Function at 0x41fbb0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4438b8
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x45600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [ebp + 8]
mov edx, 0xffff
cmp dx, di
jne 0x41fbf1
xor eax, eax
jmp 0x41fe00
mov eax, dword [ebx + 0x20]
mov ecx, dword [eax]
test ecx, ecx
je 0x41fc25
mov edx, dword [ebx + 0x30]
mov esi, dword [edx]
lea eax, [ecx + esi*2]
cmp ecx, eax
jae 0x41fc20
lea ecx, [esi - 1]
mov ax, di
mov dword [edx], ecx
mov edx, dword [ebx + 0x20]
mov esi, dword [edx]
lea ecx, [esi + 2]
mov dword [edx], ecx
mov word [esi], di
jmp 0x41fe00
mov edx, 0xffff
cmp dword [ebx + 0x4c], 0
jne 0x41fc33
mov ax, dx
jmp 0x41fe00
mov esi, dword [ebx + 0xc]
lea eax, [ebx + 0x3c]
cmp dword [esi], eax
jne 0x41fc53
mov edx, dword [ebx + 0x54]
mov ecx, dword [ebx + 0x50]
sub edx, ecx
mov dword [esi], ecx
mov eax, dword [ebx + 0x1c]
sar edx, 1
mov dword [eax], ecx
mov eax, dword [ebx + 0x2c]
mov dword [eax], edx
cmp dword [ebx + 0x38], 0
jne 0x41fc7d
push dword [ebx + 0x4c]
push edi
call fcn.0042d816
mov ecx, 0xffff
add esp, 8
cmp ax, cx
movzx eax, di
jne 0x41fe00
mov eax, ecx
jmp 0x41fe00
push 0
movzx eax, di
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push 8
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.004225f0
mov dword [ebp - 4], 0
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp - 0x14]
nop dword [eax]
cmp esi, 0x10
lea eax, [ebp - 0x30]
mov esi, dword [ebx + 0x38]
lea ecx, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x28]
cmovae ecx, edi
cmovae edx, edi
mov edi, dword [esi]
add eax, ecx
push eax
push edx
lea eax, [ebp - 0x38]
mov ecx, esi
push eax
lea eax, [ebp - 0x2a]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebx + 0x40]
push eax
call dword [edi + 0x1c]
test eax, eax
js 0x41fdca
cmp eax, 1
jg 0x41fd9b
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
mov edi, dword [ebp - 0x28]
cmp esi, 0x10
mov ecx, dword [ebp - 0x30]
cmovae eax, edi
sub ecx, eax
mov dword [ebp - 0x34], ecx
je 0x41fd43
push dword [ebx + 0x4c]
cmp esi, 0x10
lea eax, [ebp - 0x28]
push ecx
cmovae eax, edi
push 1
push eax
call fcn.0042fd08
mov ecx, dword [ebp - 0x34]
add esp, 0x10
cmp ecx, eax
jne 0x41fd6d
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0x2c]
mov byte [ebx + 0x3e], 1
cmp dword [ebp - 0x38], eax
jne 0x41fd8a
test ecx, ecx
jne 0x41fcc0
cmp dword [ebp - 0x18], 0x20
jae 0x41fd7d
push ecx
push 8
lea ecx, [ebp - 0x28]
call fcn.00422820
jmp 0x41fcb6
mov eax, 0xffff
movzx eax, ax
movzx eax, ax
movzx esi, ax
jmp 0x41fdcf
mov eax, 0xffff
movzx eax, ax
movzx esi, ax
jmp 0x41fdcf
mov eax, dword [ebp + 8]
movzx eax, ax
movzx eax, ax
movzx eax, ax
movzx esi, ax
jmp 0x41fdcf
cmp eax, 3
jne 0x41fdca
push dword [ebx + 0x4c]
push dword [ebp - 0x2c]
call fcn.0042d816
mov ecx, 0xffff
add esp, 8
cmp ax, cx
je 0x41fdc3
mov eax, dword [ebp + 8]
movzx eax, ax
movzx esi, ax
jmp 0x41fdcf
mov eax, ecx
movzx esi, ax
jmp 0x41fdcf
mov esi, 0xffff
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x41fdeb
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00423900
mov dword [ebp - 0x14], 0xf
mov ax, si
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.004261dc
mov esp, ebp
pop ebp
ret 4