Function at 0x4184e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
movsx eax, byte [str.browser_fix]
cmp eax, 0x2a
je 0x41850a
movsx ecx, byte [str.http:__www.startpage24.com_browser_fix]
cmp ecx, 0x2a
je 0x41850a
movzx edx, byte [0x423aa8]
cmp edx, 0x2a
jne 0x418511
xor eax, eax
jmp 0x41870d
push 0
push 0x10000000
push 2
push 0
push 1
push 0x40000000
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x41853d
xor eax, eax
jmp 0x41870d
mov dword [ebp - 0xc], 0
push 0
lea ecx, [ebp - 0xc]
push ecx
push str.browser_fix
call fcn.00404700
add esp, 4
push eax
push str.browser_fix
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0xc]
push eax
push 1
push 0x41fdfc
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0xc]
push edx
push str.http:__www.startpage24.com_browser_fix
call fcn.00404700
add esp, 4
push eax
push str.http:__www.startpage24.com_browser_fix
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0xc]
push ecx
push 1
push 0x41fe00
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx eax, byte [str.863B6CE5C772481689158A60E2FAEB43]
cmp eax, 0x2a
je 0x418615
push 0
lea ecx, [ebp - 0xc]
push ecx
push 4
push str.IID
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0xc]
push eax
push str.863B6CE5C772481689158A60E2FAEB43
call fcn.00404700
add esp, 4
push eax
push str.863B6CE5C772481689158A60E2FAEB43
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0xc]
push edx
push 1
push 0x41fe0c
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx ecx, byte [str.BF2012]
cmp ecx, 0x2a
je 0x418672
push 0
lea edx, [ebp - 0xc]
push edx
push 4
push str.AID
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0xc]
push ecx
push str.BF2012
call fcn.00404700
add esp, 4
push eax
push str.BF2012
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0xc]
push eax
push 1
push 0x41fe18
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx edx, byte [str.browser_fix_de]
cmp edx, 0x2a
je 0x4186cf
push 0
lea eax, [ebp - 0xc]
push eax
push 4
push str.CID
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0xc]
push edx
push str.browser_fix_de
call fcn.00404700
add esp, 4
push eax
push str.browser_fix_de
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0xc]
push ecx
push 1
push 0x41fe24
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.004183e0
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x4186fe
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.00404700
add esp, 4
push eax
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov esp, ebp
pop ebp
ret