Function at 0x411e10
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
and esp, 0xfffffff8
sub esp, 0x64
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x24], eax
mov eax, dword [0x4ab5d8]
test eax, eax
je 0x411f68
mov eax, dword [0x4ab5d4]
test eax, eax
je 0x411f68
lea eax, [esp + 0x44]
mov dword [esp + 0xc], 0
mov dword [esp + 8], eax
mov dword [esp + 4], 0xffffffff
mov dword [esp], str.debug_options
call fcn.00418420
test eax, eax
je 0x411e78
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
lea eax, [esp + 0x4c]
mov dword [esp], eax
call fcn.00412e10
test esi, esi
mov ebx, eax
je 0x412098
mov edi, dword [sym.imp.ucrtbase.dll_strcmp]
mov dword [esp + 4], 0x43d530
mov dword [esp], esi
mov dword [esp + 0x1c], edi
call edi
test eax, eax
jne 0x411f80
mov byte [esp + 0x22], 1
mov eax, dword [esp + 0x24]
mov dword [esp], 0x43d55d
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1c]
call eax
test ebx, ebx
mov dword [esp + 0x28], eax
je 0x412078
mov al, byte [esp + 0x22]
mov dword [esp + 0x18], 0
xor eax, 0xffffffff
lea edi, [esp + 0x30]
lea esi, [esp + 0x34]
mov byte [esp + 0x23], al
nop
mov eax, dword [0x4ab5d8]
mov edx, dword [eax + 0x10]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov eax, dword [eax + 8]
mov dword [esp], eax
call dword [edx + 4]
test eax, eax
jne 0x411fe0
mov eax, dword [esp + 0x18]
test eax, eax
je 0x412078
test byte [0x438740], 8
je 0x411e6f
mov eax, dword [esp + 0x18]
mov dword [esp + 0xc], str.Changed__d_channel_instances_n
mov dword [esp + 0x10], eax
mov dword [esp + 8], str.info_wine_dbg_channel
mov dword [esp + 4], 0x438740
mov dword [esp], 3
call fcn.0040ffa0
jmp 0x411e6f
mov dword [ebp + 8], str.Cannot_set_get_debug_channels_while_no_process_is_loaded_n
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp fcn.004218d0
mov dword [esp + 4], 0x43d536
mov dword [esp], esi
call edi
test eax, eax
je 0x4120b0
mov dword [esp + 4], 0x43d53a
mov dword [esp], esi
call edi
test eax, eax
je 0x4120ba
mov dword [esp + 4], 0x43d53f
mov dword [esp], esi
call edi
mov byte [esp + 0x22], 8
test eax, eax
je 0x411eb2
mov dword [esp + 4], esi
mov dword [esp], str.Unknown_debug_class__s_n
call fcn.004218d0
jmp 0x411e6f
cmp dword [esp + 0x30], 0x10
jne 0x411f1d
cmp byte [esp + 0x35], 0
je 0x411f1d
mov eax, dword [esp + 0x28]
test eax, eax
je 0x412017
mov eax, dword [esp + 0x24]
mov dword [esp + 4], eax
lea eax, [esp + 0x35]
mov dword [esp], eax
mov eax, dword [esp + 0x1c]
call eax
test eax, eax
jne 0x41206c
mov dl, byte [esp + 0x34]
mov al, byte [esp + 0x23]
mov ecx, dword [esp + 0x2c]
and eax, edx
test ecx, ecx
je 0x41202f
mov al, byte [esp + 0x22]
or eax, edx
mov byte [esp + 0x34], al
mov eax, dword [0x4ab5d8]
mov edx, dword [eax + 0x10]
mov dword [esp + 0x10], edi
mov dword [esp + 0xc], 0x10
mov dword [esp + 8], esi
mov dword [esp + 4], ebx
mov eax, dword [eax + 8]
mov dword [esp], eax
call dword [edx + 8]
test eax, eax
je 0x41206c
cmp dword [esp + 0x30], 0x10
jne 0x41206c
mov edx, dword [esp + 0x18]
inc edx
mov dword [esp + 0x18], edx
add ebx, 0x10
jmp 0x411ef0
mov eax, dword [esp + 0x24]
mov dword [esp], str.Unable_to_find_debug_channel__s_n
mov dword [esp + 4], eax
call fcn.004218d0
jmp 0x411e6f
mov eax, dword [sym.imp.ucrtbase.dll_strcmp]
mov byte [esp + 0x22], 0xff
mov dword [esp + 0x1c], eax
jmp 0x411eb2
mov byte [esp + 0x22], 2
jmp 0x411eb2
mov byte [esp + 0x22], 4
jmp 0x411eb2