Function at 0x41ff20
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x443cb8
mov eax, dword fs:[0]
push eax
sub esp, 0x2c
mov eax, dword [0x45600c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [ebp + 8]
mov edx, 0xffff
cmp dx, di
jne 0x41ff61
xor eax, eax
jmp 0x420170
mov eax, dword [ebx + 0x20]
mov ecx, dword [eax]
test ecx, ecx
je 0x41ff95
mov edx, dword [ebx + 0x30]
mov esi, dword [edx]
lea eax, [ecx + esi*2]
cmp ecx, eax
jae 0x41ff90
lea ecx, [esi - 1]
mov ax, di
mov dword [edx], ecx
mov edx, dword [ebx + 0x20]
mov esi, dword [edx]
lea ecx, [esi + 2]
mov dword [edx], ecx
mov word [esi], di
jmp 0x420170
mov edx, 0xffff
cmp dword [ebx + 0x4c], 0
jne 0x41ffa3
mov ax, dx
jmp 0x420170
mov esi, dword [ebx + 0xc]
lea eax, [ebx + 0x3c]
cmp dword [esi], eax
jne 0x41ffc3
mov edx, dword [ebx + 0x54]
mov ecx, dword [ebx + 0x50]
sub edx, ecx
mov dword [esi], ecx
mov eax, dword [ebx + 0x1c]
sar edx, 1
mov dword [eax], ecx
mov eax, dword [ebx + 0x2c]
mov dword [eax], edx
cmp dword [ebx + 0x38], 0
jne 0x41ffed
push dword [ebx + 0x4c]
push edi
call fcn.0042dbb6
mov ecx, 0xffff
add esp, 8
cmp ax, cx
movzx eax, di
jne 0x420170
mov eax, ecx
jmp 0x420170
push 0
movzx eax, di
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push 8
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], 0xf
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
call fcn.00422950
mov dword [ebp - 4], 0
mov edi, dword [ebp - 0x28]
mov esi, dword [ebp - 0x14]
nop dword [eax]
cmp esi, 0x10
lea eax, [ebp - 0x30]
mov esi, dword [ebx + 0x38]
lea ecx, [ebp - 0x28]
push eax
mov eax, dword [ebp - 0x18]
lea edx, [ebp - 0x28]
cmovae ecx, edi
cmovae edx, edi
mov edi, dword [esi]
add eax, ecx
push eax
push edx
lea eax, [ebp - 0x38]
mov ecx, esi
push eax
lea eax, [ebp - 0x2a]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebx + 0x40]
push eax
call dword [edi + 0x1c]
test eax, eax
js 0x42013a
cmp eax, 1
jg 0x42010b
mov esi, dword [ebp - 0x14]
lea eax, [ebp - 0x28]
mov edi, dword [ebp - 0x28]
cmp esi, 0x10
mov ecx, dword [ebp - 0x30]
cmovae eax, edi
sub ecx, eax
mov dword [ebp - 0x34], ecx
je 0x4200b3
push dword [ebx + 0x4c]
cmp esi, 0x10
lea eax, [ebp - 0x28]
push ecx
cmovae eax, edi
push 1
push eax
call fcn.00430064
mov ecx, dword [ebp - 0x34]
add esp, 0x10
cmp ecx, eax
jne 0x4200dd
mov esi, dword [ebp - 0x14]
mov edi, dword [ebp - 0x28]
lea eax, [ebp - 0x2c]
mov byte [ebx + 0x3e], 1
cmp dword [ebp - 0x38], eax
jne 0x4200fa
test ecx, ecx
jne 0x420030
cmp dword [ebp - 0x18], 0x20
jae 0x4200ed
push ecx
push 8
lea ecx, [ebp - 0x28]
call fcn.00422b80
jmp 0x420026
mov eax, 0xffff
movzx eax, ax
movzx eax, ax
movzx esi, ax
jmp 0x42013f
mov eax, 0xffff
movzx eax, ax
movzx esi, ax
jmp 0x42013f
mov eax, dword [ebp + 8]
movzx eax, ax
movzx eax, ax
movzx eax, ax
movzx esi, ax
jmp 0x42013f
cmp eax, 3
jne 0x42013a
push dword [ebx + 0x4c]
push dword [ebp - 0x2c]
call fcn.0042dbb6
mov ecx, 0xffff
add esp, 8
cmp ax, cx
je 0x420133
mov eax, dword [ebp + 8]
movzx eax, ax
movzx esi, ax
jmp 0x42013f
mov eax, ecx
movzx esi, ax
jmp 0x42013f
mov esi, 0xffff
mov dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x14]
cmp eax, 0x10
jb 0x42015b
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.00423c70
mov dword [ebp - 0x14], 0xf
mov ax, si
mov dword [ebp - 0x18], 0
mov byte [ebp - 0x28], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042654c
mov esp, ebp
pop ebp
ret 4