Function at 0x4dae40
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xfffffffffffffffe
push 0x576e70
push 0x5277f0
mov eax, dword fs:[0]
push eax
sub esp, 8
mov eax, 0x1480
call fcn.00523cc0
mov eax, dword [0x582654]
xor dword [ebp - 8], eax
xor eax, ebp
mov dword [ebp - 0x1c], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0x10]
mov dword fs:[0], eax
mov dword [ebp - 0x18], esp
mov edx, ecx
mov dword [ebp - 0x1498], edx
mov dword [ebp - 0x1490], edx
mov edi, dword [ebp + 0x10]
mov ebx, dword [edx + 8]
cmp ebx, 0xffffffff
jne 0x4daea0
xor al, al
jmp 0x4db16f
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1488], eax
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 0x1480], ecx
mov eax, dword [edx + 0x10]
mov dword [ebp - 0x1484], eax
mov dword [ebp - 0x147c], edi
cmp ecx, 0x63d
jne 0x4daf1e
push 0x420
push 0
lea eax, [ebp - 0x460]
push eax
call fcn.00527170
mov esi, dword [edi]
mov dword [ebp - 0x147c], esi
movups xmm0, xmmword [ebp - 0x1488]
movups xmmword [ebp - 0x460], xmm0
push esi
lea eax, [edi + 4]
push eax
lea eax, [ebp - 0x450]
push eax
call fcn.00526b40
add esp, 0x18
push 0
lea eax, [ebp - 0x148c]
push eax
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x460]
jmp 0x4db13c
cmp ecx, 0x63c
je 0x4daec9
cmp ecx, 0x630
jne 0x4dafc9
mov dword [ebp - 4], 0
push 0x420
push 0
lea eax, [ebp - 0x460]
push eax
call fcn.00527170
add esp, 0xc
mov eax, dword [edi]
mov dword [ebp - 0x147c], eax
movups xmm0, xmmword [ebp - 0x1488]
movups xmmword [ebp - 0x460], xmm0
mov ecx, 0x82
mov esi, edi
lea edi, [ebp - 0x450]
rep movsd dword es:[edi], dword [esi]
push 0
lea ecx, [ebp - 0x148c]
push ecx
add eax, 0x10
push eax
lea eax, [ebp - 0x460]
push eax
push ebx
jmp 0x4dafaf
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, eax
mov dword [ebp - 0x1494], esi
mov dword [ebp - 4], 0xfffffffe
jmp 0x4db146
cmp ecx, 0x613
jne 0x4db03c
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
lea esi, [eax + 1]
mov dword [ebp - 0x147c], esi
cmp esi, 0x200
jbe 0x4daffb
mov esi, 0x200
mov dword [ebp - 0x147c], esi
mov byte [edi + 0x1ff], 0
movups xmm0, xmmword [ebp - 0x1488]
movups xmmword [ebp - 0x250], xmm0
push esi
push edi
lea eax, [ebp - 0x240]
push eax
call fcn.00526b40
add esp, 0xc
push 0
lea eax, [ebp - 0x148c]
push eax
lea eax, [esi + 0x10]
push eax
lea eax, [ebp - 0x250]
push eax
mov eax, dword [ebp - 0x1498]
push dword [eax + 8]
jmp 0x4db13e
cmp ecx, 0x619
jne 0x4db070
mov dword [ebp - 0x147c], 0x10
movups xmm0, xmmword [ebp - 0x1488]
movups xmmword [ebp - 0x3c], xmm0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x2c], xmm0
push 0
lea eax, [ebp - 0x148c]
push eax
push 0x20
lea eax, [ebp - 0x3c]
jmp 0x4db0a8
cmp ecx, 0x61a
jne 0x4db0cd
mov dword [ebp - 0x147c], 0x14
movups xmm0, xmmword [ebp - 0x1488]
movups xmmword [ebp - 0x40], xmm0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x30], xmm0
mov eax, dword [edi + 0x10]
mov dword [ebp - 0x20], eax
push 0
lea eax, [ebp - 0x148c]
push eax
push 0x24
lea eax, [ebp - 0x40]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, eax
cmp dword [0x6df374], 0
je 0x4db146
push 0
push 1
call fcn.0053a1c0
add esp, 8
jmp 0x4db146
cmp ecx, 0x61b
jne 0x4db12b
push 0x1017
push 0
lea eax, [ebp - 0x1477]
push eax
call fcn.00527170
mov dword [ebp - 0x147c], 0x1008
movups xmm0, xmmword [ebp - 0x1488]
movups xmmword [ebp - 0x1478], xmm0
push 0x1008
push edi
lea eax, [ebp - 0x1468]
push eax
call fcn.00526b40
add esp, 0x18
push 0
lea eax, [ebp - 0x148c]
push eax
push 0x1018
lea eax, [ebp - 0x1478]
jmp 0x4db13c
push 0
lea eax, [ebp - 0x148c]
push eax
push 0x10
lea eax, [ebp - 0x1488]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, eax
test esi, esi
jne 0x4db16d
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x6d
je 0x4dae99
cmp eax, 0xe8
je 0x4dae99
cmp eax, 6
je 0x4dae99
mov al, 1
mov ecx, dword [ebp - 0x10]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0052388c
mov esp, ebp
pop ebp
ret 0xc