Function at 0x405db0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x4c24
call fcn.00415a90
mov eax, dword [0x421494]
xor eax, ebp
mov dword [ebp - 4], eax
cmp byte [0x42654c], 0
push ebx
push esi
push edi
jne 0x4060c6
mov eax, dword [0x426544]
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push str.EHNULL
push 0x424540
call fcn.00408a80
add esp, 8
test eax, eax
je 0x405e48
push 0x424540
lea ecx, [ebp - 0x808]
push 0x400
push ecx
call fcn.0040790f
add esp, 0xc
push str.winlt.ltup
lea edx, [ebp - 0x808]
push 0x400
push edx
call fcn.004086dd
add esp, 0xc
lea eax, [ebp - 0x808]
push eax
lea ecx, [ebp - 0x1808]
push 0x400
push ecx
call fcn.0040790f
add esp, 0xc
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileW]
push 0
push 0x80
push 4
push 0
push 0
push 0x80000000
lea edx, [ebp - 0x1808]
push edx
call esi
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x405ec9
push str.ERROR______________hFile__INVALID_HANDLE_VALUE___FileName__
lea eax, [ebp - 0x808]
push 0x400
push eax
call fcn.0040790f
add esp, 0xc
lea ecx, [ebp - 0x1808]
push ecx
lea edx, [ebp - 0x808]
push 0x400
push edx
call fcn.004086dd
add esp, 0xc
lea edx, [ebp - 0x808]
mov esi, 0x423540
call fcn.004018a0
mov edx, str.LEAVING_________________________________________SaveFileToListerExeTxt
call fcn.004018a0
mov eax, dword [0x426544]
push eax
jmp 0x4060c0
lea ecx, [ebp - 0x1808]
push ecx
lea edx, [ebp - 0x1008]
push 0x400
push edx
call fcn.0040790f
add esp, 0xc
push str..tmpupall
lea eax, [ebp - 0x1008]
push 0x400
push eax
call fcn.004086dd
add esp, 0xc
push 0
push 0x80
push 4
push 0
push 0
push 0x40000000
lea ecx, [ebp - 0x1008]
push ecx
call esi
mov dword [ebp - 0x4c1c], eax
cmp eax, 0xffffffff
jne 0x405f76
push str.ERROR______________hFile__INVALID_HANDLE_VALUE___FileName__
lea edx, [ebp - 0x808]
push 0x400
push edx
call fcn.0040790f
add esp, 0xc
lea eax, [ebp - 0x1008]
push eax
lea ecx, [ebp - 0x808]
push 0x400
push ecx
call fcn.004086dd
add esp, 0xc
lea edx, [ebp - 0x808]
mov esi, 0x423540
call fcn.004018a0
mov edx, str.LEAVING_________________________________________SaveFileToListerExeTxt
call fcn.004018a0
jmp 0x4060b9
push 0x41dae0
lea eax, [ebp - 0x4c18]
push 0x400
push eax
call fcn.0040790f
add esp, 0xc
mov esi, ebx
lea ecx, [ebp - 0x4c18]
mov byte [ebp - 0x4410], 0
mov edi, 1
call fcn.00404fa0
test al, al
je 0x4060a7
lea ecx, [ebp - 0x4c18]
push ecx
lea edx, [ebp - 0x3808]
push 0x400
push edx
call fcn.0040790f
add esp, 0xc
lea eax, [ebp - 0x4c18]
push eax
lea esi, [ebp - 0x808]
call fcn.00405290
cmp byte [ebp - 0x4410], 0
mov eax, str.TRUE
jne 0x405ff0
mov eax, str.FALSE
push eax
lea ecx, [ebp - 0x808]
push ecx
lea edx, [ebp - 0x3808]
push edx
push edi
push str._d___s__s__s_r_n
lea eax, [ebp - 0x3008]
push 0xc00
push eax
call fcn.00408baa
lea eax, [ebp - 0x3008]
add esp, 0x1c
lea edx, [eax + 2]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x406022
sub eax, edx
sar eax, 1
inc eax
push eax
lea ecx, [ebp - 0x3008]
push ecx
push 0xc00
lea edx, [ebp - 0x4408]
push edx
lea eax, [ebp - 0x4c24]
push eax
call fcn.004086bd
lea eax, [ebp - 0x4408]
add esp, 0x14
lea edx, [eax + 1]
mov edi, edi
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x406060
push 0
sub eax, edx
lea ecx, [ebp - 0x4c20]
push ecx
push eax
mov eax, dword [ebp - 0x4c1c]
lea edx, [ebp - 0x4408]
push edx
push eax
mov dword [ebp - 0x4c20], 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, ebx
lea ecx, [ebp - 0x4c18]
inc edi
call fcn.00404fa0
test al, al
jne 0x405fb0
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
mov ecx, dword [ebp - 0x4c1c]
push ecx
call esi
mov edx, dword [0x426544]
push edx
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00407900
mov esp, ebp
pop ebp
ret