Function at 0x41e260
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x490660
mov eax, dword fs:[0]
push eax
sub esp, 0x310
mov eax, dword [0x4ad658]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov edi, ecx
mov dword [ebp - 0x314], edi
mov ebx, edx
mov dword [ebp - 0x318], eax
call fcn.00437300
lea ecx, [ebp - 0x30c]
push ecx
call fcn.00439a90
lea edx, [ebp - 0x13c]
push str.app
push edx
mov dword [ebp - 4], 0
call fcn.0040e540
lea eax, [ebp - 0x30c]
push eax
lea ecx, [ebp - 0x30]
push ecx
mov ecx, ebx
mov byte [ebp - 4], 1
call fcn.00437a40
add esp, 0x10
mov ecx, eax
lea eax, [ebp - 0x13c]
lea esi, [ebp - 0x120]
mov byte [ebp - 4], 2
call fcn.00414430
mov byte [ebp - 4], 4
cmp dword [ebp - 0x1c], 0x10
jb 0x41e310
mov edx, dword [ebp - 0x30]
push edx
call fcn.00464d3e
add esp, 4
xor eax, eax
mov dword [ebp - 0x20], eax
mov byte [ebp - 0x30], al
lea eax, [ebp - 0x104]
push str.actionusrlog
push eax
lea ebx, [ebp - 0x120]
mov dword [ebp - 0x1c], 0xf
call fcn.0040e540
lea ecx, [ebp - 0x104]
push ecx
lea edx, [ebp - 0xe8]
push 0x4afbf4
push edx
mov byte [ebp - 4], 5
call fcn.0041ed20
add esp, 0x14
xor eax, eax
mov ecx, 0xf
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xbc], eax
mov byte [ebp - 0xcc], al
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x9c], eax
mov byte [ebp - 0xac], al
mov dword [ebp - 0x8c], 3
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x90], eax
mov byte [ebp - 4], 7
push 0x21
mov dword [ebp - 0x38], ecx
push str.application_x_www_form_urlencoded
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x3c], eax
mov byte [ebp - 0x4c], al
call fcn.00412da0
mov edx, edi
lea edi, [ebp - 0x68]
mov byte [ebp - 4], 8
call fcn.0043b8a0
push eax
mov eax, str.logdata
lea esi, [ebp - 0x30]
mov byte [ebp - 4], 9
call fcn.0041ede0
add esp, 4
mov byte [ebp - 4], 0xa
push eax
lea edi, [ebp - 0x4c]
lea ebx, [ebp - 0xe8]
lea esi, [ebp - 0xcc]
mov dword [ebp - 0x90], 1
call fcn.0043b1d0
mov edi, 0x10
mov byte [ebp - 0x30d], al
cmp dword [ebp - 0x1c], edi
jb 0x41e41a
mov eax, dword [ebp - 0x30]
push eax
call fcn.00464d3e
add esp, 4
xor ebx, ebx
mov esi, 0xf
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
cmp dword [ebp - 0x54], edi
jb 0x41e43b
mov ecx, dword [ebp - 0x68]
push ecx
call fcn.00464d3e
add esp, 4
mov byte [ebp - 4], 7
mov dword [ebp - 0x54], esi
mov dword [ebp - 0x58], ebx
mov byte [ebp - 0x68], bl
cmp dword [ebp - 0x38], edi
jb 0x41e459
mov edx, dword [ebp - 0x4c]
push edx
call fcn.00464d3e
add esp, 4
cmp byte [ebp - 0x30d], bl
je 0x41e49a
lea ecx, [ebp - 0x84]
lea eax, [ebp - 0xcc]
call fcn.0043b220
mov ecx, dword [ebp - 0x318]
push eax
mov byte [ebp - 4], 0xb
call fcn.00412930
mov byte [ebp - 4], 7
cmp dword [ebp - 0x70], edi
jb 0x41e49a
mov eax, dword [ebp - 0x84]
push eax
call fcn.00464d3e
add esp, 4
cmp byte [0x4b5ccd], bl
je 0x41e7c5
push 8
push str.http.dat
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], ebx
mov byte [ebp - 0x30], bl
call fcn.00412da0
mov byte [ebp - 4], 0xc
push 4
push str.root
lea ecx, [ebp - 0x4c]
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
call fcn.00412da0
lea eax, [ebp - 0x84]
mov byte [ebp - 4], 0xd
call fcn.00439220
push eax
mov edx, 0x499ec4
lea esi, [ebp - 0x1c8]
mov byte [ebp - 4], 0xe
call fcn.0040e9f0
add esp, 4
mov ecx, eax
lea eax, [ebp - 0xe8]
lea esi, [ebp - 0x21c]
mov byte [ebp - 4], 0xf
call fcn.00414430
push eax
mov edx, 0x499ec0
lea esi, [ebp - 0x174]
mov byte [ebp - 4], 0x10
call fcn.0040e9f0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x314]
lea esi, [ebp - 0x190]
mov byte [ebp - 4], 0x11
call fcn.00414430
push eax
mov edx, 0x499ec0
lea esi, [ebp - 0x200]
mov byte [ebp - 4], 0x12
call fcn.0040e9f0
add esp, 4
mov ecx, eax
mov eax, dword [ebp - 0x318]
lea esi, [ebp - 0x1ac]
mov byte [ebp - 4], 0x13
call fcn.00414430
push eax
mov edx, str._r_n_r_n
lea esi, [ebp - 0x1e4]
mov byte [ebp - 4], 0x14
call fcn.0040e9f0
add esp, 4
mov dword [ebp - 0x314], eax
lea ecx, [ebp - 0x30]
push ecx
push ecx
mov byte [ebp - 4], 0x15
call fcn.00459080
add esp, 4
lea edi, [ebp - 0x4c]
lea esi, [ebp - 0x158]
mov ebx, eax
