Function at 0x41c880
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x468f60
mov eax, dword fs:[0]
push eax
sub esp, 0x34
mov eax, dword [0x48706c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 4], 0
push 0x48a820
mov dword [ebp - 0x40], 0x48a820
call fcn.0042a854
add esp, 4
test eax, eax
je 0x41c8d6
push eax
call fcn.0042a3d4
add esp, 4
xorps xmm0, xmm0
mov dword [ebp - 0x14], 0
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
lea eax, [ebp + 8]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x34]
call fcn.00403fc0
mov esi, dword [ebp - 0x3c]
mov byte [ebp - 4], 3
cmp dword [esi + 4], 0
je 0x41c960
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x20]
cmp ecx, edx
jae 0x41c939
lea eax, [ecx + 1]
cmp edx, 0x10
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x34]
cmovae eax, dword [ebp - 0x34]
mov word [eax + ecx], 0xff
jmp 0x41c94b
push 0xffffffffffffffff
mov byte [ebp - 0x38], 0
push dword [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x34]
call fcn.00407cd0
mov ecx, dword [esi + 4]
lea edx, [ebp - 0x1c]
push edx
lea edx, [ebp - 0x34]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
jmp 0x41ca47
push 0x47ce9c
lea ecx, [ebp - 0x34]
call fcn.00403d90
cmp dword [ebp - 0x20], 0x10
lea edx, [ebp - 0x34]
mov edi, dword [ebp - 0x24]
lea ebx, [ebp - 0x34]
cmovae edx, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x1c]
add edi, edx
cmp dword [ebp - 0x20], 0x10
mov edx, dword [ebp - 0x14]
cmovae ebx, dword [ebp - 0x34]
sub edx, ecx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], edi
sub eax, ecx
sub edi, ebx
cmp edi, edx
jbe 0x41ca0c
cmp edi, 0x7fffffff
ja 0x41cb8d
mov esi, edx
mov eax, SysReAllocString
shr esi, 1
sub eax, esi
cmp edx, eax
jbe 0x41c9bd
mov esi, edi
jmp 0x41c9c4
add esi, edx
cmp esi, edi
cmovb esi, edi
test ecx, ecx
je 0x41c9f0
mov eax, ecx
cmp edx, 0x1000
jb 0x41c9e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41cb92
push edx
push ecx
call fcn.0042bb0b
add esp, 8
push esi
lea ecx, [ebp - 0x1c]
call fcn.0040d180
mov esi, dword [ebp - 0x1c]
push edi
push ebx
push esi
call fcn.00443490
lea eax, [edi + esi]
mov dword [ebp - 0x18], eax
jmp 0x41ca44
cmp edi, eax
jbe 0x41ca36
push eax
push ebx
push ecx
lea edi, [eax + ebx]
call fcn.00443490
mov ebx, dword [ebp - 0x38]
mov esi, dword [ebp - 0x18]
sub ebx, edi
push ebx
push edi
push esi
call fcn.00443490
lea eax, [ebx + esi]
add esp, 0x18
mov dword [ebp - 0x18], eax
jmp 0x41ca47
push edi
push ebx
push ecx
lea esi, [ecx + edi]
call fcn.00443490
mov dword [ebp - 0x18], esi
add esp, 0xc
mov eax, dword [ebp - 0x3c]
add eax, 8
cmp dword [eax + 0x14], 0x10
jb 0x41ca55
mov eax, dword [eax]
push 0x47cea0
push eax
call fcn.0044b7c1
mov esi, eax
add esp, 8
test esi, esi
je 0x41ca8a
mov ecx, dword [ebp - 0x18]
mov edx, dword [ebp - 0x1c]
sub ecx, edx
push esi
push ecx
push 1
push edx
call fcn.00449ec1
push esi
call fcn.00446ad4
push esi
call fcn.00446ba3
add esp, 0x18
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x20]
cmp edx, 0x10
jb 0x41cac2
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41cab8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41cb97
push edx
push ecx
call fcn.0042bb0b
add esp, 8
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
test ecx, ecx
je 0x41cb21
mov edx, dword [ebp - 0x14]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x41cb02
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41cb9c
push edx
push ecx
call fcn.0042bb0b
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
push 0x48a820
mov byte [ebp - 4], 4
call fcn.0042a879
add esp, 4
test eax, eax
je 0x41cb3f
push eax
call fcn.0042a3d4
add esp, 4
mov edx, dword [ebp + 0x1c]
cmp edx, 0x10
jb 0x41cb6f
mov ecx, dword [ebp + 8]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x41cb65
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x41cba1
push edx
push ecx
call fcn.0042bb0b
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0042bac5
mov esp, ebp
pop ebp
ret 0x18
call fcn.004085f0
call fcn.0044acd1
call fcn.0044acd1
call fcn.0044acd1
call fcn.0044acd1
int3