Function at 0x43fde0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6dc920
mov eax, dword fs:[0]
push eax
sub esp, 0x54
mov eax, dword [0x7b2214]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
sub esp, 0x18
mov dword [ebp - 4], 0
lea eax, [ebp + 8]
mov ecx, esp
push eax
call fcn.0042fd80
lea ecx, [ebp - 0x58]
call fcn.00443cf0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 2
mov ecx, esp
push eax
call fcn.0042fd80
call fcn.00443ac0
add esp, 0x18
test eax, eax
jne 0x43fe75
sub esp, 0x18
lea eax, [ebp - 0x58]
mov ecx, esp
push eax
call fcn.0042fd80
call fcn.004438b0
add esp, 0x18
test eax, eax
je 0x4400a2
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.004401c0
push eax
lea ecx, [ebp - 0x28]
call fcn.0042fc60
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x43febd
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43feb3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440190
push edx
push ecx
call fcn.0062a23d
add esp, 8
cmp dword [ebp - 0x18], 0
je 0x43ff2d
sub esp, 0x18
lea eax, [ebp - 0x28]
mov ecx, esp
push eax
call fcn.0042fd80
lea eax, [ebp - 0x40]
mov ecx, edi
push eax
call fcn.004403a0
push eax
lea ecx, [ebp - 0x28]
call fcn.0042fc60
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x43ff19
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ff0f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x440195
push edx
push ecx
call fcn.0062a23d
add esp, 8
cmp dword [ebp - 0x18], 0
jne 0x43ff2d
mov dword [edi + 8], 0xd
xor esi, esi
jmp 0x4400b4
push 4
lea eax, [edi + 4]
push eax
push 0
lea ecx, [ebp - 0x28]
call fcn.004410d0
mov eax, dword [ebp - 0x18]
lea ebx, [ebp - 0x28]
cmp dword [ebp - 0x14], 0x10
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x5c], eax
lea eax, [ebp + 8]
cmovae ebx, dword [ebp - 0x28]
push eax
call fcn.0042fd80
mov byte [ebp - 4], 3
cmp dword [ebp - 0x30], 0
mov dword [ebp - 0x60], 0
jne 0x43ffaa
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x43ffa3
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ff99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44019a
push edx
push ecx
call fcn.0062a23d
add esp, 8
xor esi, esi
jmp 0x44009d
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push 0
cmovae eax, dword [ebp - 0x40]
push 0x80
push 2
push 0
push 1
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
jne 0x440005
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x43ffa3
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ff99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x44019f
jmp 0x43ff99
push 0
lea eax, [ebp - 0x60]
push eax
push dword [ebp - 0x5c]
push ebx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
test eax, eax
jne 0x44005c
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x43ffa3
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x43ff99
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4401a4
jmp 0x43ff99
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [ebp - 0x60]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x2c]
cmp edx, 0x10
jb 0x44009d
mov ecx, dword [ebp - 0x40]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x440093
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4401a9
push edx
push ecx
call fcn.0062a23d
add esp, 8
cmp dword [ebp - 0x18], esi
je 0x4400af
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [edi + 8], eax
xor esi, esi
jmp 0x4400b4
mov esi, 1
mov edx, dword [ebp - 0x14]
cmp edx, 0x10
jb 0x4400e8
mov ecx, dword [ebp - 0x28]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x4400de
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4401ae
push edx
push ecx
call fcn.0062a23d
add esp, 8
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0xf
mov byte [ebp - 0x28], 0
cmp edx, 0x10
jb 0x44012e
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x440124
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4401b3
push edx
push ecx
call fcn.0062a23d
add esp, 8
mov edx, dword [ebp + 0x1c]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x440170
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x440166
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4401b8
push edx
push ecx
call fcn.0062a23d
add esp, 8
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00629f1d
mov esp, ebp
pop ebp
ret 0x18
call fcn.0068843e
call fcn.0068843e
call fcn.0068843e
call fcn.0068843e
call fcn.0068843e
call fcn.0068843e
call fcn.0068843e
call fcn.0068843e
call fcn.0068843e
int3