Function at 0x537570
Capabilities:
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x6d8903
push eax
mov eax, 0x13a0
mov dword fs:[0], esp
call fcn.0054d520
mov eax, dword fs:[0x2c]
mov ecx, dword [0x857378]
mov ecx, dword [eax + ecx*4]
mov eax, dword [0x823f94]
cmp eax, dword [ecx + 0x480]
jg 0x5377bc
push esi
mov dword [ebp - 0x10], 0x823f74
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov esi, eax
cmp esi, dword [0x823f74]
je 0x5375e5
mov edx, esi
mov ecx, 0x823f74
xor eax, eax
lock cmpxchg dword [ecx], edx
test eax, eax
je 0x5375e5
pause
push esi
call fcn.0053d110
jmp 0x5375ec
lock inc dword [0x823f78]
push ebx
push edi
mov dword [ebp - 4], 2
xor edi, edi
mov ebx, dword [ebp + 8]
cmp ebx, 2
jne 0x537679
mov edx, dword [ebp + 0xc]
test edx, edx
je 0x537679
mov cl, byte [edx]
mov eax, edx
test cl, cl
je 0x537646
mov edi, edi
cmp cl, 0x2f
je 0x53761a
cmp cl, 0x5c
jne 0x537639
cmp byte [eax + 1], 0x73
jne 0x537639
cmp byte [eax + 2], 0x72
jne 0x537639
cmp byte [eax + 3], 0x63
jne 0x537639
mov cl, byte [eax + 4]
cmp cl, 0x2f
je 0x537643
cmp cl, 0x5c
je 0x537643
mov cl, byte [eax + 1]
inc eax
test cl, cl
jne 0x537610
jmp 0x537646
lea edx, [eax + 1]
push dword [ebp + 0x10]
lea eax, [ebp - 0x13ac]
push edx
push str._s___d__:
push 0x139b
push eax
call fcn.00537830
mov edi, eax
add esp, 0x14
cmp edi, 0x139a
jbe 0x537674
mov edi, 0x139a
jmp 0x537679
cmp edi, 0xffffffff
je 0x5376ba
push dword [ebp + 0x18]
mov esi, 0x139b
lea eax, [ebp - 0x13ac]
push 0
push dword [ebp + 0x14]
sub esi, edi
add eax, edi
push esi
push eax
call fcn.004500f0
mov ecx, dword [eax]
push dword [eax + 4]
or ecx, 2
push ecx
call fcn.0055c7dc
or ecx, 0xffffffff
add esp, 0x1c
test eax, eax
cmovs eax, ecx
dec esi
cmp eax, esi
cmovle esi, eax
cmp esi, ecx
jne 0x5376c4
mov esi, 2
jmp 0x53778d
add edi, esi
cmp ebx, 2
je 0x5376d0
cmp ebx, 3
jne 0x53773b
push 1
call fcn.0055f1c6
push eax
call fcn.0055dcdf
push 2
call fcn.0055f1c6
push eax
push edi
lea eax, [ebp - 0x13ac]
push 1
push eax
call fcn.0055eba3
push 2
call fcn.0055f1c6
push eax
push 0xa
call fcn.0056bb15
push 2
call fcn.0055f1c6
push eax
call fcn.0055dcdf
add esp, 0x30
cmp ebx, 2
jne 0x53773b
lea eax, [ebp - 0x13ac]
add eax, edi
push 0x6e358c
push eax
call fcn.00473d10
add esp, 8
lea eax, [ebp - 0x13ac]
push eax
call dword [sym.imp.KERNEL32.dll_OutputDebugStringA]
lea eax, [ebp - 0x13ac]
push eax
push ebx
call dword [0x7cbff8]
add esp, 8
mov esi, eax
sub eax, 0
je 0x53777d
sub eax, 2
jne 0x53778d
push str.Exiting_on_SPEW_ABORT_n
push 1
push str.console
call fcn.00537500
add esp, 0xc
push 1
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
jmp 0x53778d
cmp ebx, 2
je 0x53778d
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
test eax, eax
je 0x53778d
int3
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x10]
add ecx, 4
lock dec dword [ecx]
cmp dword [ecx], 0
pop edi
pop ebx
jne 0x5377ab
mov ecx, dword [ebp - 0x10]
xor edx, edx
xchg dword [ecx], edx
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop esi
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
push 0x823f94
call fcn.0054d6a1
add esp, 4
cmp dword [0x823f94], 0xffffffff
jne 0x5375b2
mov dword [ebp - 4], 0
mov ecx, 0x823f7c
mov dword [0x823f74], 0
mov dword [0x823f78], 0
call fcn.0053cba0
mov byte [ebp - 4], 0
push 0x6e1560
call fcn.0054d453
mov dword [ebp - 4], 0xffffffff
push 0x823f94
call fcn.0054d657
add esp, 8
jmp 0x5375b2