Function at 0x4e7f0a
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x450
mov eax, dword [0x5836e0]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, ecx
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x440], eax
mov dword [ebp - 0x448], ecx
push edi
mov edi, dword [ebp + 0x10]
mov dword [ebp - 0x450], edi
test eax, eax
je 0x4e8173
test ecx, ecx
je 0x4e8173
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
push ecx
call esi
mov ebx, eax
xor ecx, ecx
mov dword [ebp - 0x438], ebx
test edi, edi
je 0x4e7f6e
push edi
call esi
mov dword [ebp - 0x43c], eax
xor ecx, ecx
jmp 0x4e7f76
mov eax, ecx
mov dword [ebp - 0x43c], ecx
add eax, ebx
mov dword [ebp - 0x444], ecx
imul eax, eax, 3
add eax, 0x50
cmp eax, 0x400
jae 0x4e7f93
lea ebx, [ebp - 0x424]
jmp 0x4e7fac
push eax
call fcn.004e1c0a
mov ebx, eax
mov dword [ebp - 0x444], ebx
pop ecx
test ebx, ebx
je 0x4e8171
xor ecx, ecx
cmp byte [ebp + 0xc], 0
mov esi, ecx
je 0x4e808a
lea eax, [ebp - 0x434]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
mov edi, dword [ebp - 0x440]
lea ecx, [ebp - 0x434]
mov eax, dword [ecx]
add edi, 0x14
cmp eax, dword [edi]
jne 0x4e8015
mov eax, dword [ecx + 4]
cmp eax, dword [edi + 4]
jne 0x4e8015
movzx eax, word [ebp - 0x426]
push eax
movzx eax, word [ebp - 0x428]
push eax
movzx eax, word [ebp - 0x42a]
push eax
movzx eax, word [ebp - 0x42c]
push eax
lea eax, [ebp - 0x24]
push str._i:_02i:_02i._03i
push eax
call fcn.00476e61
add esp, 0x18
jmp 0x4e805e
movzx eax, word [ebp - 0x426]
push eax
movzx eax, word [ebp - 0x428]
push eax
movzx eax, word [ebp - 0x42a]
push eax
movzx eax, word [ebp - 0x42c]
push eax
movzx eax, word [ebp - 0x42e]
push eax
movzx eax, word [ebp - 0x432]
push eax
movzx eax, word [ebp - 0x434]
push eax
lea eax, [ebp - 0x24]
push str._i__02i__02i__i:_02i:_02i._03i
push eax
call fcn.00476e61
add esp, 0x24
lea esi, [ebp - 0x434]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x24]
push eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call dword [sym.imp.KERNEL32.dll_lstrlenA]
mov esi, eax
lea eax, [ebp - 0x24]
push esi
push eax
push ebx
call fcn.004f5d30
mov edi, dword [ebp - 0x450]
add esp, 0xc
xor ecx, ecx
test edi, edi
je 0x4e80be
cmp word [edi], cx
je 0x4e80be
imul eax, dword [ebp - 0x43c], 3
push ecx
push ecx
inc eax
push eax
lea eax, [esi + ebx]
push eax
push 0xffffffffffffffff
push edi
push ecx
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 1
jle 0x4e80b9
dec esi
add esi, eax
mov byte [esi + ebx], 0x20
inc esi
mov ecx, dword [ebp - 0x448]
xor edx, edx
cmp word [ecx], dx
je 0x4e80f1
imul eax, dword [ebp - 0x438], 3
push edx
push edx
inc eax
push eax
lea eax, [esi + ebx]
push eax
push 0xffffffffffffffff
push ecx
push edx
push 0xfde9
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
cmp eax, 1
jle 0x4e80f1
dec esi
add esi, eax
cmp byte [ebp + 0x14], 0
je 0x4e810d
push 2
lea eax, [esi + ebx]
push 0x557d6c
push eax
call fcn.004f5d30
add esp, 0xc
add esi, 2
mov edi, dword [ebp - 0x440]
mov byte [esi + ebx], 0
cmp dword [edi + 0x10], 0
je 0x4e8160
lea ecx, [ebp - 0x44c]
call fcn.004e4003
push 0x1f4
push dword [edi + 0x24]
lea ecx, [ebp - 0x44c]
call fcn.004e77a9
push 0
lea eax, [ebp - 0x438]
mov dword [ebp - 0x438], esi
push eax
push esi
push ebx
push dword [edi + 0x10]
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [ebp - 0x44c]
call fcn.004e7762
mov eax, dword [ebp - 0x444]
test eax, eax
je 0x4e8171
push eax
call fcn.004e1bea
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
pop edi
call fcn.004f4166
leave
ret 0x10