Function at 0x404db0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
sub esp, 0x40
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x10]
mov esi, dword [ebp + 0x14]
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x18], edi
mov dword [ebp - 0x1c], esi
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x34], 0xffffffff
mov eax, dword [ebp - 0x28]
mov dword [esp], eax
mov dword [esp + 4], 0x468493
call fcn.004119b5
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], 0x4d460053
jmp 0x404e20
mov dword [ebp - 0x38], 0x4bed35d5
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x38]
cmp eax, 0x9bf044f8
jg 0x404e40
cmp eax, 0x84a84aad
jne 0x404e20
jmp 0x404e0d
cmp eax, 0xa8953d2b
jg 0x404e70
cmp eax, 0x9bf044f9
jne 0x404e20
mov eax, 0xb908f7f8
cmp dword [ebp - 0x2c], 0
jne 0x404e5e
mov eax, 0xa8953d2c
mov dword [ebp - 0x38], eax
jmp 0x404e20
cmp eax, 0xb57f5104
jg 0x404e87
cmp eax, 0xa8953d2c
jne 0x404e20
mov dword [ebp - 0x38], 0xace1b32
jmp 0x404e20
cmp eax, 0x67358a9e
jg 0x404ea8
cmp eax, 0xb908f7f7
jg 0x404ebf
cmp eax, 0xb57f5105
jne 0x404e20
mov dword [ebp - 0x38], 0x9bf044f9
jmp 0x404e20
cmp eax, 0x67358a9f
jne 0x404e20
mov dword [ebp - 0x38], 0x9bf044f9
jmp 0x404e20
cmp eax, 0x5d08f310
jg 0x404eeb
cmp eax, 0x59c368fd
jg 0x404f02
cmp eax, 0xba76aae2
jg 0x404f24
cmp eax, 0xb908f7f8
jne 0x404e20
mov dword [ebp - 0x38], 0xc55692ae
jmp 0x404e20
cmp eax, 0x5d08f311
jne 0x404e20
mov dword [ebp - 0x38], 0xd03ba1aa
jmp 0x404e20
cmp eax, 0x59c368fe
jne 0x404e20
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
call fcn.00411a36
mov dword [ebp - 0x38], 0xc55692ae
jmp 0x404e20
cmp eax, 0xc55692ad
jg 0x404f42
cmp eax, 0xba76aae3
jne 0x404e20
mov dword [ebp - 0x38], 0xace1b32
jmp 0x404e20
cmp eax, 0xd03ba1a9
jg 0x404f6b
cmp eax, 0xc55692ae
jne 0x404e20
mov eax, dword [ebp - 0x2c]
mov dword [esp], eax
call fcn.00411a36
mov dword [ebp - 0x38], 0xf1868a29
jmp 0x404e20
cmp eax, 0xd9532701
jg 0x404f95
cmp eax, 0xd03ba1aa
jne 0x404e20
mov eax, 0xfaa85e94
cmp dword [ebp - 0x20], 0
jne 0x404f8d
mov eax, 0xf4f7bd8a
mov dword [ebp - 0x38], eax
jmp 0x404e20
cmp eax, 0xe6aacb5f
jg 0x404fde
cmp eax, 0xd9532702
jne 0x404e20
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 1
call fcn.00411c04
mov dword [ebp - 0x30], eax
cmp eax, dword [ebp - 0x20]
setne byte [ebp - 0xd]
mov dword [ebp - 0x38], 0x3483a047
jmp 0x404e20
cmp eax, 0xf1868a28
jg 0x40501c
cmp eax, 0xe6aacb60
jne 0x404e20
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x24]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp + 4], edx
mov dword [esp], esi
call fcn.00402400
mov dword [ebp - 0x38], 0xd03ba1aa
jmp 0x404e20
cmp eax, 0xf4f7bd89
jg 0x40503a
cmp eax, 0xf1868a29
jne 0x404e20
mov dword [ebp - 0x38], 0xa8953d2c
jmp 0x404e20
cmp eax, 0xf9f79939
jg 0x40505f
cmp eax, 0xf4f7bd8a
jne 0x404e20
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x38], 0x9bf044f9
jmp 0x404e20
cmp eax, 0x4d460052
jg 0x4050ac
cmp eax, 0x4bed35d4
jg 0x4050cf
cmp eax, 0x43e00ffd
jg 0x4050f2
cmp eax, 0x3c47ffcb
jg 0x40512d
cmp eax, 0x3483a046
jg 0x40513a
cmp eax, 0xf9f7993a
je 0x40515e
cmp eax, 0xfaa85e94
jne 0x405176
mov dword [ebp - 0x38], 0xd9532702
jmp 0x404e20
cmp eax, 0x4d460053
jne 0x404e20
mov eax, 0x67358a9f
cmp dword [ebp - 0x14], 0
je 0x4050c7
mov eax, 0xe6aacb60
mov dword [ebp - 0x38], eax
jmp 0x404e20
cmp eax, 0x4bed35d5
jne 0x404e20
mov eax, dword [ebp - 0x30]
add dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
sub dword [ebp - 0x20], eax
mov dword [ebp - 0x38], 0x5d08f311
jmp 0x404e20
cmp eax, 0x43e00ffe
jne 0x404e20
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x24]
mov dword [esp + 0xc], eax
mov dword [esp + 8], ecx
mov dword [esp], edx
mov dword [esp + 4], 1
call fcn.00411c04
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x38], 0xd9532702
jmp 0x404e20
cmp eax, 0x3c47ffcc
jne 0x404e20
jmp 0x405193
cmp eax, 0x3483a047
jne 0x404e20
mov al, byte [ebp - 0xd]
test al, al
mov eax, 0xb57f5105
jne 0x405156
mov eax, 0x84a84aad
mov dword [ebp - 0x38], eax
jmp 0x404e20
mov eax, dword [ebp - 0x30]
add dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x30]
sub dword [ebp - 0x20], eax
mov dword [ebp - 0x38], 0x4bed35d5
jmp 0x404e20
cmp eax, 0xace1b32
jne 0x404e20
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x38], 0x3c47ffcc
jmp 0x404e20
mov eax, dword [ebp - 0xc]
add esp, 0x40
pop esi
pop edi
pop ebp
ret