Function at 0x42e870
Capabilities:
Write file on windows

Disassembly:
push edi
push esi
sub esp, 0x7e4
mov eax, dword [esp + 0x7f0]
mov dword [esp + 0x7e0], eax
mov eax, dword [0x4966d0]
xor eax, 0xfa618246
mov dword [0x4966d0], eax
mov eax, dword [esp + 0x7e0]
mov ecx, eax
call fcn.0044ed30
cmp eax, 0x8072
jbe 0x42f0a7
mov eax, 0xa341bf4c
mov ecx, dword [0x495ef8]
inc ecx
mov dword [0x495ef8], ecx
and ecx, 0x7108180
or ecx, 0x78c31c7f
mov edx, dword [0x492efc]
xor edx, ecx
mov dword [0x492efc], edx
mov si, word [0x4973fa]
mov cx, si
imul ecx, ecx, 0xe17624eb
mov si, cx
mov word [0x4973fa], si
mov ecx, dword [0x49362c]
xor ecx, 0xb280efa4
mov edx, dword [0x4929d8]
sub edx, ecx
mov dword [0x4929d8], edx
mov ecx, dword [0x494664]
imul ecx, ecx, 0xd8fbbf7e
mov dword [0x494664], ecx
mov ecx, esp
lea edx, [esp + 0x646]
mov dword [ecx], edx
mov dword [esp + 0x50], eax
call fcn.004514b0
mov dword [esp + 0x640], eax
mov eax, dword [0x492938]
shl eax, 8
mov ecx, dword [esp + 0x50]
cmp ecx, eax
jle 0x42e96c
mov eax, dword [0x493358]
and eax, 0x737955a0
mov ecx, dword [0x49359c]
sub ecx, eax
mov dword [0x49359c], ecx
jmp 0x42e9a2
mov ax, word [0x4981ea]
movsx ecx, ax
or ecx, 0xc1df950a
or ecx, 0xe0eda323
cmp ecx, 0xa800a400
jl 0x42e99d
mov eax, dword [0x492f74]
imul eax, eax, 0x8dc4cfb9
mov dword [0x492f74], eax
jmp 0x42e9a2
mov eax, 0x90e3be9b
mov dword [esp + 0x4c], eax
call fcn.00414590
movzx ecx, al
and ecx, 3
add ecx, 7
mov edx, dword [esp + 0x640]
lea edx, [esp + edx + 0x646]
mov esi, esp
mov dword [esi + 4], ecx
mov dword [esi], edx
call fcn.0041b6f0
mov ecx, dword [0x495fa0]
add ecx, 0xf7ee7e3f
mov dword [0x495fa0], ecx
mov ecx, esp
mov dword [ecx + 4], 5
mov dword [ecx], 0x344
call fcn.0044bdb0
mov dword [esp + 0x7dc], eax
mov eax, dword [0x49283c]
add eax, 0x9a1d0b1
mov dword [0x49283c], eax
mov eax, dword [esp + 0x7dc]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x646]
mov dword [ecx], eax
call fcn.004564d0
mov ecx, dword [0x495a98]
mov edx, ecx
inc edx
mov dword [0x495a98], edx
or ecx, 0xef0e7247
mov edx, dword [esp + 0x4c]
cmp edx, ecx
mov dword [esp + 0x48], eax
jl 0x42ea64
mov eax, dword [0x49338c]
shl eax, 7
mov ecx, dword [0x493030]
xor ecx, eax
mov dword [0x493030], ecx
mov eax, 0x5a2834b0
mov ecx, esp
mov dword [ecx + 4], 3
mov dword [ecx], 0x34a3
mov dword [esp + 0x44], eax
call fcn.0044bdb0
mov dword [esp + 0x7d8], eax
mov eax, dword [0x4935b8]
imul eax, eax, 0x9e1fe7ad
mov dword [0x4935b8], eax
mov eax, dword [esp + 0x7dc]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 5
call fcn.004019a0
mov dx, word [0x4972b8]
mov ax, dx
mov ecx, eax
inc ecx
mov dx, cx
mov word [0x4972b8], dx
or eax, 0xc153
mov dx, ax
mov word [0x499b14], dx
mov eax, dword [esp + 0x7d8]
mov ecx, esp
mov dword [ecx + 4], eax
lea eax, [esp + 0x646]
mov dword [ecx], eax
call fcn.0045667c
mov dword [esp + 0x7d0], eax
mov dx, word [0x4989e2]
mov ax, dx
add eax, 0x73b01a8f
mov dx, word [0x4991f2]
mov cx, dx
or ecx, eax
mov dx, cx
mov word [0x4991f2], dx
mov eax, dword [esp + 0x7d8]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx], 3
call fcn.004019a0
mov eax, dword [0x4945d0]
mov ecx, eax
dec ecx
mov dword [0x4945d0], ecx
mov ecx, dword [esp + 0x44]
cmp ecx, eax
jg 0x42eb56
mov dword [0x4962b4], 0x38215ae1
cmp dword [esp + 0x7d0], 0
je 0x42ef91
mov eax, 0xfc18f6c1
mov ecx, dword [0x4951f8]
or ecx, 0x99d12439
mov edx, dword [0x4968ec]
sub edx, ecx
mov dword [0x4968ec], edx
mov si, word [0x498b90]
movsx ecx, si
imul ecx, ecx, 0xb550fdab
and ecx, 0xe8e155e9
cmp eax, ecx
jl 0x42ebc5
mov eax, dword [0x4924a4]
mov cx, word [0x4979bc]
movsx edx, cx
xor eax, edx
mov edx, dword [0x4923f4]
add edx, eax
mov dword [0x4923f4], edx
jmp 0x42ebd4
mov eax, dword [0x49414c]
add eax, 0xdd6fe05c
mov dword [0x49414c], eax
mov eax, 0x3af58b91
mov ecx, dword [esp + 0x7d0]
mov edx, dword [esp + 0x7e0]
mov dword [esp + 0x40], ecx
mov ecx, edx
mov dword [esp + 0x3c], eax
call fcn.0044ed30
mov ecx, dword [esp + 0x7e0]
mov dword [esp + 0x38], eax
call fcn.00441750
mov ecx, esp
mov edx, dword [esp + 0x40]
mov dword [ecx + 0xc], edx
mov edx, dword [esp + 0x38]
mov dword [ecx + 4], edx
mov dword [ecx], eax
mov dword [ecx + 8], 1
call fcn.0045682f
mov si, word [0x497b5c]
mov cx, si
add ecx, 0x6bca887c
mov si, cx
mov word [0x497b5c], si
mov ecx, dword [esp + 0x7d0]
mov edx, esp
mov dword [edx], ecx
mov dword [esp + 0x34], eax
call fcn.0045691d
mov ecx, dword [0x495880]
shl ecx, 0xa
mov si, word [0x4978ee]
mov dx, si
sub edx, ecx
mov si, dx
mov word [0x4978ee], si
mov ecx, dword [esp + 0x7e0]
mov dword [esp + 0x30], eax
call fcn.00417920
mov si, word [0x497386]
movsx eax, si
sar eax, 9
or eax, 0xda20e6ed
mov ecx, dword [esp + 0x3c]
cmp ecx, eax
jge 0x42ed18
mov eax, dword [0x496720]
inc eax
mov dword [0x496720], eax
mov ecx, dword [0x493054]
sar ecx, 0xa
and eax, ecx
mov ecx, dword [0x494508]
inc ecx
mov dword [0x494508], ecx
imul ecx, ecx, 0xaa56b365
cmp eax, ecx
jl 0x42ece4
mov eax, dword [0x492cc4]
add eax, 0xb0a31fd1
mov dword [0x492cc4], eax
jmp 0x42ed13
mov eax, 0x9aa731b4
mov cx, word [0x4980ae]
movsx edx, cx
mov esi, dword [0x4970ec]
add esi, 0x284cb9e7
or edx, esi
cmp eax, edx
jg 0x42ed0e
jmp 0x42ed0e
jmp 0x42ed13
jmp 0x42ed18
mov byte [esp + 0x1cc], 0
mov ax, word [0x4978c6]
movsx ecx, ax
mov edx, dword [0x49345c]
or ecx, edx
mov edx, dword [0x496f28]
add edx, ecx
mov dword [0x496f28], edx
mov ecx, dword [0x491bc8]
mov edx, esp
lea esi, [esp + 0x56]
mov dword [edx + 4], esi
mov dword [edx + 8], 0x176
mov dword [edx], 0
mov dword [esp + 0x2c], esi
call ecx
sub esp, 0xc
mov ecx, dword [0x4943c0]
xor ecx, 0x44a681c9
mov dword [0x4943c0], ecx
mov byte [esp + 0x63f], 0
mov dword [0x491d30], 0xf381ac66
mov ecx, esp
mov dword [ecx + 4], 0x15
mov dword [ecx], 0x1afa
mov dword [esp + 0x28], eax
call fcn.0044bdb0
mov dword [esp + 0x7d4], eax
mov di, word [0x4990ca]
movsx eax, di
not eax
add eax, 0xcb81f025
mov ecx, dword [0x496c6c]
or ecx, eax
mov dword [0x496c6c], ecx
mov eax, dword [0x49a634]
mov ecx, dword [0x49a61c]
mov edx, dword [esp + 0x7d4]
mov esi, esp
mov dword [esi + 0x10], eax
mov dword [esi + 0xc], ecx
mov eax, dword [esp + 0x2c]
mov dword [esi + 8], eax
mov dword [esi + 4], edx
lea ecx, [esp + 0x1cd]
mov dword [esi], ecx
mov dword [esp + 0x24], ecx
call fcn.00456c1f
mov dword [0x49443c], 0x5cf561d7
mov ecx, dword [esp + 0x7d4]
mov edx, esp
mov dword [edx + 4], ecx
mov dword [edx], 0x15
mov dword [esp + 0x20], eax
call fcn.004019a0
mov di, word [0x4978b0]
mov ax, di
shl eax, 0xa
mov di, word [0x497abc]
mov cx, di
sub ecx, eax
mov di, cx
mov word [0x497abc], di
mov eax, dword [0x49a634]
mov ecx, esp
mov dword [ecx], eax
call fcn.00419b10
mov ecx, dword [0x493624]
mov edx, ecx
dec edx
mov dword [0x493624], edx
imul ecx, ecx, 0x458b13bb
mov edx, dword [0x4964d8]
and edx, ecx
mov dword [0x4964d8], edx
mov ecx, esp
mov edx, dword [esp + 0x24]
mov dword [ecx + 4], edx
lea esi, [esp + 0x646]
mov dword [ecx], esi
mov dword [esp + 0x1c], eax
call fcn.00417d60
mov eax, dword [0x493864]
add eax, 0x7a59db7
mov dword [0x493864], eax
mov eax, esp
mov ecx, dword [esp + 0x24]
mov dword [eax], ecx
mov dword [eax + 4], 0x473
call fcn.00407960
mov eax, dword [0x49526c]
add eax, 0xe8034541
mov dword [0x49526c], eax
mov eax, esp
mov ecx, dword [esp + 0x2c]
mov dword [eax], ecx
mov dword [eax + 4], 0x177
call fcn.00407960
mov di, word [0x498c58]
movsx eax, di
mov ecx, dword [0x494d38]
imul eax, ecx
sub eax, 0x5d24235e
cmp eax, 0xe6454d75
jl 0x42ef0d
mov eax, dword [0x4956ec]
or eax, 0x72127c6f
mov dword [0x4956ec], eax
jmp 0x42ef3d
mov ax, word [0x498414]
mov cx, ax
mov edx, ecx
inc edx
mov ax, dx
mov word [0x498414], ax
add ecx, 0xaa65d7f2
mov ax, word [0x498c2a]
mov dx, ax
imul edx, ecx
mov ax, dx
mov word [0x498c2a], ax
mov eax, dword [0x491c24]
mov ecx, esp
mov dword [ecx], 0x162fd
call eax
sub esp, 4
mov eax, dword [0x494040]
and eax, 0x8f547367
mov dword [0x494040], eax
mov eax, dword [0x491b74]
mov ecx, esp
lea edx, [esp + 0x646]
mov dword [ecx], edx
call eax
sub esp, 4
mov si, word [0x497246]
mov cx, si
imul ecx, ecx, 0x5f26bc0
mov si, cx
mov word [0x497246], si
mov dword [esp + 0x18], eax
mov eax, 0x41120c30
mov cx, word [0x4978a4]
mov dx, cx
dec edx
mov cx, dx
mov word [0x4978a4], cx
movsx edx, cx
mov esi, dword [0x495a90]
mov edi, esi
dec edi
mov dword [0x495a90], edi
sub edx, esi
cmp eax, edx
jle 0x42f009
mov eax, 0xb00ca742
mov cx, word [0x497514]
movsx edx, cx
cmp eax, edx
je 0x42f004
mov eax, dword [0x495be4]
mov ecx, eax
inc ecx
mov dword [0x495be4], ecx
add eax, 0xb4cd584c
and eax, 0x26ce73f
mov ecx, dword [0x4967e0]
or ecx, eax
mov dword [0x4967e0], ecx
jmp 0x42f022
mov eax, dword [0x496cb8]
inc eax
mov dword [0x496cb8], eax
mov ecx, dword [0x4956b0]
sub ecx, eax
mov dword [0x4956b0], ecx
mov eax, 0x3034514d
mov ecx, esp
lea edx, [esp + 0x646]
mov dword [ecx], edx
mov dword [ecx + 4], 0x18a
mov dword [esp + 0x14], eax
call fcn.00407960
mov eax, dword [0x495cf4]
mov ecx, eax
dec ecx
mov dword [0x495cf4], ecx
add eax, 0xcb49a68
mov ecx, dword [0x4925b4]
dec ecx
mov dword [0x4925b4], ecx
sub eax, ecx
mov ecx, dword [0x496340]
dec ecx
mov dword [0x496340], ecx
mov edx, dword [esp + 0x14]
sub edx, ecx
cmp eax, edx
je 0x42f0a2
mov ax, word [0x499b3e]
mov cx, ax
and ecx, 0xa791
mov ax, word [0x499828]
mov dx, ax
or edx, ecx
mov ax, dx
mov word [0x499828], ax
jmp 0x42f0a7
mov eax, dword [0x494d04]
mov ecx, dword [0x495e60]
add ecx, eax
mov dword [0x495e60], ecx
add esp, 0x7e4
pop esi
pop edi
ret