Function at 0x40eb84
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffba4
push ebx
push esi
push edi
mov esi, edx
mov ebx, eax
mov eax, 0x4beee4
call fcn.00479eb8
mov eax, ebx
call fcn.0040e378
test al, al
jne 0x40ebba
xor eax, eax
mov edx, dword [ebp - 0x30]
mov dword fs:[0], edx
jmp 0x40ee18
mov ecx, 0x50
mov edx, dword [ebx + 8]
mov eax, ebx
call fcn.0040e3ec
test al, al
jne 0x40ec02
push 0x2710
call sub.KERNEL32.DLL_Sleep
mov ecx, 0x50
mov edx, dword [ebx + 8]
mov eax, ebx
call fcn.0040e3ec
test al, al
jne 0x40ec02
mov eax, ebx
call fcn.0040e3b8
xor eax, eax
mov edx, dword [ebp - 0x30]
mov dword fs:[0], edx
jmp 0x40ee18
mov word [ebp - 0x20], 0x14
mov edx, 0x4bea9a
lea eax, [ebp - 8]
call fcn.00488be4
inc dword [ebp - 0x14]
mov edx, 0x4bea9b
mov ecx, dword [eax]
lea eax, [ebp - 0xc]
push ecx
call fcn.00488be4
inc dword [ebp - 0x14]
lea edx, [ebp - 4]
mov ecx, dword [eax]
xor eax, eax
push ecx
push 0
push 0
push 0
mov dword [ebp - 4], eax
push edx
inc dword [ebp - 0x14]
mov eax, ebx
mov ecx, dword [ebx + 0xc]
mov edx, dword [ebx + 8]
call fcn.0040e67c
dec dword [ebp - 0x14]
lea eax, [ebp - 0xc]
mov edx, 2
call fcn.00488dd0
dec dword [ebp - 0x14]
lea eax, [ebp - 8]
mov edx, 2
call fcn.00488dd0
mov word [ebp - 0x20], 8
mov edx, dword [ebp - 4]
mov eax, ebx
call fcn.0040e53c
xor ecx, ecx
mov edx, 0x2710
mov eax, ebx
call fcn.0040e648
mov eax, ebx
call fcn.0040f080
cmp eax, 0xc8
je 0x40ecc3
mov eax, ebx
call fcn.0040e3b8
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x14]
call fcn.00488dd0
pop eax
mov edx, dword [ebp - 0x30]
mov dword fs:[0], edx
jmp 0x40ee18
push esi
mov esi, 0x4bea74
lea edi, [ebp - 0x5c]
mov ecx, 7
rep movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
pop esi
push 0x1e
lea ecx, [ebp - 0x5c]
mov edx, 0x4beb53
mov eax, ebx
call fcn.0040f0b8
lea eax, [ebp - 0x5c]
push eax
call fcn.00480dbc
pop ecx
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0
jg 0x40ed24
mov eax, ebx
call fcn.0040e3b8
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x14]
call fcn.00488dd0
pop eax
mov edx, dword [ebp - 0x30]
mov dword fs:[0], edx
jmp 0x40ee18
push 0
push 0x80
push 2
push 0
push 2
push 0x40000000
push esi
call sub.KERNEL32.DLL_CreateFileA
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0xffffffff
jne 0x40ed6f
mov eax, ebx
call fcn.0040e3b8
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x14]
call fcn.00488dd0
pop eax
mov edx, dword [ebp - 0x30]
mov dword fs:[0], edx
jmp 0x40ee18
xor esi, esi
cmp esi, dword [ebp - 0x34]
jge 0x40edb5
lea edx, [ebp - 0x45c]
mov ecx, 0x400
mov eax, ebx
call fcn.0040e618
mov word [ebp - 0x20], 8
test eax, eax
jle 0x40edb5
push 0
lea edx, [ebp - 0x3c]
push edx
push eax
lea eax, [ebp - 0x45c]
push eax
mov ecx, dword [ebp - 0x38]
push ecx
call sub.KERNEL32.DLL_WriteFile
test eax, eax
je 0x40edb5
add esi, dword [ebp - 0x3c]
cmp esi, dword [ebp - 0x34]
jl 0x40ed76
cmp esi, dword [ebp - 0x34]
je 0x40edea
mov eax, dword [ebp - 0x38]
push eax
call sub.KERNEL32.DLL_CloseHandle
mov eax, ebx
call fcn.0040e3b8
xor eax, eax
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x14]
call fcn.00488dd0
pop eax
mov edx, dword [ebp - 0x30]
mov dword fs:[0], edx
jmp 0x40ee18
mov ecx, dword [ebp - 0x38]
push ecx
call sub.KERNEL32.DLL_CloseHandle
mov eax, ebx
call fcn.0040e3b8
mov al, 1
mov edx, 2
push eax
lea eax, [ebp - 4]
dec dword [ebp - 0x14]
call fcn.00488dd0
pop eax
mov edx, dword [ebp - 0x30]
mov dword fs:[0], edx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret