Function at 0x404520
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffe98
mov eax, 0x49149c
call fcn.00482f64
mov dword [ebp - 0x3c], 2
lea edx, [ebp + 0x14]
lea eax, [ebp + 0x14]
call fcn.0048e610
inc dword [ebp - 0x3c]
mov word [ebp - 0x48], 8
lea edx, [ebp + 0x10]
lea eax, [ebp + 0x10]
call fcn.0048e610
inc dword [ebp - 0x3c]
mov dl, 1
mov eax, dword [0x426c10]
call fcn.00426d10
mov dword [ebp - 0x5c], eax
mov word [ebp - 0x48], 0x14
lea eax, [ebp - 4]
call fcn.00401790
inc dword [ebp - 0x3c]
mov word [ebp - 0x48], 8
push 0x104
lea edx, [ebp - 0x168]
push edx
push str._etc_paths_smb_flags
mov ecx, dword [ebp + 0xc]
push dword [ecx + 0x430]
call fcn.00409810
add esp, 0x10
mov word [ebp - 0x48], 0x20
lea eax, [ebp - 8]
call fcn.00401790
inc dword [ebp - 0x3c]
mov word [ebp - 0x48], 8
mov edx, closesocket
mov eax, dword [ebp - 0x5c]
call fcn.0048e5c8
mov word [ebp - 0x48], 0x2c
mov edx, 0x490955
lea eax, [ebp - 0xc]
call fcn.0048e5d8
inc dword [ebp - 0x3c]
mov edx, dword [eax]
mov cl, 1
mov eax, dword [ebp - 0x5c]
call fcn.00426e14
dec dword [ebp - 0x3c]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.0048e738
mov word [ebp - 0x48], 0x38
lea eax, [ebp - 0x14]
call fcn.00401790
push eax
inc dword [ebp - 0x3c]
mov edx, 0x490965
lea eax, [ebp - 0x10]
call fcn.0048e5d8
inc dword [ebp - 0x3c]
mov edx, dword [eax]
mov eax, dword [ebp - 0x5c]
pop ecx
call fcn.00426fdc
lea edx, [ebp - 0x14]
lea eax, [ebp - 8]
call fcn.0048e768
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x14]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x10]
mov edx, 2
call fcn.0048e738
mov eax, dword [ebp - 0x5c]
call fcn.00426d80
mov word [ebp - 0x48], 0x44
lea eax, [ebp - 0x18]
call fcn.00401790
mov ecx, eax
inc dword [ebp - 0x3c]
lea edx, [ebp - 8]
mov eax, 0x490968
call fcn.0048ea54
lea edx, [ebp - 0x18]
push edx
lea eax, [ebp - 0x20]
call fcn.00401790
push eax
inc dword [ebp - 0x3c]
lea edx, [ebp - 0x168]
lea eax, [ebp - 0x1c]
call fcn.0048e5d8
inc dword [ebp - 0x3c]
lea edx, [ebp - 0x1c]
pop ecx
pop eax
call fcn.0048e790
lea edx, [ebp - 0x20]
push edx
lea eax, [ebp - 0x28]
call fcn.00401790
push eax
inc dword [ebp - 0x3c]
mov edx, 0x49096b
lea eax, [ebp - 0x24]
call fcn.0048e5d8
inc dword [ebp - 0x3c]
lea edx, [ebp - 0x24]
pop ecx
pop eax
call fcn.0048e790
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x2c]
call fcn.00401790
mov ecx, eax
inc dword [ebp - 0x3c]
lea edx, [ebp + 0x10]
pop eax
call fcn.0048e790
lea edx, [ebp - 0x2c]
lea eax, [ebp - 4]
call fcn.0048e768
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x28]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x24]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x20]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x1c]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 0x18]
mov edx, 2
call fcn.0048e738
push 0
push 0x8000080
push 2
push 0
push 1
push 0x40000000
lea eax, [ebp - 4]
call fcn.00402094
push eax
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x60], 0xffffffff
jne 0x4047f1
mov word [ebp - 0x48], 0x50
lea edx, [ebp - 4]
mov eax, dword [ebp + 8]
call fcn.0048e768
mov eax, dword [ebp + 8]
mov word [ebp - 0x48], 0x5c
push eax
dec dword [ebp - 0x3c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0048e738
pop eax
mov word [ebp - 0x48], 0x50
inc dword [ebp - 0x3c]
mov edx, dword [ebp - 0x58]
mov dword fs:[0], edx
jmp 0x4048c1
lea eax, [ebp + 0x14]
call fcn.004020c4
test al, al
jne 0x40481d
push 0
lea edx, [ebp - 0x64]
push edx
lea eax, [ebp + 0x14]
call fcn.004048c8
push eax
lea eax, [ebp + 0x14]
call fcn.00402094
push eax
push dword [ebp - 0x60]
call sub.KERNEL32.DLL_WriteFile
push dword [ebp - 0x60]
call sub.KERNEL32.DLL_CloseHandle
mov edx, dword [ebp - 0x5c]
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0
je 0x404852
mov ecx, dword [ebp - 0x34]
mov eax, dword [ecx]
mov dword [ebp - 0x30], eax
mov word [ebp - 0x48], 0x74
mov edx, 3
mov eax, dword [ebp - 0x34]
mov ecx, dword [eax]
call dword [ecx - 4]
mov word [ebp - 0x48], 0x68
mov word [ebp - 0x48], 0x80
lea edx, [ebp - 4]
mov eax, dword [ebp + 8]
call fcn.0048e768
mov eax, dword [ebp + 8]
mov word [ebp - 0x48], 0x8c
push eax
dec dword [ebp - 0x3c]
lea eax, [ebp - 8]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp - 4]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp + 0x10]
mov edx, 2
call fcn.0048e738
dec dword [ebp - 0x3c]
lea eax, [ebp + 0x14]
mov edx, 2
call fcn.0048e738
pop eax
mov word [ebp - 0x48], 0x80
inc dword [ebp - 0x3c]
mov edx, dword [ebp - 0x58]
mov dword fs:[0], edx
mov esp, ebp
pop ebp
ret