Function at 0x413ae0
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x45d6ec
mov eax, dword fs:[0]
push eax
sub esp, 0x480
mov eax, dword [0x4713c0]
xor eax, esp
mov dword [esp + 0x478], eax
push ebx
push ebp
push esi
push edi
mov eax, dword [0x4713c0]
xor eax, esp
push eax
lea eax, [esp + 0x494]
mov dword fs:[0], eax
mov eax, dword [esp + 0x4a4]
mov dword [esp + 0x18], eax
xor edi, edi
mov ebx, 7
mov eax, 0x475174
mov dword [esp + 0x6c], ebx
mov dword [esp + 0x68], edi
mov word [esp + 0x58], di
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x413b42
sub eax, edx
sar eax, 1
push eax
push 0x475174
lea esi, [esp + 0x5c]
call fcn.00406f80
mov dword [esp + 0x49c], edi
mov eax, 0x47537c
mov dword [esp + 0x50], ebx
mov dword [esp + 0x4c], edi
mov word [esp + 0x3c], di
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x413b80
sub eax, edx
sar eax, 1
push eax
push 0x47537c
lea esi, [esp + 0x40]
call fcn.00406f80
lea ecx, [esp + 0x54]
push ecx
mov edx, esi
push edx
mov byte [esp + 0x4a4], 1
call fcn.00420510
mov ebx, 8
add esp, 8
cmp dword [esp + 0x50], ebx
mov ebp, eax
jb 0x413bd0
mov eax, dword [esp + 0x3c]
push eax
call fcn.004415cb
add esp, 4
mov esi, 7
mov dword [esp + 0x49c], 0xffffffff
cmp dword [esp + 0x6c], ebx
mov dword [esp + 0x50], esi
mov dword [esp + 0x4c], edi
mov word [esp + 0x3c], di
jb 0x413c00
mov ecx, dword [esp + 0x58]
push ecx
call fcn.004415cb
add esp, 4
push ebp
push str.nErrCode___d__r_n
lea edx, [esp + 0x94]
push 0x200
push edx
call fcn.004414db
add esp, 0x10
lea ecx, [esp + 0x70]
mov word [esp + 0x48a], di
call fcn.0042bd40
mov dword [esp + 0x49c], 2
lea eax, [esp + 0x8c]
mov dword [esp + 0x34], esi
mov dword [esp + 0x30], edi
mov word [esp + 0x20], di
lea edx, [eax + 2]
mov edi, edi
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x413c50
sub eax, edx
sar eax, 1
push eax
lea eax, [esp + 0x90]
push eax
lea esi, [esp + 0x24]
call fcn.00406f80
mov ecx, esi
push edi
push ecx
or eax, 0xffffffff
lea esi, [esp + 0x78]
mov byte [esp + 0x4a4], 3
call fcn.00406df0
cmp dword [esp + 0x34], ebx
jb 0x413c9c
mov edx, dword [esp + 0x20]
push edx
call fcn.004415cb
add esp, 4
cmp dword [esp + 0x88], ebx
mov edx, dword [esp + 0x74]
mov dword [esp + 0x34], 7
mov dword [esp + 0x30], edi
mov word [esp + 0x20], di
jae 0x413cbe
lea edx, [esp + 0x74]
mov ebx, dword [0x474bb0]
cmp ebx, edi
je 0x413cfa
mov eax, edx
lea esi, [eax + 2]
lea ecx, [ecx]
mov cx, word [eax]
add eax, 2
cmp cx, di
jne 0x413cd0
sub eax, esi
sar eax, 1
push ebx
add eax, eax
push eax
push 1
push edx
call fcn.004422ed
mov ecx, dword [0x474bb0]
push ecx
call fcn.004428a9
add esp, 0x14
mov dword [esp + 0x49c], 0xffffffff
cmp dword [esp + 0x88], 8
jb 0x413d1c
mov edx, dword [esp + 0x74]
push edx
call fcn.004415cb
add esp, 4
lea eax, [ebp - 1]
cmp eax, 5
mov dword [esp + 0x88], 7
mov dword [esp + 0x84], edi
mov word [esp + 0x74], di
ja case.default.0x413d3b
jmp dword [eax*4 + 0x413dbc]
mov eax, dword [esp + 0x18]
push 0x10
push 0x462334
push eax
push ecx
call fcn.00406c70
add esp, 4
mov ecx, 0x463cb0
mov edx, eax
call fcn.00410000
xor eax, eax
jmp 0x413d91
mov ecx, dword [esp + 0x18]
push 0x10
push 0x462334
push ecx
push ecx
call fcn.00406c70
add esp, 4
mov ecx, 0x463cf8
mov edx, eax
call fcn.00410000
xor eax, eax
jmp 0x413d91
mov eax, 1
mov ecx, dword [esp + 0x494]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x478]
xor ecx, esp
call fcn.004414cc
add esp, 0x48c
ret