Function at 0x5df3d0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5f1133
mov eax, dword fs:[0]
push eax
mov eax, 0x10ec
call fcn.004ea880
mov eax, dword [0x704dd8]
xor eax, ebp
mov dword [ebp - 0x2c], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10c0], ecx
push 0
push 0
push 0
push 0
push 0
lea ecx, [ebp - 0x14]
call fcn.005dec80
mov dword [ebp - 4], 0
push 0xbb8
push 2
lea ecx, [ebp - 0x14]
call fcn.005dec40
push 5
push 3
lea ecx, [ebp - 0x14]
call fcn.005dec40
mov dword [ebp - 0x1060], 0
lea ecx, [ebp - 0x20]
call fcn.005de600
mov byte [ebp - 4], 1
mov ecx, dword [ebp + 0x10]
call fcn.00401780
push eax
lea ecx, [ebp - 0x1088]
call fcn.00401720
mov byte [ebp - 4], 2
lea eax, [ebp - 0x1088]
push eax
lea ecx, [ebp - 0x14]
call fcn.005de440
push eax
lea ecx, [ebp - 0x20]
call fcn.005deb30
movzx ecx, al
neg ecx
sbb ecx, ecx
add ecx, 1
mov byte [ebp - 0x1069], cl
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1088]
call fcn.00401760
movzx edx, byte [ebp - 0x1069]
test edx, edx
je 0x5df4d7
mov byte [ebp - 0x1089], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x1089]
jmp 0x5dfb4f
lea ecx, [ebp - 0x20]
call fcn.005de530
movzx eax, al
test eax, eax
je 0x5df550
mov ecx, dword [ebp - 0x10c0]
cmp dword [ecx], 0
je 0x5df523
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1090], esp
push 0x638bc4
call fcn.00401720
mov dword [ebp - 0x10c4], eax
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 0x1091], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x1091]
jmp 0x5dfb4f
lea ecx, [ebp - 0x20]
call fcn.005de4d0
mov dword [ebp - 0x1030], eax
cmp dword [ebp - 0x1030], 0
jne 0x5df5d1
mov ecx, dword [ebp - 0x10c0]
cmp dword [ecx], 0
je 0x5df5a4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x1098], esp
push 0x638bd4
call fcn.00401720
mov dword [ebp - 0x10c8], eax
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 0x1099], 0
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x1099]
jmp 0x5dfb4f
mov ecx, dword [ebp - 0x10c0]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x10c0]
cmp dword [eax], 0
je 0x5df67a
sub esp, 8
fldz
fstp qword [esp]
push 0
push 0
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [ebp - 0x1030]
push ecx
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 4]
call eax
mov ecx, dword [ebp - 0x28]
push ecx
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 8]
call eax
sub esp, 8
fldz
fstp qword [esp]
push 0
mov ecx, dword [ebp - 0x1030]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x10c0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 0xc]
call eax
mov dword [ebp - 0x24], 0
mov byte [ebp - 0x102c], 0
push 0xfff
push 0
lea ecx, [ebp - 0x102b]
push ecx
call fcn.004e9ba0
add esp, 0xc
mov edx, dword [ebp - 0x1030]
xor eax, eax
push eax
push edx
lea ecx, [ebp - 0x105c]
call fcn.004027a0
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x105c]
call fcn.00402810
mov ecx, dword [ebp - 0x1030]
xor esi, esi
mov dword [ebp - 0x10d0], eax
mov dword [ebp - 0x10cc], edx
mov dword [ebp - 0x10d8], ecx
mov dword [ebp - 0x10d4], esi
mov edx, dword [ebp - 0x10cc]
cmp edx, dword [ebp - 0x10d4]
ja 0x5df9a7
jb 0x5df708
mov eax, dword [ebp - 0x10d0]
cmp eax, dword [ebp - 0x10d8]
jae 0x5df9a7
mov ecx, dword [ebp - 0x10c0]
cmp dword [ecx], 0
je 0x5df7a3
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 0x18]
call eax
movzx ecx, al
test ecx, ecx
je 0x5df7a3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10a0], esp
push 0x638be4
call fcn.00401720
mov dword [ebp - 0x10dc], eax
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 0x10a1], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x105c]
call fcn.00402800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x10a1]
jmp 0x5dfb4f
lea ecx, [ebp - 0x105c]
push ecx
push 0x1000
lea edx, [ebp - 0x102c]
push edx
lea ecx, [ebp - 0x20]
call fcn.005de6f0
mov dword [ebp - 0x1064], eax
cmp dword [ebp - 0x1064], 0xffffffff
jne 0x5df84b
