Function at 0x431300
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, eax
push edi
push esi
push ebx
sub esp, 0x9c
mov ebx, dword [ebp]
mov eax, dword [esp + 0xb8]
mov dword [esp + 0x60], edx
mov edx, dword [esp + 0xbc]
mov dword [esp + 0x68], ecx
mov dword [esp + 0x70], eax
mov eax, dword [ebp + 4]
mov dword [esp + 0x74], edx
movzx ecx, byte [ebx + 0x28]
test eax, eax
je 0x431523
mov eax, dword [ebx + 0x2c]
mov edx, dword [ebx + 0x5c]
xor edi, edi
movzx esi, byte [ebx + 0x30]
mov dword [esp + 0x78], eax
mov eax, dword [ebx + 0x58]
shld edx, eax, cl
shl eax, cl
test cl, 0x20
cmovne edx, eax
cmovne eax, edi
mov dword [esp + 0x54], edx
mov dword [esp + 0x50], eax
mov edx, dword [esp + 0xc4]
mov eax, dword [ebp + 8]
test edx, edx
je 0x4314d0
mov edi, dword [esp + 0x68]
xor edx, edx
test edi, edi
sete dl
cmp eax, 1
sbb eax, eax
mov dword [esp + 0x64], edx
and eax, 0xfffffffe
add eax, 4
mov dword [esp + 0x5c], eax
test byte [ebx + 0x18], 1
jne 0x431580
mov edi, dword [esp + 0x74]
test edi, edi
js 0x4314fd
mov eax, dword [ebx]
mov ebx, dword [esp + 0xb4]
mov dword [esp + 0x6c], eax
test ebx, ebx
js 0x4315c1
mov eax, dword [ebp + 0x14]
and eax, dword [ebp + 0x10]
cmp eax, 0xffffffff
je 0x43154a
mov edx, dword [ebp + 0x20]
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
mov eax, dword [ebp + 0x24]
cmp ecx, edx
mov edi, ebx
sbb edi, eax
jge 0x431542
test eax, eax
js 0x431408
xor ebx, ebx
mov ecx, dword [esp + 0xb4]
add ecx, dword [esp + 0x70]
adc ebx, dword [esp + 0x74]
cmp edx, ecx
sbb eax, ebx
jb 0x431730
mov eax, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x28]
test eax, eax
js 0x431749
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
mov edi, eax
cmp edx, ecx
sbb edi, ebx
jge 0x431640
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x431d20
test byte [esp + 0xc4], 1
je 0x431d20
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
mov esi, 0x1b
call ebx
mov dword [esp + 8], 0x537001
mov dword [esp + 4], str.__s__Tried_to_write_to_undefined_region._Extend_the_defined_region_before_trying_to_write_data_to_it.
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov eax, dword [esp + 0xc0]
xor edx, edx
test eax, eax
jne 0x4315a4
mov esi, 0x1b
xor edx, edx
jmp 0x4315b4
mov ecx, dword [esp + 0xb0]
xor edx, edx
mov edi, dword [esp + 0x74]
test ecx, ecx
sete dl
cmp eax, 1
sbb eax, eax
mov dword [esp + 0x64], edx
and eax, 0xfffffffe
add eax, 4
mov dword [esp + 0x5c], eax
test edi, edi
jns 0x4313ab
mov esi, dword [esp + 0xc0]
test esi, esi
je 0x431a03
mov dword [esp + 0xb4], 0
mov esi, 0x16
xor edx, edx
jmp 0x4315a4
movzx eax, word [ebx + 0x26]
mov esi, ecx
mov dword [esp + 0x50], 0
mov dword [esp + 0x54], 0
mov dword [esp + 0x78], eax
jmp 0x431365
test eax, eax
js 0x4313e9
mov ecx, dword [esp + 0xc4]
test ecx, ecx
je 0x4319e0
mov edx, dword [esp + 0xc0]
test edx, edx
je 0x4314be
mov dword [esp + 0xb4], 0
mov esi, 0x1b
xor edx, edx
jmp 0x4315a4
mov ebp, dword [esp + 0xc0]
mov esi, 0x1e
xor edx, edx
test ebp, ebp
je 0x4315b4
mov dword [esp + 0xb4], 0
mov esi, 0x1e
xor edx, edx
mov eax, dword [esp + 0xc0]
mov edi, dword [esp + 0xb4]
mov dword [eax], edi
add esp, 0x9c
mov eax, esi
pop ebx
pop esi
pop edi
pop ebp
ret
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
call ebx
