Function at 0x41a4e4
Capabilities:
Write file on windows

Disassembly:
push 0x64
mov eax, 0x432b46
call fcn.004318dd
sub esp, 0x18
mov dword [ebp - 4], 1
mov ecx, esp
mov dword [ebp - 0x60], esp
mov esi, 0x404e48
push esi
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 2
mov ecx, esp
mov edi, 0x404f58
push edi
call fcn.0041314d
push 0x25e
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 1
call fcn.00412723
mov byte [ebp - 4], 3
cmp dword [ebp + 0x1c], 8
mov eax, dword [ebp + 8]
jae 0x41a53f
lea eax, [ebp + 8]
push eax
sub esp, 0x18
mov ecx, esp
push 0x404df8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
mov eax, dword [ebp + 8]
add esp, 0x20
cmp dword [ebp + 0x1c], 8
jae 0x41a567
lea eax, [ebp + 8]
push 0
push 0
push 2
push 0
push 3
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x41a5fc
push 0x404e2c
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x6c], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x60], esp
push esi
call fcn.0041314d
push 0x26b
sub esp, 0x18
mov byte [ebp - 4], 5
mov ecx, esp
push edi
call fcn.0041314d
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 3
push eax
call fcn.004125b8
add esp, 0x54
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test esi, esi
jg 0x41a5e1
mov edi, esi
jmp 0x41a5ea
movzx edi, si
or edi, 0x80070000
test esi, esi
jne 0x41a769
mov esi, 0x404e48
mov edi, 0x404f58
mov dword [ebp - 0x64], ebx
mov byte [ebp - 4], 7
cmp dword [ebp + 0x34], 8
mov eax, dword [ebp + 0x30]
lea ecx, [eax*2 + 2]
mov eax, dword [ebp + 0x20]
jae 0x41a619
lea eax, [ebp + 0x20]
push 0
lea edx, [ebp - 0x70]
push edx
push ecx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x41a73a
push 0x404e60
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x6c], esp
push 0x404ef0
call fcn.0041314d
sub esp, 0x18
mov byte [ebp - 4], 8
mov ecx, esp
mov dword [ebp - 0x60], esp
push esi
call fcn.0041314d
push 0x274
sub esp, 0x18
mov byte [ebp - 4], 9
mov ecx, esp
push edi
call fcn.0041314d
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 7
push eax
call fcn.004125b8
add esp, 0x54
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
test edi, edi
jg 0x41a68d
mov esi, edi
jmp 0x41a696
movzx esi, di
or esi, 0x80070000
test edi, edi
je 0x41a73a
push 0x404e60
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
push edi
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x5c]
mov edx, esi
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x5c]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0x60], esi
jmp 0x41a800
push ebx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [ebp - 0x44]
call fcn.004127db
push 0
push 1
lea ecx, [ebp + 8]
call fcn.00413b40
push 0
push 1
lea ecx, [ebp + 0x20]
call fcn.00413b40
call fcn.0043188c
ret 0x30
push 0x404e2c
sub esp, 0x18
mov ecx, esp
push 0x4050c8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
push esi
sub esp, 0x18
mov ecx, esp
push 0x405104
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
lea ecx, [ebp - 0x5c]
mov edx, edi
call fcn.00412874
mov ecx, eax
mov byte [ebp - 4], 6
call fcn.00413833
push eax
sub esp, 0x18
mov ecx, esp
push 0x403c6c
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x20
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x5c]
call fcn.00413b89
sub esp, 0x18
mov ecx, esp
push 0x403bd8
call fcn.0041314d
lea eax, [ebp - 0x44]
push eax
call fcn.004124a5
add esp, 0x1c
mov dword [ebp - 0x60], edi
push 0x4394e4
lea eax, [ebp - 0x60]
push eax
call sub.msvcrt.dll__CxxThrowException
int3