Function at 0x41d0fa
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x66c
push 0x6d6f
push 0x632e7572
push 0x2e636d6d
mov dword [ebp - 0x28], esp
push 0x74
push 0x78742e74
push 0x73696c2f
push 0x656e696c
push 0x6b5f6164
push 0x6e6f682f
push 0x6d6f722f
mov dword [ebp - 0x24], esp
push 0x73252f
push 0x656e696c
push 0x6b5f6164
push 0x6e6f682f
push 0x6d6f722f
mov dword [ebp - 0x20], esp
push 0xa0d24
push 0x5453494c
push 0x5f454c49
push 0x465f4441
push 0x4f4c4e57
push 0x4f445f54
push 0x4f4e5f4e
push 0x41435f52
push 0x4f525245
push 0x24202445
push 0x4d495424
mov dword [ebp - 0x1c], esp
push 0
push 0xa0d2447
push 0x4e494441
push 0x4f4c4e57
push 0x4f445f45
push 0x4c494857
push 0x5f444552
push 0x52554343
push 0x4f5f524f
push 0x5252455f
push 0x4e415f52
push 0x4f525245
push 0x24202445
push 0x4d495424
mov dword [ebp - 0x18], esp
push 0
push 0
push 0
push 1
push 0
push 0
push 0
push 0
mov dword [ebp - 0x14], esp
push 0x73
push 0x255c7325
mov dword [ebp - 0x10], esp
push 0xa0d73
push 0x25203a24
push 0x454c4946
push 0x5f474e49
push 0x54414552
push 0x435f524f
push 0x52524524
mov dword [ebp - 0xc], esp
push 0xa0d
push 0x7325203a
push 0x24444556
push 0x41535f45
push 0x4c494624
mov dword [ebp - 8], esp
push 0xa0d24
push 0x444e554f
push 0x465f544f
push 0x4e5f524f
push 0x52524524
mov dword [ebp - 4], esp
mov dword [ebp - 0x66c], 0
mov byte [ebp - 0x640], 0
lea eax, [ebp - 0x668]
lea ecx, [ebp - 0x664]
push eax
push ecx
push dword [ebp - 0x24]
push dword [ebp - 0x28]
call fcn.0041cbf1
test eax, eax
je 0x41d288
push dword [ebp - 0x1c]
call dword [ebx + 0x30]
jmp 0x41d5c0
mov dword [ebp - 0x660], 0
mov eax, dword [ebp - 0x660]
cmp eax, dword [ebp - 0x668]
jae 0x41d5b4
mov ecx, dword [ebp - 0x664]
cmp eax, dword [ebp - 0x668]
jae 0x41d2bb
cmp byte [ecx + eax], 0xd
je 0x41d2bb
inc eax
jmp 0x41d2aa
inc eax
cmp eax, dword [ebp - 0x668]
jae 0x41d2cb
cmp byte [ecx + eax], 0xa
jne 0x41d2cb
inc eax
mov dword [ebp - 0x65c], eax
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
push eax
push dword [ebp + 8]
mov ecx, dword [ebp - 0x65c]
mov edx, dword [ebp - 0x660]
sub ecx, edx
add edx, dword [ebp - 0x664]
push ecx
push edx
call fcn.0041d5f1
cmp eax, 0xffffffff
je 0x41d5a3
mov eax, dword [ebp - 0x65c]
mov ecx, dword [ebp - 0x660]
sub eax, ecx
add ecx, dword [ebp - 0x664]
lea edx, [ebp - 0x53c]
mov byte [edx + eax], 0
push eax
push ecx
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
lea eax, [ebp - 0x53c]
push eax
call dword [sym.imp.KERNEL32.DLL_lstrlenA]
cmp byte [ebp + eax - 0x53d], 0xd
jne 0x41d34d
mov byte [ebp + eax - 0x53d], 0
jmp 0x41d35f
cmp byte [ebp + eax - 0x53d], 0xa
jne 0x41d35f
mov byte [ebp + eax - 0x53d], 0
cmp byte [ebp + eax - 0x53e], 0xd
jne 0x41d371
mov byte [ebp + eax - 0x53e], 0
lea eax, [ebp - 0x53c]
lea ecx, [ebp - 0x438]
push eax
push dword [ebp - 0x20]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x658]
lea ecx, [ebp - 0x654]
lea edx, [ebp - 0x438]
push eax
push ecx
push edx
push dword [ebp - 0x28]
call fcn.0041cbf1
test eax, eax
je 0x41d3b7
push dword [ebp - 0x18]
call dword [ebx + 0x30]
jmp 0x41d5a3
mov eax, dword [ebp - 0x654]
cmp byte [eax + 3], 8
je 0x41d3ce
push dword [ebp - 0x18]
call dword [ebx + 0x30]
jmp 0x41d597
lea ecx, [eax - 4]
add ecx, dword [ebp - 0x658]
mov ecx, dword [ecx]
mov dword [ebp - 0x650], ecx
lea ecx, [eax + 0xa]
xor eax, eax
cmp eax, 0x100
jae 0x41d3f4
cmp byte [ecx + eax], 0
je 0x41d3f4
inc eax
jmp 0x41d3e4
cmp eax, 0x100
jae 0x41d3fc
inc eax
lea edx, [ebp - 0x334]
push eax
push ecx
push edx
call dword [sym.imp.NTDLL.DLL_memcpy]
add esp, 0xc
push dword [ebp - 0x650]
push 0x40
call dword [sym.imp.KERNEL32.DLL_GlobalAlloc]
mov dword [ebp - 0x64c], eax
push dword [ebp - 0x650]
push dword [ebp - 0x64c]
push dword [ebp - 0x658]
push dword [ebp - 0x654]
call dword [ebx + 0x4c]
cmp eax, 0
jne 0x41d44d
push dword [ebp - 0x18]
call dword [ebx + 0x30]
jmp 0x41d58b
cmp dword [ebp - 0x66c], 0
jne 0x41d4c9
mov dword [ebp - 0x66c], 1
mov edx, dword [ebp - 0x14]
mov eax, dword [ebx + 0x8ac]
mov dword [edx], eax
lea eax, [ebx + 0x398]
mov dword [edx + 0x18], eax
mov dword [edx + 0x14], 0x41d63f
push dword [ebp - 0x14]
call dword [sym.imp.shell32.dll_SHBrowseForFolder]
test eax, eax
jne 0x41d4a5
push dword [ebp - 0x64c]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
push dword [ebp - 0x654]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
jmp 0x41d5b4
lea ecx, [ebx + 0x398]
push ecx
push eax
call dword [sym.imp.shell32.dll_SHGetPathFromIDList]
lea eax, [ebx + 0x398]
mov ecx, dword [ebx]
lea ecx, [ecx + 0x398]
push eax
push ecx
call dword [sym.imp.KERNEL32.DLL_lstrcpyA]
lea eax, [ebp - 0x334]
lea ecx, [ebx + 0x398]
lea edx, [ebp - 0x230]
push eax
push ecx
push dword [ebp - 0x10]
push edx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0x10
lea eax, [ebp - 0x230]
push 0
push pe_nt_image_headers32
push 2
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.DLL_CreateFileA]
cmp eax, 0xffffffff
jne 0x41d534
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x12c]
push eax
push dword [ebp - 0xc]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x12c]
push eax
call dword [ebx + 0x30]
jmp 0x41d58b
mov dword [ebp - 0x648], eax
lea ecx, [ebp - 0x644]
push 0
push ecx
push dword [ebp - 0x650]
push dword [ebp - 0x64c]
push dword [ebp - 0x648]
call dword [sym.imp.KERNEL32.DLL_WriteFile]
lea eax, [ebp - 0x230]
lea ecx, [ebp - 0x12c]
push eax
push dword [ebp - 8]
push ecx
call dword [sym.imp.USER32.DLL_wsprintfA]
add esp, 0xc
lea eax, [ebp - 0x12c]
push eax
call dword [ebx + 0x30]
push dword [ebp - 0x648]
call dword [sym.imp.KERNEL32.DLL_CloseHandle]
push dword [ebp - 0x64c]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
push dword [ebp - 0x654]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
mov eax, dword [ebp - 0x65c]
mov dword [ebp - 0x660], eax
jmp 0x41d292
push dword [ebp - 0x664]
call dword [sym.imp.KERNEL32.DLL_GlobalFree]
cmp dword [ebp - 0x66c], 0
jne 0x41d5cf
push dword [ebp - 4]
call dword [ebx + 0x30]
add esp, 0x14
add esp, 0x14
add esp, 0x1c
add esp, 8
add esp, 0x20
add esp, 0x38
add esp, 0x2c
add esp, 0x14
add esp, 0x1c
add esp, 0xc
leave
ret 4