mov edi, dword [esp + 0xb4]
mov dword [esp + 0x10], 0x7fffffff
mov dword [esp + 8], 0x537001
mov dword [esp + 0xc], edi
mov dword [esp + 4], 0x5375b8
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov edx, dword [ebp + 0x20]
mov eax, dword [ebp + 0x24]
jmp 0x4313e9
mov ecx, dword [esp + 0x70]
mov ebx, dword [esp + 0x74]
mov dword [esp + 0x30], ecx
mov ecx, dword [esp + 0xb4]
mov dword [esp + 0x34], ebx
xor ebx, ebx
add ecx, dword [esp + 0x70]
adc ebx, dword [esp + 0x74]
cmp edx, ecx
sbb eax, ebx
jae 0x431759
mov eax, dword [esp + 0x70]
mov ecx, eax
sub ecx, edx
add ecx, dword [esp + 0xb4]
mov dword [esp + 0x7c], ecx
je 0x43168e
test byte [esp + 0xc4], 1
jne 0x431447
sub edx, eax
mov dword [esp + 0x3c], edx
jne 0x43177b
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x58], eax
mov edi, dword [esp + 0x7c]
test edi, edi
je 0x431f70
mov esi, dword [esp + 0x64]
test esi, esi
je 0x432131
lea eax, [esp + 0x88]
mov dword [esp + 0xc], edi
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x18], 0
or eax, 8
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0x10], 0
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x14], 0
mov dword [esp + 8], 0
mov dword [esp], eax
call fcn.00415b90
mov edi, dword [esp + 0x88]
mov esi, eax
mov eax, edx
or eax, esi
jne 0x43215d
sub dword [esp + 0x58], edi
jmp 0x431bf0
mov eax, dword [ebp + 0x2c]
sub edx, dword [esp + 0x70]
mov dword [esp + 0xb4], edx
mov edx, dword [ebp + 0x28]
test eax, eax
jns 0x431416
mov eax, dword [esp + 0x70]
mov edx, dword [esp + 0x74]
mov dword [esp + 0x30], eax
mov dword [esp + 0x34], edx
mov eax, dword [esp + 0xb4]
test eax, eax
je 0x431f79
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x7c], 0
mov dword [esp + 0x3c], eax
mov eax, esi
movzx eax, al
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x58], eax
jmp 0x431938
cmp edi, 0
ja 0x431f9a
mov ebx, dword [ebp + 0xb8]
test ebx, ebx
je 0x431a60
mov ecx, dword [ebp + 0x38]
xor edx, edx
mov ebx, edi
cmp esi, ecx
sbb ebx, edx
jb 0x431a60
mov ebx, dword [ebp + 0x40]
xor edx, edx
add ecx, ebx
cmp esi, ecx
mov ecx, edi
sbb ecx, edx
jae 0x431a60
mov esi, dword [ebp + 0x38]
xor edi, edi
movzx ecx, byte [esp + 0x38]
mov edx, edi
mov eax, esi
neg eax
adc edx, 0
xor esi, esi
neg edx
shld edx, eax, cl
shl eax, cl
test cl, 0x20
cmovne edx, eax
cmovne eax, esi
mov edi, edx
mov esi, eax
mov eax, ebx
add esi, dword [esp + 0x30]
adc edi, dword [esp + 0x34]
xor edx, edx
shld edx, eax, cl
shl eax, cl
test cl, 0x20
je 0x431812
mov edx, eax
xor eax, eax
cmp esi, eax
mov ecx, edi
mov dword [esp + 0x44], edx
sbb ecx, dword [esp + 0x44]
mov dword [esp + 0x40], eax
jae 0x43202b
mov ebx, dword [ebp + 0x3c]
movzx ecx, byte [esp + 0x38]
xor edx, edx
lea eax, [ebx - 2]
xor ebx, ebx
shld edx, eax, cl
shl eax, cl
test cl, 0x20
cmovne edx, eax
cmovne eax, ebx
add eax, dword [esp + 0x50]
adc edx, dword [esp + 0x54]
mov ecx, eax
mov ebx, edx
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
add ecx, esi
adc ebx, edi
cmp eax, esi
mov eax, edx
mov dword [esp + 0x48], ecx
sbb eax, edi
mov dword [esp + 0x4c], ebx
jb 0x4320af
mov eax, dword [esp + 0x40]
mov edx, dword [esp + 0x44]
sub eax, esi
sbb edx, edi
mov esi, eax
mov edi, edx
mov ecx, dword [esp + 0x3c]
mov ebx, ecx
cmp edi, 0
ja 0x43189a
mov edx, 0
cmp ecx, esi