mov eax, dword [ebp - 0x10c0]
cmp dword [eax], 0
je 0x5df846
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10a8], esp
push 0x638bf8
call fcn.00401720
mov dword [ebp - 0x10e0], eax
mov ecx, dword [ebp - 0x10c0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 0x10a9], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x105c]
call fcn.00402800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x10a9]
jmp 0x5dfb4f
jmp 0x5df99a
cmp dword [ebp - 0x1064], 0
jbe 0x5df97c
mov dword [ebp - 0x1068], 0
push 0
lea ecx, [ebp - 0x1068]
push ecx
mov edx, dword [ebp - 0x1064]
push edx
lea eax, [ebp - 0x102c]
push eax
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x1068]
cmp edx, dword [ebp - 0x1064]
je 0x5df90a
mov eax, dword [ebp - 0x10c0]
cmp dword [eax], 0
je 0x5df90a
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10b0], esp
push 0x638c08
call fcn.00401720
mov dword [ebp - 0x10e4], eax
mov ecx, dword [ebp - 0x10c0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 0x10b1], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x105c]
call fcn.00402800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x10b1]
jmp 0x5dfb4f
mov ecx, dword [ebp - 0x10c0]
cmp dword [ecx], 0
je 0x5df97a
lea ecx, [ebp - 0x105c]
call fcn.00402830
sub esp, 8
fstp qword [esp]
lea ecx, [ebp - 0x105c]
call fcn.00402810
push eax
mov edx, dword [ebp - 0x1030]
push edx
mov eax, dword [ebp + 0x10]
push eax
mov ecx, dword [ebp - 0x10c0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [edx + 0xc]
call eax
lea ecx, [ebp - 0x105c]
call fcn.00402810
add eax, dword [ebp - 0x28]
push eax
mov ecx, dword [ebp - 0x10c0]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x10c0]
mov ecx, dword [eax]
mov edx, dword [edx]
mov eax, dword [edx + 8]
call eax
jmp 0x5df99a
cmp dword [ebp - 0x1064], 0
jne 0x5df998
push 5
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
jmp 0x5df99a
jmp 0x5df9a7
cmp dword [ebp - 0x24], 5
jbe 0x5df9a2
jmp 0x5df9a7
jmp 0x5df6b7
lea ecx, [ebp - 0x105c]
call fcn.00402810
mov ecx, dword [ebp - 0x1030]
xor esi, esi
mov dword [ebp - 0x10ec], eax
mov dword [ebp - 0x10e8], edx
mov dword [ebp - 0x10f4], ecx
mov dword [ebp - 0x10f0], esi
mov edx, dword [ebp - 0x10ec]
cmp edx, dword [ebp - 0x10f4]
jne 0x5df9ee
mov eax, dword [ebp - 0x10e8]
cmp eax, dword [ebp - 0x10f0]
je 0x5dfa6c
mov ecx, dword [ebp - 0x10c0]
cmp dword [ecx], 0
je 0x5dfa2b
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x10b8], esp
push 0x638c1c
call fcn.00401720
mov dword [ebp - 0x10f8], eax
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 0x14]
call eax
mov byte [ebp - 0x10b9], 0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x105c]
call fcn.00402800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x10b9]
jmp 0x5dfb4f
mov ecx, dword [ebp - 0x10c0]
mov edx, dword [ecx + 4]
add edx, dword [ebp - 0x1030]
mov eax, dword [ebp - 0x10c0]
mov dword [eax + 4], edx
mov ecx, dword [ebp - 0x10c0]
cmp dword [ecx], 0
je 0x5dfaec
lea ecx, [ebp - 0x105c]
call fcn.00402830
sub esp, 8
fstp qword [esp]
mov edx, dword [ebp - 0x1030]
push edx
mov eax, dword [ebp - 0x1030]
push eax
mov ecx, dword [ebp + 0x10]
push ecx
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov ecx, dword [ebp - 0x10c0]
mov ecx, dword [ecx]
mov edx, dword [eax]
mov eax, dword [edx + 0xc]
call eax
mov ecx, dword [ebp - 0x10c0]
mov edx, dword [ecx + 4]
push edx
mov eax, dword [ebp - 0x10c0]
mov ecx, dword [eax]
mov edx, dword [ebp - 0x10c0]
mov eax, dword [edx]
mov edx, dword [ecx]
mov ecx, eax
mov eax, dword [edx + 8]
call eax
mov byte [ebp - 0x10ba], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x105c]
call fcn.00402800
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x20]
call fcn.005de5d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x14]
call fcn.005dec60
mov al, byte [ebp - 0x10ba]
jmp 0x5dfb4f
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x2c]
xor ecx, ebp
call fcn.004e8c89
mov esp, ebp
pop ebp
ret 0xc