Function at 0x40b110
Capabilities:
Write file on windows

Disassembly:
push 0xffffffffffffffff
push 0x46b057
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x30
push ebp
push edi
mov edi, ecx
lea ecx, [esp + 0x14]
call fcn.0040fa70
lea ecx, [esp + 0xc]
mov dword [esp + 0x40], 0
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
lea eax, [esp + 0x18]
push eax
lea ecx, [esp + 0x18]
mov byte [esp + 0x44], 1
call fcn.0040fb60
push eax
lea ecx, [esp + 0x10]
mov byte [esp + 0x44], 2
call dword [0x4f4104]
lea ecx, [esp + 0x18]
mov byte [esp + 0x40], 1
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
push str.cfg_
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
push str.IPFilter.cfg
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
push 0x4f55b0
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetString]
push eax
call dword [sym.imp.MSVCR71.dll_fopen]
mov ebp, eax
add esp, 8
test ebp, ebp
je 0x40b3b6
push ebx
push esi
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
mov eax, dword [edi + 0x38]
mov esi, dword [eax]
cmp esi, eax
mov byte [esp + 0x48], 3
mov dword [esp + 0x20], esi
je 0x40b276
mov bl, 4
mov edi, edi
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
add esi, 0xc
push esi
lea ecx, [esp + 0x28]
mov byte [esp + 0x4c], bl
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov ecx, eax
mov byte [esp + 0x48], 5
call dword [sym.imp.MSVCP71.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea ecx, [esp + 0x1c]
push str.allow__s
push ecx
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Format]
add esp, 0xc
lea ecx, [esp + 0x24]
mov byte [esp + 0x48], bl
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetString]
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
push 0x4f55a0
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 3
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
lea ecx, [esp + 0x20]
call fcn.00406e70
mov eax, dword [edi + 0x38]
mov esi, dword [esp + 0x20]
cmp esi, eax
jne 0x40b1e0
mov eax, dword [edi + 0x2c]
mov esi, dword [eax]
cmp esi, eax
je 0x40b353
mov bl, 6
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT_2]
lea edx, [esi + 0xc]
push edx
lea ecx, [esp + 0x28]
mov byte [esp + 0x4c], bl
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::constructor_class_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char___const__]
mov ecx, eax
mov byte [esp + 0x48], 7
call dword [sym.imp.MSVCP71.dll_public:_char_const____thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::c_str_void_const]
push eax
lea eax, [esp + 0x1c]
push str.block__s
push eax
call dword [sym.imp.MFC71.DLL_ATL::CStringT::Format]
add esp, 0xc
lea ecx, [esp + 0x24]
mov byte [esp + 0x48], bl
call dword [sym.imp.MSVCP71.dll_public:_void___thiscall_std::basic_string_char__struct_std::char_traits_char___class_std::allocator_char__::destructor_void_]
lea ecx, [esp + 0x18]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetString]
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
push 0x4f55a0
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::operator]
lea ecx, [esp + 0x18]
mov byte [esp + 0x48], 3
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
mov al, byte [esi + 0x29]
test al, al
jne 0x40b34a
mov eax, dword [esi + 8]
mov cl, byte [eax + 0x29]
test cl, cl
jne 0x40b32d
mov esi, eax
mov eax, dword [esi]
mov cl, byte [eax + 0x29]
test cl, cl
jne 0x40b34a
nop
mov esi, eax
mov eax, dword [esi]
mov cl, byte [eax + 0x29]
test cl, cl
je 0x40b320
jmp 0x40b34a
mov eax, dword [esi + 4]
mov cl, byte [eax + 0x29]
test cl, cl
jne 0x40b348
cmp esi, dword [eax + 8]
jne 0x40b348
mov esi, eax
mov eax, dword [eax + 4]
mov cl, byte [eax + 0x29]
test cl, cl
je 0x40b337
mov esi, eax
cmp esi, dword [edi + 0x2c]
jne 0x40b285
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetLength]
test eax, eax
pop esi
pop ebx
je 0x40b385
push ebp
push 1
lea ecx, [esp + 0x10]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetLength]
push eax
lea ecx, [esp + 0x14]
call dword [sym.imp.MFC71.DLL_ATL::CSimpleStringT::GetBuffer]
push eax
call dword [sym.imp.MSVCR71.dll_fwrite]
add esp, 0x10
push ebp
call dword [sym.imp.MSVCR71.dll_fclose]
mov eax, dword [edi + 0x44]
add esp, 4
test eax, eax
je 0x40b3ac
mov ecx, dword [edi + 0x30]
mov edx, dword [edi + 0x3c]
push ecx
push edx
push str.IPFilter_SaveList_Known__d__Blocked__d_
push eax
call fcn.00405d60
add esp, 0x10
lea ecx, [esp + 8]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
lea ecx, [esp + 0xc]
call dword [sym.imp.MFC71.DLL_ATL::CStringT::CStringT]
lea ecx, [esp + 0x14]
mov dword [esp + 0x40], 0xffffffff
call fcn.00406650
mov ecx, dword [esp + 0x38]
pop edi
pop ebp
mov dword fs:[0], ecx
add esp, 0x3c
ret