mov eax, edx
sbb eax, edi
cmovae ebx, esi
mov edx, dword [esp + 0xc4]
lea eax, [esp + 0x88]
test edx, edx
je 0x431a10
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0xc], ebx
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x14], edx
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00415d50
mov edi, edx
or edi, eax
jne 0x431db4
mov edi, dword [esp + 0x88]
cmp edi, ebx
jne 0x431e90
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x431920
mov edi, dword [esp + 0xc4]
test edi, edi
je 0x431ac5
add dword [esp + 0x68], ebx
xor edx, edx
sub dword [esp + 0x58], ebx
add dword [esp + 0x30], ebx
adc dword [esp + 0x34], edx
sub dword [esp + 0x3c], ebx
je 0x4316a5
movzx ecx, byte [esp + 0x38]
mov edi, dword [esp + 0x34]
xor eax, eax
mov esi, dword [esp + 0x30]
shrd esi, edi, cl
shr edi, cl
test cl, 0x20
cmovne esi, edi
cmovne edi, eax
mov eax, dword [ebp + 4]
test eax, eax
jne 0x431794
mov eax, dword [ebp + 0xc0]
mov edx, dword [ebp + 0xc4]
xor eax, esi
xor edx, edi
or edx, eax
jne 0x431a60
mov eax, dword [esp + 0x30]
mov esi, dword [ebp + 0x20]
mov edx, dword [esp + 0x34]
mov edi, dword [ebp + 0x24]
cmp eax, esi
mov eax, edx
sbb eax, edi
jae 0x43206b
movzx ecx, byte [esp + 0x38]
mov eax, dword [ebp + 0xc8]
xor ebx, ebx
mov edx, dword [ebp + 0xcc]
shld edx, eax, cl
shl eax, cl
test cl, 0x20
mov ecx, dword [esp + 0x30]
cmovne edx, eax
cmovne eax, ebx
mov ebx, dword [esp + 0x34]
add eax, dword [esp + 0x50]
adc edx, dword [esp + 0x54]
add eax, ecx
adc edx, ebx
sub esi, ecx
mov dword [esp + 0x48], eax
mov dword [esp + 0x4c], edx
sbb edi, ebx
jmp 0x431881
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x431f91
mov dword [esp + 0xb4], 0
xor esi, esi
xor edx, edx
jmp 0x4315a4
mov esi, 0x16
xor edx, edx
jmp 0x4315b4
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x4c]
mov dword [esp + 0x18], esi
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x48]
mov dword [esp + 0x1c], edi
mov dword [esp + 0x10], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0x14], edx
mov dword [esp + 8], eax
mov eax, dword [esp + 0x60]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], eax
mov eax, dword [esp + 0x6c]
mov dword [esp], eax
call fcn.00415b90
jmp 0x4318ec
mov eax, dword [ebp + 0x24]
mov ebx, dword [ebp + 0x20]
mov dword [esp + 4], esi
mov dword [esp + 8], edi
mov dword [esp + 0x40], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x10], eax
lea eax, [esp + 0x84]
mov dword [esp + 0xc], eax
mov dword [esp], ebp
call fcn.00430510
mov ecx, edx
or ecx, eax
jne 0x431ad1
mov ecx, dword [esp + 0x84]
test ecx, ecx
je 0x4320e8
and ebx, dword [esp + 0x40]
cmp ebx, 0xffffffff
je 0x431cc0
mov eax, dword [ebp + 4]
test eax, eax
je 0x431978
mov ebx, dword [ebp + 0x40]
jmp 0x4317cf
add dword [esp + 0xb0], ebx
jmp 0x431920
mov dword [esp + 4], edx
mov dword [esp], eax
mov dword [esp + 0x3c], edx
mov dword [esp + 0x34], edi
mov dword [esp + 0x30], esi
mov dword [esp + 0x38], eax
call fcn.0041d490
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
mov edi, eax
call ebx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x30]
mov dword [esp + 8], 0x537001
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 4], 0x537684
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov dword [esp], ecx
mov dword [esp + 4], edx
