Function at 0x42e120
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x58a36d
mov eax, dword fs:[0]
push eax
sub esp, 0x188
mov eax, dword [0x600f80]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.00425ba2
cmp eax, 7
jl 0x42eb49
push 0x104
lea eax, [ebp - 0x118]
push 0
push eax
call fcn.00540250
add esp, 0xc
lea ecx, [ebp - 0x14c]
call fcn.0042d180
cmp dword [eax + 0x14], 0x10
jb 0x42e184
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x118]
push 0x104
push eax
call fcn.0053d744
add esp, 0x10
cmp dword [ebp - 0x138], 0x10
jb 0x42e1b2
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x14c]
push eax
call fcn.00431bd0
cmp dword [eax + 0x14], 0x10
jb 0x42e1c6
mov eax, dword [eax]
push 0xffffffffffffffff
push eax
lea eax, [ebp - 0x118]
push 0x104
push eax
call fcn.0053d744
add esp, 0x10
cmp dword [ebp - 0x138], 0x10
jb 0x42e1f4
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
push 0
push 0x5dbe89
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004085a0
lea eax, [ebp - 0x194]
mov dword [ebp - 4], 0
push eax
call fcn.00430e10
mov esi, eax
lea eax, [ebp - 0x14c]
mov byte [ebp - 4], 1
push eax
call fcn.00430d60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x17c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42e2be
cmp dword [ebp - 0x11c], 0x10
jb 0x42e297
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x168], 0x10
jb 0x42e2d5
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42e307
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x138], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42e339
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42e36f
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431010
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 4
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42e405
cmp dword [ebp - 0x11c], 0x10
jb 0x42e3de
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42e41c
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42e44e
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42e480
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42e4b6
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x134]
mov dword [ebp - 0x134], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_IsWow64Process]
test eax, eax
je 0x42e51e
cmp dword [ebp - 0x134], 0
je 0x42e51e
lea eax, [ebp - 0x194]
push eax
call fcn.00431200
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 7
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
mov byte [ebp - 4], 9
jmp 0x42e559
lea eax, [ebp - 0x194]
push eax
call fcn.00431430
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0xa
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
mov byte [ebp - 4], 0xc
push esi
mov edx, eax
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42e5b4
cmp dword [ebp - 0x11c], 0x10
jb 0x42e58d
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42e5cb
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov byte [ebp - 0x14c], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
jb 0x42e5fd
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov byte [ebp - 0x164], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
jb 0x42e62f
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov byte [ebp - 0x17c], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
jb 0x42e665
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431620
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0xd
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42e6fb
cmp dword [ebp - 0x11c], 0x10
jb 0x42e6d4
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42e712
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42e744
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42e776
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42e7ac
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431d30
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0x10
push eax
call fcn.00430f60
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42e842
cmp dword [ebp - 0x11c], 0x10
jb 0x42e81b
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42e859
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42e88b
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42e8bd
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42e8f3
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431e60
mov esi, eax
lea eax, [ebp - 0x17c]
mov byte [ebp - 4], 0x13
push eax
call fcn.00431820
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x164]
call fcn.00433ed0
add esp, 4
push esi
mov edx, eax
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x14c]
call fcn.0041ba80
mov esi, eax
add esp, 4
lea eax, [ebp - 0x130]
cmp eax, esi
je 0x42e989
cmp dword [ebp - 0x11c], 0x10
jb 0x42e962
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
push esi
lea ecx, [ebp - 0x130]
mov dword [ebp - 0x11c], 0xf
mov dword [ebp - 0x120], 0
mov byte [ebp - 0x130], 0
call fcn.004080f0
cmp dword [ebp - 0x138], 0x10
jb 0x42e9a0
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x150], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42e9d2
push dword [ebp - 0x164]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x168], 0x10
mov dword [ebp - 0x150], 0xf
mov dword [ebp - 0x154], 0
mov byte [ebp - 0x164], 0
jb 0x42ea04
push dword [ebp - 0x17c]
call fcn.0053e195
add esp, 4
mov byte [ebp - 4], 0
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x168], 0xf
mov dword [ebp - 0x16c], 0
mov byte [ebp - 0x17c], 0
jb 0x42ea3a
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
lea eax, [ebp - 0x194]
push eax
call fcn.00431b00
push eax
lea edx, [ebp - 0x130]
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x14c]
call fcn.00433ed0
add esp, 4
lea ecx, [ebp - 0x130]
push eax
call fcn.004205c0
cmp dword [ebp - 0x138], 0x10
jb 0x42ea82
push dword [ebp - 0x14c]
call fcn.0053e195
add esp, 4
cmp dword [ebp - 0x180], 0x10
mov dword [ebp - 0x138], 0xf
mov dword [ebp - 0x13c], 0
mov byte [ebp - 0x14c], 0
jb 0x42eab4
push dword [ebp - 0x194]
call fcn.0053e195
add esp, 4
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
lea eax, [ebp - 0x118]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x42eb32
mov edx, dword [ebp - 0x11c]
lea ecx, [ebp - 0x130]
cmp edx, 0x10
mov dword [ebp - 0x134], 0
cmovae ecx, dword [ebp - 0x130]
lea ebx, [ecx + 1]
lea ecx, [ecx]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x42eb00
sub ecx, ebx
lea eax, [ebp - 0x130]
push 0
cmp edx, 0x10
lea edx, [ebp - 0x134]
push edx
cmovae eax, dword [ebp - 0x130]
push ecx
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x11c], 0x10
jb 0x42eb49
push dword [ebp - 0x130]
call fcn.0053e195
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0053cd12
mov esp, ebp
pop ebp
ret