Function at 0x43cf10
Capabilities:
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x22c
mov ebp, dword [esp + 0x240]
mov esi, ebp
test ebp, ebp
je 0x43d1b5
mov dword [esp], 0
lea ebx, [esp + 0x2c]
call fcn.0058d050
mov dword [esp + 0x28], eax
lea eax, [esp + 0x28]
mov dword [esp], eax
call fcn.0058d058
mov dword [esp], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 8], str._I:_M:_S__p
mov dword [esp + 4], 0x1f3
call fcn.0058d060
mov dword [esp + 8], ebx
mov dword [esp + 4], str._______s_n_n
mov dword [esp], esi
call sub.msvcrt.dll_fprintf
mov eax, dword [0x737968]
mov dword [esp + 0xc], eax
mov eax, dword [0x737960]
mov dword [esp + 8], eax
mov dword [esp + 4], str.______MEMORY_ALLOCATED_:__lu__MAX_was__lu_n
mov dword [esp], esi
call sub.msvcrt.dll_fprintf
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x1b
mov dword [esp + 4], 1
mov dword [esp], str.BLOCK__NUMBER___SIZE__TYPE_n
call sub.msvcrt.dll_fwrite
mov eax, dword [0x737958]
mov dword [esp], eax
call fcn.00463340
mov ebx, dword [0x73796c]
xor eax, eax
test ebx, ebx
je 0x43d021
mov edx, dword [ebx + 0xc]
lea edi, [eax + 1]
mov dword [esp + 0x10], edx
mov edx, dword [ebx + 8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], str.__5u___6lu__6lu
mov dword [esp], esi
call sub.msvcrt.dll_fprintf
cmp dword [ebx + 4], 5
jbe 0x43d041
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x26
mov dword [esp + 4], 1
mov dword [esp], str.Unknown_memory_block__may_be_corrupted
call sub.msvcrt.dll_fwrite
mov eax, dword [0x737958]
mov dword [esp], eax
call fcn.00463350
test ebp, ebp
je 0x43d1d8
add esp, 0x22c
pop ebx
pop esi
pop edi
pop ebp
ret
mov eax, dword [ebx + 4]
jmp dword [eax*4 + 0x6eae90]
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x13
mov dword [esp + 4], 1
mov dword [esp], str.atomicrealloc___in
call sub.msvcrt.dll_fwrite
mov eax, dword [ebx + 0x18]
test eax, eax
je 0x43d092
mov edx, dword [ebx + 0x1c]
mov dword [esp + 8], eax
mov dword [esp + 0xc], edx
mov dword [esp + 4], str._s__u_
mov dword [esp], esi
call sub.msvcrt.dll_fprintf
cmp dword [ebx], 0x5aa5
je 0x43d0ba
mov dword [esp + 0xc], esi
mov dword [esp + 8], 9
mov dword [esp + 4], 1
mov dword [esp], str.__INVALID
call sub.msvcrt.dll_fwrite
cmp edi, 0x63
jg 0x43d190
mov edx, ebx
mov eax, esi
call fcn.0043ca20
mov dword [esp + 4], esi
mov dword [esp], 0xa
call sub.msvcrt.dll_fputc
mov ebx, dword [ebx + 0x10]
mov eax, edi
test ebx, ebx
jne 0x43cfd6
jmp 0x43d021
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0x13
mov dword [esp + 4], 1
mov dword [esp], str.atomicmalloc____in
call sub.msvcrt.dll_fwrite
jmp 0x43d070
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0xd
mov dword [esp + 4], 1
mov dword [esp], str.realloc___in
call sub.msvcrt.dll_fwrite
jmp 0x43d070
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0xd
mov dword [esp + 4], 1
mov dword [esp], str.malloc____in
call sub.msvcrt.dll_fwrite
jmp 0x43d070
mov dword [esp + 0xc], esi
mov dword [esp + 8], 0xd
mov dword [esp + 4], 1
mov dword [esp], str.strdup____in
call sub.msvcrt.dll_fwrite
jmp 0x43d070
mov dword [esp + 0xc], esi
mov dword [esp + 8], 5
mov dword [esp + 4], 1
mov dword [esp], str._skip
call sub.msvcrt.dll_fwrite
jmp 0x43d0cc
mov dword [esp + 4], 0x6ead35
mov dword [esp], str..memorylist
call sub.msvcrt.dll_fopen
mov esi, eax
test eax, eax
jne 0x43cf2b
jmp 0x43d036
mov dword [esp], esi
call sub.msvcrt.dll_fclose
jmp 0x43d036