call fcn.0041d490
mov dword [esp], 2
mov edi, eax
call ebx
mov dword [esp + 0x14], edi
mov ecx, dword [esp + 0x38]
mov edi, dword [esp + 0x30]
mov dword [esp + 8], 0x537001
mov dword [esp + 0x10], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 4], 0x5376c4
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
mov esi, 5
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
xor edx, edx
mov ebx, dword [esp + 0xc0]
test ebx, ebx
je 0x431cf2
mov eax, dword [esp + 0xb4]
mov edi, dword [esp + 0x58]
mov ebx, dword [esp + 0xc0]
sub eax, edi
mov dword [ebx], eax
cmp edi, dword [esp + 0xb4]
jbe 0x4315b4
mov dword [esp + 0x30], edx
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
call ebx
mov edi, dword [esp + 0xb4]
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x537874
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x58]
mov dword [esp], eax
mov dword [esp + 0xc], edi
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov edx, dword [esp + 0x30]
mov ecx, 5
mov eax, edx
or eax, esi
mov eax, 0
cmove esi, ecx
cmove edx, eax
add esp, 0x9c
pop ebx
mov eax, esi
pop esi
pop edi
pop ebp
ret
mov edx, dword [ebp + 0x24]
mov eax, dword [ebp + 0x20]
test edx, edx
js 0x431ab2
mov edi, dword [esp + 0x70]
mov dword [esp + 0x7c], 0
sub edi, eax
mov eax, dword [esp + 0xb4]
add eax, edi
sub dword [esp + 0x58], eax
sub dword [esp + 0x3c], eax
jmp 0x431ab2
mov ecx, dword [esp + 0x58]
test ecx, ecx
je 0x4315b4
mov eax, dword [esp + 0x58]
cmp eax, dword [esp + 0xb4]
ja 0x431d34
mov esi, 5
xor edx, edx
jmp 0x4315b4
mov eax, dword [esp + 0xb4]
mov dword [esp + 0x58], eax
mov dword [esp + 0x7c], eax
jmp 0x4316a5
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
mov esi, 5
call ebx
mov edi, dword [esp + 0xb4]
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x537874
mov dword [esp + 0x10], edi
mov edi, dword [esp + 0x58]
mov dword [esp], eax
mov dword [esp + 0xc], edi
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
xor edx, edx
jmp 0x4315b4
mov dword [esp + 4], edx
mov esi, eax
mov edi, 0x53758f
mov dword [esp], eax
mov dword [esp + 0x3c], edx
call fcn.0041d490
mov ecx, 0x53758a
mov ebp, dword [fcn.004a1b90]
mov dword [esp], 2
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0xc4]
test eax, eax
mov eax, 0x537597
cmovne ecx, eax
mov eax, 0x53759a
cmovne edi, eax
mov dword [esp + 0x38], ecx
call ebp
mov edx, dword [esp + 0x30]
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x20], esi
mov dword [esp + 0x10], ebx
mov dword [esp + 0x24], edx
mov edx, dword [esp + 0x48]
mov dword [esp + 0x1c], ecx
mov ecx, dword [esp + 0x38]
mov dword [esp + 0x18], edx
mov dword [esp + 0x14], ecx
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x537001
mov dword [esp + 4], str.__s__Error_while__s__Iu_bytes__s_exFAT_device_at_position__I64u:__lu___s_
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebp
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebp
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov edx, dword [esp + 0x3c]
jmp 0x431bf0
mov esi, eax
mov eax, dword [esp + 0x64]
test eax, eax
jne 0x431726
mov eax, dword [esp + 0xc4]
mov edx, 0x53758a
mov esi, 0x5375af
mov dword [esp], 2
mov ebp, dword [fcn.004a1b90]
test eax, eax
mov eax, 0x537597
cmove eax, edx
mov edx, 0x5375a2