call fcn.00459150
mov byte [ebp - 4], 0x16
push eax
lea esi, [ebp - 0x68]
call fcn.00457d90
mov esi, 0x10
add esp, 4
cmp dword [eax + 0x14], esi
jb 0x41e5d1
mov eax, dword [eax]
push 0x49aefc
push eax
call fcn.00468de4
mov edi, eax
xor ebx, ebx
add esp, 8
cmp edi, ebx
je 0x41e60a
mov eax, dword [ebp - 0x314]
mov ecx, dword [eax + 0x10]
cmp dword [eax + 0x14], esi
jb 0x41e5f7
mov eax, dword [eax]
push edi
push ecx
push 1
push eax
call fcn.004659a3
push edi
call fcn.00465a8a
add esp, 0x14
cmp dword [ebp - 0x54], esi
jb 0x41e61b
mov edx, dword [ebp - 0x68]
push edx
call fcn.00464d3e
add esp, 4
mov edi, 0xf
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x58], ebx
mov byte [ebp - 0x68], bl
cmp dword [ebp - 0x144], esi
jb 0x41e640
mov eax, dword [ebp - 0x158]
push eax
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x144], edi
mov dword [ebp - 0x148], ebx
mov byte [ebp - 0x158], bl
cmp dword [ebp - 0x1d0], esi
jb 0x41e669
mov ecx, dword [ebp - 0x1e4]
push ecx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x1d0], edi
mov dword [ebp - 0x1d4], ebx
mov byte [ebp - 0x1e4], bl
cmp dword [ebp - 0x198], esi
jb 0x41e692
mov edx, dword [ebp - 0x1ac]
push edx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x198], edi
mov dword [ebp - 0x19c], ebx
mov byte [ebp - 0x1ac], bl
cmp dword [ebp - 0x1ec], esi
jb 0x41e6bb
mov eax, dword [ebp - 0x200]
push eax
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x1ec], edi
mov dword [ebp - 0x1f0], ebx
mov byte [ebp - 0x200], bl
cmp dword [ebp - 0x17c], esi
jb 0x41e6e4
mov ecx, dword [ebp - 0x190]
push ecx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x17c], edi
mov dword [ebp - 0x180], ebx
mov byte [ebp - 0x190], bl
cmp dword [ebp - 0x160], esi
jb 0x41e70d
mov edx, dword [ebp - 0x174]
push edx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x160], edi
mov dword [ebp - 0x164], ebx
mov byte [ebp - 0x174], bl
cmp dword [ebp - 0x208], esi
jb 0x41e736
mov eax, dword [ebp - 0x21c]
push eax
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x208], edi
mov dword [ebp - 0x20c], ebx
mov byte [ebp - 0x21c], bl
cmp dword [ebp - 0x1b4], esi
jb 0x41e75f
mov ecx, dword [ebp - 0x1c8]
push ecx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x1b4], edi
mov dword [ebp - 0x1b8], ebx
mov byte [ebp - 0x1c8], bl
cmp dword [ebp - 0x70], esi
jb 0x41e785
mov edx, dword [ebp - 0x84]
push edx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x70], edi
mov dword [ebp - 0x74], ebx
mov byte [ebp - 0x84], bl
cmp dword [ebp - 0x38], esi
jb 0x41e7a2
mov eax, dword [ebp - 0x4c]
push eax
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x3c], ebx
mov byte [ebp - 0x4c], bl
cmp dword [ebp - 0x1c], esi
jb 0x41e7bc
mov ecx, dword [ebp - 0x30]
push ecx
call fcn.00464d3e
add esp, 4
mov esi, edi
mov edi, 0x10
xor ebx, ebx
cmp dword [ebp - 0x98], edi
jb 0x41e7dc
mov edx, dword [ebp - 0xac]
push edx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x9c], ebx
mov byte [ebp - 0xac], bl
cmp dword [ebp - 0xb8], edi
jb 0x41e805
mov eax, dword [ebp - 0xcc]
push eax
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0xb8], esi
mov dword [ebp - 0xbc], ebx
mov byte [ebp - 0xcc], bl
cmp dword [ebp - 0xd4], edi
jb 0x41e82e
mov ecx, dword [ebp - 0xe8]
push ecx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0xd4], esi
mov dword [ebp - 0xd8], ebx
mov byte [ebp - 0xe8], bl
cmp dword [ebp - 0xf0], edi
jb 0x41e857
mov edx, dword [ebp - 0x104]
push edx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0xf0], esi
mov dword [ebp - 0xf4], ebx
mov byte [ebp - 0x104], bl
cmp dword [ebp - 0x10c], edi
jb 0x41e880
mov eax, dword [ebp - 0x120]
push eax
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x10c], esi
mov dword [ebp - 0x110], ebx
mov byte [ebp - 0x120], bl
cmp dword [ebp - 0x128], edi
jb 0x41e8a9
mov ecx, dword [ebp - 0x13c]
push ecx
call fcn.00464d3e
add esp, 4
mov dword [ebp - 0x128], esi
lea esi, [ebp - 0x30c]
mov dword [ebp - 0x12c], ebx
mov byte [ebp - 0x13c], bl
call fcn.00439be0
mov al, byte [ebp - 0x30d]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00464d49
mov esp, ebp
pop ebp
ret