Function at 0x432510
Capabilities:
Create directory
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49ddf6
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x4a6c
call fcn.00497d20
mov eax, dword [0x4cc99c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, dword [ebp + 8]
xor ebx, ebx
mov dword [ebp - 0x4a78], ebx
mov dword [ebp - 0x4a7c], eax
mov dword [ebp - 0x101c], 0xf
mov dword [ebp - 0x1020], ebx
mov byte [ebp - 0x1030], bl
mov dword [ebp - 4], ebx
lea ecx, [ebp - 0x4a70]
mov dword [ebp - 0x4a78], ebx
call fcn.0041c9a0
push 0xc
push str.yx.sogou.com
lea ecx, [ebp - 0x4a3c]
mov byte [ebp - 4], 1
mov edi, dword [sym.imp.MSVCR100.dll_wcsncpy_s]
push 0x100
push ecx
call edi
mov edx, dword [0x4cc964]
mov eax, dword [edx + 0xc]
add esp, 0x10
mov ecx, 0x4cc964
call eax
add eax, 0x10
mov dword [ebp - 0x4a74], eax
mov byte [ebp - 4], 2
push 0x29
lea ecx, [ebp - 0x4a74]
cmp byte [ebp + 0xc], bl
je 0x4325d4
push str._game_category4spscan:1resulttypexml
jmp 0x4325d9
push str._game_category5spscan:1resulttypexml
call fcn.00402b80
mov esi, dword [ebp - 0x4a74]
mov eax, esi
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, bx
jne 0x4325f0
sub eax, edx
sar eax, 1
push eax
push esi
lea ecx, [ebp - 0x4838]
push 0x800
push ecx
call edi
push ebx
lea edx, [ebp - 0x4a78]
push edx
lea eax, [ebp - 0x4a70]
push eax
mov dword [ebp - 0x483c], 0x50
mov dword [ebp - 0x1038], ebx
mov dword [ebp - 0x1034], ebx
mov dword [ebp - 0x4a64], ebx
mov dword [ebp - 0x4a60], ebx
call fcn.0045f6d0
lea eax, [esi - 0x10]
add esp, 0x1c
mov byte [ebp - 4], 1
lea ecx, [eax + 0xc]
or edx, 0xffffffff
lock xadd dword [ecx], edx
dec edx
test edx, edx
jg 0x432668
mov ecx, dword [eax]
mov edx, dword [ecx]
push eax
mov eax, dword [edx + 4]
call eax
mov dword [ebp - 4], ebx
jmp 0x43267c
mov ecx, dword [ebp - 0x4a68]
push ecx
call dword [sym.imp.WININET.dll_InternetCloseHandle]
mov edx, dword [ebp - 0x4a78]
cmp edx, ebx
jne 0x4326b7
mov esi, dword [ebp - 0x4a7c]
push ebx
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
push 0x4ab7d8
mov ecx, esi
mov byte [esi], bl
call fcn.00403870
jmp 0x4327f8
mov eax, edx
lea esi, [eax + 1]
lea esp, [esp]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4326c0
sub eax, esi
push eax
push edx
lea ecx, [ebp - 0x1030]
call fcn.00403870
lea eax, [ebp - 0x1014]
push 0x800
push eax
call dword [sym.imp.HFUILib.dll_public:_static_struct_HINSTANCE______cdecl_CPaintManagerUI::GetResourceInstance_void_]
push eax
call fcn.0045b1e0
add esp, 0xc
test eax, eax
je 0x4327d8
mov esi, dword [sym.imp.MSVCR100.dll_wcscat_s]
push str.data_
lea ecx, [ebp - 0x1014]
push 0x800
push ecx
call esi
add esp, 0xc
push ebx
lea edx, [ebp - 0x1014]
push edx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
cmp byte [ebp + 0xc], bl
je 0x43273b
push str.scanclient.xml
push 0x800
lea eax, [ebp - 0x1014]
push eax
jmp 0x43274c
push str.scanpc.xml
push 0x800
lea ecx, [ebp - 0x1014]
push ecx
call esi
add esp, 0xc
lea edx, [ebp - 0x1014]
push edx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x43276a
xor eax, eax
jmp 0x432789
lea esi, [eax + eax]
mov eax, esi
call fcn.00497dd0
mov dword [ebp - 0x10], esp
mov eax, esp
push 3
push esi
lea ecx, [ebp - 0x1014]
push ecx
push eax
call fcn.00403590
push 0x4b7944
push eax
lea edx, [ebp - 0x4a74]
push edx
call dword [sym.imp.MSVCR100.dll_fopen_s]
mov edi, dword [ebp - 0x4a74]
add esp, 0xc
cmp edi, ebx
je 0x4327d8
mov edx, dword [ebp - 0x4a78]
mov eax, edx
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x4327b4
push edi
sub eax, esi
push 1
push eax
push edx
call dword [sym.imp.MSVCR100.dll_fwrite]
mov eax, dword [ebp - 0x4a74]
push eax
call dword [sym.imp.MSVCR100.dll_fclose]
add esp, 0x14
mov esi, dword [ebp - 0x4a7c]
lea ecx, [ebp - 0x1030]
push ecx
mov dword [esi + 0x14], 0xf
mov dword [esi + 0x10], ebx
mov ecx, esi
mov byte [esi], bl
call fcn.00414120
cmp dword [ebp - 0x101c], 0x10
jb 0x432811
mov edx, dword [ebp - 0x1030]
push edx
call dword [sym.imp.MSVCR100.dll_void___cdecl_operator_delete_void__]
add esp, 4
mov eax, esi
lea esp, [ebp - 0x4a8c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00497792
mov esp, ebp
pop ebp
ret