cmove esi, edx
mov dword [esp + 0x30], eax
mov eax, 0x5375a7
mov ecx, eax
cmove ecx, edx
mov dword [esp + 0x38], ecx
call ebp
mov ecx, dword [esp + 0x38]
mov edx, dword [esp + 0x48]
mov dword [esp + 0x20], edi
mov edi, dword [esp + 0x30]
mov dword [esp + 0x10], ebx
mov dword [esp + 0x24], ecx
mov ecx, dword [esp + 0x4c]
mov dword [esp + 0x18], edx
mov dword [esp + 0x1c], ecx
mov dword [esp + 0x14], edi
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x5377ec
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
mov esi, 5
call ebp
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebp
mov dword [esp], eax
call sub.msvcrt.dll_fflush
xor edx, edx
jmp 0x431bf0
xor esi, esi
xor edx, edx
jmp 0x431bf0
mov eax, dword [esp + 0xc0]
test eax, eax
je 0x431f91
mov eax, dword [esp + 0xc0]
mov dword [eax], 0
xor esi, esi
xor edx, edx
jmp 0x4315b4
mov ebp, dword [esp + 0xc4]
mov edx, 0x537577
mov eax, 0x537580
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
test ebp, ebp
cmovne eax, edx
mov ebp, eax
call ebx
mov dword [esp + 0x10], esi
mov esi, 0x16
mov dword [esp + 0x14], edi
mov dword [esp + 0xc], ebp
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x537650
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
xor edx, edx
jmp 0x431bf0
mov dword [esp], 2
mov ebp, dword [fcn.004a1b90]
call ebp
mov edx, dword [esp + 0x78]
mov dword [esp + 0x14], ebx
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], edx
mov dword [esp + 0x10], edi
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x5378a8
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
jmp 0x431f26
mov dword [esp], 2
mov ebx, dword [fcn.004a1b90]
call ebx
mov dword [esp + 0x18], edi
mov ebp, dword [esp + 0x34]
mov edi, dword [esp + 0x30]
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x537904
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
jmp 0x431baf
mov dword [esp], 2
mov ebx, dword [fcn.004a1b90]
call ebx
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0xc], esi
mov dword [esp + 0x10], edi
mov dword [esp + 0x14], edx
mov dword [esp + 0x18], ecx
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x53774c
jmp 0x4320a2
and ebx, dword [esp + 0x40]
mov dword [esp + 0x30], esi
mov dword [esp + 0x34], edi
cmp ebx, 0xffffffff
je 0x4316a5
mov dword [esp], 2
mov ebx, dword [fcn.004a1b90]
call ebx
mov edi, dword [esp + 0x30]
mov dword [esp + 8], 0x537001
mov dword [esp + 4], 0x537704
mov dword [esp + 0xc], edi
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
jmp 0x431baf
mov edi, dword [esp + 0x7c]
mov eax, dword [esp + 0xb0]
mov dword [esp + 4], 0
xor esi, esi
mov dword [esp + 8], edi
mov dword [esp], eax
call sub.msvcrt.dll_memset
sub dword [esp + 0x58], edi
xor edx, edx
jmp 0x431bf0
mov dword [esp + 4], edx
mov dword [esp], esi
mov dword [esp + 0x30], edx
call fcn.0041d490
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
mov edi, eax
call ebx
mov dword [esp + 0x14], edi
mov edi, dword [esp + 0x7c]
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], edi
mov dword [esp + 8], 0x537001
mov dword [esp + 4], str.__s__Failed_to_get_anonymous_bufs_for__Iu_bytes.:__lu___s_
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x536ffe
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov edx, dword [esp + 0x30]
jmp 0x431bf0