Function at 0x442fde
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x48deea
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x13c0
call fcn.00465440
push edi
mov dword [ebp - 0x13b8], ecx
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0x13bc], edx
mov eax, dword [ebp - 0x13bc]
sub eax, 2
mov dword [ebp - 0x13bc], eax
cmp dword [ebp - 0x13bc], 0x10
ja case.0x44303a.6
mov ecx, dword [ebp - 0x13bc]
jmp dword [ecx*4 + 0x443662]
mov ecx, 0x4af320
call fcn.00411244
jmp case.0x44303a.6
mov ecx, 0x4af320
call fcn.00411454
jmp case.0x44303a.6
mov ecx, 0x4af320
call fcn.004114e6
jmp case.0x44303a.6
mov ecx, 0x4afa18
call fcn.004251c5
jmp case.0x44303a.6
mov ecx, 0x4b0490
call fcn.0044f6bf
jmp case.0x44303a.6
mov dl, byte [0x4b0298]
mov byte [ebp - 0x414], dl
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0x413]
rep stosd dword es:[edi], eax
push 0x401
lea eax, [ebp - 0x414]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x13b8]
call fcn.00443a43
mov byte [ebp - 0x14], 0
call fcn.00443fe0
test eax, eax
je 0x4430ec
push 0
lea edx, [ebp - 0x414]
push edx
push 0x4ce
call fcn.00443fe0
mov eax, dword [eax + 0x1c]
push eax
call dword [sym.imp.USER32.dll_SendMessageA]
jmp case.0x44303a.6
mov cl, byte [0x4b029c]
mov byte [ebp - 0x818], cl
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0x817]
rep stosd dword es:[edi], eax
mov dl, byte [0x4b02a0]
mov byte [ebp - 0xc1c], dl
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0xc1b]
rep stosd dword es:[edi], eax
push 0x401
lea eax, [ebp - 0x818]
push eax
mov ecx, dword [ebp + 8]
push ecx
mov ecx, dword [ebp - 0x13b8]
call fcn.00443a43
mov byte [ebp - 0x418], 0
push 0x401
lea edx, [ebp - 0xc1c]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x13b8]
call fcn.00443a43
mov byte [ebp - 0x81c], 0
push 0xa
push 0x40
lea ecx, [ebp - 0x818]
push ecx
lea edx, [ebp - 0xc1c]
push edx
push 0
call fcn.00420685
add esp, 0x14
mov dword [ebp - 0xc20], 0
mov dword [ebp - 0xc24], 0
push 0
lea eax, [ebp - 0xc20]
push eax
push 4
lea ecx, [ebp - 0xc24]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0xc20]
push eax
call fcn.00442a40
add esp, 4
jmp case.0x44303a.6
mov cl, byte [0x4b02a4]
mov byte [ebp - 0x102c], cl
mov ecx, 0x100
xor eax, eax
lea edi, [ebp - 0x102b]
rep stosd dword es:[edi], eax
push 0x401
lea edx, [ebp - 0x102c]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x13b8]
call fcn.00443a43
mov byte [ebp - 0xc2c], 0
call fcn.00443fe0
mov dword [ebp - 0xc28], eax
cmp dword [ebp - 0xc28], 0
je 0x44323f
mov ecx, dword [ebp - 0xc28]
mov edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1030], edx
lea eax, [ebp - 0x102c]
push eax
mov ecx, dword [ebp - 0x1030]
push ecx
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp case.0x44303a.6
push 0x101
lea edx, [ebp - 0x1134]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x13b8]
call fcn.00443a43
mov byte [ebp - 0x1034], 0
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x13b0], esp
lea edx, [ebp - 0x1134]
push edx
call fcn.00481032
mov dword [ebp - 0x13c0], eax
mov ecx, 0x4afa18
call fcn.0042b048
mov dword [ebp - 0x13c4], eax
mov eax, dword [ebp - 0x13c4]
mov dword [ebp - 0x113c], eax
mov dword [ebp - 0x1138], 0
push 0
lea ecx, [ebp - 0x1138]
push ecx
push 4
lea edx, [ebp - 0x113c]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x1138]
push ecx
call fcn.00442a40
add esp, 4
jmp case.0x44303a.6
push 0x101
lea edx, [ebp - 0x1240]
push edx
mov eax, dword [ebp + 8]
push eax
mov ecx, dword [ebp - 0x13b8]
call fcn.00443a43
mov byte [ebp - 0x1140], 0
push 1
push ecx
mov ecx, esp
mov dword [ebp - 0x13b4], esp
lea edx, [ebp - 0x1240]
push edx
call fcn.00481032
mov dword [ebp - 0x13c8], eax
mov ecx, 0x4afa18
call fcn.00429ed7
mov dword [ebp - 0x13cc], eax
mov eax, dword [ebp - 0x13cc]
mov dword [ebp - 0x1248], eax
mov dword [ebp - 0x1244], 0
push 0
lea ecx, [ebp - 0x1244]
push ecx
push 4
lea edx, [ebp - 0x1248]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x1244]
push ecx
call fcn.00442a40
add esp, 4
jmp case.0x44303a.6
push 1
mov ecx, 0x4afa18
call fcn.0042afe8
mov dword [ebp - 0x1250], eax
mov dword [ebp - 0x124c], 0
push 0
lea edx, [ebp - 0x124c]
push edx
push 4
lea eax, [ebp - 0x1250]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x124c]
push edx
call fcn.00442a40
add esp, 4
jmp case.0x44303a.6
push 1
mov ecx, 0x4afa18
call fcn.00429de6
mov dword [ebp - 0x1258], eax
mov dword [ebp - 0x1254], 0
push 0
lea eax, [ebp - 0x1254]
push eax
push 4
lea ecx, [ebp - 0x1258]
push ecx
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x1254]
push eax
call fcn.00442a40
add esp, 4
jmp case.0x44303a.6
mov dword [ebp - 0x12a0], 0
lea ecx, [ebp - 0x126c]
call fcn.0047c348
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x1280]
call fcn.0047c348
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x129c]
call fcn.0047c516
mov byte [ebp - 4], 2
push 1
lea ecx, [ebp - 0x129c]
push ecx
lea edx, [ebp - 0x1280]
push edx
lea eax, [ebp - 0x126c]
push eax
mov ecx, 0x4afa18
call fcn.0042a130
lea ecx, [ebp - 0x126c]
call fcn.0042bed0
mov dword [ebp - 0x1288], eax
mov dword [ebp - 0x12a0], 0
push 0
lea ecx, [ebp - 0x12a0]
push ecx
push 4
lea edx, [ebp - 0x1288]
push edx
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x12a0]
push ecx
call fcn.00442a40
add esp, 4
mov dword [ebp - 0x1284], 0
jmp 0x4434c2
mov edx, dword [ebp - 0x1284]
add edx, 1
mov dword [ebp - 0x1284], edx
mov eax, dword [ebp - 0x1284]
cmp eax, dword [ebp - 0x1288]
jae 0x4435a6
mov dword [ebp - 0x12a0], 0
push 0
lea ecx, [ebp - 0x12a0]
push ecx
push 4
mov edx, dword [ebp - 0x1284]
push edx
lea ecx, [ebp - 0x126c]
call fcn.0042bef0
push eax
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 0x12a0]
push ecx
call fcn.00442a40
add esp, 4
mov dword [ebp - 0x12a0], 0
push 0
lea edx, [ebp - 0x12a0]
push edx
push 4
mov eax, dword [ebp - 0x1284]
push eax
lea ecx, [ebp - 0x1280]
call fcn.0042bef0
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x12a0]
push edx
call fcn.00442a40
add esp, 4
mov dword [ebp - 0x12a0], 0
push 0
lea eax, [ebp - 0x12a0]
push eax
push 0x101
mov ecx, dword [ebp - 0x1284]
push ecx
lea ecx, [ebp - 0x129c]
call fcn.00440970
mov ecx, eax
call fcn.0042e500
push eax
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x12a0]
push eax
call fcn.00442a40
add esp, 4
jmp 0x4434b3
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x129c]
call fcn.0047c549
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1280]
call fcn.0047c37b
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x126c]
call fcn.0047c37b
jmp case.0x44303a.6
push 0x101
lea ecx, [ebp - 0x13a4]
push ecx
mov edx, dword [ebp + 8]
push edx
mov ecx, dword [ebp - 0x13b8]
call fcn.00443a43
mov byte [ebp - 0x12a4], 0
push 1
mov eax, dword [ebp - 0x10]
push eax
lea ecx, [ebp - 0x13a4]
push ecx
mov ecx, 0x4afa18
call fcn.0042b424
mov dword [ebp - 0x13ac], eax
mov dword [ebp - 0x13a8], 0
push 0
lea edx, [ebp - 0x13a8]
push edx
push 4
lea eax, [ebp - 0x13ac]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x13a8]
push edx
call fcn.00442a40
add esp, 4
mov eax, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
mov esp, ebp
pop ebp
ret 8