Function at 0x422cb0
Capabilities:
Terminate thread
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
mov dword [ebp - 4], 0x31990
mov dword [ebp - 0x44], 0xdc198
mov dword [ebp - 0x2c], 0x12924
mov dword [ebp - 0x18], 0x4f511
mov dword [ebp - 0x50], 0x339d0
mov dword [ebp - 0x20], 0xb9d2d
mov dword [ebp - 8], 0xe97e8
mov dword [ebp - 0xc], 0x49ff9
mov dword [ebp - 0x14], 0xc1230
mov dword [ebp - 0x10], 0x4a959
mov dword [ebp - 0x60], 0x2d110
mov dword [ebp - 0x64], 0xa9475
mov dword [ebp - 0x28], 0xae98b
mov dword [ebp - 0x5c], 0xd00bc
mov dword [ebp - 0x68], 0xb3538
mov dword [ebp - 0x40], 0x8e294
mov dword [ebp - 0x24], 0x7d740
mov dword [ebp - 0x4c], 0x7b061
mov dword [ebp - 0x58], 0x27f8d
mov dword [ebp - 0x1c], 0x30c7f
mov dword [ebp - 0x34], 0x1ba45
mov dword [ebp - 0x54], 0x2095c
mov dword [ebp - 0x30], 0x1f06f
mov dword [ebp - 0x48], 0xb61c0
mov dword [ebp - 0x38], 0
jmp 0x422d70
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x54]
sub ecx, 0x2095b
cmp dword [ebp - 0x38], ecx
jge 0x422dd6
mov edx, dword [ebp - 0xc]
xor edx, dword [ebp - 0x18]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
mov dword [ebp - 8], eax
cmp dword [ebp - 0xc], 0xc880f
jne 0x422dd4
mov ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
call dword [sym.imp.USER32.dll_TrackPopupMenu]
mov edx, dword [ebp - 0x30]
sub edx, 0xec37b
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x84887
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x18]
add edx, 0xb41b3
mov dword [ebp - 0x18], edx
jmp 0x422d67
mov dword [ebp - 0x3c], 0
jmp 0x422de8
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x4f510
cmp dword [ebp - 0x3c], ecx
jge 0x422e97
mov edx, dword [ebp + 0xc]
and edx, dword [ebp + 0xc]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 0x44]
add eax, 0xdbff4
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0xc]
xor ecx, 0x9111e
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x14]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x10]
and eax, 0x307cd
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x24]
or ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x2c], 0xb60e2
jle 0x422e92
mov edx, dword [ebp - 8]
or edx, 0xb8ecd
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x24]
or eax, 0xd1b4a
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x58]
mov dword [ebp - 0x1c], edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 4]
sub eax, 0x9bb47
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x48]
add ecx, 0x85927
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x4c]
add edx, 0xd4929
mov dword [ebp - 0x4c], edx
jmp 0x422ddf
mov eax, dword [ebp - 0x40]
sub eax, 0x88ea5
push eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x57cf9
push ecx
mov edx, dword [ebp - 0x10]
add edx, 0x6ef49
push edx
mov eax, dword [ebp - 0xc]
sub eax, 0x27804
push eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x2d8e5
push ecx
mov edx, dword [ebp - 0x5c]
sub edx, 0x673b7
push edx
mov eax, dword [ebp - 0x50]
add eax, 0x52ccb
push eax
call fcn.004229b0
add esp, 0x1c
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x40]
xor edx, 0xc6bbe
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x14]
xor eax, 0x9990b
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 8], ecx
cmp dword [ebp - 0x1c], 0x86f8d
jne 0x422f45
mov edx, dword [ebp + 0xc]
or edx, dword [ebp - 0x50]
mov dword [ebp + 0xc], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x7ec4f
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 4]
or edx, 0xb62b9
mov dword [ebp - 4], edx
call dword [sym.imp.KERNEL32.dll_TerminateThread]
nop
mov eax, dword [ebp + 8]
add eax, 1
mov dword [ebp + 8], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
or edx, 0x16a90
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 8]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0xadf20
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xc]
and edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
add eax, 0x2a813
mov dword [ebp - 0x10], eax
cmp dword [ebp - 4], 0x72b9c
jne 0x422fbd
mov ecx, dword [ebp - 0x1c]
and ecx, 0x465d1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 8]
xor edx, 0x3f419
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 1
mov dword [ebp - 0x10], eax
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
nop
cmp dword [ebp + 8], 0x32371
jl 0x422ee2
mov esp, ebp
pop ebp
ret