Function at 0x603d30
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffef0
push ebx
push esi
push edi
xor ebx, ebx
mov dword [ebp - 0x10c], ebx
mov dword [ebp - 0x110], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x10]
call fcn.0040a6d0
mov eax, dword [ebp - 0x14]
call fcn.0040a6d0
xor eax, eax
push ebp
push 0x6041c3
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov dword [ebp - 0x20], eax
mov esi, dword [ebp - 4]
push dword [ebp - 0x10]
push dword [ebp - 0x14]
lea edx, [ebp - 0x110]
movsx eax, word [esi + 2]
call fcn.0060463c
mov edx, dword [ebp - 0x110]
lea eax, [ebp - 0x10c]
call fcn.0040b110
push dword [ebp - 0x10c]
push 0x6041e0
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.0040b32c
mov eax, dword [ebp - 0x14]
mov edx, 0x6041f8
call fcn.0040b3dc
jne 0x603ddf
mov dword [ebp - 8], 0x2710
mov dword [ebp - 0xc], 0xfa00
jmp 0x603e78
mov eax, dword [ebp - 0x14]
mov edx, 0x60420c
call fcn.0040b3dc
jne 0x603dfe
mov dword [ebp - 8], 0x4a38
mov dword [ebp - 0xc], 0x752f
jmp 0x603e78
mov eax, dword [ebp - 0x14]
mov edx, 0x604224
call fcn.0040b3dc
jne 0x603e1d
mov dword [ebp - 8], 0x4268
mov dword [ebp - 0xc], 0x464f
jmp 0x603e78
mov eax, dword [ebp - 0x14]
mov edx, 0x604244
call fcn.0040b3dc
jne 0x603e3c
mov dword [ebp - 8], 0x3a98
mov dword [ebp - 0xc], 0x3e7f
jmp 0x603e78
mov eax, dword [ebp - 0x14]
mov edx, 0x604264
call fcn.0040b3dc
jne 0x603e5b
mov dword [ebp - 8], 0x36b0
mov dword [ebp - 0xc], 0x3a97
jmp 0x603e78
mov eax, dword [ebp - 0x14]
mov edx, 0x604288
call fcn.0040b3dc
jne 0x603e78
mov dword [ebp - 8], 0x3e80
mov dword [ebp - 0xc], 0x4267
lea eax, [ebp - 0x108]
xor ecx, ecx
mov edx, 0xc0
call fcn.00407ef4
xor eax, eax
mov dword [ebp - 0x58], eax
xor eax, eax
mov dword [ebp - 0x54], eax
mov edi, dword [esi + 0xb0]
dec edi
test edi, edi
jl 0x603f10
inc edi
xor ebx, ebx
push ebp
mov eax, ebx
call fcn.00603ce8
pop ecx
test al, al
je 0x603f0c
inc dword [ebp - 0x58]
mov eax, dword [esi + 0xc4]
test eax, eax
jne 0x603edf
mov eax, dword [esi + 0xc8]
mov eax, dword [eax + ebx*8 + 4]
mov edx, dword [esi + 0xc0]
lea eax, [edx + eax]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x38]
call fcn.0040b070
jmp 0x603efa
mov edx, dword [esi + 0xc8]
mov edx, dword [edx + ebx*8 + 4]
lea eax, [eax + edx*2]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x3c]
call fcn.0040b0a0
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x603f06
sub eax, 4
mov eax, dword [eax]
inc eax
add eax, eax
add dword [ebp - 0x54], eax
inc ebx
dec edi
jne 0x603ea2
mov word [ebp - 0x108], 0xc9
movzx eax, word [esi + 2]
mov word [ebp - 0x106], ax
lea eax, [ebp - 0x18]
lea edx, [esi + 4]
mov ecx, 0x33
call fcn.0040b0f4
mov eax, dword [ebp - 0x18]
call fcn.0040b040
mov edx, eax
lea eax, [ebp - 0x104]
call fcn.004276c8
mov eax, dword [ebp - 0x14]
call fcn.0040b040
mov edx, eax
lea eax, [ebp - 0x9e]
call fcn.004276c8
mov eax, dword [esi + 0xa8]
mov dword [ebp - 0x60], eax
mov eax, dword [esi + 0xac]
mov dword [ebp - 0x5c], eax
mov word [ebp - 0x4e], 0
movzx eax, word [esi + 0xb8]
mov word [ebp - 0x50], ax
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
mov eax, dword [ebp - 0x1c]
call fcn.0040b040
push eax
call sub.kernel32.dll_CreateFileW
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0xffffffff
jne 0x603fb6
mov dword [ebp - 0x20], 0xffffffff
jmp 0x604190
push 0
lea eax, [ebp - 0x34]
push eax
push 0xc0
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_WriteFile
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x604180
xor eax, eax
mov dword [ebp - 0x24], eax
mov edi, dword [esi + 0xb0]
dec edi
test edi, edi
jl 0x6040b0
inc edi
xor ebx, ebx
push ebp
mov eax, ebx
call fcn.00603ce8
pop ecx
test al, al
je 0x6040a8
mov eax, dword [esi + 0xc8]
movzx eax, word [eax + ebx*8]
mov word [ebp - 0x2c], ax
mov eax, dword [esi + 0xc8]
movzx eax, word [eax + ebx*8 + 2]
mov word [ebp - 0x2a], ax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov eax, dword [esi + 0xc4]
test eax, eax
jne 0x604057
mov eax, dword [esi + 0xc8]
mov eax, dword [eax + ebx*8 + 4]
mov edx, dword [esi + 0xc0]
lea eax, [edx + eax]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x38]
call fcn.0040b070
jmp 0x604072
mov edx, dword [esi + 0xc8]
mov edx, dword [edx + ebx*8 + 4]
lea eax, [eax + edx*2]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x3c]
call fcn.0040b0a0
mov eax, dword [ebp - 0x18]
test eax, eax
je 0x60407e
sub eax, 4
mov eax, dword [eax]
add eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
push 0
lea eax, [ebp - 0x34]
push eax
push 8
lea eax, [ebp - 0x2c]
push eax
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_WriteFile
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x604180
inc ebx
dec edi
jne 0x603ff6
mov edi, dword [esi + 0xb0]
dec edi
test edi, edi
jl 0x604175
inc edi
xor ebx, ebx
push ebp
mov eax, ebx
call fcn.00603ce8
pop ecx
test al, al
je 0x60416d
mov eax, dword [esi + 0xc4]
test eax, eax
jne 0x604100
mov eax, dword [esi + 0xc8]
mov eax, dword [eax + ebx*8 + 4]
mov edx, dword [esi + 0xc0]
lea eax, [edx + eax]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x38]
call fcn.0040b070
jmp 0x60411b
mov edx, dword [esi + 0xc8]
mov edx, dword [edx + ebx*8 + 4]
lea eax, [eax + edx*2]
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x18]
mov edx, dword [ebp - 0x3c]
call fcn.0040b0a0
lea eax, [ebp - 0x18]
mov edx, 0x6042ac
call fcn.0040b24c
lea eax, [ebp - 0x18]
call fcn.0040ab2c
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
je 0x60414a
mov eax, dword [ebp - 0x40]
sub eax, 4
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
push 0
lea eax, [ebp - 0x34]
push eax
mov eax, dword [ebp - 0x40]
add eax, eax
push eax
mov eax, dword [ebp - 0x44]
push eax
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_WriteFile
cmp eax, 1
sbb eax, eax
inc eax
test al, al
je 0x604180
inc ebx
dec edi
jne 0x6040c2
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_CloseHandle
jmp 0x604190
mov dword [ebp - 0x20], 0xfffffffe
mov eax, dword [ebp - 0x30]
push eax
call sub.kernel32.dll_CloseHandle
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x6041ca
lea eax, [ebp - 0x110]
call fcn.0040a600
lea eax, [ebp - 0x10c]
call fcn.0040a5dc
lea eax, [ebp - 0x1c]
mov edx, 4
call fcn.0040a63c
pop eax
jmp eax