Function at 0x42b1a4
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x46cfb0
mov eax, dword fs:[0]
push eax
sub esp, 0x58
mov eax, dword [0x498070]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x2c], ecx
call fcn.004201cd
mov word [ebp - 0x3a], ax
lea eax, [ebp + 8]
push eax
lea eax, [ebp - 0x3a]
push eax
call fcn.0042014f
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x42b200
lea eax, [ebp + 8]
push eax
call fcn.00420182
pop ecx
jmp 0x42b48c
mov ecx, dword [ebp - 0x2c]
call fcn.0041b6ea
test eax, eax
je 0x42b245
mov ecx, dword [ebp - 0x2c]
call fcn.0041b6ea
mov esi, eax
mov ecx, dword [ebp - 0x2c]
call fcn.0041b645
cmp esi, eax
jae 0x42b245
lea eax, [ebp + 8]
push eax
call fcn.00420177
pop ecx
mov si, ax
mov ecx, dword [ebp - 0x2c]
call fcn.0041b503
mov word [eax], si
mov ax, word [ebp + 8]
jmp 0x42b48c
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 0x4c], 0
jne 0x42b258
call fcn.004201cd
jmp 0x42b48c
mov ecx, dword [ebp - 0x2c]
call fcn.0042b636
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 0x38], 0
jne 0x42b2ac
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x4c]
lea eax, [ebp + 8]
push eax
call fcn.00420177
pop ecx
movzx eax, ax
push eax
call fcn.0042a7e3
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x42b295
mov ax, word [ebp + 8]
mov word [ebp - 0x2e], ax
jmp 0x42b29e
call fcn.004201cd
mov word [ebp - 0x2e], ax
mov ax, word [ebp - 0x2e]
jmp 0x42b48c
mov dword [ebp - 0x54], 8
lea eax, [ebp + 8]
push eax
call fcn.00420177
pop ecx
mov word [ebp - 0x38], ax
push 0
push 8
lea ecx, [ebp - 0x28]
call fcn.0040794a
and dword [ebp - 4], 0
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x28]
call fcn.0042a866
mov ecx, eax
call fcn.0042b5b7
mov esi, eax
lea ecx, [ebp - 0x28]
call fcn.00407970
add esi, eax
push esi
lea eax, [ebp - 0x5c]
push eax
lea ecx, [ebp - 0x28]
call fcn.0042a866
mov ecx, eax
call fcn.0042b5b7
push eax
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x36]
push eax
lea eax, [ebp - 0x38]
push eax
mov eax, dword [ebp - 0x2c]
add eax, 0x40
push eax
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x38]
call fcn.0042c601
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jl 0x42b460
cmp dword [ebp - 0x48], 1
jle 0x42b349
cmp dword [ebp - 0x48], 3
je 0x42b41c
jmp 0x42b460
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x28]
call fcn.0042a866
mov ecx, eax
call fcn.0042b5b7
mov ecx, dword [ebp - 0x4c]
sub ecx, eax
mov dword [ebp - 0x34], ecx
je 0x42b3b0
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x4c]
push dword [ebp - 0x34]
push 1
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x28]
call fcn.0042a866
mov ecx, eax
call fcn.0042b5b7
push eax
call fcn.00445ea3
add esp, 0x10
cmp dword [ebp - 0x34], eax
je 0x42b3b0
call fcn.004201cd
mov word [ebp - 0x3c], ax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402b1b
mov ax, word [ebp - 0x3c]
jmp 0x42b48c
mov eax, dword [ebp - 0x2c]
mov byte [eax + 0x3e], 1
lea eax, [ebp - 0x38]
cmp dword [ebp - 0x50], eax
je 0x42b3dc
mov ax, word [ebp + 8]
mov word [ebp - 0x3e], ax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402b1b
mov ax, word [ebp - 0x3e]
jmp 0x42b48c
cmp dword [ebp - 0x34], 0
jbe 0x42b3e4
jmp 0x42b41a
lea ecx, [ebp - 0x28]
call fcn.00407970
cmp eax, 0x20
jae 0x42b3ff
push 0
push 8
lea ecx, [ebp - 0x28]
call fcn.004079b4
jmp 0x42b41a
call fcn.004201cd
mov word [ebp - 0x40], ax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402b1b
mov ax, word [ebp - 0x40]
jmp 0x42b48c
jmp 0x42b47b
mov eax, dword [ebp - 0x2c]
push dword [eax + 0x4c]
push dword [ebp - 0x38]
call fcn.0042a7e3
pop ecx
pop ecx
movzx eax, al
test eax, eax
je 0x42b43d
mov ax, word [ebp + 8]
mov word [ebp - 0x30], ax
jmp 0x42b446
call fcn.004201cd
mov word [ebp - 0x30], ax
mov ax, word [ebp - 0x30]
mov word [ebp - 0x42], ax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402b1b
mov ax, word [ebp - 0x42]
jmp 0x42b48c
call fcn.004201cd
mov word [ebp - 0x44], ax
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x28]
call fcn.00402b1b
mov ax, word [ebp - 0x44]
jmp 0x42b48c
jmp 0x42b2d1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0043a99c
mov esp, ebp
pop ebp
ret 4