Function at 0x413280
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffea4
mov eax, 0x4d33d0
call fcn.004becc8
mov dword [ebp - 0x34], 2
lea edx, [ebp + 0x14]
lea eax, [ebp + 0x14]
call fcn.004cb99c
inc dword [ebp - 0x34]
mov word [ebp - 0x40], 8
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x10]
call fcn.004cb99c
inc dword [ebp - 0x34]
mov word [ebp - 0x40], 0x14
lea eax, [ebp - 4]
call fcn.00401df0
inc dword [ebp - 0x34]
mov word [ebp - 0x40], 8
push 0x104
lea edx, [ebp - 0x15c]
push edx
push 0x4d1b7b
mov ecx, dword [ebp + 0xc]
push dword [ecx + 0x9fc]
call fcn.0042e8cc
add esp, 0x10
mov word [ebp - 0x40], 0x20
lea eax, [ebp - 8]
call fcn.00401df0
inc dword [ebp - 0x34]
mov word [ebp - 0x40], 8
mov edx, closesocket
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x9e0]
call fcn.004cb8c8
mov word [ebp - 0x40], 0x2c
mov edx, 0x4d1b90
lea eax, [ebp - 0xc]
call fcn.004cb964
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov cl, 1
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 0x9e0]
call fcn.004a8e34
dec dword [ebp - 0x34]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.004cbb38
mov word [ebp - 0x40], 0x38
lea eax, [ebp - 0x14]
call fcn.00401df0
push eax
inc dword [ebp - 0x34]
mov edx, 0x4d1ba0
lea eax, [ebp - 0x10]
call fcn.004cb964
inc dword [ebp - 0x34]
mov edx, dword [eax]
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x9e0]
pop ecx
call fcn.004a8ffc
lea edx, [ebp - 0x14]
lea eax, [ebp - 8]
call fcn.004cbb68
dec dword [ebp - 0x34]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.004cbb38
mov ecx, dword [ebp + 0xc]
mov eax, dword [ecx + 0x9e0]
call fcn.004a8da0
mov word [ebp - 0x40], 0x44
lea eax, [ebp - 0x18]
call fcn.00401df0
mov ecx, eax
inc dword [ebp - 0x34]
lea edx, [ebp - 8]
mov eax, 0x4d1ba3
call fcn.004cbf90
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x20]
call fcn.00401df0
push eax
inc dword [ebp - 0x34]
lea edx, [ebp - 0x15c]
lea eax, [ebp - 0x1c]
call fcn.004cb964
inc dword [ebp - 0x34]
lea edx, [ebp - 0x1c]
pop ecx
pop eax
call fcn.004cbb90
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x28]
call fcn.00401df0
push eax
inc dword [ebp - 0x34]
mov edx, 0x4d1ba6
lea eax, [ebp - 0x24]
call fcn.004cb964
inc dword [ebp - 0x34]
lea edx, [ebp - 0x24]
pop ecx
pop eax
call fcn.004cbb90
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x2c]
call fcn.00401df0
mov ecx, eax
inc dword [ebp - 0x34]
lea edx, [ebp + 0x10]
pop eax
call fcn.004cbb90
lea edx, [ebp - 0x2c]
lea eax, [ebp - 4]
call fcn.004cbb68
dec dword [ebp - 0x34]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.004cbb38
push 0
push 0x8000080
push 2
push 0
push 1
push 0x40000000
lea eax, [ebp - 4]
call fcn.00401e20
push eax
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0xffffffff
jne 0x41355a
mov word [ebp - 0x40], 0x50
lea edx, [ebp - 4]
mov eax, dword [ebp + 8]
call fcn.004cbb68
mov eax, dword [ebp + 8]
mov word [ebp - 0x40], 0x5c
push eax
dec dword [ebp - 0x34]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.004cbb38
pop eax
mov word [ebp - 0x40], 0x50
inc dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
mov dword fs:[0], edx
jmp 0x4135fd
lea eax, [ebp + 0x14]
call fcn.004082bc
test al, al
jne 0x413586
push 0
lea edx, [ebp - 0x58]
push edx
lea eax, [ebp + 0x14]
call fcn.0040c3b8
push eax
lea eax, [ebp + 0x14]
call fcn.00401e20
push eax
push dword [ebp - 0x54]
call sub.KERNEL32.DLL_WriteFile
push dword [ebp - 0x54]
call sub.KERNEL32.DLL_CloseHandle
mov word [ebp - 0x40], 0x68
lea edx, [ebp - 4]
mov eax, dword [ebp + 8]
call fcn.004cbb68
mov eax, dword [ebp + 8]
mov word [ebp - 0x40], 0x74
push eax
dec dword [ebp - 0x34]
lea eax, [ebp - 8]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp - 4]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.004cbb38
dec dword [ebp - 0x34]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.004cbb38
pop eax
mov word [ebp - 0x40], 0x68
inc dword [ebp - 0x34]
mov edx, dword [ebp - 0x50]
mov dword fs:[0], edx
mov esp, ebp
pop ebp
ret