Function at 0x434fb0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x84e218
mov eax, dword fs:[0]
push eax
sub esp, 0x5c
mov eax, dword [0x8943b8]
xor eax, esp
mov dword [esp + 0x58], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x8943b8]
xor eax, esp
push eax
lea eax, [esp + 0x70]
mov dword fs:[0], eax
mov edi, dword [esp + 0x80]
xor ebp, ebp
mov esi, ecx
mov dword [esp + 0x68], 0xf
mov dword [esp + 0x64], ebp
mov byte [esp + 0x54], 0
cmp edi, ebp
mov dword [esp + 0x78], ebp
je 0x43504a
mov eax, edi
lea edx, [eax + 1]
jmp 0x435010
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x435010
sub eax, edx
push eax
push edi
lea ecx, [esp + 0x58]
call fcn.00402200
mov eax, edi
lea edx, [eax + 1]
jmp 0x435030
mov cl, byte [eax]
add eax, 1
test cl, cl
jne 0x435030
sub eax, edx
push eax
push edi
lea ecx, [esi + 0x98]
call fcn.00402200
jmp 0x435091
mov eax, dword [esi + 0xac]
push ebp
lea edi, [esi + 0x98]
push 0x871030
push eax
push ebp
mov ecx, edi
call fcn.00405c70
test eax, eax
jne 0x435084
cmp dword [esp + 0x68], 0x10
jb 0x43507d
mov ecx, dword [esp + 0x54]
push ecx
call fcn.0081f6fa
add esp, 4
xor al, al
jmp 0x4352d3
push 0xffffffffffffffff
push ebp
push edi
lea ecx, [esp + 0x5c]
call fcn.004020d0
mov ecx, esi
call fcn.00434e90
lea edx, [esp + 0x50]
push edx
lea eax, [esp + 0x38]
push str.profile_
push eax
call fcn.0042bea0
add esp, 0xc
push 0xffffffffffffffff
push ebp
push eax
lea ecx, [esp + 0x5c]
mov byte [esp + 0x84], 1
call fcn.004020d0
mov ebx, 0x10
cmp dword [esp + 0x4c], ebx
jb 0x4350dc
mov ecx, dword [esp + 0x38]
push ecx
call fcn.0081f6fa
add esp, 4
cmp dword [esp + 0x68], ebx
mov eax, dword [esp + 0x54]
jae 0x4350ea
lea eax, [esp + 0x54]
push ebp
push 0x80
push 2
push ebp
push ebp
push 0x40000000
mov edi, vtable.CFileWriter.0
push eax
mov dword [esp + 0x34], edi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x1c], eax
jne 0x435118
xor eax, eax
mov dword [esp + 0x1c], eax
cmp eax, ebp
mov byte [esp + 0x78], 2
jne 0x435143
cmp dword [esp + 0x68], ebx
mov dword [esp + 0x18], edi
jb 0x43507d
mov edx, dword [esp + 0x54]
push edx
call fcn.0081f6fa
add esp, 4
xor al, al
jmp 0x4352d3
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
push ebp
lea ecx, [esp + 0x24]
push ecx
push 0x34
lea edx, [esi + 0x140]
push edx
push eax
call ebx
mov edx, dword [esp + 0x1c]
push ebp
lea eax, [esp + 0x24]
push eax
push 0x34
lea ecx, [esi + 0x174]
push ecx
push edx
call ebx
mov edx, dword [esp + 0x1c]
push ebp
lea eax, [esp + 0x24]
push eax
push 1
lea ecx, [esi + 0x13c]
push ecx
push edx
call ebx
mov edx, dword [esp + 0x1c]
push ebp
lea eax, [esp + 0x24]
push eax
push 1
lea ecx, [esi + 0x1a8]
push ecx
push edx
call ebx
add esi, 0x1bc
mov dword [esp + 0x28], ebp
mov dword [esp + 0x30], esi
mov dword [esp + 0x2c], 0
mov al, byte [esi]
push 0
lea ecx, [esp + 0x24]
push ecx
push 1
lea edx, [esp + 0x23]
mov byte [esp + 0x23], al
mov eax, dword [esp + 0x28]
push edx
push eax
call ebx
xor edi, edi
cmp byte [esp + 0x17], 0
mov dword [esp + 0x24], edi
jbe 0x435270
jmp 0x4351e5
mov edi, dword [esp + 0x24]
mov eax, dword [esi]
cmp eax, edi
jbe 0x4352f4
mov ebp, dword [esi - 4]
add eax, ebp
cmp ebp, eax
jbe 0x4351fd
call fcn.0081ff70
mov eax, dword [esi - 4]
mov ecx, dword [esi]
add ebp, edi
add ecx, eax
cmp ebp, ecx
ja 0x43520e
cmp ebp, eax
jae 0x435213
call fcn.0081ff70
mov edx, dword [esi]
add edx, dword [esi - 4]
mov edi, ebp
mov ebx, ebp
shr edi, 3
and ebx, 7
cmp ebp, edx
jb 0x43522b
call fcn.0081ff70
mov eax, dword [esi - 8]
cmp eax, edi
ja 0x435234
sub edi, eax
mov ecx, dword [esi - 0xc]
mov edx, dword [ecx + edi*4]
mov ecx, dword [esp + 0x1c]
push 0
lea eax, [esp + 0x24]
push eax
push 2
lea eax, [edx + ebx*2]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x24]
movzx edx, byte [esp + 0x17]
add eax, 1
cmp eax, edx
mov dword [esp + 0x24], eax
jl 0x4351e1
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x2c]
add eax, 1
add esi, 0x14
cmp eax, 4
mov dword [esp + 0x2c], eax
jl 0x4351b3
mov eax, dword [esp + 0x28]
mov esi, dword [esp + 0x30]
add eax, 1
add esi, 0x50
cmp eax, 0x14
mov dword [esp + 0x28], eax
mov dword [esp + 0x30], esi
jl 0x4351ab
mov eax, dword [esp + 0x1c]
test eax, eax
mov dword [esp + 0x18], vtable.CFileWriter.0
je 0x4352bd
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [esp + 0x68], 0x10
jb 0x4352d1
mov eax, dword [esp + 0x54]
push eax
call fcn.0081f6fa
add esp, 4
mov al, 1
mov ecx, dword [esp + 0x70]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x58]
xor ecx, esp
call fcn.0081fb35
add esp, 0x68
ret 4
call fcn.0046b920
int3