Function at 0x403530
Capabilities:
Check for time delay via gettickcount
Write file on windows

Disassembly:
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x420990
push eax
mov dword fs:[0], esp
sub esp, 0x54
push ebx
mov ebx, ecx
push ebp
push esi
mov al, byte [ebx + 0x34]
push edi
test al, al
je 0x403658
lea ecx, [esp + 0x14]
call sub.MFC42.DLL_CString::CString_2
xor edi, edi
lea ecx, [esp + 0x18]
mov dword [esp + 0x6c], edi
call sub.MFC42.DLL_CString::CString_2
mov esi, dword [ebx + 0x1c8]
mov byte [esp + 0x6c], 1
cmp esi, edi
jne 0x403590
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov esi, eax
mov dword [ebx + 0x1c8], esi
jmp 0x40359c
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebx + 0x1c8], eax
mov eax, dword [ebx + 0x1c8]
lea ecx, [esp + 0x14]
sub eax, esi
push eax
push str._r_nOUT__4d__:
push ecx
call sub.MFC42.DLL_CString::Format
mov ebp, dword [esp + 0x84]
add esp, 0xc
cmp ebp, edi
mov dword [esp + 0x10], ebp
jle 0x40361d
mov esi, dword [esp + 0x74]
xor edx, edx
lea eax, [esp + 0x18]
mov dl, byte [edi + esi]
push edx
push str._02X
push eax
call sub.MFC42.DLL_CString::Format
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esp + 0x18]
call fcn.0041ff14
mov edx, edi
and edx, 0x8000000f
jns 0x4035ff
dec edx
or edx, 0xfffffff0
inc edx
cmp edx, 0xf
jne 0x403612
push 0x4368fc
lea ecx, [esp + 0x18]
call sub.MFC42.DLL_CString::operator
mov eax, dword [esp + 0x10]
inc edi
cmp edi, eax
jl 0x4035c6
jmp 0x403621
mov esi, dword [esp + 0x74]
mov eax, dword [esp + 0x14]
mov byte [ebx + 0x35], 1
push eax
push ebx
call fcn.00402fe0
add esp, 8
lea ecx, [esp + 0x18]
mov byte [ebx + 0x35], 0
mov byte [esp + 0x6c], 0
call sub.MFC42.DLL_CString::CString
lea ecx, [esp + 0x14]
mov dword [esp + 0x6c], 0xffffffff
call sub.MFC42.DLL_CString::CString
jmp 0x403660
mov esi, dword [esp + 0x74]
mov ebp, dword [esp + 0x78]
mov al, byte [ebx + 0x36]
test al, al
je 0x403777
mov eax, dword [ebx + 0x1e0]
test eax, eax
jne 0x4036a4
mov edx, dword [ebx + 0x18]
lea edi, [ebx + 0x1120]
lea ecx, [esp + 0x10]
push edi
push ecx
push ebp
push esi
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebx + 0x18]
lea eax, [esp + 0x10]
push 1
push eax
push edi
push ecx
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
jmp 0x4037b8
mov edx, ebp
mov dword [esp + 0x10], 0
test ebp, ebp
mov dword [esp + 0x14], edx
je 0x4037b8
jmp 0x4036c4
mov esi, dword [esp + 0x74]
mov edx, dword [esp + 0x14]
cmp edx, 0x3f
jbe 0x4036cb
mov dl, 0x3f
mov ecx, 0x10
xor eax, eax
lea edi, [esp + 0x20]
mov byte [esp + 0x18], dl
rep stosd dword es:[edi], eax
mov ebp, dword [esp + 0x18]
stosb byte es:[edi], al
mov edi, dword [esp + 0x14]
mov byte [esp + 0x21], dl
mov edx, dword [esp + 0x78]
and ebp, 0xff
sub esi, edi
mov ecx, ebp
add esi, edx
mov edx, ecx
lea edi, [esp + 0x22]
lea eax, [ebx + 0x1120]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
mov edx, dword [esp + 0x10]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
add edx, ebp
lea eax, [esp + 0x20]
mov dword [esp + 0x14], edx
mov edx, dword [ebx + 0x18]
push eax
lea ecx, [esp + 0x28]
push 0x41
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebx + 0x18]
lea eax, [esp + 0x1c]
push 0
push eax
lea eax, [ebx + 0x1120]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
jne 0x403765
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e4
je 0x403732
push 0xffffffffffffffff
call fcn.0041f560
add esp, 4
mov eax, dword [esp + 0x14]
sub eax, ebp
mov dword [esp + 0x14], eax
jne 0x4036bc
jmp 0x4037b8
mov eax, dword [ebx + 0x1ac]
test eax, eax
jne 0x403796
mov eax, dword [ebx + 0x18]
lea edx, [esp + 0x10]
push 0
push edx
push ebp
push esi
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x4037b8
xor edi, edi
test ebp, ebp
jle 0x4037b8
mov eax, dword [ebx + 0x18]
lea ecx, [esp + 0x10]
push 0
push ecx
lea edx, [edi + esi]
push 1
push edx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
inc edi
cmp edi, ebp
jl 0x40379c
mov ecx, dword [esp + 0x64]
pop edi
pop esi
pop ebp
pop ebx
mov dword fs:[0], ecx
add esp, 0x60
ret 8