Function at 0x4200e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x60
mov esi, edx
mov edi, ecx
push ecx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fflush
add esp, 4
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
add esp, 4
push 0x8000
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
mov edx, esi
add esp, 8
mov eax, esi
jmp 0x420121
inc eax
movzx ecx, byte [eax]
cmp ecx, 0x27
ja case.0x420129.1
jmp dword [ecx*4 + 0x51cb44]
pcmpeqd xmm0, xmm0
movdqa xmmword [esp + 0x20], xmm0
mov dword [esp + 0x30], 0xffffffff
movdqa xmmword [esp + 0x40], xmm0
mov dword [esp + 0x50], 0xffffffff
xor ebx, ebx
mov eax, edx
xor esi, esi
mov dword [esp + 0xc], edx
jmp 0x42016c
inc ebx
xor edx, edx
cmp cl, 0xd
sete dl
add esi, edx
inc eax
movzx ecx, byte [eax]
cmp ecx, 0xa
je 0x420160
test ecx, ecx
jne 0x420161
xor ecx, ecx
mov dword [esp + 0x10], 0
test ebx, ebx
mov dword [esp + 8], esi
mov dword [esp + 0x1c], ebx
je 0x42022f
push edi
push 1
push 8
push str.replace_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
push 0x51e313
mov esi, dword [esp + 0x10]
push esi
call sub.api_ms_win_crt_private_l1_1_0.dll_strstr
add esp, 8
test eax, eax
je 0x420217
push str.012
push esi
call sub.api_ms_win_crt_private_l1_1_0.dll_strstr
add esp, 8
test eax, eax
je 0x420221
xor esi, esi
nop
push esi
inc esi
push 0x51e313
push str.__s_u_
lea ebx, [esp + 0x2c]
push ebx
push 0x14
call fcn.00428750
add esp, 0x14
push ebx
push dword [esp + 0x10]
call sub.api_ms_win_crt_private_l1_1_0.dll_strstr
add esp, 8
test eax, eax
jne 0x4201d0
lea eax, [esp + 0x20]
mov dword [esp + 0x10], eax
jmp 0x420229
push edx
push str._s
push edi
call fcn.004014c0
jmp 0x4203d0
mov dword [esp + 0x10], 0x51e313
jmp 0x420229
mov dword [esp + 0x10], str.012
mov esi, dword [esp + 8]
xor ecx, ecx
test esi, esi
je 0x4202be
push edi
push 1
push 8
push str.replace_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
push 0x51e31b
mov esi, dword [esp + 0x10]
push esi
call sub.api_ms_win_crt_private_l1_1_0.dll_strstr
add esp, 8
test eax, eax
je 0x4202ae
push str.015
push esi
call sub.api_ms_win_crt_private_l1_1_0.dll_strstr
add esp, 8
test eax, eax
je 0x4202b5
xor esi, esi
lea ecx, [esp + 0x40]
nop word [eax + eax]
push esi
inc esi
push 0x51e31b
push str.__s_u_
push ecx
push 0x14
mov ebx, ecx
call fcn.00428750
add esp, 0x14
push ebx
push dword [esp + 0x10]
call sub.api_ms_win_crt_private_l1_1_0.dll_strstr
mov ecx, ebx
add esp, 8
test eax, eax
jne 0x420280
jmp 0x4202ba
mov ecx, 0x51e31b
jmp 0x4202ba
mov ecx, str.015
mov esi, dword [esp + 8]
mov dword [esp + 0x18], ecx
push edi
push 0x27
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
mov edx, dword [esp + 0xc]
movzx ebx, byte [edx]
test bl, bl
je 0x420398
mov dword [esp + 0x14], edi
jmp 0x420312
mov edi, dword [esp + 0x14]
push edi
push 0x27
mov esi, edx
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
mov edx, esi
mov esi, dword [esp + 0x10]
add esp, 8
movzx ebx, byte [edx]
test bl, bl
je 0x420398
xor esi, esi
mov eax, 1
jmp 0x420326
movzx ebx, byte [edx + eax]
dec esi
inc eax
cmp bl, 0x27
ja case.0x42032e.1
movzx ecx, bl
jmp dword [ecx*4 + 0x51cbe4]
sete al
movzx edi, al
mov eax, edi
sub eax, esi
je 0x420360
push edx
push eax
push 0x51d875
push dword [esp + 0x20]
mov dword [esp + 0x1c], edx
call fcn.004014c0
add esp, 0x10
add edi, dword [esp + 0xc]
sub edi, esi
mov edx, edi
mov esi, dword [esp + 8]
cmp bl, 0x27
je 0x4202f0
test bl, bl
mov edi, dword [esp + 0x14]
je 0x420398
inc edx
mov esi, edx
cmp bl, 0xa
jne 0x420380
push edi
push dword [esp + 0x14]
jmp 0x420385
push edi
push dword [esp + 0x1c]
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputs
add esp, 8
mov edx, esi
mov esi, dword [esp + 8]
jmp 0x420307
push edi
push 0x27
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
test esi, esi
je 0x4203b9
push dword [esp + 0x18]
push str.__s_char_13__
push edi
call fcn.004062d0
add esp, 0xc
cmp dword [esp + 0x1c], 0
mov eax, dword [esp + 0x10]
je 0x4203d3
push eax
push str.__s_char_10__
push edi
call fcn.004062d0
add esp, 0xc
push edi
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fflush
add esp, 4
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__fileno]
add esp, 4
push 0x4000
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll__setmode]
add esp, 8
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret