Function at 0x422220
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x1c
mov esi, dword [ebp + 8]
mov edi, dword [ebp + 0xc]
mov dword [esp + 4], str.module_load_mismatched
mov ebx, dword [sym.imp.ucrtbase.dll__stricmp]
mov dword [esp], esi
call ebx
test eax, eax
jne 0x4222a8
call sym._SymGetOptions_0
mov esi, eax
test edi, edi
je 0x422270
mov dword [esp + 4], str.true
mov dword [esp], edi
call ebx
test eax, eax
jne 0x422318
or esi, 0x40
jmp 0x42228f
test al, 0x40
mov edx, str.false
mov eax, str.true
mov dword [esp], str.Option:_module_load_mismatched__s_n
cmove eax, edx
mov dword [esp + 4], eax
call dbg.dbg_printf
mov dword [esp], esi
call sym._SymSetOptions_4
sub esp, 4
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], str.symbol_picker
mov dword [esp], esi
call ebx
test eax, eax
jne 0x422338
test edi, edi
je 0x4222e8
mov dword [esp + 4], str.interactive
mov dword [esp], edi
call ebx
test eax, eax
jne 0x422388
mov dword [sym._symbol_picker_interactive], 0x417b60
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret
cmp dword [sym._symbol_picker_interactive], 0x417b60
mov eax, str.interactive
mov edx, str.scoped
mov dword [ebp + 8], str.Option:_symbol_picker__s_n
cmovne eax, edx
mov dword [ebp + 0xc], eax
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp dbg.dbg_printf
mov dword [esp + 4], str.false
mov dword [esp], edi
call ebx
test eax, eax
jne 0x422458
and esi, 0xffffffbf
jmp 0x42228f
mov dword [esp + 4], str.data_model
mov dword [esp], esi
call ebx
test eax, eax
jne 0x4223b0
mov eax, dword [0x4ad5f8]
test eax, eax
je 0x422468
test edi, edi
je 0x422408
mov dword [esp + 4], str.auto
mov dword [esp], edi
call ebx
test eax, eax
jne 0x4223c0
mov eax, dword [0x4ad5f8]
mov dword [eax + 0x1418], 0
jmp 0x42229a
mov dword [esp + 4], str.scoped
mov dword [esp], edi
call ebx
test eax, eax
jne 0x4223f0
mov dword [sym._symbol_picker_interactive], 0x4185a0
jmp 0x42229a
mov dword [ebp + 0xc], esi
mov dword [ebp + 8], str.Unknown_option__s_n
jmp 0x422309
mov dword [esp + 4], str.ilp32
mov dword [esp], edi
call ebx
test eax, eax
jne 0x422471
mov eax, dword [0x4ad5f8]
mov dword [eax + 0x1418], 0x441820
jmp 0x42229a
mov dword [ebp + 8], str.Syntax:_symbol_picker__interactivescoped__n
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
jmp dbg.dbg_printf
mov edx, dword [eax + 0x1418]
mov eax, str.auto
test edx, edx
je 0x422444
mov eax, str.ilp32
cmp edx, 0x441820
je 0x422444
mov eax, str.llp64
cmp edx, 0x441740
je 0x422444
cmp edx, 0x441660
mov eax, 0x441a62
mov edx, str.lp64
cmove eax, edx
mov dword [ebp + 0xc], eax
mov dword [ebp + 8], str.Option:_data_model__s_n
jmp 0x422309
mov dword [ebp + 8], str.Syntax:_module_load_mismatched__truefalse__n
jmp 0x4223f7
mov dword [ebp + 8], str.Not_attached_to_a_process_n
jmp 0x4223f7
mov dword [esp + 4], str.llp64
mov dword [esp], edi
call ebx
test eax, eax
jne 0x422496
mov eax, dword [0x4ad5f8]
mov dword [eax + 0x1418], 0x441740
jmp 0x42229a
mov dword [esp + 4], str.lp64
mov dword [esp], edi
call ebx
test eax, eax
jne 0x4224bb
mov eax, dword [0x4ad5f8]
mov dword [eax + 0x1418], 0x441660
jmp 0x42229a
mov dword [ebp + 0xc], edi
mov dword [ebp + 8], str.Unknown_data_model__s_n
jmp 0x422309