Function at 0x428f10
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x40
mov eax, dword [0x594180]
xor eax, esp
mov dword [esp + 0x3c], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 4]
mov eax, dword [eax + 0x38]
mov dword [esp + 0x14], eax
mov eax, 0xcf633dd5
mov esi, 0xf650cb3d
jmp 0x428f80
mov edx, dword [0x59540c]
mov ecx, dword [0x595410]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8a3998ec
mov edi, 0x8a7257d2
cmovne edx, edi
cmp eax, 0xffffffff
mov eax, edx
cmove eax, edi
cmp ecx, 0xa
cmovge eax, edx
nop dword [eax]
cmp eax, 0xf236f717
jle 0x428fd0
cmp eax, 0x3222398e
jg 0x429020
cmp eax, 0x157fb1b
jle 0x4290a6
cmp eax, 0xcefb14c
jle 0x4291d4
cmp eax, 0xcefb14d
je 0x42935b
cmp eax, 0x29a9e909
je 0x429375
cmp eax, 0x2e1503fe
jne 0x428f80
mov eax, 0xc75a5fc0
jmp 0x428f80
cmp eax, 0xac1b5446
jg 0x429070
cmp eax, 0x90265263
jle 0x429122
cmp eax, 0x93b69cb0
jle 0x429201
cmp eax, 0x93b69cb1
je 0x42938a
cmp eax, 0x9665a1b8
je 0x429396
cmp eax, 0xa1229297
jne 0x428f80
mov eax, 0xfaad2fc8
xor ebx, ebx
jmp 0x428f80
cmp eax, 0x549bcdb6
jle 0x42917e
cmp eax, 0x63ccaa99
jle 0x429244
cmp eax, 0x63ccaa9a
je 0x4293a0
cmp eax, 0x730c9c33
je 0x4293d4
cmp eax, 0x7771590c
jne 0x428f80
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x1c]
sub ecx, eax
mov dword [esp + 0x10], ecx
mov eax, 0xd41d9cb5
jmp 0x428f80
cmp eax, 0xd41d9cb4
jg 0x4291a9
cmp eax, 0xcae8cd87
jg 0x429266
cmp eax, 0xac1b5447
je 0x4293ed
cmp eax, 0xc94b15f5
jne 0x429752
mov eax, 0xc75a5fc0
jmp 0x428f80
cmp eax, 0xfaad2fc7
jg 0x42928b
cmp eax, 0xf236f718
je 0x429421
cmp eax, 0xf7a0ac16
jne 0x428f80
mov eax, dword [esp + 4]
mov ecx, dword [eax + 0x38]
mov eax, dword [esp + 4]
add eax, 0x40
mov edx, dword [ecx]
lea edi, [esp + 0x18]
push edi
lea edi, [esp + 0x40]
push edi
lea edi, [esp + 0x24]
push edi
push eax
call dword [edx + 0x20]
mov dword [esp + 0xc], eax
mov eax, dword [0x59540c]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x919d924a
mov edi, 0xd78a6c1e
cmove eax, edi
cmp dword [0x595410], 0xa
mov edx, 0x919d924a
jmp 0x4294c7
cmp eax, 0x8b0f1816
jg 0x4292d5
cmp eax, 0x8a3998ec
je 0x42942b
cmp eax, 0x8a7257d2
jne 0x428f80
mov eax, dword [esp + 4]
mov byte [eax + 0x3d], 0
mov eax, dword [0x59540c]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x8a3998ec
mov edi, 0x465c56b8
cmove eax, edi
cmp dword [0x595410], 0xa
mov edx, 0x8a3998ec
jmp 0x4294c7
cmp eax, 0x466d0f8d
jg 0x4292ff
cmp eax, 0x3222398f
je 0x42943d
cmp eax, 0x465c56b8
jne 0x428f80
mov eax, 0x63ccaa9a
jmp 0x428f80
cmp eax, 0xdf75bb8d
jg 0x42932c
cmp eax, 0xd41d9cb5
je 0x429486
cmp eax, 0xd78a6c1e
jne 0x428f80
mov eax, 0x90265264
jmp 0x428f80
cmp eax, 0x157fb1c
je 0x428f3d
cmp eax, 0x77d731c
jne 0x428f80
cmp byte [esp + 0xb], 0
mov eax, 0x29a9e909
mov ecx, 0xdf75bb8e
cmovne eax, ecx
jmp 0x428f80
cmp eax, 0x90265264
je 0x4294d7
cmp eax, 0x919d924a
jne 0x428f80
mov eax, dword [esp + 4]
mov ecx, dword [eax + 0x38]
mov eax, dword [esp + 4]
