Function at 0x5060cc
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 6
push 0
push 0
dec ecx
jne 0x5060d5
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov byte [ebp - 1], cl
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x506378
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 2], 0
mov eax, dword [ebx + 0x3ac]
mov edx, esi
call fcn.00404028
jne 0x506117
cmp byte [ebx + 0x3e8], 0
je 0x506355
mov byte [ebp - 2], 1
lea eax, [ebx + 0x3ac]
mov edx, esi
call fcn.00403cf0
mov byte [ebx + 0x3e8], 0
mov eax, ebx
call fcn.005057f8
test eax, eax
jne 0x506155
mov eax, esi
call fcn.0040934c
test al, al
je 0x506355
mov eax, esi
call fcn.00409458
jmp 0x506355
push 0
push 0x80
push 2
push 0
push 0
push 0xc0000000
mov eax, esi
call fcn.004040dc
push eax
call sub.kernel32.dll_CreateFileA_1
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0xffffffff
je 0x506355
push 0
push 0
push 0
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_SetFilePointer_1
mov eax, ebx
call fcn.005057f8
mov edi, eax
dec edi
test edi, edi
jl 0x50634c
inc edi
xor esi, esi
cmp byte [ebp - 1], 0
je 0x5061cb
cmp byte [ebp - 1], 0
je 0x506344
mov edx, esi
mov eax, dword [ebx + 0x3ec]
call fcn.00410eec
cmp byte [eax], 0
je 0x506344
mov edx, esi
mov eax, dword [ebx + 0x3ec]
call fcn.00410eec
cmp dword [eax + 0x27], 0
je 0x50620d
mov edx, esi
mov eax, dword [ebx + 0x3ec]
call fcn.00410eec
mov eax, dword [eax + 0x27]
lea ecx, [ebp - 0x1c]
mov edx, 8
call fcn.0040901c
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x14]
mov edx, 0x506394
call fcn.00403f64
jmp 0x50621a
lea eax, [ebp - 0x14]
mov edx, 0x5063a0
call fcn.00403d34
mov edx, esi
mov eax, dword [ebx + 0x3ec]
call fcn.00410eec
cmp dword [eax + 0x2b], 0
je 0x50625c
mov edx, esi
mov eax, dword [ebx + 0x3ec]
call fcn.00410eec
mov eax, dword [eax + 0x2b]
lea ecx, [ebp - 0x1c]
mov edx, 8
call fcn.0040901c
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov edx, 0x506394
call fcn.00403f64
jmp 0x506269
lea eax, [ebp - 0x18]
mov edx, 0x5063a0
call fcn.00403d34
mov edx, esi
mov eax, ebx
call fcn.005059e4
and eax, 0xff
lea edx, [ebp - 0x1c]
call fcn.00408fb8
push dword [ebp - 0x1c]
push 0x5063ac
mov edx, esi
mov eax, ebx
call fcn.005059c4
and eax, 0xff
lea edx, [ebp - 0x20]
call fcn.00408fb8
push dword [ebp - 0x20]
push 0x5063ac
push dword [ebp - 0x14]
lea ecx, [ebp - 0x24]
mov edx, esi
mov eax, ebx
call fcn.00505a04
push dword [ebp - 0x24]
push 0x5063ac
push dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
mov edx, esi
mov eax, ebx
call fcn.00505a2c
push dword [ebp - 0x28]
push 0x5063ac
lea ecx, [ebp - 0x2c]
mov edx, esi
mov eax, ebx
call fcn.00505940
push dword [ebp - 0x2c]
push 0x5063ac
lea ecx, [ebp - 0x30]
mov edx, esi
mov eax, ebx
call fcn.00505968
push dword [ebp - 0x30]
push 0x5063ac
mov edx, esi
mov eax, ebx
call fcn.00505990
push edx
push eax
lea eax, [ebp - 0x34]
call fcn.00408fe8
push dword [ebp - 0x34]
push 0x5063b8
lea eax, [ebp - 8]
mov edx, 0x10
call fcn.00403fd8
push 0
lea eax, [ebp - 0xc]
push eax
mov eax, dword [ebp - 8]
call fcn.00403f18
push eax
lea eax, [ebp - 8]
call fcn.004040e8
push eax
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_WriteFile_1
inc esi
dec edi
jne 0x5061a5
mov eax, dword [ebp - 0x10]
push eax
call sub.kernel32.dll_CloseHandle_1
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x50637f
lea eax, [ebp - 0x34]
mov edx, 9
call fcn.00403cc0
lea eax, [ebp - 8]
call fcn.00403c9c
ret