Function at 0x41c4b0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x43ca32
push eax
mov dword fs:[0], esp
sub esp, 0x18
mov eax, dword [0x461fe8]
push ebx
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
push esi
push edi
mov edi, eax
mov ecx, dword [edi + 0x2c]
test ecx, ecx
je 0x41c582
cmp byte [edi + 1], 0
je 0x41c582
mov byte [ecx + 0x10], 0
mov esi, dword [edi + 0x2c]
test esi, esi
je 0x41c582
mov ecx, esi
mov dword [ebp - 4], 0
call fcn.004249e0
mov ecx, dword [esi + 0x5c]
test ecx, ecx
je 0x41c529
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c523
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov ecx, dword [esi + 0x50]
test ecx, ecx
je 0x41c545
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c53f
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov ecx, dword [esi + 0x44]
test ecx, ecx
je 0x41c561
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c55b
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c577
dec dword [eax + 0xac]
push esi
call ebx
mov eax, dword [0x461fe8]
add esp, 4
mov dword [edi + 0x2c], 0
mov ecx, dword [edi + 0x3c00]
test ecx, ecx
je 0x41c5c6
mov dword [edi + 0x3bfc], 0
mov dword [edi + 0x3bf8], 0
test eax, eax
je 0x41c5b1
dec dword [eax + 0xac]
push ecx
call ebx
mov eax, dword [0x461fe8]
add esp, 4
mov dword [edi + 0x3c00], 0
cmp byte [edi], 0
je 0x41cf14
cmp byte [edi + 0x5a61], 0
je 0x41c62d
mov esi, dword [edi + 0x20]
test esi, esi
je 0x41c62d
lea ecx, [ebp - 0x10]
mov dword [eax + 0x5a64], 0
mov dword [ebp - 0x10], 0
call fcn.00408650
mov edx, 0x43eaa4
mov dword [ebp - 0x14], eax
mov ecx, esi
call fcn.0041ee20
mov esi, eax
test esi, esi
je 0x41c62d
push esi
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x14]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
mov edx, 6
mov ecx, edi
call fcn.0041c460
xor esi, esi
cmp dword [edi + 0x3e10], esi
jle 0x41c67a
mov eax, dword [edi + 0x3e18]
mov eax, dword [eax + esi*4]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x41c671
mov ecx, eax
call fcn.0041bba0
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c669
dec dword [eax + 0xac]
push dword [ebp - 0x14]
call ebx
add esp, 4
inc esi
cmp esi, dword [edi + 0x3e10]
jl 0x41c643
mov ecx, dword [edi + 0x3e18]
test ecx, ecx
je 0x41c6b7
mov eax, dword [0x461fe8]
mov dword [edi + 0x3e14], 0
mov dword [edi + 0x3e10], 0
test eax, eax
je 0x41c6a7
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3e18], 0
mov ecx, dword [edi + 0x3e24]
test ecx, ecx
je 0x41c6f4
mov eax, dword [0x461fe8]
mov dword [edi + 0x3e20], 0
mov dword [edi + 0x3e1c], 0
test eax, eax
je 0x41c6e4
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3e24], 0
mov ecx, dword [edi + 0x3e30]
test ecx, ecx
je 0x41c731
mov eax, dword [0x461fe8]
mov dword [edi + 0x3e2c], 0
mov dword [edi + 0x3e28], 0
test eax, eax
je 0x41c721
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3e30], 0
mov dword [edi + 0x3e58], 0
mov ecx, dword [edi + 0x3e3c]
test ecx, ecx
je 0x41c778
mov eax, dword [0x461fe8]
mov dword [edi + 0x3e38], 0
mov dword [edi + 0x3e34], 0
test eax, eax
je 0x41c768
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3e3c], 0
mov ecx, dword [edi + 0x3e48]
test ecx, ecx
je 0x41c7b5
mov eax, dword [0x461fe8]
mov dword [edi + 0x3e44], 0
mov dword [edi + 0x3e40], 0
test eax, eax
je 0x41c7a5
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3e48], 0
lea ecx, [edi + 0x4570]
mov dword [edi + 0x47d8], 0
mov dword [edi + 0x3e60], 0
mov dword [edi + 0x3e5c], 0
mov dword [edi + 0x3ed4], 0
mov dword [edi + 0x3ec0], 0
mov dword [edi + 0x3e64], 0
call fcn.00401920
mov ecx, dword [edi + 0x4770]
test ecx, ecx
je 0x41c839
mov eax, dword [0x461fe8]
mov dword [edi + 0x476c], 0
mov dword [edi + 0x4768], 0
