Function at 0x403190
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x40
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x24]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.00402980
mov eax, dword [ebp - 0x1c]
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0x40000000
call dword [sym.imp.KERNEL32.dll_CreateFileA]
sub esp, 0x1c
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x30], 0x42d4a67a
lea esi, [ebp - 0x2c]
mov edi, 0x827b13cd
mov ebx, 0xe503ec4
jmp 0x403240
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x30], 0x8a7738aa
nop
nop
nop
nop
mov eax, dword [ebp - 0x30]
cmp eax, 0x7727419e
jg 0x403270
cmp eax, 0x8a7738a9
jg 0x403280
cmp eax, 0x81bb728a
jne 0x403240
mov dword [ebp - 0x30], 0x486850c
jmp 0x403240
cmp eax, 0x7727419f
jne 0x403240
jmp 0x403226
cmp eax, 0xa09f145c
jg 0x403297
cmp eax, 0x8a7738aa
jne 0x403240
mov dword [ebp - 0x30], 0x64369d63
jmp 0x403240
cmp eax, 0xc6bc76ad
jg 0x4032b6
cmp eax, 0xa09f145d
jne 0x403240
cmp dword [ebp - 0x28], 0xffffffff
setne byte [ebp - 0xd]
mov dword [ebp - 0x30], 0x5fe30a1
jmp 0x403240
cmp eax, 0xc9e8322e
jg 0x4032d4
cmp eax, 0xc6bc76ae
jne 0x403240
mov dword [ebp - 0x30], 0x643d94b0
jmp 0x403240
cmp eax, 0xd4fd8d90
jg 0x403301
cmp eax, 0xc9e8322f
jne 0x403240
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x30], 0x7727419f
jmp 0x403240
cmp eax, 0xe77b2814
jg 0x403352
cmp eax, 0xd4fd8d91
jne 0x403240
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov dword [esp + 0xc], esi
mov dword [esp + 8], edx
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub esp, 0x14
test eax, eax
mov eax, 0x1a40fb73
je 0x40334a
mov eax, 0xf3dd675
mov dword [ebp - 0x30], eax
jmp 0x403240
cmp eax, 0xf137aa4e
jg 0x403370
cmp eax, 0xe77b2815
jne 0x403240
mov dword [ebp - 0x30], 0x643d94b0
jmp 0x403240
cmp eax, 0xf5251139
jg 0x4033a4
cmp eax, 0xf137aa4f
jne 0x403240
mov eax, dword [ebp - 0x2c]
add dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
add eax, edi
sub eax, dword [ebp - 0x2c]
add eax, 0x7d84ec33
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x30], 0xc6bc76ae
jmp 0x403240
cmp eax, 0xf664848e
jg 0x4033c9
cmp eax, 0xf525113a
jne 0x403240
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x30], 0x2f48da15
jmp 0x403240
cmp eax, 0x486850b
jg 0x4033e7
cmp eax, 0xf664848f
jne 0x403240
mov dword [ebp - 0x30], 0x174be432
jmp 0x403240
cmp eax, 0x5fe30a0
jg 0x403405
cmp eax, 0x486850c
jne 0x403240
mov dword [ebp - 0x30], 0xa09f145d
jmp 0x403240
cmp eax, 0xf3dd674
jg 0x403430
cmp eax, 0x5fe30a1
jne 0x403240
mov al, byte [ebp - 0xd]
test al, al
mov eax, 0x2ebcf804
jne 0x403428
mov eax, 0x64369d63
mov dword [ebp - 0x30], eax
jmp 0x403240
cmp eax, 0x174be431
jg 0x40344e
cmp eax, 0xf3dd675
jne 0x403240
mov dword [ebp - 0x30], 0xf137aa4f
jmp 0x403240
cmp eax, 0x1a40fb72
jg 0x403474
cmp eax, 0x174be432
jne 0x403240
cmp dword [ebp - 0x28], 0xffffffff
setne byte [ebp - 0xe]
mov dword [ebp - 0x30], 0x4c5d37cc
jmp 0x403240
cmp eax, 0x1d9b9167
jg 0x403492
cmp eax, 0x1a40fb73
jne 0x403240
mov dword [ebp - 0x30], 0x486850c
jmp 0x403240
cmp eax, 0x1ebb3c5a
jg 0x4034bf
cmp eax, 0x1d9b9168
jne 0x403240
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [ebp - 0x30], 0xf525113a
jmp 0x403240
cmp eax, 0x2ebcf803
jg 0x4034dd
cmp eax, 0x1ebb3c5b
jne 0x403240
mov dword [ebp - 0x30], 0xa09f145d
jmp 0x403240
cmp eax, 0x2f48da14
jg 0x4034fb
cmp eax, 0x2ebcf804
jne 0x403240
mov dword [ebp - 0x30], 0x7727419f
jmp 0x403240
cmp eax, 0x42d4a679
jg 0x403512
cmp eax, 0x2f48da15
jne 0x403240
jmp 0x4035ed
cmp eax, 0x4c5d37cb
jg 0x40353e
cmp eax, 0x42d4a67a
jne 0x403240
mov eax, dword [ebp - 0x14]
cmp eax, 0xffffffff
mov eax, 0x81bb728a
je 0x403536
mov eax, 0xe77b2815
mov dword [ebp - 0x30], eax
jmp 0x403240
cmp eax, 0x4fd9824c
jg 0x403569
cmp eax, 0x4c5d37cc
jne 0x403240
mov al, byte [ebp - 0xe]
test al, al
mov eax, 0x1d9b9168
jne 0x403561
mov eax, 0xf525113a
mov dword [ebp - 0x30], eax
jmp 0x403240
cmp eax, 0x5df97237
jg 0x40359d
cmp eax, 0x4fd9824d
jne 0x403240
mov eax, dword [ebp - 0x2c]
add dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x24]
add eax, ebx
sub eax, dword [ebp - 0x2c]
add eax, 0xf1afc13c
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x30], 0xf137aa4f
jmp 0x403240
cmp eax, 0x5df97238
je 0x4035be
cmp eax, 0x64369d63
jne 0x4035ca
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x30], 0x2f48da15
jmp 0x403240
mov dword [ebp - 0x30], 0x174be432
jmp 0x403240
cmp eax, 0x643d94b0
jne 0x403240
cmp dword [ebp - 0x24], 0
mov eax, 0xd4fd8d91
jne 0x4035e5
mov eax, 0x5df97238
mov dword [ebp - 0x30], eax
jmp 0x403240
mov eax, dword [ebp - 0x18]
add esp, 0x40
pop esi
pop edi
pop ebx
pop ebp
ret