Function at 0x404b75
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
mov ebx, ecx
mov esi, 0x8000ffff
push edi
mov ecx, 0x40a540
mov dword [ebp - 8], ebx
call fcn.004032e7
test eax, eax
je 0x404eed
xor edi, edi
push edi
push 0x80
push 2
push edi
push edi
push 0x40000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [0x40a06c], eax
cmp eax, 0xffffffff
je 0x404ecd
lea ecx, [ebp - 0x24]
call fcn.0040477d
lea ecx, [ebp - 0x24]
call fcn.004047c6
mov esi, eax
test esi, esi
js 0x404ea1
push 0x401e88
lea ecx, [ebp - 0x24]
call fcn.00404846
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047c6
mov esi, eax
test esi, esi
js 0x404ea1
push 0x401ea0
lea ecx, [ebp - 0x24]
call fcn.00404846
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047c6
mov esi, eax
test esi, esi
js 0x404ea1
push 3
lea edx, [ebp - 0x24]
pop ecx
call fcn.00404915
mov esi, eax
mov ebx, 0x401dd8
test esi, esi
js 0x404c56
push 0x401ec0
push ebx
lea ecx, [ebp - 0x24]
call fcn.00405344
mov esi, eax
jmp 0x404c68
push 3
push esi
mov edx, 0x401e48
mov ecx, 0x401dc8
call fcn.00404601
test esi, esi
js 0x404ea1
push 0x401de4
push 0x401df4
lea ecx, [ebp - 0x24]
call fcn.00403282
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047e6
mov esi, eax
test esi, esi
js 0x404ea1
push 0x401edc
lea ecx, [ebp - 0x24]
call fcn.00404846
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047c6
mov esi, eax
test esi, esi
js 0x404ea1
push 2
lea edx, [ebp - 0x24]
pop ecx
call fcn.00404915
mov esi, eax
test esi, esi
js 0x404cea
push 0x401ef0
push ebx
lea ecx, [ebp - 0x24]
call fcn.00405344
mov esi, eax
jmp 0x404cfc
push 2
push esi
mov edx, 0x401da4
mov ecx, 0x401dc8
call fcn.00404601
test esi, esi
js 0x404ea1
push 0x401de4
push 0x401df4
lea ecx, [ebp - 0x24]
call fcn.00405344
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047e6
mov esi, eax
test esi, esi
js 0x404ea1
push 0x401edc
lea ecx, [ebp - 0x24]
call fcn.00404846
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047c6
mov esi, eax
test esi, esi
js 0x404ea1
push 5
lea edx, [ebp - 0x24]
pop ecx
call fcn.00404915
mov esi, eax
test esi, esi
js 0x404d7e
push 0x401f10
push ebx
lea ecx, [ebp - 0x24]
call fcn.00405344
mov esi, eax
jmp 0x404d90
push 5
push esi
mov edx, 0x401da4
mov ecx, 0x401dc8
call fcn.00404601
test esi, esi
js 0x404ea1
push 0x401de4
push 0x401df4
lea ecx, [ebp - 0x24]
call fcn.00405344
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047e6
mov esi, eax
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047e6
mov esi, eax
test esi, esi
js 0x404ea1
push 0x401f40
lea ecx, [ebp - 0x24]
call fcn.00404846
mov esi, eax
test esi, esi
jne 0x404e02
push 1
lea eax, [ebp - 0x1c]
push 0x401d70
push eax
call fcn.00404ef6
mov esi, eax
add esp, 0xc
test esi, esi
js 0x404ea1
lea ecx, [ebp - 0x24]
call fcn.004047e6
mov esi, eax
test esi, esi
js 0x404ea1
mov ebx, edi
lea ecx, [ebp - 0x1c]
mov dword [ebp - 4], ebx
call fcn.00405057
mov esi, eax
test esi, esi
js 0x404e51
mov edi, dword [ebp - 0x1c]
xor eax, eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
test esi, esi
js 0x404e51
lea eax, [ebp - 4]
mov ecx, edi
push eax
call fcn.004045a4
mov ebx, dword [ebp - 4]
mov esi, eax
jmp 0x404e6b
push dword [ebp - 8]
mov eax, 0x4019c4
mov edx, 0x401f50
push eax
push eax
push esi
mov ecx, 0x401dc8
call fcn.004046a2
test esi, esi
js 0x404e96
and dword [ebp - 8], 0
lea eax, [ebp - 8]
push 0
push eax
lea eax, [ebx + ebx]
push eax
push edi
push dword [0x40a06c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x404e96
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
test edi, edi
je 0x404ea1
push edi
call dword [sym.imp.ole32.dll_CoTaskMemFree]
push dword [0x40a06c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x404ebc
mov eax, dword [ecx + 4]
push ecx
mov dword [ebp - 0x24], eax
call fcn.00408fc9
pop ecx
mov ecx, dword [ebp - 0x24]
test ecx, ecx
jne 0x404eaf
lea ecx, [ebp - 0x1c]
call fcn.004048f6
jmp 0x404eed
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov esi, eax
mov edx, 0x401f90
push ebx
mov eax, 0x4019c4
mov ecx, 0x401dc8
push eax
push eax
push esi
call fcn.004046a2
pop edi
mov eax, esi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret