Function at 0x4307c2
Capabilities:
Clear file content
Write file on windows

Disassembly:
push 0x54
mov eax, 0x4762ec
call fcn.00472e78
mov ebx, ecx
xor eax, eax
lea edi, [ebp - 0x60]
stosd dword es:[edi], eax
xor esi, esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x14], esi
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov eax, dword [ebx + 0x44]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x43082c
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x43082c
lea ecx, [ebp - 0x3c]
push ecx
mov ecx, eax
call fcn.0045b5eb
mov edi, eax
test edi, edi
js 0x4309ee
mov edx, dword [ebp - 0x1c]
lea esi, [ebp - 0x3c]
mov ecx, dword [ebp - 0x20]
lea eax, [ebp - 0x60]
sub esp, 0x10
mov edi, esp
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.00458037
mov esi, dword [ebp - 0x24]
mov edi, eax
jmp 0x430831
mov edi, 0x80070057
test edi, edi
js 0x4309ee
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x43086e
mov ecx, dword [eax]
test ecx, ecx
je 0x43086e
mov eax, dword [ebp - 0x60]
test eax, eax
je 0x43086e
sub esp, 0x10
mov esi, eax
mov edi, esp
lea eax, [ebp - 0x18]
push 1
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x14]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0045b43d
mov esi, dword [ebp - 0x14]
mov edi, eax
jmp 0x430873
mov edi, 0x80070057
test edi, edi
jns 0x4308e7
test esi, esi
je 0x430890
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
xor esi, esi
mov dword [ebp - 0x14], esi
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x4308da
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
test eax, eax
je 0x4308da
lea ecx, [ebp - 0x4c]
push ecx
mov ecx, eax
call fcn.0045b5eb
mov edi, eax
test edi, edi
js 0x4309ee
mov ecx, dword [ebp - 0x24]
lea esi, [ebp - 0x4c]
sub esp, 0x10
lea eax, [ebp - 0x18]
mov edi, esp
push 0
movsd dword es:[edi], dword [esi]
push eax
lea eax, [ebp - 0x14]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.0045b43d
mov esi, dword [ebp - 0x14]
mov edi, eax
jmp 0x4308df
mov edi, 0x80070057
test edi, edi
js 0x4309ee
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x4308f3
cmp eax, 0xffffffff
jne 0x4308f5
xor eax, eax
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x4309df
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x430918
cmp eax, 0xffffffff
jne 0x43091a
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
test eax, eax
je 0x4309df
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x430935
cmp eax, 0xffffffff
jne 0x430937
xor eax, eax
push 0
lea ecx, [ebp - 0x28]
push ecx
push dword [ebp - 0x18]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4309df
mov eax, dword [ebx + 0x38]
test eax, eax
je 0x43095c
cmp eax, 0xffffffff
jne 0x43095e
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
je 0x4309df
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x430975
cmp eax, 0xffffffff
jne 0x430977
xor eax, eax
push 0
push 0
push 0
push 0
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
test eax, eax
je 0x4309df
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x430996
cmp eax, 0xffffffff
jne 0x430998
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
test eax, eax
je 0x4309df
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4309af
cmp eax, 0xffffffff
jne 0x4309b1
xor eax, eax
push 0
lea ecx, [ebp - 0x28]
push ecx
push dword [ebp - 0x18]
push esi
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x4309df
mov eax, dword [ebx + 0x3c]
test eax, eax
je 0x4309d2
cmp eax, 0xffffffff
jne 0x4309d4
xor eax, eax
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
test eax, eax
jne 0x4309f5
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
call fcn.0042754e
mov edi, eax
mov ecx, edi
call fcn.00427566
mov ecx, dword [ebp - 0x60]
test ecx, ecx
je 0x430a47
mov eax, dword [ebp - 0x50]
mov eax, dword [eax]
test eax, eax
je 0x430a08
dec dword [eax + 0xc]
cmp dword [ebp - 0x5c], 0
je 0x430a28
push dword [ebp - 0x5c]
mov eax, dword fs:[0x30]
push 0
push dword [eax + 0x18]
call dword [sym.imp.ntdll.dll_RtlFreeHeap]
mov esi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x60]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
push 0x14
pop ecx
lea eax, [ebp - 0x60]
mov byte [eax], 0
inc eax
sub ecx, 1
jne 0x430a3e
mov ecx, edi
call fcn.0042757e
and dword [ebp - 4], 0
test esi, esi
je 0x430a66
push esi
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push eax
call dword [sym.imp.KERNEL32.dll_HeapFree]
or dword [ebp - 4], 0xffffffff
mov eax, edi
call fcn.00472e55
ret