Function at 0x1e0059e0
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2a4
mov eax, dword [0x1e02e028]
xor ecx, ecx
cmp dword [0x1e02e564], ecx
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 4], eax
mov dword [ebp - 0x274], ecx
jne 0x1e005cab
cmp dword [0x1e02e558], ecx
je 0x1e005cab
cmp dword [0x1e02e560], ecx
je 0x1e005cab
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, dword [ebp + 0xc]
and esi, 0xfffffff
dec eax
mov dword [0x1e02e9d8], ecx
je 0x1e005c01
dec eax
jne 0x1e005ca9
push ecx
push ecx
lea eax, [ebp - 0x2a4]
push eax
mov eax, esi
push edi
or eax, 0x20000000
push eax
call sym.MIGISM.dll_IsmAcquireObjectEx
test eax, eax
je 0x1e005ca9
push 2
mov ebx, 0x1e02e9d0
push ebx
call fcn.1e01f526
push 4
push ebx
call fcn.1e01f419
push edi
mov dword [eax], esi
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
lea eax, [eax + eax + 2]
push eax
push ebx
call fcn.1e01f526
push edi
push ebx
call fcn.1e01f624
push 0x28
push ebx
call fcn.1e01f526
push 0x28
push ebx
call fcn.1e01f419
push 0xa
pop ecx
lea esi, [ebp - 0x2a4]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
xor esi, esi
cmp dword [ebp - 0x28c], esi
je 0x1e005b03
cmp dword [ebp - 0x288], esi
je 0x1e005b03
push dword [ebp - 0x28c]
push ebx
call fcn.1e01f526
mov eax, dword [ebp - 0x28c]
mov esi, dword [ebp - 0x288]
push eax
push ebx
mov dword [ebp - 0x278], eax
call fcn.1e01f419
mov edi, eax
mov eax, dword [ebp - 0x278]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
xor esi, esi
jmp 0x1e005b0a
push esi
push ebx
call fcn.1e01f526
cmp dword [ebp - 0x2a0], esi
je 0x1e005ba5
lea eax, [ebp - 0x270]
push eax
push dword [ebp - 0x29c]
call fcn.1e01b304
test eax, eax
je 0x1e005b9c
test byte [ebp - 0x270], 0x10
jne 0x1e005b9c
inc dword [0x1e02e9e4]
push dword [0x1e02e9e4]
lea eax, [ebp - 0x20]
push 0x1e0016e0
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
push esi
lea eax, [ebp - 0x20]
push eax
push dword [0x1e02e558]
push esi
call fcn.1e01e6b4
add esp, 0x1c
push esi
mov edi, eax
push edi
push dword [ebp - 0x29c]
call fcn.1e01bb1e
push edi
push esi
call fcn.1e01c0cf
lea eax, [ebp - 0x20]
push eax
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
lea eax, [eax + eax + 2]
push eax
push ebx
call fcn.1e01f526
lea eax, [ebp - 0x20]
push eax
push ebx
call fcn.1e01f624
jmp 0x1e005be8
push esi
push ebx
call fcn.1e01f526
jmp 0x1e005be8
push dword [ebp - 0x298]
push ebx
call fcn.1e01f526
cmp dword [ebp - 0x298], esi
je 0x1e005be8
mov eax, dword [ebp - 0x298]
mov esi, dword [ebp - 0x29c]
push eax
push ebx
mov dword [ebp - 0x278], eax
call fcn.1e01f419
mov edi, eax
mov eax, dword [ebp - 0x278]
mov ecx, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x1e02e9d8]
mov dword [ebp - 0x274], eax
lea eax, [ebp - 0x2a4]
push eax
call sym.MIGISM.dll_IsmReleaseObject
jmp 0x1e005c3d
push 1
mov ebx, 0x1e02e9d0
push ebx
call fcn.1e01f526
push 4
push ebx
call fcn.1e01f419
push edi
mov dword [eax], esi
call dword [sym.imp.msvcrt.dll_wcslen]
pop ecx
lea eax, [eax + eax + 2]
push eax
push ebx
call fcn.1e01f526
push edi
push ebx
call fcn.1e01f624
mov eax, dword [0x1e02e9d8]
mov dword [ebp - 0x274], eax
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
xor edi, edi
push edi
lea eax, [ebp - 0x27c]
push eax
push 4
lea eax, [ebp - 0x274]
push eax
push dword [0x1e02e560]
call esi
push edi
lea eax, [ebp - 0x27c]
push eax
push dword [0x1e02e9d8]
push dword [0x1e02e9d0]
push dword [0x1e02e560]
call esi
push edi
lea eax, [ebp - 0x27c]
push eax
push 4
lea eax, [ebp - 0x274]
push eax
push dword [0x1e02e560]
call esi
push dword [0x1e02e560]
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [0x1e02e568], 1
pop esi
pop ebx
mov ecx, dword [ebp - 4]
pop edi
call fcn.1e01abd2
leave
ret 0xc