Function at 0x440090
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xcc
mov eax, dword [section..data]
xor eax, esp
mov dword [esp + 0xc8], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
mov esi, edx
mov dword [esp + 0x14], esi
mov dword [esp + 0x2c], ebx
mov eax, dword [edi + 0x20]
or eax, dword [edi + 0x24]
mov dword [esp + 0x28], edi
mov dword [esp + 0x20], ecx
mov byte [esp + 0xe], 0
jne 0x44011e
mov eax, dword [edi + 0x28]
or eax, dword [edi + 0x2c]
jne 0x44011e
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [ebx + 0x50c]
mov ecx, eax
mov eax, 0x10624dd3
push dword [ebx + 0x508]
mul ecx
shr edx, 6
imul eax, edx, 0x3e8
sub ecx, eax
imul eax, ecx, 0x3e8
push eax
push edx
call fcn.0043b7d0
mov ecx, dword [esp + 0x30]
add esp, 0x10
movsd qword [ebx + 0x4f0], xmm0
or dword [ecx], 2
cmp dword [ebx + 0x148], 0
jne 0x44028c
mov eax, dword [edi + 0xe0]
mov dword [ebx + 0x14c], eax
cmp byte [edi + 0xec], 0
jne 0x4404ea
cmp dword [edi + 0x84], 2
mov ecx, dword [ebx + 0x154]
jne 0x440160
cmp dword [ecx + 0x58], 2
je 0x440459
mov eax, dword [esi + 0x27c]
test dword [eax + 0x3c], 0x40003
je 0x440178
cmp dword [ecx + 0x58], 1
sete byte [esp + 0xe]
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call fcn.0043f260
add esp, 4
test eax, eax
jne 0x4404ad
mov esi, dword [esp + 0x18]
test esi, esi
je 0x4404ea
jle 0x4404f3
mov dword [ebx + 0x148], esi
cmp byte [esp + 0xe], al
jne 0x440288
cmp byte [ebx + 0x256], al
je 0x440288
cmp dword [ebx + 0x85cc], eax
jne 0x4401e1
push 0x8000
call dword [0x4a1120]
add esp, 4
mov dword [ebx + 0x85cc], eax
test eax, eax
je 0x4404c2
xor ecx, ecx
xor edx, edx
test esi, esi
jle 0x44026c
mov edi, dword [esp + 0x18]
mov eax, dword [ebx + 0x14c]
mov al, byte [edx + eax]
mov byte [esp + 0xf], al
cmp al, 0xa
mov eax, dword [ebx + 0x85cc]
jne 0x440253
mov byte [ecx + eax], 0xd
inc ecx
mov eax, dword [ebx + 0x85cc]
mov byte [ecx + eax], 0xa
cmp byte [ebx + 0x256], 0
jne 0x44025e
mov eax, dword [ebx + 0x86f4]
mov esi, dword [ebx + 0x86f0]
mov dword [esp + 0x10], eax
mov eax, esi
and eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x44025e
mov eax, dword [esp + 0x10]
add esi, 1
mov dword [ebx + 0x86f0], esi
adc eax, 0
mov dword [ebx + 0x86f4], eax
jmp 0x44025e
mov bl, byte [esp + 0xf]
mov byte [ecx + eax], bl
mov ebx, dword [esp + 0x2c]
inc edx
inc ecx
cmp edx, edi
jl 0x4401f1
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x18]
cmp ecx, esi
mov esi, dword [esp + 0x14]
je 0x44028c
mov eax, dword [ebx + 0x85cc]
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x148], ecx
jmp 0x44028c
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x28c]
xor ecx, ecx
cmp eax, dword [esi + 0x158]
lea eax, [esp + 0x1c]
push eax
push dword [ebx + 0x148]
sete cl
mov dword [esp + 0x24], 0
push dword [ebx + 0x14c]
push ecx
mov eax, dword [esi + ecx*4 + 0x170]
push esi
call eax
add esp, 0x14
mov dword [esp + 0x10], eax
test eax, eax
jns 0x4402e9
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x440525
cmp eax, 0x51
jne 0x4404ad
mov dword [esp + 0x10], 0
cmp byte [ebx + 0x310], 0
je 0x4403be
cmp byte [ebx + 0x2f8], 0
mov ecx, dword [ebx + 0x14c]
mov dword [esp + 0x24], ecx
je 0x4403a1
mov eax, dword [esi + 0x9c]
test eax, eax
je 0x4403a1
push eax
push 0x48ef98
push str.Data
push str.__s__s__s_
lea eax, [esp + 0x40]
push 0xa0
push eax
call fcn.00448460
lea esi, [esp + 0x48]
add esp, 0x18
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x440344
mov eax, dword [ebx + 0x1d0]
sub esi, ecx
test eax, eax
je 0x440371
push dword [ebx + 0x15c]
lea ecx, [esp + 0x34]
push esi
push ecx
push 0
push ebx
call eax
add esp, 0x14
test eax, eax
jne 0x4403be
jmp 0x44039d
push dword [ebx + 0x158]
push 1
push 2
push 0x48ad14
call dword [sym.imp.MSVCR120.dll_fwrite]
push dword [ebx + 0x158]
lea eax, [esp + 0x44]
push 1
push esi
push eax
call dword [sym.imp.MSVCR120.dll_fwrite]
add esp, 0x20
mov ecx, dword [esp + 0x24]
mov eax, dword [ebx + 0x1d0]
test eax, eax
je 0x4403be
push dword [ebx + 0x15c]
push dword [esp + 0x14]
push ecx
push 4
push ebx
call eax
add esp, 0x14
mov ecx, dword [esp + 0x10]
mov eax, ecx
cdq
add dword [edi + 0x28], eax
mov eax, dword [edi + 0x28]
adc dword [edi + 0x2c], edx
cmp eax, dword [ebx + 0x86f0]
jne 0x4403fa
mov eax, dword [edi + 0x2c]
cmp eax, dword [ebx + 0x86f4]
jne 0x4403fa
push str.We_are_completely_uploaded_and_fine_n
push ebx
mov byte [edi + 0xec], 1
call fcn.0043ae30
mov ecx, dword [esp + 0x18]
add esp, 8
mov eax, dword [ebx + 0x148]
cmp eax, ecx
je 0x440414
sub eax, ecx
add dword [ebx + 0x14c], ecx
mov dword [ebx + 0x148], eax
jmp 0x44043a
mov eax, dword [edi + 0xe0]
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x148], 0
cmp byte [edi + 0xec], 0
je 0x44043a
and dword [edi + 0xe8], 0xfffffffd
mov eax, dword [edi + 0x28]
mov dword [ebx + 0x498], eax
mov eax, dword [edi + 0x2c]
mov dword [ebx + 0x49c], eax
test ecx, ecx
je 0x4404ab
mov esi, dword [esp + 0x14]
jmp 0x440121
and dword [edi + 0xe8], 0xfffffffd
mov dword [edi + 0x84], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x28]
mov edi, eax
mov eax, 0x10624dd3
mul edi
shr edx, 6
imul esi, edx, 0x3e8
mov dword [ecx + 0x7c], edx
sub edi, esi
imul eax, edi, 0x3e8
mov dword [ecx + 0x80], eax
mov ecx, ebx
mov eax, dword [esp + 0x20]
and dword [eax], 0xfffffffd
mov edx, dword [ebx + 0x444]
call fcn.0042fe30
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.00452da4
mov esp, ebp
pop ebp
ret
push str.Failed_to_alloc_scratch_buffer_
push ebx
call fcn.0043aef0
add esp, 8
mov eax, 0x1b
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.00452da4
mov esp, ebp
pop ebp
ret
test byte [edi + 0xe8], 0x20
jne 0x4404ab
mov ecx, dword [esp + 0x14]
and dword [edi + 0xe8], 0xfffffffd
cmp byte [ecx + 0x260], 0
je 0x4404ab
call fcn.0043f460
test eax, eax
je 0x4404ab
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.00452da4
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0xd4]
mov eax, 0x37
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.00452da4
mov esp, ebp
pop ebp
ret