Function at 0x404842
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x370
mov al, byte [0x40c008]
push ebx
push esi
push edi
push 0x40
mov byte [ebp - 0x168], al
pop ecx
xor eax, eax
lea edi, [ebp - 0x167]
xor ebx, ebx
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
push ebx
push ebx
stosb byte es:[edi], al
push ebx
mov esi, 0x104
push ebx
lea eax, [ebp - 0x168]
push esi
push eax
lea eax, [ebp - 0x64]
push eax
push dword [ebp + 8]
call fcn.00403222
add esp, 0x20
test eax, eax
je 0x40489a
push str.Could_not_get_file_info._This_archive_is_likely_corrupted.
call fcn.00403aa0
pop ecx
push 4
push 0x1000
push pe_overlay
push ebx
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov cl, byte [ebp - 0x168]
mov dword [ebp - 8], eax
lea eax, [ebp - 0x168]
mov dword [ebp - 4], eax
lea eax, [ebp - 0x168]
cmp cl, bl
je 0x4048df
cmp cl, 0x2f
je 0x4048d3
cmp cl, 0x5c
jne 0x4048d9
lea ecx, [eax + 1]
mov dword [ebp - 4], ecx
mov cl, byte [eax + 1]
inc eax
jmp 0x4048c5
mov eax, dword [ebp - 4]
cmp byte [eax], bl
lea eax, [ebp - 0x168]
push eax
push dword [ebp + 0xc]
push str._s_s
jne 0x404933
lea eax, [ebp - 0x370]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [ebp - 0x370]
push eax
call fcn.004044b5
add esp, 0x14
push eax
lea eax, [ebp - 0x370]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea eax, [ebp - 0x370]
push eax
call fcn.00404386
pop ecx
xor eax, eax
jmp 0x404aba
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
push dword [ebp + 8]
call fcn.004035a7
add esp, 0x14
test eax, eax
je 0x40495a
push str.Could_not_get_file_info._This_archive_is_likely_corrupted.
call fcn.00403aa0
pop ecx
lea eax, [ebp - 0x26c]
push ebx
push eax
lea eax, [ebp - 0x26c]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_GetFullPathNameA]
lea eax, [ebp - 0x26c]
push eax
call fcn.004044b5
pop ecx
push eax
lea eax, [ebp - 0x26c]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push ebx
push 0x80
push 2
push ebx
mov edi, 0x40000000
push ebx
lea eax, [ebp - 0x26c]
push edi
push eax
call esi
cmp eax, 0xffffffff
mov dword [ebp + 0xc], eax
jne 0x404a2c
lea eax, [ebp - 0x168]
cmp dword [ebp - 4], eax
je 0x404a21
lea eax, [ebp - 0x26c]
push eax
call fcn.00403e23
mov dword [esp], 0x40827c
push eax
push ebx
mov dword [ebp + 0xc], eax
call fcn.00403be6
add esp, 0xc
mov dword [ebp - 4], eax
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
sub eax, dword [ebp - 4]
push eax
push dword [ebp + 0xc]
call fcn.00403e23
pop ecx
push eax
call fcn.00403b87
push eax
call fcn.00404386
add esp, 0xc
lea eax, [ebp - 0x26c]
push ebx
push 0x80
push 2
push ebx
push ebx
push edi
push eax
call esi
mov dword [ebp + 0xc], eax
cmp eax, 0xffffffff
jne 0x404a2c
push str.Could_not_extract_the_current_file.
call fcn.00403aa0
pop ecx
push pe_overlay
push dword [ebp - 8]
push dword [ebp + 8]
call fcn.00403857
mov esi, eax
add esp, 0xc
cmp esi, ebx
jge 0x404a52
push str.Could_not_get_file_info._This_archive_is_likely_corrupted.
call fcn.00403aa0
pop ecx
cmp esi, ebx
jle 0x404a6a
lea eax, [ebp - 0x14]
push ebx
push eax
push esi
push dword [ebp - 8]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jmp 0x404a1f
lea eax, [ebp - 0x10]
push eax
push dword [ebp - 0x50]
push dword [ebp - 0x4e]
call dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
lea eax, [ebp - 0x10]
push eax
lea eax, [ebp - 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
lea eax, [ebp - 0x10]
push eax
push ebx
push ebx
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x4000
push ebx
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push dword [ebp + 8]
call fcn.004039c5
pop ecx
mov eax, esi
pop edi
pop esi
pop ebx
leave
ret