Function at 0x41d0a0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xdc
push ebx
push esi
push edi
xor esi, esi
push esi
lea eax, [ebp - 0x18]
push eax
mov dword [ebp - 8], ecx
mov ecx, dword [ebp + 8]
push 0x44fc98
push ecx
mov dword [ebp - 0x18], esi
call fcn.00430350
mov edi, dword [ebp + 0x18]
add esp, 0x10
mov ebx, eax
mov dword [ebp - 0x1c], ebx
cmp edi, esi
je 0x41d0d8
mov dword [edi], esi
mov byte [ebp - 1], 1
mov dword [ebp - 0x24], esi
nop
xor esi, esi
mov dword [ebp - 0x20], esi
test ebx, ebx
je 0x41d2d6
lea ecx, [ecx]
mov edx, dword [ebp - 0x18]
mov ebx, dword [edx + esi*4]
push 0x5c
push 1
push ebx
mov dword [ebp + 8], ebx
call fcn.0041cdb0
add esp, 0xc
test al, al
jne 0x41d112
mov byte [ebp - 1], al
jmp 0x41d2c2
test esi, esi
je 0x41d166
test edi, edi
je 0x41d166
test ebx, ebx
je 0x41d151
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x41d123
sub eax, edx
inc eax
je 0x41d13d
push eax
mov eax, dword [edi]
push eax
call fcn.0043ad64
add esp, 8
mov dword [edi], eax
mov edx, dword [edi]
test edx, edx
je 0x41d160
mov ecx, ebx
mov al, byte [ecx]
mov byte [edx], al
inc ecx
inc edx
test al, al
jne 0x41d145
jmp 0x41d166
mov eax, dword [edi]
test eax, eax
je 0x41d160
push eax
call fcn.0043ac96
add esp, 4
mov dword [edi], 0
cmp byte [ebp + 0x14], 0
mov byte [ebp - 1], 0
mov eax, 0x44fa34
je 0x41d17a
mov eax, 0x44fc94
push eax
push ebx
call fcn.0043cc0b
mov esi, eax
add esp, 8
mov dword [ebp - 0xc], esi
test esi, esi
jne 0x41d395
lea ecx, [ebp - 0x64]
push ecx
push ebx
call fcn.0043bd23
add esp, 8
test eax, eax
jne 0x41d2c2
mov edx, dword [ebp - 8]
mov ecx, dword [edx + 0x30]
lea edx, [ebp - 0x14]
push edx
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov eax, dword [ecx]
mov eax, dword [eax + 0x18]
lea edx, [ebp - 0x10]
push edx
push ebx
call eax
test al, al
je 0x41d2c2
push str.PokerLab.exe
push ebx
call fcn.0043b2a0
add esp, 8
test eax, eax
je 0x41d1df
inc dword [ebp - 0x14]
mov ebx, dword [ebp + 0x10]
mov esi, dword [ebp - 0x14]
cmp esi, ebx
jne 0x41d2b6
mov edi, dword [ebp - 0x10]
lea ecx, [ebp - 0xbc]
push ecx
call fcn.004026c2
push esi
lea edx, [ebp - 0xbc]
push edi
push edx
call fcn.004026ed
lea eax, [ebp - 0xbc]
push eax
lea ecx, [ebp - 0x34]
push ecx
call fcn.00402795
push 0x20
lea edx, [ebp - 0xdc]
push edx
lea eax, [ebp - 0x34]
push 0x10
push eax
call fcn.00402525
lea ecx, [ebp - 0xbc]
push ecx
call fcn.004026c2
mov edx, dword [ebp + 0xc]
push ebx
push edx
lea eax, [ebp - 0xbc]
push eax
call fcn.004026ed
lea ecx, [ebp - 0xbc]
push ecx
lea edx, [ebp - 0x34]
push edx
call fcn.00402795
add esp, 0x40
push 0x20
lea eax, [ebp - 0x54]
push eax
lea ecx, [ebp - 0x34]
push 0x10
push ecx
call fcn.00402525
mov edx, dword [ebp - 0x10]
push edx
call fcn.0043ac96
add esp, 0x14
lea ecx, [ebp - 0xdc]
