Function at 0x442d20
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0xcc
mov eax, dword [0x4aa0cc]
xor eax, esp
mov dword [esp + 0xc8], eax
push ebx
push esi
push edi
mov edi, dword [ebp + 8]
mov ebx, ecx
mov ecx, dword [ebp + 0xc]
mov esi, edx
mov dword [esp + 0x14], esi
mov dword [esp + 0x2c], ebx
mov eax, dword [edi + 0x20]
or eax, dword [edi + 0x24]
mov dword [esp + 0x28], edi
mov dword [esp + 0x20], ecx
mov byte [esp + 0xe], 0
jne 0x442dae
mov eax, dword [edi + 0x28]
or eax, dword [edi + 0x2c]
jne 0x442dae
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push dword [ebx + 0x50c]
mov ecx, eax
mov eax, 0x10624dd3
push dword [ebx + 0x508]
mul ecx
shr edx, 6
imul eax, edx, 0x3e8
sub ecx, eax
imul eax, ecx, 0x3e8
push eax
push edx
call fcn.0043e460
mov ecx, dword [esp + 0x30]
add esp, 0x10
movsd qword [ebx + 0x4f0], xmm0
or dword [ecx], 2
cmp dword [ebx + 0x148], 0
jne 0x442f1c
mov eax, dword [edi + 0xe0]
mov dword [ebx + 0x14c], eax
cmp byte [edi + 0xec], 0
jne 0x44317a
cmp dword [edi + 0x84], 2
mov ecx, dword [ebx + 0x154]
jne 0x442df0
cmp dword [ecx + 0x58], 2
je 0x4430e9
mov eax, dword [esi + 0x27c]
test dword [eax + 0x3c], 0x40003
je 0x442e08
cmp dword [ecx + 0x58], 1
sete byte [esp + 0xe]
lea eax, [esp + 0x18]
mov ecx, esi
push eax
call fcn.00441ef0
add esp, 4
test eax, eax
jne 0x44313d
mov esi, dword [esp + 0x18]
test esi, esi
je 0x44317a
jle 0x443183
mov dword [ebx + 0x148], esi
cmp byte [esp + 0xe], al
jne 0x442f18
cmp byte [ebx + 0x256], al
je 0x442f18
cmp dword [ebx + 0x85cc], eax
jne 0x442e71
push 0x8000
call dword [0x4aa654]
add esp, 4
mov dword [ebx + 0x85cc], eax
test eax, eax
je 0x443152
xor ecx, ecx
xor edx, edx
test esi, esi
jle 0x442efc
mov edi, dword [esp + 0x18]
mov eax, dword [ebx + 0x14c]
mov al, byte [edx + eax]
mov byte [esp + 0xf], al
cmp al, 0xa
mov eax, dword [ebx + 0x85cc]
jne 0x442ee3
mov byte [ecx + eax], 0xd
inc ecx
mov eax, dword [ebx + 0x85cc]
mov byte [ecx + eax], 0xa
cmp byte [ebx + 0x256], 0
jne 0x442eee
mov eax, dword [ebx + 0x86f4]
mov esi, dword [ebx + 0x86f0]
mov dword [esp + 0x10], eax
mov eax, esi
and eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x442eee
mov eax, dword [esp + 0x10]
add esi, 1
mov dword [ebx + 0x86f0], esi
adc eax, 0
mov dword [ebx + 0x86f4], eax
jmp 0x442eee
mov bl, byte [esp + 0xf]
mov byte [ecx + eax], bl
mov ebx, dword [esp + 0x2c]
inc edx
inc ecx
cmp edx, edi
jl 0x442e81
mov edi, dword [esp + 0x28]
mov esi, dword [esp + 0x18]
cmp ecx, esi
mov esi, dword [esp + 0x14]
je 0x442f1c
mov eax, dword [ebx + 0x85cc]
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x148], ecx
jmp 0x442f1c
mov esi, dword [esp + 0x14]
mov eax, dword [esi + 0x28c]
xor ecx, ecx
cmp eax, dword [esi + 0x158]
lea eax, [esp + 0x1c]
push eax
push dword [ebx + 0x148]
sete cl
mov dword [esp + 0x24], 0
push dword [ebx + 0x14c]
push ecx
mov eax, dword [esi + ecx*4 + 0x170]
push esi
call eax
add esp, 0x14
mov dword [esp + 0x10], eax
test eax, eax
jns 0x442f79
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4431b5
cmp eax, 0x51
