Function at 0x43ed00
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4dc5d3
mov eax, dword fs:[0]
push eax
sub esp, 0x94
mov eax, dword [0x50e018]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x34], ecx
cmp ecx, ebx
je 0x43efd1
cmp eax, ebx
je 0x43efd1
push ebx
push eax
lea ecx, [ebx + 4]
lea eax, [ebx + 1]
lea esi, [ebp - 0xa0]
call fcn.0042b590
mov dword [ebp - 4], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x50], ebx
lea edx, [ebp - 0x64]
mov ecx, esi
mov byte [ebp - 4], 1
call fcn.0043f2e0
mov edi, eax
cmp edi, ebx
je 0x43efaa
jmp 0x43eda0
mov eax, dword [ebp - 0x64]
cmp eax, 0xc8
je 0x43eed4
add eax, 0xfffffed4
xor edi, edi
cmp eax, 0x63
ja 0x43efaa
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea eax, [ebp - 0x2c]
mov byte [ebp - 4], 2
mov esi, dword [ebp - 0x50]
push eax
push 2
mov ecx, esi
call fcn.0043e450
add esp, 8
test eax, eax
je 0x43ef60
cmp dword [ebp - 0x1c], ebx
jbe 0x43ef60
mov eax, dword [ebp - 0x4c]
mov edi, dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete___void__]
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], ebx
cmp eax, ebx
je 0x43ee18
push eax
call edi
add esp, 4
mov dword [ebp - 0x4c], ebx
cmp esi, ebx
je 0x43ee25
push esi
call edi
add esp, 4
mov dword [ebp - 0x50], ebx
mov eax, dword [ebp - 0x74]
cmp eax, ebx
je 0x43ee35
push eax
call edi
add esp, 4
mov dword [ebp - 0x74], ebx
mov eax, dword [ebp - 0x70]
cmp eax, ebx
je 0x43ee45
push eax
call edi
add esp, 4
mov dword [ebp - 0x70], ebx
mov eax, dword [ebp - 0x6c]
cmp eax, ebx
je 0x43ee55
push eax
call edi
add esp, 4
mov dword [ebp - 0x6c], ebx
mov eax, dword [ebp - 0x9c]
cmp eax, ebx
je 0x43ee6b
push eax
call edi
add esp, 4
mov dword [ebp - 0x9c], ebx
mov ecx, dword [ebp - 0x1c]
inc ecx
push ecx
call fcn.004a64f8
mov edx, dword [ebp - 0x1c]
inc edx
push edx
mov esi, eax
push ebx
push esi
mov dword [ebp - 0x6c], esi
call sub.MSVCR100.dll_memset
mov eax, dword [ebp - 0x2c]
mov edi, 0x10
add esp, 0x10
cmp dword [ebp - 0x18], edi
jae 0x43ee99
lea eax, [ebp - 0x2c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov byte [ebp - 4], 1
cmp dword [ebp - 0x18], edi
jb 0x43eeb7
mov eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
lea edx, [ebp - 0x64]
lea ecx, [ebp - 0xa0]
call fcn.0043f2e0
mov edi, eax
cmp edi, ebx
jne 0x43eda0
jmp 0x43efaa
cmp edi, ebx
je 0x43efaa
mov ecx, dword [ebp - 0x54]
mov esi, dword [ebp - 0x4c]
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x18], 0xf
mov dword [ebp - 0x1c], ebx
mov byte [ebp - 0x2c], bl
lea edx, [ebp - 0x2c]
push edx
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x50]
push 6
call fcn.0043e450
add esp, 8
push 4
push ebx
push str.gzip
lea ecx, [ebp - 0x2c]
call fcn.0040a570
cmp eax, 0xffffffff
je 0x43ef6a
push 0x800000
call fcn.004a64f8
push 0x800000
mov esi, eax
push ebx
push esi
call sub.MSVCR100.dll_memset
mov ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x4c]
lea eax, [ebp - 0x30]
push eax
push esi
push ecx
push edx
mov dword [ebp - 0x30], 0x800000
call fcn.0043eb50
add esp, 0x20
test eax, eax
jne 0x43ef6a
push esi
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete___void__]
add esp, 4
xor edi, edi
lea ecx, [ebp - 0x2c]
call fcn.004054e0
jmp 0x43efaa
lea ecx, [ebp - 0x2c]
call fcn.004054e0
mov eax, dword [ebp - 0x34]
push 0x4ec11c
push eax
call dword [sym.imp.MSVCR100.dll_fopen]
add esp, 8
mov dword [ebp - 0x34], eax
cmp eax, ebx
je 0x43efa8
mov ecx, dword [ebp - 0x30]
push eax
push ecx
push 1
push esi
call dword [sym.imp.MSVCR100.dll_fwrite]
mov edx, dword [ebp - 0x34]
push edx
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 0x14
jmp 0x43efaa
xor edi, edi
lea esi, [ebp - 0xa0]
call fcn.0042b610
lea esi, [ebp - 0x64]
call fcn.0042b6b0
call fcn.0042b6b0
lea esi, [ebp - 0xa0]
call fcn.0042b610
mov eax, edi
jmp 0x43efd3
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004a665a
mov esp, ebp
pop ebp
ret