Function at 0x411af0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x38c
mov eax, dword [0x436ebc]
push ebx
push esi
mov esi, ecx
mov ecx, dword [esi + 0x10cc080]
mov dword [esp + 0x390], eax
mov eax, dword [esi + 0x10cc07c]
mov edx, dword [eax + 0xe0]
mov eax, dword [eax + 0xe4]
push edi
mov edi, dword [ecx + 0xe0]
mov ecx, dword [ecx + 0xe4]
cmp eax, ecx
lea ebx, [esi + 0x10969f8]
jg 0x411b55
jl 0x411b41
cmp edx, edi
jae 0x411b55
mov dword [esp + 0x1c], eax
mov eax, edi
mov dword [esp + 0x18], edx
mov dword [esp + 0x28], eax
mov dword [esp + 0x2c], ecx
jmp 0x411b6d
mov dword [esp + 0x2c], eax
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x2c]
mov dword [esp + 0x28], edx
mov eax, edx
mov dword [esp + 0x18], edi
mov edx, edi
cmp edx, eax
jne 0x411b7b
cmp dword [esp + 0x1c], ecx
je 0x4120d0
xor edi, edi
sub eax, edx
sbb ecx, dword [esp + 0x1c]
mov dword [esp + 0x30], eax
mov eax, dword [esi + 0x10cc078]
mov edx, dword [eax + 0x34]
mov al, byte [eax + 0x781c]
mov dword [esp + 0x34], ecx
fild qword [esp + 0x30]
push 0xd4
mov dword [esp + 0x50], edi
mov dword [esp + 0x40], edi
fstp qword [esp + 0x54]
mov dword [esp + 0x68], edx
mov byte [esp + 0x17], al
call fcn.004159d0
mov ecx, dword [esi + 0x1097a10]
mov edi, dword [sym.imp.USER32.dll_SendMessageW]
add esp, 4
push eax
push 2
push 0x400
push ecx
call edi
push 0x42fe44
push ebx
call fcn.0041ae43
add esp, 8
test eax, eax
jne 0x411f69
push str..ALF
push ebx
call fcn.0041ae43
add esp, 8
test eax, eax
jne 0x411f69
push 0x42fa50
push ebx
mov dword [esp + 0x50], eax
call fcn.0041adc8
mov dword [esp + 0x48], eax
mov eax, dword [esi + 0x1097600]
add esp, 8
cmp eax, 1
jne 0x411c3d
push str.From_Begin__mks_
lea eax, [esp + 0x194]
push str._16s
push eax
call fcn.0041a6e9
add esp, 0xc
mov eax, dword [esi + 0x1097600]
test eax, eax
jne 0x411c66
push str.Time
push str.Date
lea ecx, [esp + 0x198]
push str._8s__14s
push ecx
call fcn.0041a6e9
add esp, 0x10
mov edx, dword [esi + 0x10cc078]
mov eax, dword [edx + 0x2c]
xor ebx, ebx
test eax, eax
jle 0x411cc3
lea edi, [esi + 0x10971f8]
jmp 0x411c80
cmp dword [edi], 0
je 0x411cb2
lea eax, [esp + 0x190]
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411c90
lea ecx, [ebx + 1]
push ecx
sub eax, edx
lea edx, [esp + eax + 0x194]
push 0x430810
push edx
call fcn.0041a6e9
add esp, 0xc
mov eax, dword [esi + 0x10cc078]
mov ecx, dword [eax + 0x2c]
inc ebx
add edi, 4
cmp ebx, ecx
jl 0x411c80
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x190]
push ecx
push 0x42f4cc
push edx
call fcn.00419f9f
add esp, 0xc
mov edi, dword [esp + 0x1c]
mov ecx, dword [esp + 0x2c]
mov ebx, dword [esp + 0x18]
mov eax, edi
cmp eax, ecx
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], edi
jg 0x412072
jl 0x411d0b
mov eax, dword [esp + 0x28]
mov ecx, ebx
cmp ecx, eax
jae 0x412072
fld qword [0x4307c8]
fdiv qword [esp + 0x50]
fstp qword [esp + 0x80]
lea esp, [esp]
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
mov edx, ebx
sub edx, eax
mov eax, edi
sbb eax, ecx
mov dword [esp + 0x50], edx
mov dword [esp + 0x54], eax
fild qword [esp + 0x50]
fstp qword [esp + 0x58]
fld qword [esp + 0x80]
fmul qword [esp + 0x58]
fmul qword [0x42f6f0]
call fcn.0041a7f8
cmp eax, dword [esp + 0x4c]
mov dword [esp + 0x24], eax
je 0x411d7d
mov ecx, dword [esi + 0x1097a10]
push eax
push 1
push 0x400
push ecx
call dword [sym.imp.USER32.dll_SendMessageW]
mov edx, dword [esp + 0x24]
mov dword [esp + 0x4c], edx
mov eax, dword [esp + 0x48]
test eax, eax
jne 0x411fcd
cmp dword [esi + 0x1097600], 1
jne 0x411dc3
mov eax, dword [esi + 0x10cc078]
fld dword [eax + 0x4ff0]
sub esp, 8
fdivr qword [esp + 0x60]
lea ecx, [esp + 0x98]
fmul qword [0x430808]
fstp qword [esp]
push str._16.1lf
push ecx
call fcn.0041a6e9
add esp, 0x10
mov eax, dword [esi + 0x1097600]
test eax, eax
jne 0x411e8e
mov eax, dword [esi + 0x10cc078]
fld dword [eax + 0x4ff0]
fdivr qword [0x4306b0]
call fcn.0041a7f8
push edi
push ebx
push edx
push eax
call fcn.0041a0e0
mov edi, dword [esi + 0x1095eb8]
mov ebx, dword [esi + 0x1095ebc]
mov ecx, dword [esi + 0x10cc078]
sub edi, eax
sbb ebx, edx
push ebx
push edi
lea edx, [esp + 0x80]
push edx
call fcn.00401170
lea eax, [esp + 0x68]
push eax
lea ecx, [esp + 0x7c]
push ecx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push 0
push 0x989680
push ebx
push edi
call fcn.0041a520
imul eax, eax, 0x989680
movzx ecx, word [esp + 0x70]
sub edi, eax
mov eax, 0x51eb851f
mul edi
movzx eax, word [esp + 0x72]
shr edx, 5
push edx
movzx edx, word [esp + 0x78]
push edx
movzx edx, word [esp + 0x70]
push eax
movzx eax, word [esp + 0x76]
push ecx
movzx ecx, word [esp + 0x7e]
sub edx, 0x7d0
push edx
push eax
push ecx
lea edx, [esp + 0xac]
push str._02d__02d__02d__02d:_02d:_02d__05d
push edx
call fcn.0041a6e9
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0x54]
add esp, 0x24
mov eax, dword [esi + 0x10cc078]
mov ecx, dword [eax + 0x2c]
xor edx, edx
test ecx, ecx
mov dword [esp + 0x14], edx
jle 0x411f4a
lea ecx, [esi + 0x10971f8]
mov dword [esp + 0x44], ecx
nop
mov eax, dword [esp + 0x44]
cmp dword [eax], 0
je 0x411f2f
lea eax, [esp + 0x90]
lea ecx, [eax + 1]
mov dword [esp + 0x24], ecx
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x411ec7
mov ecx, dword [esp + 0x24]
push edx
sub eax, ecx
mov ecx, dword [esi + 0x10cc078]
push edi
push ebx
mov dword [esp + 0x64], eax
call fcn.004014c0
fst dword [esp + 0x24]
mov edx, dword [esp + 0x24]
sub esp, 8
fstp qword [esp]
push edx
mov ecx, esi
call fcn.0040d580
push eax
lea eax, [esp + 0x19c]
push eax
call fcn.0041a6e9
mov edx, dword [esp + 0x68]
lea ecx, [esp + 0x1a0]
push ecx
lea eax, [esp + edx + 0xa4]
push 0x4307d0
push eax
call fcn.0041a6e9
mov edx, dword [esp + 0x30]
add esp, 0x1c
add dword [esp + 0x44], 4
mov ecx, dword [esi + 0x10cc078]
mov eax, dword [ecx + 0x2c]
inc edx
cmp edx, eax
mov dword [esp + 0x14], edx
jl 0x411eb0
mov eax, dword [esp + 0x40]
lea edx, [esp + 0x90]
push edx
push 0x42f4cc
push eax
call fcn.00419f9f
add esp, 0xc
jmp 0x41204c
mov ecx, dword [esi + 0x10cc078]
push 0
push 0
push 0
push 1
push ebx
mov dword [esp + 0x5c], 1
call fcn.00401850
push 0
push 0x20
push 3
push 0
push 0
push 0x40000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [esp + 0x3c], eax
jne 0x411fbb
mov edx, dword [esi + 0x1097a10]
push 0x64
push 1
push 0x400
push edx
call edi
jmp 0x4120c6
push 2
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x411cdd
mov ecx, dword [esi + 0x10cc078]
mov eax, dword [ecx + 0x2c]
test eax, eax
mov dword [esp + 0x14], 0
jle 0x41204c
mov al, byte [esp + 0x13]
test al, al
je 0x412004
mov eax, dword [esp + 0x14]
cdq
idiv dword [esp + 0x64]
mov edx, 1
mov ecx, eax
mov al, byte [esp + 0x13]
shl edx, cl
test al, dl
je 0x412036
mov ecx, dword [esp + 0x14]
push ecx
mov ecx, dword [esi + 0x10cc078]
push edi
push ebx
call fcn.004014c0
fstp dword [esp + 0x60]
mov ecx, dword [esp + 0x3c]
push 0
lea edx, [esp + 0x90]
push edx
push 4
lea eax, [esp + 0x6c]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x14]
mov edx, dword [esi + 0x10cc078]
mov ecx, dword [edx + 0x2c]
inc eax
cmp eax, ecx
mov dword [esp + 0x14], eax
jl 0x411fe2
mov eax, dword [esp + 0x2c]
add ebx, 1
adc edi, 0
cmp edi, eax
mov dword [esp + 0x30], ebx
mov dword [esp + 0x34], edi
jl 0x411d20
jg 0x412072
cmp ebx, dword [esp + 0x28]
jb 0x411d20
mov eax, dword [esp + 0x48]
test eax, eax
je 0x412099
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x3c]
push eax
push ecx
push edi
mov ecx, esi
call fcn.00411a40
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x4120a6
mov edx, dword [esp + 0x40]
push edx
call fcn.00419f4e
add esp, 4
mov eax, dword [esi + 0x1097a10]
push 0x64
push 1
push 0x400
push eax
mov dword [esi + 0x1097a30], 1
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [esi + 0x1097a10], 0
mov ecx, dword [esp + 0x394]
call fcn.00419ef4
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret