Function at 0x4180d0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x54c
mov esi, dword [esp + 0x564]
lea eax, [esp + 0x6d]
mov byte [esp + 0x7d], 0
mov edx, dword [esi]
mov dword [esp + 8], eax
mov eax, dword [esi + 4]
mov dword [esp], edx
sub eax, edx
mov dword [esp + 4], eax
call fcn.0043f540
movzx eax, byte [esp + 0x7c]
mov dword [esp + 0x48], eax
movzx eax, byte [esp + 0x7b]
mov dword [esp + 0x44], eax
movzx eax, byte [esp + 0x7a]
mov dword [esp + 0x40], eax
movzx eax, byte [esp + 0x79]
mov dword [esp + 0x3c], eax
movzx eax, byte [esp + 0x78]
mov dword [esp + 0x38], eax
movzx eax, byte [esp + 0x77]
mov dword [esp + 0x34], eax
movzx eax, byte [esp + 0x76]
mov dword [esp + 0x30], eax
movzx eax, byte [esp + 0x75]
mov dword [esp + 0x2c], eax
movzx eax, byte [esp + 0x74]
mov dword [esp + 0x28], eax
movzx eax, byte [esp + 0x73]
mov dword [esp + 0x24], eax
movzx eax, byte [esp + 0x72]
mov dword [esp + 0x20], eax
movzx eax, byte [esp + 0x71]
mov dword [esp + 0x1c], eax
movzx eax, byte [esp + 0x70]
mov dword [esp + 0x18], eax
movzx eax, byte [esp + 0x6f]
mov dword [esp + 0x14], eax
movzx eax, byte [esp + 0x6e]
mov dword [esp + 0x10], eax
movzx eax, byte [esp + 0x6d]
mov dword [esp + 0xc], eax
lea eax, [esp + 0x9e]
mov dword [esp + 8], str._02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_02x_n
mov edi, dword [sym.imp.msvcrt.dll__snprintf]
mov dword [esp + 4], 0x22
mov dword [esp + 0x58], edi
mov dword [esp], eax
call edi
mov eax, dword [esp + 0x560]
mov dword [esp + 0x10], str..unc_backup.md5
mov dword [esp + 8], 0x5ecb67
mov dword [esp + 0xc], eax
lea eax, [esp + 0x140]
mov dword [esp + 4], 0x400
mov dword [esp], eax
call edi
lea eax, [esp + 0x140]
mov dword [esp + 4], 0x5ecb6c
lea edi, [esp + 0x7d]
mov dword [esp], eax
call sub.msvcrt.dll_fopen
test eax, eax
je 0x418292
lea ebx, [esp + 0xc0]
mov dword [esp + 8], eax
mov dword [esp + 4], pe_nt_image_headers32
mov dword [esp], ebx
mov dword [esp + 0x5c], eax
call sub.msvcrt.dll_fgets
mov ecx, dword [esp + 0x5c]
test eax, eax
je 0x41828a
movsx eax, byte [esp + 0xc0]
xor ebp, ebp
test al, al
je 0x41828a
mov dword [esp + 0x564], esi
mov esi, ebp
mov ebp, ecx
jmp 0x41826e
movsx eax, byte [ebx + esi]
mov dword [esp], eax
call fcn.004bfd80
mov byte [edi + esi], al
add esi, 1
movsx eax, byte [ebx + esi]
test al, al
je 0x4183a8
mov dword [esp], eax
call fcn.004bfda0
test eax, eax
jne 0x418250
mov ecx, ebp
mov ebp, esi
mov esi, dword [esp + 0x564]
mov byte [esp + ebp + 0x7d], 0
mov dword [esp], ecx
call sub.msvcrt.dll_fclose
lea eax, [esp + 0x9e]
mov dword [esp + 8], 0x20
mov dword [esp + 4], edi
mov dword [esp], eax
call sub.msvcrt.dll_memcmp
mov dword [esp + 8], str.backup_copy_file
test eax, eax
mov eax, dword [esp + 0x560]
mov dword [esp + 0xc], eax
je 0x418380
mov dword [esp + 4], str._s:_MD5_mismatch___backing_up__s_n
mov dword [esp], 3
call fcn.0043ce70
mov eax, dword [esp + 0x560]
mov dword [esp + 0x10], str..unc_backup
mov dword [esp + 8], 0x5ecb67
mov dword [esp + 0xc], eax
lea eax, [esp + 0x140]
mov dword [esp], eax
mov eax, dword [esp + 0x58]
mov dword [esp + 4], 0x400
call eax
lea eax, [esp + 0x140]
mov dword [esp + 4], 0x5ecbc7
mov dword [esp], eax
call sub.msvcrt.dll_fopen
mov edi, eax
test eax, eax
je 0x4183b6
mov ecx, dword [esi]
mov dword [esp + 0xc], eax
mov dword [esp + 8], 1
mov eax, dword [esi + 4]
mov dword [esp], ecx
sub eax, ecx
mov dword [esp + 4], eax
call sub.msvcrt.dll_fwrite
mov ebx, eax
call dword [sym.imp.msvcrt.dll__errno]
mov ebp, dword [eax]
mov dword [esp], edi
call sub.msvcrt.dll_fclose
cmp ebx, 1
je 0x418371
mov eax, dword [esi]
cmp dword [esi + 4], eax
jne 0x4183ff
add esp, 0x54c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp + 4], str._s:_MD5_match_for__s_n
mov dword [esp], 3
call fcn.0043ce70
add esp, 0x54c
xor eax, eax
pop ebx
pop esi
pop edi
pop ebp
ret
mov esi, dword [esp + 0x564]
mov ecx, ebp
jmp 0x41828a
mov ebx, dword [sym.imp.msvcrt.dll__errno]
call ebx
mov esi, dword [eax]
call ebx
mov eax, dword [eax]
mov dword [esp], eax
call sub.msvcrt.dll_strerror
mov dword [esp + 0x10], esi
mov dword [esp + 0xc], eax
lea eax, [esp + 0x140]
mov dword [esp + 8], eax
mov dword [esp + 4], str.fopen__s__failed:__s___d__n
mov dword [esp], 1
call fcn.0043ce70
mov dword [esp], 0x46
call sub.msvcrt.dll_exit
mov dword [esp], ebp
call sub.msvcrt.dll_strerror
mov dword [esp + 0x10], ebp
mov dword [esp + 0xc], eax
lea eax, [esp + 0x140]
mov dword [esp + 8], eax
mov dword [esp + 4], str.fwrite__s__failed:__s___d__n
mov dword [esp], 1
call fcn.0043ce70
mov dword [esp], 0x46
call sub.msvcrt.dll_exit
lea esi, [esi]