add eax, 0x40
mov edx, dword [ecx]
lea edi, [esp + 0x18]
push edi
lea edi, [esp + 0x40]
push edi
lea edi, [esp + 0x24]
push edi
push eax
call dword [edx + 0x20]
mov eax, 0xf7a0ac16
jmp 0x428f80
cmp eax, 0x549bcdb7
je 0x4294ee
cmp eax, 0x5da51b9e
jne 0x428f80
mov eax, 0xc75a5fc0
mov bl, 1
jmp 0x428f80
cmp eax, 0xcae8cd88
je 0x4294fa
cmp eax, 0xcf633dd5
jne 0x428f80
cmp dword [esp + 0x14], 0
mov eax, 0xcefb14d
jmp 0x429368
cmp eax, 0xfaad2fc8
je 0x429540
cmp eax, 0xfaee8dac
jne 0x428f80
mov eax, dword [0x59540c]
mov ecx, dword [0x595410]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov ebp, ebx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov edi, 0x919d924a
mov ebx, 0xf7a0ac16
jmp 0x429529
cmp eax, 0x8b0f1817
je 0x429580
cmp eax, 0x8f165466
jne 0x428f80
mov eax, dword [esp + 4]
mov byte [eax + 0x3d], 0
mov eax, 0x3222398f
mov bl, 1
jmp 0x428f80
cmp eax, 0x466d0f8e
je 0x42962b
cmp eax, 0x47138c9b
jne 0x428f80
cmp dword [esp + 0xc], 0
mov eax, 0x549bcdb7
mov ecx, 0x157fb1c
cmove eax, ecx
jmp 0x428f80
cmp eax, 0xdf75bb8e
je 0x429644
cmp eax, 0xeadac25b
jne 0x428f80
mov eax, dword [esp + 0xc]
cmp eax, 1
mov eax, 0x549bcdb7
mov ecx, 0x63ccaa9a
cmove eax, ecx
jmp 0x428f80
mov eax, dword [esp + 4]
cmp byte [eax + 0x3d], 0
mov eax, 0x8b0f1817
mov ecx, 0x5da51b9e
cmove eax, ecx
jmp 0x428f80
mov eax, dword [esp + 4]
cmp byte [eax + 0x3d], 0
sete bl
mov eax, 0xf236f718
jmp 0x428f80
mov eax, 0xf236f718
xor ebx, ebx
jmp 0x428f80
mov eax, 0xc94b15f5
jmp 0x428f80
mov edx, dword [0x59540c]
mov ecx, dword [0x595410]
lea eax, [edx + 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x7771590c
mov edi, 0xd41d9cb5
jmp 0x428f6c
mov eax, dword [esp + 0xc]
cmp eax, 3
mov eax, 0x466d0f8e
mov ecx, 0xeadac25b
cmovl eax, ecx
jmp 0x428f80
mov edx, dword [0x59540c]
mov ecx, dword [0x595410]
lea eax, [edx - 1]
imul eax, edx
not eax
or eax, 0xfffffffe
cmp eax, 0xffffffff
sete dl
cmp ecx, 0xa
setl dh
xor dh, dl
mov edx, 0x8f165466
mov edi, 0x3222398f
jmp 0x428f6c
mov eax, 0xc94b15f5
jmp 0x428f80
mov eax, dword [esp + 4]
mov byte [eax + 0x3d], 0
mov eax, 0x8a7257d2
jmp 0x428f80
mov eax, dword [esp + 4]
mov byte [eax + 0x3d], 0
mov eax, dword [0x59540c]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete cl
mov eax, 0x8f165466
mov ebx, 0x9665a1b8
cmove eax, ebx
cmp dword [0x595410], 0xa
setl dl
mov edi, 0x8f165466
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
mov bl, 1
jmp 0x428f80
mov ecx, dword [esp + 0x18]
lea eax, [esp + 0x1c]
sub ecx, eax
mov dword [esp + 0x10], ecx
setne byte [esp + 0xb]
mov eax, dword [0x59540c]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0x7771590c
mov edi, 0x77d731c
cmove eax, edi
cmp dword [0x595410], 0xa
mov edx, 0x7771590c
cmovge eax, edx
setl dl
xor dl, cl
cmovne eax, edi
jmp 0x428f80
cmp dword [esp + 0xc], 0
mov eax, 0x730c9c33
mov ecx, 0x47138c9b
cmovle eax, ecx
jmp 0x428f80
mov eax, 0xc94b15f5
xor ebx, ebx
jmp 0x428f80
mov eax, dword [0x59540c]
