Function at 0x408210
Capabilities:
Delete file
Write file on windows

Disassembly:
sub esp, 0x228
push ebx
push ebp
push esi
xor ebp, ebp
push 0x43832c
push 0x44234c
xor bl, bl
mov dword [esp + 0x20], ebp
mov dword [esp + 0x1c], ebp
call fcn.00422230
push 0x4362c0
push str.FontSize
push ebp
push str.ROCred
push ebp
push 0x44234c
call fcn.00421a60
push ebp
push 0x44234c
call fcn.00421e00
lea eax, [esp + 0x14]
lea ecx, [esp + 0x18]
push eax
push ecx
push str.CONFIG
push 0xa
push ebp
call fcn.00417e50
test eax, eax
je 0x408325
xor edx, edx
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1d], edx
lea eax, [esp + 0x24]
mov dword [esp + 0x21], edx
push eax
mov word [esp + 0x29], dx
push ecx
mov byte [esp + 0x2f], dl
mov edx, dword [esp + 0x1c]
push edx
mov byte [esp + 0x28], 0
call fcn.0041d7a0
test al, al
je 0x40830f
push 8
lea eax, [esp + 0x20]
push str.bvio:
push eax
call fcn.0040ea10
push 0x438304
push 0x44234c
call fcn.00422220
lea ecx, [esp + 0x1c]
push ecx
push 0x44234c
call fcn.00421f50
test al, al
je 0x4082ee
push ebp
push 0x408610
push 0x44234c
call fcn.004218d0
mov bl, 1
push 0x43832c
push 0x44234c
call fcn.00422220
lea edx, [esp + 0x24]
push edx
call fcn.0041d5d0
test bl, bl
jne 0x408422
push 0x44234c
call fcn.00422250
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x228
ret
lea eax, [esp + 0x14]
lea ecx, [esp + 0x18]
push eax
push ecx
push 0x4362a8
push 0xa
push ebp
call fcn.00417e50
test eax, eax
je 0x408422
lea edx, [esp + 0x130]
push 0x104
push edx
call fcn.00417bd0
test eax, eax
je 0x40840c
lea eax, [esp + 0x2c]
push 0x104
push eax
push ebp
lea ecx, [esp + 0x13c]
push str.rcd
push ecx
call fcn.004179e0
test eax, eax
je 0x40840c
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jne 0x40840c
push ebp
push ebp
push 3
push ebp
push ebp
lea edx, [esp + 0x40]
push 0xc0000000
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x4083fd
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
lea eax, [esp + 0xc]
push ebp
push eax
push ecx
push edx
push esi
mov dword [esp + 0x20], ebp
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
push esi
je 0x4083f7
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [esp + 0x2c]
push eax
push 0x44234c
call fcn.00421f50
test al, al
je 0x4083fd
push ebp
push 0x408610
push 0x44234c
call fcn.004218d0
mov bl, 1
jmp 0x4083fd
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea ecx, [esp + 0x2c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
test bl, bl
jne 0x408422
push 0x44234c
call fcn.00422250
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x228
ret
push 0x43629c
push ebp
push 0x104
push 0x442248
push ebp
call fcn.004177e0
test al, al
je 0x408460
push str.PolicyNoUserConfigList
call fcn.004081c0
add esp, 4
test al, al
je 0x4084de
push 0x442248
push 0x44234c
call fcn.00421f50
call fcn.00408650
test al, al
je 0x4084d2
lea edx, [esp + 0x130]
push 0x104
push edx
push 1
push ebp
push 0x43629c
push str.dev
call fcn.004173d0
mov esi, eax
cmp esi, 0xffffffff
je 0x4084d2
push 0x135
push 1
push 0xb
push 2
push str.__Elurair__Version__u._u._u._u_r_n__Developer_Configuration_Dump_r_n__r_n_r_n_________r_n_r_n
push esi
call fcn.00418210
add esp, 0x18
push esi
push 0x408670
push 0x44234c
call fcn.004218d0
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 1
push ebp
lea eax, [esp + 0x138]
push ebp
push eax
push ebp
push ebp
call fcn.00419ce0
pop esi
pop ebp
mov al, 1
pop ebx
add esp, 0x228
ret
xor edx, edx
push edi
mov dword [esp + 0x24], edx
lea eax, [esp + 0x20]
mov dword [esp + 0x28], edx
push 0x43832c
push eax
xor bl, bl
mov dword [esp + 0x18], ebp
mov dword [esp + 0x28], ebp
mov dword [esp + 0x34], edx
call fcn.00422230
lea ecx, [esp + 0x20]
push 0x442248
push ecx
call fcn.00421f50
push str.PolicyNoUserConfigList
call fcn.00408150
mov edx, eax
or ecx, 0xffffffff
mov edi, edx
xor eax, eax
repne scasb al, byte es:[edi]
lea eax, [esp + 0x10]
not ecx
push eax
push ecx
push edx
call fcn.004238e0
test al, al
je 0x4085dd
mov edx, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push ebp
push ecx
push ebp
push ebp
push 0x3b
push edx
mov dword [esp + 0x2c], ebp
call fcn.0040eab0
mov eax, dword [esp + 0x14]
lea ecx, [eax*4]
push ecx
call fcn.004233b0
mov edi, eax
cmp edi, ebp
je 0x4085cf
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x14]
push ebp
push edx
push eax
push edi
push 0x3b
push ecx
call fcn.0040eab0
test al, al
je 0x4085c9
mov eax, dword [esp + 0x14]
xor esi, esi
cmp eax, ebp
jbe 0x4085b8
mov eax, dword [edi + esi*4]
cmp byte [eax], 0x5f
je 0x4085af
push eax
push ebp
push str.ROCred
lea edx, [esp + 0x2c]
push ebp
push edx
call fcn.00421d30
mov eax, dword [esp + 0x14]
inc esi
cmp esi, eax
jb 0x408595
lea eax, [esp + 0x20]
push eax
push 0x44234c
call fcn.00421d90
mov bl, al
push edi
call fcn.00423880
mov eax, dword [esp + 0x10]
mov dword [esp + 0x10], ebp
push eax
call fcn.00423880
lea ecx, [esp + 0x20]
push ecx
call fcn.00422250
test bl, bl
pop edi
jne 0x408460
push 0x44234c
call fcn.00422250
pop esi
pop ebp
xor al, al
pop ebx
add esp, 0x228
ret