
push 0x467936
call fcn.004010a7
lea eax, [ebp - 0x100]
push eax
push 0x467936
call fcn.004010c5
push 0x10
push 0x44f25f
push 0x467936
push 0
call sub.user32.dll_MessageBoxA
jmp 0x42151f
push 2
call fcn.0042ec60
call fcn.004305a1
call fcn.0042ed4b
push dword [ebp - 0x108]
call fcn.00430605
push dword [0x453920]
call sub.user32.dll_SetFocus
push dword [ebp - 0x108]
call sub.kernel32.dll_GlobalUnlock
push dword [ebp - 0x108]
call sub.kernel32.dll_GlobalFree
pop edi
pop esi
leave
ret 8