Function at 0x595400
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, ecx
push edi
push esi
push ebx
sub esp, 0x5c
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x74]
mov dword [esp + 0x38], edx
mov ebx, dword [esp + 0x70]
mov edi, eax
mov dword [esp + 0x3c], eax
mov eax, dword [0xd47044]
mov dword [esp + 0x4c], eax
xor eax, eax
test edi, edi
je 0x595094
mov dword [edi], 0
test ebp, ebp
je 0x595290
test ebx, ebx
je 0x595290
mov eax, dword [esp + 0x1c]
mov ecx, dword [esp + 0x38]
lea esi, [ebp + 0x2e]
mov eax, dword [eax + 0x48]
mov dword [ebx], ecx
mov eax, dword [eax + 0x10]
mov eax, dword [eax + ecx*4]
mov dword [ebx + 0xc], 0
mov dword [ebx + 8], eax
movzx eax, word [ebp + 4]
mov word [ebx + 0x10], ax
movzx eax, word [ebp + 6]
mov word [ebx + 0x12], ax
movzx eax, word [ebp + 8]
mov word [ebx + 0x14], ax
movzx eax, word [ebp + 0xa]
mov word [ebx + 0x16], ax
movzx edx, word [ebp + 0xe]
movzx eax, word [ebp + 0xc]
call fcn.00594c80
xor edx, edx
lea ecx, [ebx + 0x50]
mov dword [ebx + 0x450], eax
mov eax, dword [ebp + 0x10]
mov dword [esp + 0x2c], edx
mov dword [ebx + 0x18], eax
mov eax, dword [ebp + 0x14]
mov dword [ebx + 0x24], edx
xor edx, edx
mov dword [ebx + 0x20], eax
mov dword [esp + 0x28], eax
mov eax, dword [ebp + 0x18]
mov dword [ebx + 0x2c], edx
mov dword [ebx + 0x28], eax
mov dword [esp + 0x20], eax
movzx eax, word [ebp + 0x24]
mov dword [esp + 0x24], edx
xor edx, edx
mov word [ebx + 0x30], ax
mov eax, dword [ebp + 0x26]
mov dword [esp + 0x34], edx
mov dword [ebx + 0x34], eax
mov eax, dword [ebp + 0x2a]
mov dword [ebx + 0x3c], edx
mov edx, 0x1ff
mov dword [esp + 0x30], eax
mov dword [ebx + 0x38], eax
movzx eax, word [ebp + 0x1c]
cmp eax, edx
cmova eax, edx
cmp eax, 4
jb 0x595260
mov edx, dword [ebp + 0x2e]
lea edi, [ebx + 0x54]
and edi, 0xfffffffc
mov dword [ebx + 0x50], edx
mov edx, dword [esi + eax - 4]
mov dword [ecx + eax - 4], edx
sub ecx, edi
sub esi, ecx
add ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov byte [ebx + eax + 0x50], 0
movzx eax, word [ebp + 0x20]
mov edx, 0x1ff
lea ecx, [ebx + 0x250]
cmp eax, edx
cmova eax, edx
mov dword [ebx + 0x40], eax
movzx esi, word [ebp + 0x1c]
movzx edx, word [ebp + 0x1e]
lea esi, [esi + edx + 0x2e]
add esi, ebp
cmp eax, 4
jae 0x5952a8
test eax, eax
jne 0x5952d8
mov edi, dword [esp + 0x38]
mov esi, dword [esp + 0x1c]
mov byte [ebx + eax + 0x250], 0
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00598970
mov dword [ebx + 0x44], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.005989f0
mov dword [ebx + 0x48], eax
mov dword [esp + 4], edi
mov dword [esp], esi
call fcn.00598a50
mov edx, dword [esp + 0x20]
mov esi, dword [esp + 0x28]
mov edi, dword [esp + 0x2c]
mov ecx, dword [esp + 0x24]
mov dword [ebx + 0x4c], eax
cmp esi, edx
mov eax, edi
sbb eax, ecx
mov eax, edx
mov edx, ecx
cmovae edx, edi
cmovae eax, esi
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x34]
cmp eax, esi
mov ecx, edx