lea eax, [ebp - 0x54]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x41d2a4
test dl, dl
je 0x41d2a0
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x41d2a4
add eax, 2
add ecx, 2
test dl, dl
jne 0x41d284
xor eax, eax
jmp 0x41d2a9
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
je 0x41d3a7
mov edi, dword [ebp + 0x18]
jmp 0x41d2c2
mov eax, dword [ebp - 0x10]
push eax
call fcn.0043ac96
add esp, 4
mov esi, dword [ebp - 0x20]
mov ebx, dword [ebp - 0x1c]
inc esi
mov dword [ebp - 0x20], esi
cmp esi, ebx
jb 0x41d0f0
jmp 0x41d2dc
cmp byte [ebp - 1], 0
jne 0x41d2f7
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0xa
jb 0x41d0e0
mov esi, dword [ebp - 0xc]
mov ebx, dword [ebp - 8]
cmp byte [ebx + 0xa4], 0
je 0x41d336
mov eax, dword [ebx + 0x9c]
push eax
call fcn.0042ef90
mov ecx, dword [ebx + 0xa0]
push ecx
call fcn.0042ef90
mov edx, dword [ebx + 0x98]
mov byte [edx], 1
mov eax, dword [ebx + 0xa0]
push eax
call fcn.0042efb0
add esp, 0xc
test esi, esi
je 0x41d415
mov ebx, dword [ebp + 0xc]
xor edi, edi
cmp dword [ebp + 0x10], edi
jbe 0x41d3c9
lea esp, [esp]
mov ecx, dword [ebp - 8]
cmp byte [ecx + 0x8d], 0
je 0x41d364
push 0x32
call dword [sym.imp.KERNEL32.dll_Sleep]
mov esi, dword [ebp + 0x10]
sub esi, edi
cmp esi, 0x1000
jbe 0x41d376
mov esi, 0x1000
mov edx, dword [ebp - 0xc]
push edx
push esi
push 1
push ebx
call fcn.0043d6c5
add esp, 0x10
cmp eax, esi
jne 0x41d3c2
add edi, esi
add ebx, esi
cmp edi, dword [ebp + 0x10]
jb 0x41d350
jmp 0x41d3c6
push esi
call fcn.0043ce05
add esp, 4
mov byte [ebp - 1], 1
jmp 0x41d2fa
mov ecx, dword [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x18]
push edx
call fcn.0042fb80
add esp, 8
pop edi
pop esi
mov al, 1
pop ebx
mov esp, ebp
pop ebp
ret 0x14
mov byte [ebp - 1], 0
mov esi, dword [ebp - 0xc]
push esi
call fcn.0043ce78
push esi
call fcn.0043c7b7
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x64]
push eax
push esi
call fcn.0043bd23
add esp, 0x10
test eax, eax
jne 0x41d40f
mov eax, dword [ebp - 0x5e]
test eax, 0x4000
je 0x41d3fa
push 0x1ff
jmp 0x41d406
test eax, 0x8000
je 0x41d40f
push 0x1b6
push esi
call fcn.0044e26b
add esp, 8
mov edi, dword [ebp + 0x18]
mov ebx, dword [ebp - 8]
mov ecx, dword [ebx + 0xa0]
push ecx
call fcn.0042ef90
add esp, 4
cmp dword [ebx + 0x98], 0
je 0x41d43c
mov edx, dword [ebx + 0x9c]
push edx
call fcn.0042efb0
add esp, 4
mov eax, dword [ebx + 0xa0]
push eax
call fcn.0042efb0
mov ecx, dword [ebp - 0x1c]
push ecx
lea edx, [ebp - 0x18]
push edx
call fcn.0042fb80
mov bl, byte [ebp - 1]
add esp, 0xc
test bl, bl
jne 0x41d478
test edi, edi
je 0x41d478
mov eax, dword [edi]
test eax, eax
je 0x41d478
push eax
call fcn.0043ac96
add esp, 4
mov dword [edi], 0
pop edi
pop esi
mov al, bl
pop ebx
mov esp, ebp
pop ebp
ret 0x14