Function at 0x404de0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x5c
mov edi, dword [esp + 0x74]
mov dword [esp], 0
test edi, edi
je 0x404f48
mov edx, dword [esp + 0x78]
test edx, edx
jne 0x404e05
mov edx, dword [edi + 0x10]
mov ebx, dword [esp + 0x70]
xor eax, eax
test edx, edx
je 0x404fd7
mov ecx, dword [edi + 0x14]
and ecx, 2
jne 0x404fd7
cmp byte [edx], 0
je 0x404fd7
mov eax, esp
lea ecx, [esp + 4]
push eax
push ecx
push edx
push ebx
mov ebp, edx
call fcn.00447ef0
add esp, 0x10
mov esi, eax
test eax, eax
jne 0x404fbf
mov dword [esp + 0xc], ebp
push dword [esp + 4]
push 1
push 0x6f
push str._Your_HSTS_cache._https:__curl.se_docs_hsts.html_n_This_file_was_generated_by_libcurl__Edit_at_your_own_risk._n
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
push edi
call fcn.00405aa0
add esp, 4
mov dword [esp + 8], 0
test eax, eax
je 0x404f5b
mov esi, eax
jmp 0x404eb0
cmp byte [edi + 0x14], 0
mov eax, 0x9f6b9e
mov ecx, 0x9f6b9c
cmovne eax, ecx
push str.unlimited
push dword [edi + 0x10]
push eax
push str._s_s___s__n
push ebx
call fcn.0040b510
add esp, 0x14
test esi, esi
je 0x404f53
push esi
call fcn.00405ac0
add esp, 4
mov edi, eax
push esi
call fcn.00405ad0
add esp, 4
mov esi, eax
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x1c]
mov edx, ecx
mov ebx, 0x7fffffff
xor edx, ebx
mov ebx, eax
mov ebp, 0xffffffff
xor ebx, ebp
or ebx, edx
mov ebx, dword [esp + 4]
je 0x404e80
lea edx, [esp + 0x18]
push edx
push ecx
push eax
call fcn.00413280
add esp, 0xc
test eax, eax
jne 0x404f4f
cmp byte [edi + 0x14], 0
mov eax, 0x9f6b9e
mov ecx, 0x9f6b9c
cmovne eax, ecx
mov ecx, dword [esp + 0x2c]
mov edx, 0x76c
add ecx, edx
mov edx, dword [esp + 0x28]
inc edx
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x30]
push edx
push ecx
push dword [edi + 0x10]
push eax
push str._s_s___d_02d_02d__02d:_02d:_02d__n
push ebx
call fcn.0040b510
add esp, 0x28
test esi, esi
jne 0x404eb0
jmp 0x404f53
xor eax, eax
jmp 0x405113
mov dword [esp + 8], eax
mov ebx, dword [esp + 0x70]
mov edi, dword [esp + 0x74]
push str.hsts.c
push 0x182
push dword [esp + 0xc]
call fcn.00406350
add esp, 0xc
mov ecx, dword [esp + 8]
test ecx, ecx
sete dl
mov eax, dword [esp]
test eax, eax
setne dh
and dh, dl
cmp dh, 1
jne 0x404fa3
push dword [esp + 0xc]
push eax
call fcn.00414d20
add esp, 8
test eax, eax
mov ecx, 0x17
cmove ecx, eax
mov eax, dword [esp]
test ecx, ecx
setne dl
test eax, eax
setne dh
and dh, dl
mov esi, ecx
cmp dh, 1
jne 0x404fbf
push eax
call sub.api_ms_win_crt_filesystem_l1_1_0.dll__unlink
add esp, 4
push str.hsts.c
push 0x189
push dword [esp + 8]
call fcn.00405f90
add esp, 0xc
mov eax, esi
cmp dword [ebx + 0x1c8], 0
je 0x405113
push edi
mov esi, edi
mov edi, eax
call fcn.00405ab0
add esp, 4
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], 0
push esi
call fcn.00405aa0
add esp, 4
mov esi, eax
mov eax, edi
test esi, esi
je 0x405113
nop word cs:[eax + eax]
push esi
call fcn.00405ac0
add esp, 4
mov edi, eax
push esi
call fcn.00405ad0
add esp, 4
mov esi, eax
mov eax, dword [edi + 0x10]
mov dword [esp + 0x3c], eax
push eax
call sub.api_ms_win_crt_string_l1_1_0.dll_strlen
add esp, 4
mov dword [esp + 0x40], eax
movzx eax, byte [edi + 0x14]
mov dword [esp + 0x44], eax
mov eax, dword [edi + 0x18]
mov ecx, dword [edi + 0x1c]
mov edx, ecx
mov edi, 0x7fffffff
xor edx, edi
mov edi, eax
mov ebp, 0xffffffff
xor edi, ebp
or edi, edx
jne 0x405090
lea eax, [esp + 0x48]
mov word [eax + 8], 0x64
mov dword [eax + 4], 0x6574696d
mov dword [eax], 0x696c6e75
jmp 0x4050d9
lea edx, [esp + 0x18]
push edx
push ecx
push eax
call fcn.00413280
add esp, 0xc
test eax, eax
jne 0x405113
mov eax, dword [esp + 0x2c]
mov ecx, 0x76c
add eax, ecx
mov ecx, dword [esp + 0x28]
inc ecx
push dword [esp + 0x18]
push dword [esp + 0x20]
push dword [esp + 0x28]
push dword [esp + 0x30]
push ecx
push eax
push str._d_02d_02d__02d:_02d:_02d
push 0x12
lea eax, [esp + 0x68]
push eax
call fcn.0040b350
add esp, 0x24
push dword [ebx + 0x1cc]
lea eax, [esp + 0x14]
push eax
lea eax, [esp + 0x44]
push eax
push ebx
call dword [ebx + 0x1c8]
add esp, 0x10
cmp eax, 2
je 0x40510e
mov ecx, eax
xor eax, eax
test ecx, ecx
jne 0x405113
inc dword [esp + 0x10]
test esi, esi
jne 0x405020
jmp 0x405113
mov eax, 0x2b
add esp, 0x5c
pop esi
pop edi
pop ebx
pop ebp
ret