Function at 0x6455b8
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ecx
mov ecx, 5
push 0
push 0
dec ecx
jne 0x6455c1
xchg dword [ebp - 4], ecx
push ebx
push esi
push edi
mov dword [ebp - 8], ecx
mov ebx, edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
call fcn.00408f40
mov eax, dword [ebp - 8]
call fcn.00408f40
mov eax, dword [ebp + 8]
call fcn.00408f40
xor eax, eax
push ebp
push 0x645869
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 0xd], 0
mov eax, dword [ebp - 4]
call fcn.00612068
push 0
push 0x80
push 2
push 0
push 3
push 0xc0000000
mov eax, dword [ebp - 4]
call fcn.00409c50
push eax
call sub.kernel32.dll_CreateFileW
mov edi, eax
cmp edi, 0xffffffff
je 0x645811
mov eax, 0x800
call fcn.0061b29c
mov esi, eax
mov ecx, 0x64588c
mov edx, 0x800
mov eax, ebx
call fcn.0061cefc
push 0
lea edx, [ebp - 0x1c]
mov eax, dword [0x67a564]
movzx eax, byte [eax + 0x826]
call fcn.0041fb48
mov edx, dword [ebp - 0x1c]
lea eax, [ebp - 0x18]
mov ecx, 0
call fcn.004099e0
mov ecx, dword [ebp - 0x18]
mov edx, 0x800
mov eax, ebx
call fcn.0061cd44
push 0
lea edx, [ebp - 0x20]
mov eax, dword [0x67a564]
mov eax, dword [eax + 0x1c]
call fcn.0061ec94
mov ecx, dword [ebp - 0x20]
mov edx, 0x800
mov eax, ebx
call fcn.0061cd44
push 0x7fffffff
push 0xfecd9826
lea eax, [ebp - 0x24]
call fcn.0061c410
mov eax, dword [ebp - 0x24]
lea edx, [ebp - 0xc]
call fcn.0040cbd8
push 0
mov ecx, dword [ebp - 0xc]
mov edx, 0x800
mov eax, ebx
call fcn.0061cd44
push 0
push 0
push 0
push edi
call sub.kernel32.dll_SetFilePointer
push 0
lea eax, [ebp - 0x14]
push eax
push 0x800
push ebx
push edi
call sub.kernel32.dll_WriteFile_1
lea ecx, [ebp - 0x28]
mov dx, 0xfde9
mov eax, dword [ebp - 8]
call fcn.0061eb90
mov edx, dword [ebp - 0x28]
mov ebx, dword [0x67a13c]
mov ebx, dword [ebx]
mov eax, esi
call ebx
lea eax, [ebp - 0x2c]
mov edx, dword [ebp + 8]
mov ecx, 0
call fcn.004099e0
mov edx, dword [ebp - 0x2c]
mov ebx, dword [0x67a13c]
mov ebx, dword [ebx]
lea eax, [esi + 0xc8]
call ebx
lea eax, [ebp - 0xc]
mov edx, 0x6458b4
call fcn.00409320
push 0
mov ecx, dword [ebp - 0xc]
mov edx, 0x800
mov eax, esi
call fcn.0061cd44
lea eax, [ebp - 0xc]
mov edx, 0x6458cc
call fcn.00409320
push 0
mov ecx, dword [ebp - 0xc]
mov edx, 0x800
mov eax, esi
call fcn.0061cd44
push 0
lea eax, [ebp - 0x14]
push eax
push 0x800
push esi
push edi
call sub.kernel32.dll_WriteFile_1
xor ebx, ebx
mov eax, 0xff
call fcn.00406ba4
mov byte [esi + ebx], al
inc ebx
cmp ebx, 0x800
jne 0x645783
mov eax, dword [0x67a564]
movzx eax, byte [eax + 0x826]
mov byte [esi], al
push 0
lea eax, [ebp - 0x14]
push eax
push 0x800
push esi
push edi
call sub.kernel32.dll_WriteFile_1
xor ebx, ebx
mov eax, 0xff
call fcn.00406ba4
mov byte [esi + ebx], al
inc ebx
cmp ebx, 0x800
jne 0x6457bb
push 0
lea eax, [ebp - 0x14]
push eax
push 0x800
mov ebx, esi
push ebx
push edi
call sub.kernel32.dll_WriteFile_1
mov byte [esi], 2
mov byte [esi + 1], 0xe4
push 0
lea eax, [ebp - 0x14]
push eax
push 2
push ebx
push edi
call sub.kernel32.dll_WriteFile_1
push edi
call sub.kernel32.dll_CloseHandle_1
mov byte [ebp - 0xd], 1
call fcn.006447b4
mov eax, esi
call fcn.00406758
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x645870
lea eax, [ebp - 0x2c]
mov edx, 2
call fcn.00408eec
lea eax, [ebp - 0x24]
call fcn.00408e5c
lea eax, [ebp - 0x20]
call fcn.00408e80
lea eax, [ebp - 0x1c]
call fcn.00408e5c
lea eax, [ebp - 0x18]
call fcn.00408e80
lea eax, [ebp - 0xc]
call fcn.00408e80
lea eax, [ebp - 8]
mov edx, 2
call fcn.00408ebc
lea eax, [ebp + 8]
call fcn.00408e5c
ret