Function at 0x4140b2
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34c
cmp dword [ebp + 8], 0
je 0x414153
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x204]
push ecx
call fcn.004202d0
add esp, 8
push 0x534114
lea edx, [ebp - 0x204]
push edx
call fcn.004202e0
add esp, 8
lea eax, [ebp - 0x348]
push eax
lea ecx, [ebp - 0x204]
push ecx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
je 0x414153
push 0
push 0x5c3120
lea edx, [ebp - 0x204]
push edx
call fcn.00408b26
add esp, 0xc
test eax, eax
jne 0x414142
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
push 0x4000c
call fcn.00406ccc
add esp, 4
or eax, 0xffffffff
jmp 0x41424b
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_FindClose]
xor eax, eax
jmp 0x41424b
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [0x5c2a24], eax
cmp dword [0x5c2a24], 0xffffffff
jne 0x414192
push 0x40003
call fcn.00406ccc
add esp, 4
or eax, 0xffffffff
jmp 0x41424b
cmp dword [ebp + 0x10], 3
jne 0x4141c1
push 0
lea eax, [ebp - 0x208]
push eax
call fcn.00408a2e
push eax
push str.__HASP_Hardlock_USB_driver_r_n__Copyright__c__2001_Aladdin_Knowledge_Systems_r_n_r_n_Version__r_nsignature__CHICAGO___r_nProvider_Fast__r_n_LayoutFileLAYOUT.INF_r_nClassUSB_r_nClassGuid36fc9e60_c465_11cf_8056_444553540000_r_nCatalogFileaksusb.cat__________new_catalog_file_name_r_nDriverVer10_20_2001_1.28_______new_DriverVer_directive_r_n_r_n__Table_of_Contents_r_n_Manufacturer__r_n_FastMfg_Aladdin_r_n_r_n_ControlFlags__r_nExcludeFromSelect.NTx86_r_n_r_n_Aladdin__r_n_USBVID_0529PID_0001.DeviceDesc_aksusb__USBVID_0529PID_0001__USB_Protection_Device_r_n_r_n___r_n___Windows_9x_r_n___r_n_aksusb__r_nAddRegaksusb.AddReg_r_nCopyFilesaksusb.CopyList.W9X_r_n_r_n_aksusb.CopyList.W9x__r_naksusb.sys___0x0000022_r_n_r_n_r_n___r_n___NT_5.0_r_n___r_n_aksusb.NT__r_nAddRegaksusb.AddReg.NT_r_nCopyFilesaksusb.CopyList.NT_r_n_r_n_aksusb.CopyList.NT__r_naksusb.sys___0x00000022_r_n_r_n_aksusb.NT.Services__r_nAddServiceaksusb_0x02_aksusb.addservices_r_n_r_n_______________________________________________________________________________r_n___aksusb_Parameters_r_n_______________________________________________________________________________r_n___r_n___Windows_9x_parameters_r_n___r_n_r_n_aksusb.AddReg__r_nHKR__DevLoader__ntkern_r_nHKR__NTMPDriver__aksusb.sys_r_n_HKR__MyLittleTag__MyEntryInTheRegistry_r_n_r_n_r_n___r_n___NT_5.0_r_n___r_n_r_n_aksusb.AddReg.NT__r_n_BUGBUG:_PropPageProvider_stuff_not_enabled_for_setupapi_yet__r_nHKR__EnumPropPages32___sysclass.dll_USBEnumPropPages__r_n_r_n_aksusb.addservices__r_nDisplayName______svcdesc__r_nServiceType_____1_t_t_SERVICE_KERNEL_DRIVER_r_nStartType_______3_t_t_SERVICE_AUTO_START_r_nErrorControl____1_t_t_SERVICE_ERROR_NORMAL_r_nServiceBinary____12__aksusb.sys_r_nLoadOrderGroup__Base_r_n_r_n_r_n___r_n___common_definitions_r_n___r_n_r_n___r_n___Destination_Directory_r_n___r_n_DestinationDirs__r_naksusb.CopyList.NT___________10_System32Drivers_r_n_r_nDefaultDestDir_______________12__________LDID_SYS_r_naksusb.CopyList.W9x__________10_System32Drivers_r_n_r_n___r_n___Source_Files_r_n___r_n_sourcedisksnames__r_n1_INSTDISK_______r_n_r_n_SourceDisksFiles__r_naksusb.sys1_r_n_r_n_r_n_r_n_r_n_Strings__r_nFast_Aladdin_Knowledge_Systems__r_nFastMfg_Aladdin_Knowledge_Systems__r_nsvcdesc_Aladdin_USB_Key__r_nINSTDISK_Aladdin_Install_Disk__r_nUSBVID_0529PID_0001.DeviceDesc_Aladdin_USB_Key__r_n_r_n
mov ecx, dword [0x5c2a24]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x34c], eax