mov ecx, dword [0x595410]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
xor eax, 0xfffffffe
test eax, edx
mov ebp, ebx
sete bl
cmp ecx, 0xa
setl bh
xor bh, bl
mov edi, 0xa1229297
mov ebx, 0xfaad2fc8
cmovne edi, ebx
test eax, edx
mov eax, edi
cmove eax, ebx
mov ebx, ebp
cmp ecx, 0xa
cmovge eax, edi
jmp 0x428f80
mov eax, dword [0x59540c]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
xor eax, 0xfffffffe
test eax, ecx
sete cl
mov eax, 0xa1229297
mov ebx, 0x2e1503fe
cmove eax, ebx
cmp dword [0x595410], 0xa
setl dl
mov edi, 0xa1229297
cmovge eax, edi
xor dl, cl
cmovne eax, ebx
xor ebx, ebx
jmp 0x428f80
mov ebp, ebx
mov eax, dword [0x59541c]
mov ecx, dword [0x595420]
lea edx, [eax - 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [esp + 2]
sete dl
mov eax, 0x6ea2f029
mov edi, 0x3bb5d52f
cmove eax, edi
cmp ecx, 0xa
setl byte [esp + 3]
setl cl
mov ebx, 0x6ea2f029
cmovge eax, ebx
xor cl, dl
cmovne eax, edi
mov ecx, 0x88001aad
nop dword [eax]
cmp ecx, 0x3bb5d52e
jg 0x4295f0
cmp ecx, 0x88001aad
je 0x429607
cmp ecx, 0xf650cb3d
jne 0x4295d0
mov ecx, eax
jmp 0x4295d0
cmp ecx, 0x3bb5d52f
je 0x429673
cmp ecx, 0x6ea2f029
jne 0x4295d0
mov ecx, 0xf650cb3d
jmp 0x4295d0
movzx edx, byte [esp + 2]
movzx ecx, byte [esp + 3]
mov ch, dl
xor ch, cl
mov edi, 0x6ea2f029
cmovne edi, esi
test cl, cl
mov ecx, edi
cmovne ecx, esi
test dl, dl
cmove ecx, edi
jmp 0x4295d0
mov eax, dword [esp + 0xc]
cmp eax, 3
mov eax, 0x549bcdb7
mov ecx, 0xac1b5447
cmove eax, ecx
jmp 0x428f80
mov eax, dword [esp + 4]
push dword [eax + 0x4c]
mov edi, dword [esp + 0x14]
push edi
push 1
lea eax, [esp + 0x28]
push eax
call fcn.00569377
add esp, 0x10
cmp edi, eax
mov eax, 0x93b69cb1
mov ecx, 0x29a9e909
cmove eax, ecx
jmp 0x428f80
mov eax, dword [esp + 4]
mov eax, dword [eax]
mov eax, dword [eax + 0xc]
mov ecx, dword [esp + 4]
push 0xffffffffffffffff
call eax
mov ecx, dword [0x59541c]
mov edx, dword [0x595420]
lea edi, [ecx + 1]
imul edi, ecx
mov ecx, edi
xor ecx, 0xfffffffe
test ecx, edi
sete byte [esp + 2]
sete bl
mov ecx, 0x6ea2f029
mov edi, 0x3bb5d52f
cmove ecx, edi
cmp edx, 0xa
setl byte [esp + 3]
setl dl
mov esi, 0x6ea2f029
cmovge ecx, esi
mov esi, 0xf650cb3d
xor dl, bl
cmovne ecx, edi
mov edx, 0x88001aad
mov ebx, ebp
nop word cs:[eax + eax]
cmp edx, 0x3bb5d52e
jg 0x429700
cmp edx, 0x88001aad
je 0x429717
cmp edx, 0xf650cb3d
jne 0x4296e0
mov edx, ecx
jmp 0x4296e0
cmp edx, 0x3bb5d52f
je 0x42973d
cmp edx, 0x6ea2f029
jne 0x4296e0
mov edx, 0xf650cb3d
jmp 0x4296e0
movzx ebx, byte [esp + 2]
movzx edx, byte [esp + 3]
mov dh, bl
xor dh, dl
mov edi, 0x6ea2f029
cmovne edi, esi
test dl, dl
mov edx, edi
cmovne edx, esi
test bl, bl
mov ebx, ebp
cmove edx, edi
jmp 0x4296e0
cmp eax, 0xffffffff
mov eax, 0xfaee8dac
mov ecx, 0xcae8cd88
cmove eax, ecx
jmp 0x428f80
cmp eax, 0xc75a5fc0
jne 0x428f80
and bl, 1
mov ecx, dword [esp + 0x3c]
xor ecx, esp
call fcn.0055d8e5
mov eax, ebx
add esp, 0x40
pop esi
pop edi
pop ebx
pop ebp
ret