Function at 0x418500
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
movsx eax, byte [str.browser_fix]
cmp eax, 0x2a
je 0x41852a
movsx ecx, byte [str.http:__www.startpage24.com_browser_fix]
cmp ecx, 0x2a
je 0x41852a
movzx edx, byte [0x423aa8]
cmp edx, 0x2a
jne 0x418531
xor eax, eax
jmp 0x41872d
push 0
push 0x10000000
push 2
push 0
push 1
push 0x40000000
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0xffffffff
jne 0x41855d
xor eax, eax
jmp 0x41872d
mov dword [ebp - 0xc], 0
push 0
lea ecx, [ebp - 0xc]
push ecx
push str.browser_fix
call fcn.00404700
add esp, 4
push eax
push str.browser_fix
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0xc]
push eax
push 1
push 0x41fe10
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0xc]
push edx
push str.http:__www.startpage24.com_browser_fix
call fcn.00404700
add esp, 4
push eax
push str.http:__www.startpage24.com_browser_fix
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0xc]
push ecx
push 1
push 0x41fe14
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx eax, byte [str.4D828B08D6D94FCE8C715371FBB752D6]
cmp eax, 0x2a
je 0x418635
push 0
lea ecx, [ebp - 0xc]
push ecx
push 4
push str.IID
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0xc]
push eax
push str.4D828B08D6D94FCE8C715371FBB752D6
call fcn.00404700
add esp, 4
push eax
push str.4D828B08D6D94FCE8C715371FBB752D6
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0xc]
push edx
push 1
push 0x41fe20
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx ecx, byte [str.BF2014]
cmp ecx, 0x2a
je 0x418692
push 0
lea edx, [ebp - 0xc]
push edx
push 4
push str.AID
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0xc]
push ecx
push str.BF2014
call fcn.00404700
add esp, 4
push eax
push str.BF2014
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0xc]
push eax
push 1
push 0x41fe2c
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx edx, byte [str.browser_fix_de]
cmp edx, 0x2a
je 0x4186ef
push 0
lea eax, [ebp - 0xc]
push eax
push 4
push str.CID
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0xc]
push edx
push str.browser_fix_de
call fcn.00404700
add esp, 4
push eax
push str.browser_fix_de
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0xc]
push ecx
push 1
push 0x41fe38
mov edx, dword [ebp - 4]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
call fcn.00418400
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x41871e
push 0
lea eax, [ebp - 0xc]
push eax
mov ecx, dword [ebp - 8]
push ecx
call fcn.00404700
add esp, 4
push eax
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 4]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [ebp - 4]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov esp, ebp
pop ebp
ret