Function at 0x4ce05f
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x5d8b63
mov eax, dword fs:[0]
push eax
mov eax, 0x4730
call fcn.00506f00
mov eax, dword [0x67e2d4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
lea ecx, [ebp - 0x470c]
inc edi
push 0x604bc0
mov dword [ebp - 4], edi
call fcn.00413f09
xor ebx, ebx
mov byte [ebp - 4], 2
push ebx
push ebx
push 3
push ebx
push ebx
push 0x40000000
push dword [ebp - 0x470c]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x4718], eax
cmp eax, 0xffffffff
je 0x4ce3f7
push 0xffffffffffffffff
push dword [ebp - 0x470c]
call dword [sym.imp.KERNEL32.dll_WaitNamedPipeW]
test eax, eax
je 0x4ce3f1
push 0x800
mov dword [ebp - 0x4700], ebx
call fcn.00506f2d
mov esi, eax
mov dword [ebp - 0x471c], esi
mov dword [esp], 0x800
push ebx
push esi
mov byte [ebp - 4], 3
call fcn.0056b050
mov ecx, dword [ebp - 0x4700]
lea eax, [ebp - 0x4704]
push eax
mov eax, 0x800
mov dword [ebp - 0x4704], 0x1000
sub eax, ecx
push eax
lea eax, [esi + ecx]
push eax
call fcn.0044174a
mov ecx, dword [ebp - 0x4700]
add ecx, eax
lea eax, [ebp + 0x10]
push eax
mov eax, 0x800
mov dword [ebp - 0x4700], ecx
sub eax, ecx
push eax
lea eax, [esi + ecx]
push eax
call fcn.00441772
mov ecx, dword [ebp - 0x4700]
add ecx, eax
lea eax, [ebp + 8]
push eax
mov eax, 0x800
mov dword [ebp - 0x4700], ecx
sub eax, ecx
push eax
lea eax, [esi + ecx]
push eax
call fcn.004ed554
mov ecx, dword [ebp - 0x4700]
add ecx, eax
lea eax, [ebp + 0xc]
push eax
mov eax, 0x800
mov dword [ebp - 0x4700], ecx
sub eax, ecx
push eax
lea eax, [esi + ecx]
push eax
call fcn.004ed554
add dword [ebp - 0x4700], eax
push ebx
call fcn.0059f08d
add esp, 0x40
mov dword [ebp - 0x4724], eax
lea eax, [ebp - 0x4708]
mov dword [ebp - 0x4720], edx
lea ecx, [ebp - 0x4724]
push 0x604c48
push eax
call fcn.0047e398
lea eax, [ebp + 8]
mov byte [ebp - 4], 4
push eax
lea eax, [ebp - 0x4704]
push 0x604c90
push eax
call fcn.0042e01c
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x4708]
mov byte [ebp - 4], 5
push dword [eax - 0xc]
push eax
call fcn.00412114
mov ecx, dword [ebp - 0x4704]
mov byte [ebp - 4], 4
lea ecx, [ecx - 0x10]
call fcn.00412ac4
mov eax, dword [ebp + 0xc]
cmp dword [eax - 0xc], ebx
je 0x4ce260
lea eax, [ebp + 0xc]
push eax
lea eax, [ebp - 0x4704]
push 0x604cd8
push eax
call fcn.0042e01c
add esp, 0xc
mov eax, dword [eax]
lea ecx, [ebp - 0x4708]
mov byte [ebp - 4], 6
push dword [eax - 0xc]
push eax
call fcn.00412114
mov ecx, dword [ebp - 0x4704]
mov byte [ebp - 4], 4
lea ecx, [ecx - 0x10]
call fcn.00412ac4
lea ecx, [ebp - 0x473c]
call fcn.0042ca82
push ecx
mov ecx, esp
mov dword [ebp - 0x4704], esp
push 0x604cf0
mov byte [ebp - 4], 7
call fcn.00413f09
push ecx
push esp
lea ecx, [ebp - 0x473c]
mov byte [ebp - 4], 8
call fcn.004606bf
lea eax, [ebp - 0x4710]
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp - 0x473c]
call fcn.00434114
mov eax, dword [ebp - 0x4708]
push edi
push ecx
add eax, 0xfffffff0
mov byte [ebp - 4], 9
mov edi, esp
push eax
mov dword [ebp - 0x4714], edi
call fcn.00412393
add eax, 0x10
pop ecx
mov dword [edi], eax
push dword [ebp - 0x4710]
call fcn.004ed7f9
mov eax, dword [ebp - 0x4700]
add esp, 0xc
mov edx, eax
and edx, 7
je 0x4ce2f4
push 8
pop ecx
sub ecx, edx
add eax, ecx
mov dword [ebp - 0x4700], eax
mov edi, 0x1000
lea eax, [ebp - 0x1010]
push edi
push ebx
push eax
call fcn.0056b050
push edi
lea eax, [ebp - 0x2010]
push ebx
push eax
call fcn.0056b050
add esp, 0x18
lea ecx, [ebp - 0x46fc]
push ebx
push 0x604d7c
call fcn.0043d6dc
push ebx
push dword [ebp - 0x4700]
lea ecx, [ebp - 0x46fc]
push esi
call fcn.0043a6ab
mov edi, dword [ebp - 0x4700]
lea eax, [ebp - 0x1010]
shl edi, 3
lea ecx, [ebp - 0x46fc]
push edi
push eax
lea eax, [ebp - 0x4011]
push eax
call fcn.004395b8
push edi
lea eax, [ebp - 0x1010]
push eax
lea eax, [ebp - 0x2010]
push eax
lea ecx, [ebp - 0x46fc]
call fcn.0043954c
lea eax, [ebp - 0x2010]
mov edi, 0x800
push eax
push edi
push esi
call fcn.005a019b
add esp, 0xc
lea eax, [ebp - 0x4700]
push ebx
push eax
push edi
push esi
mov esi, dword [ebp - 0x4718]
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
mov ebx, eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x4710]
add ecx, 0xfffffff0
call fcn.00412ac4
lea ecx, [ebp - 0x473c]
call fcn.0042e60b
mov ecx, dword [ebp - 0x472c]
add ecx, 0xfffffff0
call fcn.00412ac4
mov ecx, dword [ebp - 0x4708]
lea ecx, [ecx - 0x10]
call fcn.00412ac4
lea ecx, [ebp - 0x471c]
call fcn.00455b9d
jmp 0x4ce3f7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x470c]
lea ecx, [ecx - 0x10]
call fcn.00412ac4
mov ecx, dword [ebp + 8]
lea ecx, [ecx - 0x10]
call fcn.00412ac4
mov ecx, dword [ebp + 0xc]
lea ecx, [ecx - 0x10]
call fcn.00412ac4
mov eax, ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00506d7f
mov esp, ebp
pop ebp
ret