Function at 0x410dff
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x3078
call fcn.00424e40
mov eax, dword [0x446b0c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [edi + 0x10cc07c]
mov ecx, dword [edi + 0x10cc080]
mov edx, dword [eax + 0xe0]
mov eax, dword [eax + 0xe4]
push ebx
push esi
mov esi, dword [ecx + 0xe0]
mov ecx, dword [ecx + 0xe4]
cmp eax, ecx
lea ebx, [edi + 0x10969f8]
jg 0x410e66
jl 0x410e4c
cmp edx, esi
jae 0x410e66
mov dword [ebp - 0x3020], edx
mov dword [ebp - 0x301c], eax
mov dword [ebp - 0x3028], esi
mov dword [ebp - 0x3024], ecx
jmp 0x410e7e
mov dword [ebp - 0x3020], esi
mov dword [ebp - 0x301c], ecx
mov dword [ebp - 0x3028], edx
mov dword [ebp - 0x3024], eax
mov eax, dword [ebp - 0x3020]
cmp eax, dword [ebp - 0x3028]
jne 0x410e9e
mov ecx, dword [ebp - 0x301c]
cmp ecx, dword [ebp - 0x3024]
je 0x4114be
mov ecx, dword [ebp - 0x3028]
xor esi, esi
sub ecx, eax
mov eax, dword [ebp - 0x3024]
sbb eax, dword [ebp - 0x301c]
mov dword [ebp - 0x3018], ecx
mov dword [ebp - 0x3014], eax
fild qword [ebp - 0x3018]
push ebx
mov dword [ebp - 0x303c], esi
mov dword [ebp - 0x3038], esi
fstp qword [ebp - 0x3070]
call fcn.00401000
mov eax, dword [edi + 0x10cc078]
mov ecx, dword [eax + 0x34]
mov al, byte [eax + 0x781c]
push 0xd4
mov dword [ebp - 0x3054], ecx
mov byte [ebp - 0x3009], al
call fcn.0041482f
pop ecx
push eax
push 2
push 0x400
push dword [edi + 0x1097a10]
call dword [sym.imp.USER32.dll_SendMessageW]
push str..alf
push ebx
call fcn.0042181d
test eax, eax
pop ecx
pop ecx
jne 0x410f95
push str..ALF
push ebx
call fcn.0042181d
test eax, eax
pop ecx
pop ecx
jne 0x410f95
push 0x44068c
lea eax, [ebp - 0x302c]
push ebx
push eax
mov dword [ebp - 0x3030], esi
call fcn.0042154c
mov eax, dword [edi + 0x10cc078]
add esp, 0xc
test byte [eax + 0x7818], 8
je 0x410fe9
push str.Frequency_hZ_
push str._16s
lea eax, [ebp - 0x1808]
push 0x1800
push eax
mov dword [edi + 0x1097600], 1
call fcn.0042159c
add esp, 0x10
jmp 0x411045
push esi
push esi
xor eax, eax
push esi
mov esi, dword [edi + 0x10cc078]
inc eax
push eax
push ebx
mov dword [ebp - 0x3030], eax
call fcn.0040282c
xor esi, esi
push esi
push 0x20
push 3
push esi
push esi
push 0x40000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp eax, 0xffffffff
mov dword [ebp - 0x3038], eax
jne 0x410fd7
push 0x64
push 1
jmp 0x4114a7
push 2
push esi
push esi
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
xor esi, esi
jmp 0x4110b0
cmp dword [edi + 0x1097600], 1
jne 0x411010
push str.From_Begin_mks_
push str._16s
lea eax, [ebp - 0x1808]
push 0x1800
push eax
call fcn.0042159c
add esp, 0x10
cmp dword [edi + 0x1097600], esi
jne 0x411045
push str.mks
push str.UnixSecond
push str.Time
push str.Date
push str._7s__8s__10s___7s
lea eax, [ebp - 0x1808]
push 0x1800
push eax
call fcn.0042159c
add esp, 0x1c