sbb ecx, edi
cmovb eax, esi
cmovb edx, edi
not eax
or eax, edx
je 0x595300
mov eax, 1
lea esi, [esi]
nop
mov edx, dword [esp + 0x4c]
sub edx, dword [0xd47044]
jne 0x5953ef
add esp, 0x5c
pop ebx
pop esi
pop edi
pop ebp
ret
test eax, eax
je 0x59517d
movzx edx, byte [ebp + 0x2e]
mov byte [ebx + 0x50], dl
test al, 2
je 0x59517d
movzx edx, word [esi + eax - 2]
mov word [ecx + eax - 2], dx
jmp 0x59517d
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x59529f
mov dword [eax + 0x1c], 0x18
xor eax, eax
jmp 0x595240
mov edx, dword [esi]
lea edi, [ebx + 0x254]
and edi, 0xfffffffc
mov dword [ebx + 0x250], edx
mov edx, dword [esi + eax - 4]
mov dword [ecx + eax - 4], edx
sub ecx, edi
sub esi, ecx
add ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
jmp 0x5951b8
movzx edx, byte [esi]
mov byte [ebx + 0x250], dl
test al, 2
je 0x5951b8
movzx edx, word [esi + eax - 2]
mov word [ecx + eax - 2], dx
jmp 0x5951b8
movzx eax, word [ebp + 0x1e]
test eax, eax
je 0x595233
movzx edx, word [ebp + 0x1c]
mov edi, 0xfffffffc
lea edx, [ebp + edx + 0x2e]
jmp 0x595342
movzx ecx, word [edx + 2]
movzx ebp, word [edx]
lea esi, [ecx + 4]
cmp eax, esi
jb 0x595347
cmp bp, 1
je 0x595360
add edx, esi
mov esi, edi
sub esi, ecx
add eax, esi
je 0x595233
cmp eax, 3
ja 0x595320
mov eax, dword [esp + 0x1c]
mov dword [eax + 0x1c], 9
xor eax, eax
jmp 0x595240
mov eax, dword [esp + 0x3c]
test eax, eax
je 0x59536e
mov dword [eax], 1
mov edi, dword [esp + 0x20]
mov ebp, dword [esp + 0x24]
lea esi, [edx + 4]
mov eax, edi
not eax
or eax, ebp
je 0x5953ba
mov edi, dword [esp + 0x28]
mov ebp, dword [esp + 0x2c]
mov eax, edi
not eax
or eax, ebp
je 0x5953d3
mov edi, dword [esp + 0x30]
mov ebp, dword [esp + 0x34]
mov eax, edi
not eax
or eax, ebp
jne 0x595233
cmp ecx, 7
jbe 0x595347
mov eax, dword [esi]
mov edx, dword [esi + 4]
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x3c], edx
jmp 0x595233
cmp ecx, 7
jbe 0x595347
mov esi, dword [edx + 4]
mov edi, dword [edx + 8]
sub ecx, 8
mov dword [ebx + 0x28], esi
lea esi, [edx + 0xc]
mov dword [ebx + 0x2c], edi
jmp 0x595381
cmp ecx, 7
jbe 0x595347
mov eax, dword [esi]
mov edx, dword [esi + 4]
sub ecx, 8
add esi, 8
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x24], edx
jmp 0x595391
call fcn.00401690
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
push ebx
sub esp, 0x18
mov ebx, dword [0xd47044]
mov dword [esp + 0xc], ebx
xor ebx, ebx
mov ecx, dword [esp + 0x20]
mov eax, dword [esp + 0x2c]
mov edx, dword [esp + 0x30]
mov ebx, dword [esp + 0xc]
sub ebx, dword [0xd47044]
jne 0x595445
mov dword [esp + 0x2c], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x24], 1
mov dword [esp + 0x20], eax
add esp, 0x18
pop ebx
jmp sub.msvcrt.dll_fwrite
call fcn.00401690
nop
nop
nop
nop
nop
nop
push ebp
push edi
push esi
push ebx
sub esp, 0x3c
mov eax, dword [esp + 0x5c]
mov ebx, dword [esp + 0x50]
mov esi, dword [esp + 0x54]
mov edi, dword [esp + 0x58]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x1c], eax
