Function at 0x42b360
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x55f601
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x5b0514]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov edi, dword [ebp + 8]
mov dword [ebp - 0x14], 0
cmp byte [esi + 0x234], 0
mov dword [ebp - 0x1c], edi
je 0x42b80c
cmp dword [esi + 0x184], 0
jne 0x42b80c
push ecx
lea edi, [esi + 0x238]
push 0x58bdf0
mov ecx, edi
call fcn.0041a310
xor ecx, ecx
mov dword [ebp - 0x3c], 0
inc eax
mov word [ebp - 0x4c], cx
cmp dword [edi + 0x10], eax
mov ecx, edi
mov dword [ebp - 0x38], 7
cmovb eax, dword [edi + 0x10]
cmp dword [edi + 0x14], 8
jb 0x42b3ec
mov ecx, dword [edi]
push eax
push ecx
lea ecx, [ebp - 0x4c]
call fcn.00410900
xor eax, eax
mov dword [ebp - 4], 0
push eax
push 0x58bc94
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
call fcn.00410900
mov byte [ebp - 4], 1
cmp dword [ebp - 0x3c], 0
je 0x42b518
lea eax, [ebp - 0x64]
push eax
lea ecx, [esi + 0x214]
call fcn.0042c230
mov edi, eax
lea eax, [ebp - 0x34]
cmp eax, edi
je 0x42b470
mov ecx, eax
call fcn.00407320
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [edi + 0x10]
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
movq qword [ebp - 0x24], xmm0
mov word [edi], ax
mov edx, dword [ebp - 0x50]
cmp edx, 8
jb 0x42b4aa
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b4a0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b97d
push edx
push ecx
call fcn.00497cc1
add esp, 8
cmp dword [ebp - 0x24], 0
jne 0x42b518
cmp dword [esi + 0x22c], 0
lea eax, [esi + 0x21c]
je 0x42b518
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00402a30
lea ecx, [ebp - 0x64]
call fcn.00414ec0
add esp, 0x18
lea ecx, [ebp - 0x34]
push eax
call fcn.0040be40
mov edx, dword [ebp - 0x50]
cmp edx, 8
jb 0x42b518
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b50e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b982
push edx
push ecx
call fcn.00497cc1
add esp, 8
sub esp, 0x18
lea eax, [ebp - 0x34]
mov ecx, esp
push eax
call fcn.00402a30
lea ecx, [ebp - 0x64]
call fcn.00416ec0
mov edi, eax
add esp, 0x18
lea eax, [ebp - 0x34]
cmp eax, edi
je 0x42b565
mov ecx, eax
call fcn.00407320
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x34], xmm0
movq xmm0, qword [edi + 0x10]
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
movq qword [ebp - 0x24], xmm0
mov word [edi], ax
mov edx, dword [ebp - 0x50]
cmp edx, 8
jb 0x42b59f
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b595
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b987
push edx
push ecx
call fcn.00497cc1
add esp, 8
mov eax, dword [ebp - 0x3c]
test eax, eax
je 0x42b65c
mov edi, dword [ebp - 0x24]
test edi, edi
je 0x42b65c
mov byte [ebp - 4], 2
xor ecx, ecx
add eax, edi
mov word [ebp - 0x64], cx
push eax
lea ecx, [ebp - 0x64]
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x50], 7
mov dword [ebp - 0x14], 7
call fcn.0040a130
cmp dword [ebp - 0x38], 8
lea eax, [ebp - 0x4c]
push dword [ebp - 0x3c]
cmovae eax, dword [ebp - 0x4c]
lea ecx, [ebp - 0x64]
push eax
call fcn.00411920
cmp dword [ebp - 0x20], 8
lea eax, [ebp - 0x34]
push edi
cmovae eax, dword [ebp - 0x34]
lea ecx, [ebp - 0x64]
push eax
call fcn.00411920
lea eax, [ebp - 0x64]
lea edi, [esi + 0x140]
push eax
mov ecx, edi
call fcn.0040be40
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x50]
cmp edx, 8
jb 0x42b681
mov ecx, dword [ebp - 0x64]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b650
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b98c
push edx
push ecx
call fcn.00497cc1
add esp, 8
jmp 0x42b681
lea edi, [esi + 0x140]
lea eax, [esi + 0x238]
cmp edi, eax
je 0x42b681
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x42b676
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, edi
call fcn.00410900
push 0x1c
push str.Option
call fcn.0043b1e0
test eax, eax
je 0x42b698
mov ecx, edi
call fcn.00419e10
cmp dword [edi + 0x14], 8
jb 0x42b6a0
mov edi, dword [edi]
sub esp, 0xc
push 4
push ecx
push 0x40000000
push edi
lea ecx, [esi + 0x184]
call fcn.0042e4c0
mov edi, eax
test edi, edi
js 0x42b70f
mov eax, dword [esi + 0xbc]
mov ecx, dword [esi + 0xb8]
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x14]
push eax
push ecx
push dword [esi + 0x184]
mov dword [ebp - 0x18], ecx
call dword [sym.imp.KERNEL32.DLL_SetFilePointer]
cmp eax, 0xffffffff
jne 0x42b6f2
call fcn.0042fb30
mov edi, eax
test edi, edi
js 0x42b70f
push dword [esi + 0xbc]
lea ecx, [esi + 0x184]
push dword [esi + 0xb8]
call fcn.0042e3f0
mov edi, eax
test edi, edi
jns 0x42b78a
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x42b749
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b73f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b991
push edx
push ecx
call fcn.00497cc1
add esp, 8
mov edx, dword [ebp - 0x38]
cmp edx, 8
jb 0x42b783
mov ecx, dword [ebp - 0x4c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b779
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b996
push edx
push ecx
call fcn.00497cc1
add esp, 8
mov eax, edi
jmp 0x42b960
mov byte [ebp - 4], 0
mov edx, dword [ebp - 0x20]
cmp edx, 8
jb 0x42b7c8
mov ecx, dword [ebp - 0x34]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b7be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b99b
push edx
push ecx
call fcn.00497cc1
add esp, 8
mov dword [ebp - 4], 0xffffffff
mov edx, dword [ebp - 0x38]
cmp edx, 8
jb 0x42b809
mov ecx, dword [ebp - 0x4c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x42b7ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x42b9a0
push edx
push ecx
call fcn.00497cc1
add esp, 8
mov edi, dword [ebp - 0x1c]
lea eax, [esi + 0x1b0]
mov dword [ebp - 0x14], 0
push eax
mov dword [ebp - 0x6c], eax
call dword [sym.imp.KERNEL32.DLL_EnterCriticalSection]
mov byte [ebp - 0x68], 1
mov eax, dword [ebp + 0xc]
mov dword [ebp - 4], 3
add dword [esi + 0x1e8], eax
mov ecx, dword [esi + 0x184]
adc dword [esi + 0x1ec], 0
test ecx, ecx
je 0x42b86e
push 0
lea edx, [ebp - 0x1c]
push edx
push eax
push edi
push ecx
call dword [sym.imp.KERNEL32.DLL_WriteFile]
test eax, eax
jne 0x42b865
call fcn.0042fb30
mov dword [ebp - 0x14], eax
jmp 0x42b8d4
mov dword [ebp - 0x14], 0
jmp 0x42b8d4
mov eax, dword [esi + 0x15c]
lea edi, [esi + 0x158]
mov edx, dword [edi]
sub eax, edx
jne 0x42b8ba
mov ecx, dword [esi + 0x1d0]
mov eax, ecx
and eax, dword [esi + 0x1d4]
cmp eax, 0xffffffff
mov eax, dword [edi + 8]
je 0x42b8aa
sub eax, edx
cmp ecx, eax
jbe 0x42b8ba
cmp ecx, 0x7fffffff
ja 0x42b9a5
jmp 0x42b8b2
mov ecx, dword [esi + 0x180]
jmp 0x42b896
push ecx
mov ecx, edi
call fcn.0042f850
push dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp + 0xc]
add eax, ecx
push eax
push ecx
push dword [esi + 0x15c]
mov ecx, edi
call fcn.004077f0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x38]
lea eax, [esi + 0x1b0]
push eax
call dword [sym.imp.KERNEL32.DLL_LeaveCriticalSection]
mov eax, dword [ebp - 0x14]
test eax, eax
jne 0x42b960
mov ecx, esi
call fcn.0042e370
mov edx, dword [0x5ba974]
mov edi, eax
test edx, edx
je 0x42b944
mov ecx, edx
shl ecx, 0xd
cmp edi, ecx
jb 0x42b912
push 0x400
jmp 0x42b93e
mov eax, edx
shl eax, 0xc
cmp edi, eax
jb 0x42b922
push 0x200
jmp 0x42b93e
mov eax, edx
shl eax, 0xb
cmp edi, eax
jb 0x42b932
push 0x100
jmp 0x42b93e
shl edx, 0xa
cmp edi, edx
jb 0x42b944
push 0x80
call dword [sym.imp.KERNEL32.DLL_Sleep]
push dword [ebp + 0xc]
push 0x81f6
push 0x81f4
push dword [esi + 0x210]
call dword [sym.imp.USER32.dll_PostMessageW]
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00497cb0
mov esp, ebp
pop ebp
ret 8
call fcn.00524999
call fcn.00524999
call fcn.00524999
call fcn.00524999
call fcn.00524999
call fcn.00524999
call fcn.00524999
call fcn.00524999
call fcn.00402b10
int3