Function at 0x432aa0
Capabilities:
Write file on windows

Disassembly:
sub esp, 0x50
push ebx
push ebp
mov ebp, dword [esp + 0x5c]
mov eax, dword [ebp]
push esi
push edi
mov edi, dword [eax + 0x864c]
mov ecx, dword [edi]
push 0x5c
push ecx
call dword [sym.imp.MSVCR80.dll_strchr]
mov esi, dword [ebp]
mov ebx, eax
xor eax, eax
add esp, 8
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov ecx, eax
mov eax, 0x10624dd3
mul ecx
shr edx, 6
mov dword [esp + 0x14], edx
imul edx, edx, 0x3e8
sub ecx, edx
mov edx, dword [esi + 0x154]
imul ecx, ecx, 0x3e8
test ebx, ebx
mov dword [ebp + 0x270], edx
mov eax, dword [esi + 0x104]
mov dword [ebp + 0x274], eax
mov dword [esp + 0x24], ecx
mov ecx, dword [ebp]
lea eax, [esi + 0x52c]
mov dword [ecx + 0xdc], eax
jne 0x432b31
mov eax, 0x25
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
cmp byte [ebx + 1], 0
je 0x432b24
mov edx, dword [esi + 0x8638]
or edx, dword [esi + 0x863c]
mov eax, dword [edi]
je 0x432b5b
push 0x4e9910
push eax
call dword [sym.imp.MSVCR80.dll_fopen]
mov ebx, eax
mov dword [esp + 0x6c], ebx
jmp 0x432bb3
mov ecx, dword [ebp]
mov edx, dword [ecx + 0x324]
push edx
push 0x8301
push eax
call dword [sym.imp.MSVCR80.dll__open]
add esp, 0xc
test eax, eax
jge 0x432b95
mov ecx, dword [edi]
push ecx
push 0x4f0cd8
call fcn.0042dec0
add esp, 8
mov eax, 0x17
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
push eax
call dword [sym.imp.MSVCR80.dll__close]
mov edx, dword [edi]
add esp, 4
push 0x4e9984
push edx
call dword [sym.imp.MSVCR80.dll_fopen]
mov ebx, eax
mov dword [esp + 0x6c], eax
add esp, 8
test ebx, ebx
jne 0x432bbf
mov eax, dword [edi]
push eax
jmp 0x432b7b
mov eax, dword [esi + 0x1a8]
cmp eax, 0xffffffff
mov ecx, dword [esi + 0x1ac]
jne 0x432bd4
cmp ecx, eax
je 0x432be0
push ecx
push eax
mov eax, esi
call fcn.004363f0
add esp, 8
cmp dword [esi + 0x863c], 0
jg 0x432c40
jl 0x432bf4
cmp dword [esi + 0x8638], 0
jae 0x432c40
lea ecx, [esp + 0x28]
push ecx
push ebx
call dword [sym.imp.MSVCR80.dll__fileno]
add esp, 4
push eax
call dword [sym.imp.MSVCR80.dll__fstat64]
add esp, 8
test eax, eax
je 0x432c28
push ebx
call dword [sym.imp.MSVCR80.dll_fclose]
mov edx, dword [edi]
add esp, 4
push edx
push 0x4f0cf4
jmp 0x432b80
mov eax, dword [esp + 0x40]
mov dword [esi + 0x8638], eax
mov ecx, dword [esp + 0x44]
mov dword [esi + 0x863c], ecx
lea esp, [esp]
lea edx, [esp + 0x10]
push edx
push ebp
mov ecx, 0x4000
call fcn.0042a830
mov edi, eax
add esp, 8
test edi, edi
jne 0x432d68
mov edx, dword [esp + 0x10]
test edx, edx
jle 0x432d56
mov ecx, dword [esi + 0x8638]
mov eax, dword [esi + 0x863c]
mov ebx, ecx
or ebx, eax
mov edi, edx
je 0x432ca5
xor edi, edi
xor ebx, ebx
cmp edi, eax
jg 0x432d21
jl 0x432c93
cmp edx, ecx
ja 0x432d21
sub ecx, edx
sbb eax, edi
mov dword [esi + 0x8638], ecx
mov dword [esi + 0x863c], eax
xor edi, edi
lea eax, [esi + 0x52c]
mov ebx, dword [esp + 0x64]
push ebx
push edi
push 1
push eax
call dword [sym.imp.MSVCR80.dll_fwrite]
add esp, 0x10
cmp eax, edi
jne 0x432d3d
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x1c]
add eax, edi
adc ecx, 0
push ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ecx
mov dword [esi + 0x430], eax
mov dword [esi + 0x434], ecx
call fcn.00436420
add esp, 4
test eax, eax
jne 0x432d63
mov eax, dword [esp + 0x24]
mov ecx, dword [esp + 0x14]
push eax
push ecx
mov eax, esi
call fcn.00436bd0
mov edi, eax
add esp, 8
test edi, edi
je 0x432c40
push ebx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
sub edx, ecx
lea eax, [ecx + esi + 0x52c]
mov edi, edx
mov dword [esi + 0x8638], ebx
mov dword [esi + 0x863c], ebx
jmp 0x432cab
push ebx
mov edi, 0x37
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret
push ebp
call fcn.00436420
add esp, 4
test eax, eax
je 0x432d68
mov edi, 0x2a
push ebx
call dword [sym.imp.MSVCR80.dll_fclose]
add esp, 4
mov eax, edi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x50
ret