jne 0x44313d
mov dword [esp + 0x10], 0
cmp byte [ebx + 0x310], 0
je 0x44304e
cmp byte [ebx + 0x2f8], 0
mov ecx, dword [ebx + 0x14c]
mov dword [esp + 0x24], ecx
je 0x443031
mov eax, dword [esi + 0x9c]
test eax, eax
je 0x443031
push eax
push 0x497008
push str.Data
push str.__s__s__s_
lea eax, [esp + 0x40]
push 0xa0
push eax
call fcn.0044b0f0
lea esi, [esp + 0x48]
add esp, 0x18
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x442fd4
mov eax, dword [ebx + 0x1d0]
sub esi, ecx
test eax, eax
je 0x443001
push dword [ebx + 0x15c]
lea ecx, [esp + 0x34]
push esi
push ecx
push 0
push ebx
call eax
add esp, 0x14
test eax, eax
jne 0x44304e
jmp 0x44302d
push dword [ebx + 0x158]
push 1
push 2
push 0x49341c
call dword [sym.imp.MSVCR120.dll_fwrite]
push dword [ebx + 0x158]
lea eax, [esp + 0x44]
push 1
push esi
push eax
call dword [sym.imp.MSVCR120.dll_fwrite]
add esp, 0x20
mov ecx, dword [esp + 0x24]
mov eax, dword [ebx + 0x1d0]
test eax, eax
je 0x44304e
push dword [ebx + 0x15c]
push dword [esp + 0x14]
push ecx
push 4
push ebx
call eax
add esp, 0x14
mov ecx, dword [esp + 0x10]
mov eax, ecx
cdq
add dword [edi + 0x28], eax
mov eax, dword [edi + 0x28]
adc dword [edi + 0x2c], edx
cmp eax, dword [ebx + 0x86f0]
jne 0x44308a
mov eax, dword [edi + 0x2c]
cmp eax, dword [ebx + 0x86f4]
jne 0x44308a
push str.We_are_completely_uploaded_and_fine_n
push ebx
mov byte [edi + 0xec], 1
call fcn.0043dac0
mov ecx, dword [esp + 0x18]
add esp, 8
mov eax, dword [ebx + 0x148]
cmp eax, ecx
je 0x4430a4
sub eax, ecx
add dword [ebx + 0x14c], ecx
mov dword [ebx + 0x148], eax
jmp 0x4430ca
mov eax, dword [edi + 0xe0]
mov dword [ebx + 0x14c], eax
mov dword [ebx + 0x148], 0
cmp byte [edi + 0xec], 0
je 0x4430ca
and dword [edi + 0xe8], 0xfffffffd
mov eax, dword [edi + 0x28]
mov dword [ebx + 0x498], eax
mov eax, dword [edi + 0x2c]
mov dword [ebx + 0x49c], eax
test ecx, ecx
je 0x44313b
mov esi, dword [esp + 0x14]
jmp 0x442db1
and dword [edi + 0xe8], 0xfffffffd
mov dword [edi + 0x84], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, dword [esp + 0x28]
mov edi, eax
mov eax, 0x10624dd3
mul edi
shr edx, 6
imul esi, edx, 0x3e8
mov dword [ecx + 0x7c], edx
sub edi, esi
imul eax, edi, 0x3e8
mov dword [ecx + 0x80], eax
mov ecx, ebx
mov eax, dword [esp + 0x20]
and dword [eax], 0xfffffffd
mov edx, dword [ebx + 0x444]
call fcn.00432ad0
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.0047dbfe
mov esp, ebp
pop ebp
ret
push str.Failed_to_alloc_scratch_buffer_
push ebx
call fcn.0043db80
add esp, 8
mov eax, 0x1b
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.0047dbfe
mov esp, ebp
pop ebp
ret
test byte [edi + 0xe8], 0x20
jne 0x44313b
mov ecx, dword [esp + 0x14]
and dword [edi + 0xe8], 0xfffffffd
cmp byte [ecx + 0x260], 0
je 0x44313b
call fcn.004420f0
test eax, eax
je 0x44313b
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0xc8]
xor ecx, esp
call fcn.0047dbfe
mov esp, ebp
pop ebp
ret
mov ecx, dword [esp + 0xd4]
mov eax, 0x37
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.0047dbfe
mov esp, ebp
pop ebp
ret