Function at 0x4e9f7d
Capabilities:
Write file on windows

Disassembly:
push 0x184
mov eax, 0x508444
call fcn.00503e0d
mov edi, 0x406580
mov dword [ebp - 0x174], edi
xor ebx, ebx
mov eax, ebx
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x180], ebx
mov dword [ebp - 0x17c], ebx
mov dword [ebp - 4], ebx
wait
push 0x442320
call dword [sym.imp.msvcrt.dll_void____cdecl___unsigned_int__struct__EXCEPTION_POINTERS_____cdecl__set_se_translator_void____cdecl___unsigned_int__struct__EXCEPTION_POINTERS___]
pop ecx
mov esi, eax
mov dword [ebp - 0x188], esi
xor eax, eax
inc eax
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], al
cmp dword [0x519ad8], ebx
jne 0x4e9ff2
push 0x5198cc
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
xor eax, eax
inc eax
mov dword [0x519ad8], eax
mov dword [ebp - 0x180], eax
mov byte [ebp - 4], bl
push esi
call dword [sym.imp.msvcrt.dll_void____cdecl___unsigned_int__struct__EXCEPTION_POINTERS_____cdecl__set_se_translator_void____cdecl___unsigned_int__struct__EXCEPTION_POINTERS___]
pop ecx
wait
or dword [ebp - 4], 0xffffffff
jmp 0x4ea065
cmp dword [0x519ad8], 0
je 0x4ea083
push 0x5198cc
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov dword [ebp - 0x170], 1
push SysReAllocString
call dword [sym.imp.certcli.dll_Ordinal_205]
mov edx, eax
mov dword [ebp - 0x174], edx
mov cl, byte [0x406580]
mov byte [ebp - 0x161], cl
cmp cl, 0x2b
jne 0x4ea0ac
mov edi, 0x406581
xor eax, eax
cmp cl, 0x2b
sete al
mov dword [ebp - 0x168], eax
test edx, edx
je 0x4ea228
push ecx
lea edx, [ebp - 0x14c]
mov ecx, edi
call fcn.004ea6c3
test eax, eax
je 0x4ea0e2
push eax
push 0x1990192
call dword [sym.imp.certcli.dll_Ordinal_357]
jmp 0x4ea0e8
lea edi, [ebp - 0x14c]
cmp byte [ebp - 0x161], 0x2b
jne 0x4ea104
mov ecx, 0x430a10
mov eax, dword [ebp - 0x168]
mov dword [ebp - 0x168], eax
jmp 0x4ea109
mov ecx, 0x430a14
push ecx
push edi
call dword [sym.imp.msvcrt.dll_fopen]
pop ecx
pop ecx
mov esi, eax
test esi, esi
je 0x4ea1ae
cmp dword [ebp - 0x168], 0
je 0x4ea22a
push 0x430a34
call dword [sym.imp.msvcrt.dll__wgetenv]
pop ecx
test eax, eax
je 0x4ea14e
mov ecx, eax
call fcn.004c6da3
mov dword [ebp - 0x168], eax
cmp eax, 0x80000
jae 0x4ea158
mov dword [ebp - 0x168], 0x80000
push 2
push ebx
push esi
call dword [sym.imp.msvcrt.dll_fseek]
add esp, 0xc
test eax, eax
jne 0x4ea199
cmp dword [ebp - 0x168], 0xffffffff
je 0x4ea199
push esi
call dword [sym.imp.msvcrt.dll_ftell]
pop ecx
test eax, eax
js 0x4ea186
cmp dword [ebp - 0x168], eax
jae 0x4ea199
push esi
call dword [sym.imp.msvcrt.dll_fclose]
pop ecx
mov dword [ebp - 0x168], ebx
jmp 0x4ea104
push esi
push 1
push 0x4a
push 0x430b40
call dword [sym.imp.msvcrt.dll_fwrite]
add esp, 0x10
jmp 0x4ea22a
call dword [sym.imp.msvcrt.dll__errno]
mov esi, dword [eax]
push edi
xor cl, cl
call fcn.004ea7a9
mov dword [ebp - 0x160], ebx
push 0xffffffffffffffff
push edi
call dword [sym.imp.KERNEL32.dll_GetACP]
mov edx, eax
lea ecx, [ebp - 0x160]
call fcn.004c66c1
push esi
push 0x1ad0192
push dword [ebp - 0x160]
call dword [sym.imp.certcli.dll_Ordinal_359]
push dword [ebp - 0x160]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov edi, 0x80070002
cmp dword [ebp - 0x168], 0
mov eax, 0x430a24
jne 0x4ea210
mov eax, 0x430a2c
push edi
push 0x1af0192
push eax
call dword [sym.imp.certcli.dll_Ordinal_359]
mov esi, dword [ebp - 0x170]
jmp 0x4ea397
mov esi, ebx
mov eax, dword [0x519ae0]
test eax, eax
je 0x4ea23b
push eax
call dword [sym.imp.msvcrt.dll_fclose]
pop ecx
mov dword [0x519ae0], esi
cmp dword [ebp - 0x174], 0
je 0x4ea252
push edi
mov cl, 1
call fcn.004ea7a9
mov esi, dword [ebp - 0x170]
test esi, esi
je 0x4ea26f
push 0x5198cc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov dword [ebp - 0x170], ebx
mov esi, ebx
lea ecx, [ebp - 0x17c]
call fcn.004c68d1
push 0x3b4
mov edx, 0x1e3
call fcn.004e9daf
push 4
push 0x4e9e60
call dword [sym.imp.certcli.dll_Ordinal_366]
mov dword [0x519ad4], 0x4e9ec0
push ebx
push ebx
push dword [ebp - 0x17c]
push ebx
push ebx
push ebx
mov edx, 0x1e8
lea edi, [edx - 0x56]
mov ecx, edi
call fcn.004e9b0c
lea eax, [ebp - 0x16c]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
lea eax, [ebp - 0x15c]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0x178]
push eax
lea eax, [ebp - 0x15c]
push eax
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
lea edx, [ebp - 0x16c]
lea ecx, [ebp - 0x178]
call fcn.004a0bca
test eax, eax
jne 0x4ea314
mov dword [ebp - 0x160], ebx
lea edx, [ebp - 0x178]
lea ecx, [ebp - 0x16c]
call fcn.004a0bca
mov dword [ebp - 0x188], eax
fild dword [ebp - 0x188]
test eax, eax
jns 0x4ea32a
fadd dword [0x4347a8]
fstp dword [ebp - 0x174]
fld dword [ebp - 0x174]
fdiv qword [0x434798]
fstp dword [ebp - 0x174]
fld dword [ebp - 0x174]
fstp qword [ebp - 0x18c]
cmp dword [ebp - 0x160], 0
mov eax, 0x4067a4
jne 0x4ea361
mov eax, 0x405b64
push ecx
push ecx
fld qword [ebp - 0x18c]
fstp qword [esp]
push eax
push 0x430a54
push 0x14
lea eax, [ebp - 0x40]
push eax
call fcn.0043ec15
add esp, 0x18
push ebx
push ebx
lea eax, [ebp - 0x40]
push eax
push ebx
push ebx
push ebx
mov edx, 0x1f0
mov ecx, edi
call fcn.004e9b0c
mov edi, ebx
test esi, esi
je 0x4ea3a6
push 0x5198cc
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
je 0x4ea3c4
cmp dword [ebp - 0x180], 0
je 0x4ea3c4
push 0x5198cc
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
mov dword [0x519ad8], ebx
cmp dword [ebp - 0x17c], 0
je 0x4ea3d9
push dword [ebp - 0x17c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
call fcn.00503d47
ret