Function at 0x412742
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x416ae4
call fcn.00403780
push 0
push 0x416b4c
mov eax, dword [0x416ae4]
call fcn.004038a4
push eax
mov eax, 0x416ae4
call fcn.00403afc
push eax
mov eax, dword [0x416b5c]
push eax
call sub.kernel32.dll_WriteFile_1
mov eax, dword [0x416b5c]
push eax
call sub.kernel32.dll_CloseHandle_1
push 1
mov ecx, 0x413a60
mov edx, 0x412c34
mov eax, 0x80000002
call fcn.00406ffc
mov eax, edi
mov edx, 0x413a70
call fcn.00403780
mov eax, edi
mov edx, 0x413af0
call fcn.00403780
push 0xea60
call sub.kernel32.dll_Sleep
lea edx, [ebp - 0x120]
mov al, 1
call fcn.00405560
mov ecx, dword [ebp - 0x120]
mov eax, 0x416af8
mov edx, 0x413b74
call fcn.004038f0
mov eax, 7
call fcn.00402bf8
cmp eax, 5
ja case.default.0x4127ec
jmp dword [eax*4 + 0x4127f3]
lea edx, [ebp - 0x124]
mov eax, 0x413b88
call fcn.004063d8
mov edx, dword [ebp - 0x124]
mov eax, 0x416af4
call fcn.00403780
jmp 0x412900
lea edx, [ebp - 0x128]
mov eax, 0x413ba0
call fcn.004063d8
mov edx, dword [ebp - 0x128]
mov eax, 0x416af4
call fcn.00403780
jmp 0x412900
lea edx, [ebp - 0x12c]
mov eax, 0x413bb8
call fcn.004063d8
mov edx, dword [ebp - 0x12c]
mov eax, 0x416af4
call fcn.00403780
jmp 0x412900
lea edx, [ebp - 0x130]
mov eax, 0x413bd0
call fcn.004063d8
mov edx, dword [ebp - 0x130]
mov eax, 0x416af4
call fcn.00403780
jmp 0x412900
lea edx, [ebp - 0x134]
mov eax, 0x413be8
call fcn.004063d8
mov edx, dword [ebp - 0x134]
mov eax, 0x416af4
call fcn.00403780
jmp 0x412900
lea edx, [ebp - 0x138]
mov eax, 0x413c04
call fcn.004063d8
mov edx, dword [ebp - 0x138]
mov eax, 0x416af4
call fcn.00403780
jmp 0x412900
lea edx, [ebp - 0x13c]
mov eax, 0x413c1c
call fcn.004063d8
mov edx, dword [ebp - 0x13c]
mov eax, 0x416af4
call fcn.00403780
mov eax, edi
mov edx, 0x413af0
call fcn.00403780
mov eax, 7
call fcn.00402bf8
cmp eax, 5
ja case.default.0x41291f
jmp dword [eax*4 + 0x412926]
lea edx, [ebp - 0x140]
mov eax, 0x413c34
call fcn.004063d8
mov edx, dword [ebp - 0x140]
mov eax, 0x416af0
call fcn.00403780
jmp 0x412a33
lea edx, [ebp - 0x144]
mov eax, 0x413c50
call fcn.004063d8
mov edx, dword [ebp - 0x144]
mov eax, 0x416af0
call fcn.00403780
jmp 0x412a33
lea edx, [ebp - 0x148]
mov eax, 0x413c6c
call fcn.004063d8
mov edx, dword [ebp - 0x148]
mov eax, 0x416af0
call fcn.00403780
jmp 0x412a33
lea edx, [ebp - 0x14c]
mov eax, 0x413c88
call fcn.004063d8
mov edx, dword [ebp - 0x14c]
mov eax, 0x416af0
call fcn.00403780
jmp 0x412a33
lea edx, [ebp - 0x150]
mov eax, 0x413ca4
call fcn.004063d8
mov edx, dword [ebp - 0x150]
mov eax, 0x416af0
call fcn.00403780
jmp 0x412a33
lea edx, [ebp - 0x154]
mov eax, 0x413cbc
call fcn.004063d8
mov edx, dword [ebp - 0x154]
mov eax, 0x416af0
call fcn.00403780
jmp 0x412a33
lea edx, [ebp - 0x158]
mov eax, 0x413cd8
call fcn.004063d8
mov edx, dword [ebp - 0x158]
mov eax, 0x416af0
call fcn.00403780
mov ecx, 0x412d6c
lea eax, [ebp - 0x15c]
mov edx, dword [esi]
call fcn.004038f0
mov edx, dword [ebp - 0x15c]
mov eax, dword [0x416ad0]
call fcn.00410bc0
test al, al
je 0x412a7f
mov ecx, 0x412d80
lea eax, [ebp - 0x160]
mov edx, dword [esi]
call fcn.004038f0
mov edx, dword [ebp - 0x160]
mov eax, dword [0x416ad4]
call fcn.00410bc0
test al, al
jne 0x412a89
call fcn.00413d64
jmp 0x412b92
call fcn.004065ec
mov ecx, 0x412d6c
lea eax, [ebp - 0x164]
mov edx, dword [esi]
call fcn.004038f0
mov eax, dword [ebp - 0x164]
call fcn.0040caf0
test al, al
je 0x412ad1
mov ecx, 0x412d80
lea eax, [ebp - 0x168]
mov edx, dword [esi]
call fcn.004038f0
mov eax, dword [ebp - 0x168]
call fcn.0040caf0
jmp 0x412b92
call fcn.004065ec
mov ecx, 0x412d6c
lea eax, [ebp - 0x16c]
mov edx, dword [esi]
call fcn.004038f0
mov eax, dword [ebp - 0x16c]
call fcn.0040caf0
test al, al
je 0x412b16
mov ecx, 0x412d80
lea eax, [ebp - 0x170]
mov edx, dword [esi]
call fcn.004038f0
mov eax, dword [ebp - 0x170]
call fcn.0040caf0
jmp 0x412b92
call fcn.004065ec
mov ecx, 0x412d6c
lea eax, [ebp - 0x174]
mov edx, dword [esi]
call fcn.004038f0
mov eax, dword [ebp - 0x174]
call fcn.0040caf0
test al, al
je 0x412b5b
mov ecx, 0x412d80
lea eax, [ebp - 0x178]
mov edx, dword [esi]
call fcn.004038f0
mov eax, dword [ebp - 0x178]
call fcn.0040caf0
jmp 0x412b92
call fcn.004065ec
call fcn.0040d8e4
test al, al
jne 0x412b92
call fcn.004065ec
call fcn.0040e0f8
test al, al
jne 0x412b92
call fcn.0040d8e4
mov eax, 0x413cf4
call fcn.00413eb4
mov eax, edi
mov edx, 0x413d0c
call fcn.00403780
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x412bb7
lea eax, [ebp - 0x178]
mov edx, 0x5e
call fcn.00403750
ret