mov eax, dword [0xd47044]
mov dword [esp + 0x2c], eax
mov eax, dword [ebx + 0x48]
mov eax, dword [eax + 0x3c]
mov dword [esp], eax
call dword [0x6c9348]
mov ecx, dword [ebx + 0x48]
add esi, dword [ecx + 0x40]
adc edi, dword [ecx + 0x44]
test edi, edi
js 0x595500
xor edx, edi
xor eax, esi
mov ebp, dword [ecx + 0x3c]
or eax, edx
je 0x5954c3
mov dword [esp + 0xc], 0
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp], ebp
call dword [0x6c934c]
test eax, eax
jne 0x595500
mov ecx, dword [ebx + 0x48]
mov eax, dword [esp + 0x2c]
sub eax, dword [0xd47044]
jne 0x59551d
mov eax, dword [ecx + 0x3c]
mov dword [esp + 0x54], 1
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x50], eax
add esp, 0x3c
pop ebx
pop esi
pop edi
pop ebp
jmp sub.msvcrt.dll_fwrite
mov dword [ebx + 0x1c], 0x16
mov eax, dword [esp + 0x2c]
sub eax, dword [0xd47044]
jne 0x59551d
add esp, 0x3c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
call fcn.00401690
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0x1c
mov edx, dword [0xd47044]
mov dword [esp + 0xc], edx
xor edx, edx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x595568
mov eax, dword [eax + 0x48]
test eax, eax
je 0x595568
mov edx, dword [eax + 0x44]
mov eax, dword [eax + 0x40]
mov ecx, dword [esp + 0xc]
sub ecx, dword [0xd47044]
jne 0x59556e
add esp, 0x1c
ret
xor eax, eax
xor edx, edx
jmp 0x595554
call fcn.00401690
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0x1c
mov edx, dword [0xd47044]
mov dword [esp + 0xc], edx
xor edx, edx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x5955b0
mov edx, dword [eax + 4]
mov eax, dword [eax]
mov ecx, dword [esp + 0xc]
sub ecx, dword [0xd47044]
jne 0x5955b6
add esp, 0x1c
ret
xor eax, eax
xor edx, edx
jmp 0x59559c
call fcn.00401690
nop
nop
nop
nop
nop
sub esp, 0x1c
mov edx, dword [0xd47044]
mov dword [esp + 0xc], edx
xor edx, edx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x5955f8
mov eax, dword [eax + 0x48]
test eax, eax
je 0x5955f8
mov eax, dword [eax + 4]
mov edx, dword [esp + 0xc]
sub edx, dword [0xd47044]
jne 0x5955fc
add esp, 0x1c
ret
xor eax, eax
jmp 0x5955e1
call fcn.00401690
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0x1c
mov edx, dword [0xd47044]
mov dword [esp + 0xc], edx
xor edx, edx
mov eax, dword [esp + 0x20]
test eax, eax
je 0x595648
mov eax, dword [eax + 0x48]
test eax, eax
je 0x595631
mov eax, dword [eax + 0x3c]
mov edx, dword [esp + 0xc]
sub edx, dword [0xd47044]
jne 0x59564c
add esp, 0x1c
ret
xor eax, eax
jmp 0x595631
call fcn.00401690
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
sub esp, 0x1c
mov edx, dword [0xd47044]
mov dword [esp + 0xc], edx
xor edx, edx
mov eax, dword [esp + 0x20]
mov edx, str.unknown_error
cmp eax, 0x20
ja 0x595684
mov edx, dword [eax*4 + 0xd43880]
mov eax, dword [esp + 0xc]
sub eax, dword [0xd47044]
jne 0x595696
mov eax, edx
add esp, 0x1c
ret
call fcn.00401690
nop
nop
nop
nop
nop