test eax, eax
je 0x41c829
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4770], 0
mov ecx, dword [edi + 0x477c]
test ecx, ecx
je 0x41c876
mov eax, dword [0x461fe8]
mov dword [edi + 0x4778], 0
mov dword [edi + 0x4774], 0
test eax, eax
je 0x41c866
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x477c], 0
mov ecx, dword [edi + 0x4788]
test ecx, ecx
je 0x41c8b3
mov eax, dword [0x461fe8]
mov dword [edi + 0x4784], 0
mov dword [edi + 0x4780], 0
test eax, eax
je 0x41c8a3
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4788], 0
mov ecx, dword [edi + 0x47b8]
test ecx, ecx
je 0x41c8f0
mov eax, dword [0x461fe8]
mov dword [edi + 0x47b4], 0
mov dword [edi + 0x47b0], 0
test eax, eax
je 0x41c8e0
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x47b8], 0
mov ecx, dword [edi + 0x47c4]
test ecx, ecx
je 0x41c92d
mov eax, dword [0x461fe8]
mov dword [edi + 0x47c0], 0
mov dword [edi + 0x47bc], 0
test eax, eax
je 0x41c91d
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x47c4], 0
xor ecx, ecx
mov dword [ebp - 0x10], ecx
cmp dword [edi + 0x47cc], ecx
jle 0x41c9ed
nop
mov eax, dword [edi + 0x47d4]
mov esi, dword [eax + ecx*4]
test esi, esi
je 0x41c9dd
mov dword [ebp - 4], 4
mov eax, dword [esi + 0x30]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x41c980
mov ecx, eax
call fcn.004016a0
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c978
dec dword [eax + 0xac]
push dword [ebp - 0x14]
call ebx
add esp, 4
mov eax, dword [esi + 0x34]
mov dword [ebp - 0x14], eax
test eax, eax
je 0x41c9a8
mov ecx, eax
call fcn.004016a0
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c9a0
dec dword [eax + 0xac]
push dword [ebp - 0x14]
call ebx
add esp, 4
push 0x4032c0
push 2
push 0xc
lea eax, [esi + 0x64]
mov byte [ebp - 4], 5
push eax
call fcn.004063c4
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x461fe8]
test eax, eax
je 0x41c9d4
dec dword [eax + 0xac]
push esi
call ebx
mov ecx, dword [ebp - 0x10]
add esp, 4
inc ecx
mov dword [ebp - 0x10], ecx
cmp ecx, dword [edi + 0x47cc]
jl 0x41c940
mov ecx, dword [edi + 0x47d4]
test ecx, ecx
je 0x41ca2a
mov eax, dword [0x461fe8]
mov dword [edi + 0x47d0], 0
mov dword [edi + 0x47cc], 0
test eax, eax
je 0x41ca1a
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x47d4], 0
lea ecx, [edi + 0x4a60]
call fcn.00403310
mov ecx, dword [edi + 0x4a88]
test ecx, ecx
je 0x41ca72
mov eax, dword [0x461fe8]
mov dword [edi + 0x4a84], 0
mov dword [edi + 0x4a80], 0
test eax, eax
je 0x41ca62
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4a88], 0
mov ecx, dword [edi + 0x4a94]
test ecx, ecx
je 0x41caaf
mov eax, dword [0x461fe8]
mov dword [edi + 0x4a90], 0
mov dword [edi + 0x4a8c], 0
test eax, eax
je 0x41ca9f
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4a94], 0
xor esi, esi
cmp dword [edi + 0x4a04], esi
jle 0x41cafc
xor ecx, ecx
mov dword [ebp - 0x10], ecx
nop
mov eax, dword [edi + 0x4a0c]
mov edx, dword [eax + ecx + 0x18]
test edx, edx
je 0x41cae6
mov eax, dword [0x461fe8]
test eax, eax
je 0x41cadd
dec dword [eax + 0xac]
push edx
call ebx
mov ecx, dword [ebp - 0x10]
add esp, 4
mov dword [ebp - 4], 0xffffffff
inc esi
add ecx, 0x1c
mov dword [ebp - 0x10], ecx
cmp esi, dword [edi + 0x4a04]
jl 0x41cac0
mov ecx, dword [edi + 0x4a0c]
test ecx, ecx
je 0x41cb39
mov eax, dword [0x461fe8]
mov dword [edi + 0x4a08], 0
mov dword [edi + 0x4a04], 0
test eax, eax
je 0x41cb29
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4a0c], 0
lea ecx, [edi + 0x4a24]
call fcn.004034b0
cmp dword [edi + 0x4a18], 0
mov dword [ebp - 0x10], 0
jle 0x41cbb2
xor ecx, ecx
mov dword [ebp - 0x14], ecx
nop dword [eax]
mov esi, dword [edi + 0x4a20]
add esi, ecx
lea ecx, [esi + 0x10]
mov dword [ebp - 4], 7
call fcn.0042ec60