mov eax, dword [edi + 0x10cc078]
xor ebx, ebx
cmp dword [eax + 0x2c], esi
jle 0x411096
lea esi, [edi + 0x10971f8]
cmp dword [esi], 0
je 0x411085
lea eax, [ebp - 0x1808]
push eax
call fcn.00420000
pop ecx
lea ecx, [ebx + 1]
push ecx
push str.____Chan__04d
lea eax, [ebp + eax - 0x1808]
push 0x10
push eax
call fcn.0042159c
add esp, 0x10
mov eax, dword [edi + 0x10cc078]
inc ebx
add esi, 4
cmp ebx, dword [eax + 0x2c]
jl 0x411058
xor esi, esi
lea eax, [ebp - 0x1808]
push eax
push 0x440100
push dword [ebp - 0x302c]
call fcn.0042053a
add esp, 0xc
mov eax, dword [ebp - 0x301c]
cmp eax, dword [ebp - 0x3024]
mov ecx, dword [ebp - 0x3020]
mov dword [ebp - 0x3018], ecx
mov dword [ebp - 0x3014], eax
jg 0x411463
jl 0x4110e2
cmp ecx, dword [ebp - 0x3028]
jae 0x411463
mov eax, dword [ebp - 0x3018]
sub eax, dword [ebp - 0x3020]
mov ecx, dword [ebp - 0x3014]
sbb ecx, dword [ebp - 0x301c]
mov dword [ebp - 0x3068], eax
mov dword [ebp - 0x3064], ecx
fild qword [ebp - 0x3068]
fstp qword [ebp - 0x3048]
fld qword [ebp - 0x3048]
fdiv qword [ebp - 0x3070]
fmul qword [0x4416e0]
call fcn.004248a0
mov ebx, eax
cmp ebx, dword [ebp - 0x303c]
je 0x41114d
push ebx
push 1
push 0x400
push dword [edi + 0x1097a10]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [ebp - 0x303c], ebx
cmp dword [ebp - 0x3030], esi
jne 0x4113b8
cmp dword [edi + 0x1097600], 1
jne 0x4111f9
mov eax, dword [edi + 0x10cc078]
test byte [eax + 0x7818], 8
je 0x4111b0
fild qword [ebp - 0x3018]
call fcn.004248d6
push 0
push 0xa
mov esi, edx
mov ebx, eax
push esi
push ebx
call fcn.00430bf0
push edx
push eax
push esi
push ebx
push str._14d__1d
lea eax, [ebp - 0x1808]
push 0x1800
push eax
call fcn.0042159c
add esp, 0x1c
xor esi, esi
jmp 0x4111f9
fld dword [eax + 0x4ff0]
fdivr qword [0x4416b0]
fmul qword [ebp - 0x3048]
fld st(0)
call fcn.004248d6
push esi
push 0xa
push edx
push eax
call fcn.00430bf0
fdiv qword [0x4416f8]
push edx
push eax
push ecx
push ecx
lea eax, [ebp - 0x1808]
fstp qword [esp]
push str._14.0lf__1d
push 0x1800
push eax
call fcn.0042159c
add esp, 0x1c
cmp dword [edi + 0x1097600], esi
jne 0x4112c7
mov eax, dword [edi + 0x10cc078]
fld dword [eax + 0x4ff0]
fdivr qword [0x441718]
call fcn.004248d6
push dword [ebp - 0x3014]
push dword [ebp - 0x3018]
push edx
push eax
call fcn.00424950
mov ecx, dword [edi + 0x1095eb8]
sub ecx, eax
mov eax, dword [edi + 0x1095ebc]
sbb eax, edx
push eax
mov edx, eax
mov dword [ebp - 0x3058], eax
push ecx
lea eax, [ebp - 0x3050]
push eax
sar edx, 0x1f
mov dword [ebp - 0x305c], ecx
call fcn.00401143
mov ebx, eax
lea esi, [edi + 0x1095ec8]
push esi
lea eax, [ebp - 0x305c]
push eax
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push dword [ebp - 0x3050]
movzx eax, word [edi + 0x1095ed4]
push ebx
push eax
movzx eax, word [edi + 0x1095ed2]
push eax
