Function at 0x4190c0
Capabilities:
Terminate process
Write file on windows

Disassembly:
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 0x15
push str.Error:_out_of_memory_n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
push 1
call sub.api_ms_win_crt_runtime_l1_1_0.dll_exit
nop word cs:[eax + eax]
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x34]
push dword [esi]
call fcn.004304e0
add esp, 4
mov ebx, eax
push dword [esi + 4]
call fcn.004304e0
add esp, 4
mov dword [esp], eax
push dword [esi + 8]
call fcn.004304e0
add esp, 4
mov dword [esp + 8], eax
push edi
call fcn.004315a0
add esp, 4
mov dword [esp + 0x10], eax
mov dword [esp + 4], ebx
test ebx, ebx
je 0x419154
push 7
push 0x51e2b0
push dword [esp + 0xc]
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
add esp, 0xc
test eax, eax
je 0x419168
mov eax, dword [esp + 0x3c]
push dword [eax]
push edi
call fcn.00431180
add esp, 0x28
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 4]
lea ecx, [eax + 7]
mov dword [esp + 0x1c], ecx
add eax, 8
mov dword [esp + 0xc], eax
xor esi, esi
jmp 0x4191a6
push ebx
push ebp
push str._z_n___s__
call fcn.00428600
add esp, 0xc
mov ebp, eax
push ebx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
test ebp, ebp
jne 0x4192f1
inc esi
cmp esi, 6
je 0x419154
mov ebx, dword [esi*4 + 0x51e264]
mov ebp, 0xffffffff
nop word cs:[eax + eax]
cmp byte [ebx + ebp + 1], 0
lea ebp, [ebp + 1]
jne 0x4191c0
and ebp, 0x3fffffff
push ebp
push ebx
push dword [esp + 0x24]
call sub.api_ms_win_crt_string_l1_1_0.dll_strncmp
add esp, 0xc
test eax, eax
jne 0x4191a0
mov eax, dword [esp + 4]
cmp byte [eax + ebp + 7], 0x20
jne 0x4191a0
mov eax, dword [esp]
test eax, eax
je 0x41924b
lea ecx, [ebp + 7]
mov dword [esp + 0x14], ecx
movzx edi, byte [eax]
push edi
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalpha]
add esp, 4
test eax, eax
mov eax, edi
jne 0x419212
cmp al, 0x5f
jne 0x41926a
xor edi, edi
jmp 0x419229
mov eax, dword [esp]
movzx eax, byte [eax + edi + 1]
inc edi
test al, al
je 0x419259
mov dword [esp + 0x18], eax
movzx eax, al
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_isalnum]
add esp, 4
test eax, eax
jne 0x419220
cmp byte [esp + 0x18], 0x5f
je 0x419220
jmp 0x41926a
xor ebp, ebp
cmp dword [esp + 8], 0
jne 0x4192b4
jmp 0x419198
push edi
push dword [esp + 4]
call fcn.004380f0
add esp, 8
test eax, eax
je 0x419284
push 0x51e2b8
push dword [esp + 4]
call fcn.00428d80
add esp, 8
mov ecx, str._.s___w_._s
test eax, eax
jne 0x419289
mov ecx, str._.s__s._s
add ebp, dword [esp + 0xc]
push ebp
push dword [esp + 4]
push dword [esp + 0xc]
push dword [esp + 0x20]
push ecx
call fcn.00428600
add esp, 0x14
mov ebp, eax
mov edi, dword [esp + 0x34]
cmp dword [esp + 8], 0
je 0x419198
cmp byte [ebx], 0x56
jne 0x419198
mov ecx, dword [esp + 0x10]
mov edx, dword [esp]
push dword [esp + 8]
call fcn.00419e90
add esp, 4
test eax, eax
je 0x419198
mov ebx, eax
test ebp, ebp
jne 0x41917e
push ebx
push dword [esp + 8]
push str._s_n___s__
jmp 0x419185
push fcn.00424f10
push 0xffffffffffffffff
push ebp
push edi
call fcn.00431080
add esp, 0x30
jmp 0x419163