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x41cb93
mov eax, dword [0x461fe8]
test eax, eax
je 0x41cb8d
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov ecx, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
add ecx, 0x68
mov eax, dword [ebp - 0x10]
inc eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], eax
cmp eax, dword [edi + 0x4a18]
jl 0x41cb60
mov ecx, dword [edi + 0x4a20]
test ecx, ecx
je 0x41cbef
mov eax, dword [0x461fe8]
mov dword [edi + 0x4a1c], 0
mov dword [edi + 0x4a18], 0
test eax, eax
je 0x41cbdf
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4a20], 0
mov ecx, dword [edi + 0x4a58]
test ecx, ecx
je 0x41cc2c
mov eax, dword [0x461fe8]
mov dword [edi + 0x4a54], 0
mov dword [edi + 0x4a50], 0
test eax, eax
je 0x41cc1c
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4a58], 0
mov ecx, dword [edi + 0x5a30]
test ecx, ecx
je 0x41cc69
mov eax, dword [0x461fe8]
mov dword [edi + 0x5a2c], 0
mov dword [edi + 0x5a28], 0
test eax, eax
je 0x41cc59
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5a30], 0
mov ecx, dword [edi + 0x5a3c]
test ecx, ecx
je 0x41cca6
mov eax, dword [0x461fe8]
mov dword [edi + 0x5a38], 0
mov dword [edi + 0x5a34], 0
test eax, eax
je 0x41cc96
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5a3c], 0
mov ecx, dword [edi + 0x4adc]
test ecx, ecx
je 0x41cce3
mov eax, dword [0x461fe8]
mov dword [edi + 0x4ad8], 0
mov dword [edi + 0x4ad4], 0
test eax, eax
je 0x41ccd3
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4adc], 0
mov ecx, dword [edi + 0x4ae8]
test ecx, ecx
je 0x41cd20
mov eax, dword [0x461fe8]
mov dword [edi + 0x4ae4], 0
mov dword [edi + 0x4ae0], 0
test eax, eax
je 0x41cd10
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4ae8], 0
mov ecx, dword [edi + 0x4af4]
test ecx, ecx
je 0x41cd5d
mov eax, dword [0x461fe8]
mov dword [edi + 0x4af0], 0
mov dword [edi + 0x4aec], 0
test eax, eax
je 0x41cd4d
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4af4], 0
mov dword [edi + 0x593c], 0
mov ecx, dword [edi + 0x5948]
test ecx, ecx
je 0x41cda4
mov eax, dword [0x461fe8]
mov dword [edi + 0x5944], 0
mov dword [edi + 0x5940], 0
test eax, eax
je 0x41cd94
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5948], 0
mov ecx, dword [edi + 0x5a88]
test ecx, ecx
je 0x41cde1
mov eax, dword [0x461fe8]
mov dword [edi + 0x5a84], 0
mov dword [edi + 0x5a80], 0
test eax, eax
je 0x41cdd1
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5a88], 0
mov ecx, dword [edi + 0x5a7c]
test ecx, ecx
je 0x41ce1e
mov eax, dword [0x461fe8]
mov dword [edi + 0x5a78], 0
mov dword [edi + 0x5a74], 0
test eax, eax
je 0x41ce0e
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5a7c], 0
cmp dword [edi + 0x5ad0], 0
je 0x41ce50
mov esi, dword [edi + 0x5ad0]
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp esi, eax
je 0x41ce46
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [edi + 0x5ad0], 0
mov ecx, dword [edi + 0x5adc]
test ecx, ecx
je 0x41ce8d
mov eax, dword [0x461fe8]
mov dword [edi + 0x5ad8], 0
mov dword [edi + 0x5ad4], 0
test eax, eax
je 0x41ce7d
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5adc], 0
mov ecx, dword [edi + 0x5b08]
test ecx, ecx
je 0x41ceca
mov eax, dword [0x461fe8]
mov dword [edi + 0x5b04], 0
mov dword [edi + 0x5b00], 0
test eax, eax
je 0x41ceba
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5b08], 0
mov ecx, dword [edi + 0x5b14]
test ecx, ecx
je 0x41cf07
mov eax, dword [0x461fe8]
mov dword [edi + 0x5b10], 0
mov dword [edi + 0x5b0c], 0
test eax, eax
je 0x41cef7
dec dword [eax + 0xac]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5b14], 0
mov dword [edi + 0x5b18], 0
mov byte [edi], 0
mov ecx, dword [ebp - 0xc]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret