Function at 0x439ce0
Capabilities:
Check mutex on windows
Clear file content
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 8
mov eax, dword [0x5f3008]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [0x61671c]
push edi
mov edi, dword [0x616724]
push 0x5af0cc
push 0
push 0x1f0001
mov dword [ebp - 8], 0xa000d
call dword [sym.imp.KERNEL32.dll_OpenMutexW]
mov dword [esi + 0x247f8], eax
test eax, eax
jne 0x439d4b
push 0x30
push 0x591508
push 0x5ada04
push eax
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
mov eax, 0x3ef
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0
push 0x8000000
push 4
push 0
push 0
push 0x40000000
lea eax, [edi + 0x400]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [esi + 0x247fc], eax
cmp eax, 0xffffffff
jne 0x439da9
push 0x30
push 0x591508
push 0x5af140
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
mov eax, 0x3f0
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
movsx edi, word [esi + 0x1d550]
push ebx
test edi, edi
js 0x439e25
lea ebx, [esi + 0x1d4d8]
lea ebx, [ebx + edi*4]
nop
mov ecx, dword [ebx]
test ecx, ecx
je 0x439e1d
xor eax, eax
cmp word [ecx], ax
je 0x439dd8
nop dword [eax]
inc eax
cmp word [ecx + eax*2], 0
jne 0x439dd0
push 0
lea edx, [esi + 0x2480c]
add eax, eax
push edx
push eax
push ecx
push dword [esi + 0x247fc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [esi + 0x247fc]
test eax, eax
je 0x439f0a
push 0
lea eax, [esi + 0x2480c]
push eax
push 4
lea eax, [ebp - 8]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x439ee6
sub ebx, 4
sub edi, 1
jns 0x439dc0
cmp byte [esi + 0x1d552], 0
je 0x439ead
mov ebx, 0x1d
mov eax, ebx
cmp ax, word [esi + 0x1d550]
jle 0x439ead
lea edi, [esi + 0x1d54c]
mov ecx, dword [edi]
test ecx, ecx
je 0x439e9e
xor eax, eax
cmp word [ecx], ax
je 0x439e59
inc eax
cmp word [ecx + eax*2], 0
jne 0x439e51
push 0
lea edx, [esi + 0x2480c]
add eax, eax
push edx
push eax
push ecx
push dword [esi + 0x247fc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [esi + 0x247fc]
test eax, eax
je 0x439f4d
push 0
lea eax, [esi + 0x2480c]
push eax
push 4
lea eax, [ebp - 8]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x439f29
movsx eax, word [esi + 0x1d550]
dec ebx
sub edi, 4
cmp ebx, eax
jg 0x439e44
push dword [esi + 0x247fc]
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push dword [esi + 0x247fc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [esi + 0x247f8]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
pop ebx
pop edi
xor eax, eax
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
push dword [esi + 0x247fc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
mov eax, 0x3f2
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
mov eax, 0x3f1
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
push dword [esi + 0x247fc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop ebx
pop edi
mov eax, 0x3f4
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
mov eax, 0x3f3
pop ebx
pop edi
xor ecx, ebp
pop esi
call fcn.0056060a
mov esp, ebp
pop ebp
ret 4