jmp 0x4141e7
push 0
lea edx, [ebp - 0x208]
push edx
call fcn.00408a19
push eax
push str.___Id:_aksusb.inf_v_1.4.2.2_2002_10_30_19:36:09_chris_Exp___r_n__r_n__INF_File_for_USB_Hardlock_r_n_____________________________r_n__r_n___c__Copyright_1997_1998_by_Aladdin_Knowledge_Systems_r_n__r_n___Revision:_1.4.2.2___r_n___Date:_2002_10_30_19:36:09___r_n___Author:_chris___r_n__r_n___Log:_aksusb.inf_v___r_n__Revision_1.4.2.2__2002_10_30_19:36:09__chris_r_n__removed_CopyFiles_entries_r_n__r_n__Revision_1.4.2.1__2002_10_30_12:16:50__chris_r_n__merge_with_HEAD_as_of_30_oct_2002_r_n__r_n__Revision_1.5__2002_08_26_16:56:36__gerhard_r_n__start_value_set_to_3_r_n__r_n__Revision_1.11__2002_08_26_12:15:33__horatiu_r_n__bugfix:_StartType_is_3_for_Win2K_r_n__r_n__Revision_1.10__2000_11_22_15:29:40__Horatiu_r_n__removed_Horg__signing_lines_r_n__r_n__r_n__Revision_1.9__2000_11_22_15:28:17__Horatiu_r_n__add_changes_required_for_signing_as_comments___lines_are_marked__r_n__with__Horg___signing.__r_n___r_n__Revision_1.8__1998_05_13_15:33:50__chris_r_n__removed_hardlock.vxd_entries_r_n___r_n__Revision_1.7__1998_03_11_14:00:26__chris_r_n__usbpd____aksusb_name_change_r_n__r_n__Revision_1.6__1998_03_09_13:31:01__chris_r_n__added_NT_5_Beta_support_r_n__r_n__Revision_1.5__1998_03_06_13:08:59__chris_r_n__added_hardlock.vxd_to_copylist_r_n__r_n_r_n_Version__r_nsignature__CHICAGO___r_nProvider_Fast__r_nLayoutFileLAYOUT.INF_r_nClassUSB_r_n_r_n__Table_of_Contents_r_n_Manufacturer__r_n_FastMfg_Aladdin_r_n_r_n_PreCopySection__r_nHKR__NoSetupUI__1_r_n_r_n_DestinationDirs__r_naksusb.CopyList__10_system32drivers_r_naksusb.CopyList.NT__10_system32drivers_r_n_DefaultDestDir10_system32drivers_r_n_r_n_Aladdin__r_n_USBVID_0529PID_0001.DeviceDesc_aksusb__USBVID_0529PID_0001__USB_Protection_Device_r_n_r_n_NODRIVER__r_n_r_n_ControlFlags__r_nExcludeFromSelectUSBVID_0529PID_0001_r_n_r_n_aksusb__r_n__CopyFilesaksusb.CopyList_r_nAddRegaksusb.AddReg_r_n_r_n_aksusb.NT__r_n__CopyFilesaksusb.CopyList.NT_r_nAddRegaksusb.AddReg.NT_r_n_r_n_aksusb.AddReg__r_nHKR__DevLoader__ntkern_r_nHKR__NTMPDriver__aksusb.sys_r_n_HKR__MyLittleTag__MyEntryInTheRegistry_r_n_r_n_aksusb.AddReg.NT__r_n_BUGBUG:_PropPageProvider_stuff_not_enabled_for_setupapi_yet__r_nHKR__EnumPropPages32___sysclass.dll_USBEnumPropPages__r_n_r_n_aksusb.CopyList__r_naksusb.sys_r_n_r_n_aksusb.CopyList.NT__r_naksusb.sys_r_n_r_n_aksusb.NT.Services__r_nAddServiceaksusb_0x02_aksusb.addservices_r_n_r_n_aksusb.addservices__r_nDisplayName______svcdesc__r_nServiceType_____1_t_t_SERVICE_KERNEL_DRIVER_r_nStartType_______3_t_t_SERVICE_AUTO_START_r_nErrorControl____1_t_t_SERVICE_ERROR_NORMAL_r_nServiceBinary____12__aksusb.sys_r_nLoadOrderGroup__Base_r_n_r_n_Strings__r_nFast_Aladdin_Knowledge_Systems__r_nFastMfg_Aladdin_Knowledge_Systems__r_nsvcdesc_Aladdin_USB_Key__r_nUSBVID_0529PID_0001.DeviceDesc_Aladdin_USB_Key__r_n_r_n
mov eax, dword [0x5c2a24]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
jne 0x41420f
mov ecx, dword [0x5c2a24]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40004
call fcn.00406ccc
add esp, 4
or eax, 0xffffffff
jmp 0x41424b
mov edx, dword [0x5c2a24]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x34c], eax
cmp dword [ebp - 0x34c], 0
jne 0x414249
mov eax, dword [0x5c2a24]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x40005
call fcn.00406ccc
add esp, 4
or eax, 0xffffffff
jmp 0x41424b
xor eax, eax
mov esp, ebp
pop ebp
ret