movzx eax, word [edi + 0x1095ed0]
push eax
movzx eax, word [esi]
sub eax, 0x7d0
push eax
movzx eax, word [edi + 0x1095eca]
push eax
movzx eax, word [edi + 0x1095ece]
push eax
push str._02d._02d._02d__2d:_02d:_02d__10d__6d
lea eax, [ebp - 0x1808]
push 0x1800
push eax
call fcn.0042159c
add esp, 0x2c
xor esi, esi
mov eax, dword [edi + 0x10cc078]
cmp dword [eax + 0x2c], 0
jle 0x41139a
lea eax, [edi + 0x10971f8]
mov dword [ebp - 0x3034], eax
mov eax, dword [ebp - 0x3034]
cmp dword [eax], 0
je 0x411383
lea eax, [ebp - 0x1808]
push eax
call fcn.00420000
pop ecx
push dword [ebp - 0x3014]
mov ecx, dword [edi + 0x10cc078]
push dword [ebp - 0x3018]
lea ebx, [ebp + eax - 0x1808]
mov eax, esi
call fcn.004024f3
fstp dword [ebp - 0x3044]
fld dword [ebp - 0x3044]
sub esp, 0xc
fstp qword [esp + 4]
fld dword [ebp - 0x3044]
fstp dword [esp]
call fcn.0040e128
push eax
lea eax, [ebp - 0x3008]
push 0x1800
push eax
call fcn.0042159c
add esp, 0x14
lea eax, [ebp - 0x3008]
push 0x2e
push eax
call fcn.00421940
test eax, eax
pop ecx
pop ecx
je 0x41136c
mov byte [eax], 0x2c
lea eax, [ebp - 0x3008]
push eax
push str._12s
push 0xd
push ebx
call fcn.0042159c
add esp, 0x10
mov eax, dword [edi + 0x10cc078]
add dword [ebp - 0x3034], 4
inc esi
cmp esi, dword [eax + 0x2c]
jl 0x4112e3
lea eax, [ebp - 0x1808]
push eax
push 0x440100
push dword [ebp - 0x302c]
call fcn.00420689
add esp, 0xc
xor esi, esi
jmp 0x411430
mov eax, dword [edi + 0x10cc078]
xor ebx, ebx
cmp dword [eax + 0x2c], esi
jle 0x411430
cmp byte [ebp - 0x3009], 0
je 0x4113e8
mov eax, ebx
cdq
idiv dword [ebp - 0x3054]
xor edx, edx
inc edx
mov ecx, eax
mov al, byte [ebp - 0x3009]
shl edx, cl
test al, dl
je 0x411424
push dword [ebp - 0x3014]
mov ecx, dword [edi + 0x10cc078]
push dword [ebp - 0x3018]
mov eax, ebx
call fcn.004024f3
fstp dword [ebp - 0x304c]
push esi
lea eax, [ebp - 0x3074]
push eax
push 4
lea eax, [ebp - 0x304c]
push eax
push dword [ebp - 0x3038]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [edi + 0x10cc078]
inc ebx
cmp ebx, dword [eax + 0x2c]
jl 0x4113c5
add dword [ebp - 0x3018], 1
adc dword [ebp - 0x3014], esi
mov eax, dword [ebp - 0x3014]
cmp eax, dword [ebp - 0x3024]
jl 0x4110e2
jg 0x411463
mov eax, dword [ebp - 0x3018]
cmp eax, dword [ebp - 0x3028]
jb 0x4110e2
cmp dword [ebp - 0x3030], esi
je 0x41148f
push dword [ebp - 0x301c]
mov ebx, dword [ebp - 0x3038]
push dword [ebp - 0x3020]
mov ecx, edi
call fcn.00412eeb
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor esi, esi
jmp 0x41149b
push dword [ebp - 0x302c]
call fcn.0042082a
pop ecx
xor eax, eax
inc eax
push 0x64
mov dword [edi + 0x1097a30], eax
push eax
push 0x400
push dword [edi + 0x1097a10]
call dword [sym.imp.USER32.dll_SendMessageW]
mov dword [edi + 0x1097a10], esi
mov ecx, dword [ebp - 4]
pop esi
xor ecx, ebp
pop ebx
call fcn.0041fba2
leave
ret