Function at 0x433f80
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x340c4
call fcn.005e00d0
mov eax, dword [0x6aae14]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x103
xor edi, edi
lea eax, [ebp - 0x107]
push edi
push eax
mov byte [ebp - 0x108], 0
call fcn.005dfd60
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push edi
mov ebx, 1
push ebx
push str.Config_File_Not_Present._Hence_Creating_A_New_KLR_File_With_Default_Settings
push 0x6aec98
mov dword [0x6b3ca0], eax
call fcn.004311c0
push edi
push 0x104
lea ecx, [ebp - 0x108]
push ecx
push 0x60cf3c
push str.VBuild
push 0x60c810
call fcn.004edfd0
lea edx, [ebp - 0x108]
push edx
call fcn.005e0909
push 0x61d21c
push 0x6b3d20
mov esi, eax
call fcn.005e00ad
add esp, 0x34
mov dword [ebp - 0x10c], eax
cmp eax, edi
je 0x434223
push 0x33fb4
lea eax, [ebp - 0x340c0]
push edi
push eax
call fcn.005dfd60
add esp, 0xc
mov dword [ebp - 0x340c4], 3
mov dword [ebp - 0x340bc], 7
mov dword [ebp - 0x340b8], ebx
mov dword [ebp - 0x340b4], ebx
mov dword [ebp - 0x340b0], ebx
cmp esi, ebx
jne 0x434079
mov dword [ebp - 0x340ac], 2
mov dword [ebp - 0x118], edi
jmp 0x43408b
mov dword [ebp - 0x134], ebx
mov dword [ebp - 0x340ac], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x128], edi
mov dword [ebp - 0x124], edi
mov dword [ebp - 0x15c], 9
mov dword [ebp - 0x154], ebx
mov dword [ebp - 0x150], ebx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x130], ebx
mov dword [ebp - 0x12c], ebx
mov dword [ebp - 0x114], 0x32
mov dword [ebp - 0x110], 0x5000
mov dword [ebp - 0x120], ebx
mov dword [ebp - 0x11c], ebx
mov esi, 0x681df8
lea edi, [ebp - 0x340a8]
lea ebx, [ebx]
mov eax, dword [esi]
cmp byte [eax], 0
je 0x434119
mov edx, edi
sub edx, eax
jmp 0x434100
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, ebx
test cl, cl
jne 0x434100
add esi, 4
add edi, 0x14
cmp esi, 0x6820bc
jl 0x4340f0
mov dword [ebp - 0x32168], ebx
mov esi, 0x6820c0
lea edi, [ebp - 0x33108]
lea ebx, [ebx]
mov eax, dword [esi]
cmp byte [eax], 0
je 0x434159
mov edx, edi
sub edx, eax
jmp 0x434140
mov cl, byte [eax]
mov byte [edx + eax], cl
add eax, ebx
test cl, cl
jne 0x434140
add esi, 4
add edi, 0x14
cmp esi, 0x6821e8
jl 0x434130
mov dx, word [0x61d218]
mov ecx, dword [str.Client]
mov al, byte [0x61d21a]
mov esi, dword [ebp - 0x10c]
mov word [ebp - 0x32160], dx
mov edx, dword [0x61d210]
mov dword [ebp - 0x32164], ecx
mov ecx, dword [str.NetTool]
mov dword [ebp - 0x31f60], edx
mov edx, dword [str.RemoteAdmin]
mov byte [ebp - 0x3215e], al
mov eax, dword [str.PSWTool]
mov dword [ebp - 0x31f64], ecx
mov ecx, dword [0x61d1fc]
mov dword [ebp - 0x31b64], edx
mov edx, dword [str.Server]
push esi
mov dword [ebp - 0x31d64], eax
mov eax, dword [0x61d204]
mov dword [ebp - 0x31d60], ecx
mov ecx, dword [0x61d208]
push ebx
mov dword [ebp - 0x31964], edx
mov dword [ebp - 0x31b60], eax
mov ax, word [0x61d1f4]
mov dword [ebp - 0x31b5c], ecx
mov cl, byte [0x61d1f6]
lea edx, [ebp - 0x340c4]
push 0x33fb8
push edx
mov dword [ebp - 0x19164], ebx
mov word [ebp - 0x31960], ax
mov byte [ebp - 0x3195e], cl
mov dword [ebp - 0x160], ebx
call fcn.005e025d
push esi
call fcn.005dff6d
add esp, 0x14
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005dfbbe
mov esp, ebp
pop ebp
ret