Function at 0x432230
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x315c
call fcn.00441cb0
mov eax, dword [0x457664]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
lea eax, [ebp - 0xc]
push edi
push 0
push 0
push 0
push eax
mov dword [ebp - 0x313c], ebx
mov dword [ebp - 0x3140], 0
mov dword [ebp - 0x38], 0xe448e482
mov dword [ebp - 0x34], 0x546efee
mov dword [ebp - 0x30], 0xd1464a74
mov dword [ebp - 0x2c], 0x464e78
mov dword [ebp - 0x28], 0x3546c66c
mov dword [ebp - 0x24], 0xdf463f61
mov dword [ebp - 0x20], 0x83410a52
mov dword [ebp - 0x1c], 0x7d41dd46
mov word [ebp - 0x18], 0x663b
mov dword [ebp - 0x14], 0xe352d1e3
mov dword [ebp - 0x10], 0xb46efee
mov dword [ebp - 0x3154], 0
mov dword [ebp - 0xc], 0x1b551b5e
mov word [ebp - 8], 0xf60b
mov byte [ebp - 6], 0x46
call fcn.0041fef0
test ebx, ebx
je 0x4326c6
push 0x1001
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov edi, eax
add esp, 4
mov dword [ebp - 0x3158], edi
test edi, edi
je 0x4326c6
push esi
push 0x1000
lea eax, [ebp - 0x1138]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x1000
lea eax, [ebp - 0x3138]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x138]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x1001
push 0
push edi
call sub.VCRUNTIME140.dll_memset
add esp, 0x30
call fcn.00414b70
mov dword [ebp - 0x3150], eax
test eax, eax
je 0x432475
call fcn.004019a0
mov edx, eax
lea esi, [eax + 2]
nop
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x432360
sub eax, esi
sar eax, 1
inc eax
push eax
push edx
push 0x1000
lea eax, [ebp - 0x2138]
push eax
lea eax, [ebp - 0x3154]
push eax
call fcn.0041fb50
test eax, eax
je 0x432475
lea eax, [ebp - 0x2138]
push eax
call fcn.004326e0
push 0xa
push 0x80
lea ecx, [ebp - 0x138]
inc eax
push ecx
push eax
call fcn.0041e790
test eax, eax
je 0x432475
push 0
push 0
push 0
lea eax, [ebp - 0x38]
push eax
call fcn.004201b0
push 0
push 0
mov ebx, eax
lea eax, [ebp - 0x14]
push 0
push eax
mov dword [ebp - 0x3144], ebx
call fcn.004201b0
mov edx, ebx
mov esi, eax
mov dword [ebp - 0x3148], esi
lea eax, [edx + 2]
nop
mov cx, word [edx]
add edx, 2
test cx, cx
jne 0x4323f0
sub edx, eax
lea ecx, [ebp - 0x138]
sar edx, 1
lea ebx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x432410
sub ecx, ebx
lea ebx, [esi + 2]
sar ecx, 1
mov ax, word [esi]
add esi, 2
test ax, ax
jne 0x432422
sub esi, ebx
sar esi, 1
lea eax, [esi + ecx]
mov ecx, dword [ebp + 0xc]
add eax, edx
add ecx, 2
lea eax, [ecx + eax*2]
mov esi, eax
mov dword [ebp - 0x314c], eax
push eax
shr esi, 1
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ebx, eax
add esp, 4
mov dword [ebp - 0x315c], ebx
test ebx, ebx
jne 0x432497
push dword [ebp - 0x3144]
call fcn.0041fc30
push dword [ebp - 0x3148]
call fcn.0041fc30
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
pop esi
pop edi
mov eax, 0x259
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 8
push dword [ebp - 0x314c]
push 0
push ebx
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push dword [ebp - 0x3144]
push esi
push ebx
call fcn.0041eb80
lea eax, [ebp - 0x138]
push eax
push esi
push ebx
call fcn.0041eb80
push dword [ebp - 0x3148]
push esi
push ebx
call fcn.0041eb80
push dword [ebp - 0x3144]
call fcn.0041fc30
push dword [ebp - 0x3148]
call fcn.0041fc30
push dword [ebp + 0xc]
push dword [ebp - 0x313c]
call fcn.0042f9f0
push dword [ebp - 0x313c]
push esi
push ebx
call fcn.0041eb80
push dword [ebp + 0xc]
push dword [ebp - 0x313c]
call fcn.0042fab0
push dword [ebp - 0x314c]
push ebx
call fcn.0042fab0
push 0x1000
push edi
lea eax, [ebp - 0x2138]
push eax
call dword [ebp - 0x3150]
push 0x1000
lea eax, [ebp - 0x2138]
push edi
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__fullpath]
add esp, 0xc
test eax, eax
je 0x4326b2
push 0
push 0
push 0
push 0
push 0x1000
push edi
push 0x1000
lea eax, [ebp - 0x3138]
push eax
lea eax, [ebp - 0x2138]
push eax
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__splitpath_s]
add esp, 0x24
lea eax, [ebp - 0x3138]
push eax
push 0x1000
lea eax, [ebp - 0x1138]
push eax
call fcn.0041ebf0
test eax, eax
je 0x4326b2
push edi
push 0x1000
lea eax, [ebp - 0x1138]
push eax
call fcn.0041eb10
test eax, eax
je 0x4326b2
call fcn.00414270
mov dword [ebp - 0x313c], eax
call fcn.00413580
cmp dword [ebp - 0x313c], 0
lea esi, [ebp - 0x1138]
mov dword [ebp - 0x3150], eax
je 0x432621
test eax, eax
je 0x432621
mov cl, byte [ebp - 0x1138]
test cl, cl
je 0x432621
mov ebx, dword [ebp - 0x313c]
mov edi, eax
nop dword [eax + eax]
cmp cl, 0x5c
jne 0x432606
push 0
lea eax, [ebp - 0x1138]
mov byte [esi], 0
push eax
call ebx
mov byte [esi], 0x5c
push 0
push esi
push 0
call edi
mov esi, eax
mov cl, byte [esi]
test cl, cl
jne 0x4325f0
mov edi, dword [ebp - 0x3158]
mov ebx, dword [ebp - 0x315c]
lea eax, [ebp - 0xc]
push eax
lea eax, [ebp - 0x2138]
push eax
lea eax, [ebp - 0x3140]
push eax
call fcn.0041e480
cmp eax, 1
jne 0x4326b2
push dword [ebp - 0x3140]
push eax
push dword [ebp - 0x314c]
push ebx
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
push dword [ebp - 0x3140]
cmp eax, 1
je 0x432679
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push ebx
call esi
push edi
call esi
add esp, 0xc
jmp 0x43247f
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fflush]
push dword [ebp - 0x3140]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push ebx
call esi
push edi
call esi
add esp, 0x10
mov eax, 0x258
pop esi
pop edi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00441849
mov esp, ebp
pop ebp
ret 8
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push ebx
call esi
push edi
call esi
add esp, 8
jmp 0x43247f
mov ecx, dword [ebp - 4]
mov eax, 0x259
pop edi
xor ecx, ebp
pop ebx
call fcn.00441849
mov esp, ebp
pop ebp
ret 8