Function at 0x4d88e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x53722b
mov eax, dword fs:[0]
push eax
sub esp, 0x258
mov eax, dword [0x580400]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, edx
mov dword [ebp - 0x70], ecx
cmp byte [0x5813b3], 0
mov eax, dword [ebp + 8]
mov dword [ebp - 0xb4], eax
jne 0x4d899e
push 0xfffffffffffffff5
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov esi, eax
cmp esi, 0xffffffff
jne 0x4d8942
push str.fslog.h:_Unable_to_get_console_handle_n
call fcn.00481b10
add esp, 4
jmp 0x4d8998
lea eax, [ebp - 0x6c]
mov dword [ebp - 0x6c], 0
push eax
push esi
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
test eax, eax
jne 0x4d8967
push str.fslog.h:_Unable_to_get_console_mode_n
call fcn.00481b10
add esp, 4
jmp 0x4d8998
mov eax, dword [ebp - 0x6c]
or eax, 4
push eax
push esi
mov dword [ebp - 0x6c], eax
call dword [sym.imp.KERNEL32.dll_SetConsoleMode]
test eax, eax
jne 0x4d898b
push str.fslog.h:_Unable_to_set_console_mode_n
call fcn.00481b10
add esp, 4
jmp 0x4d8998
mov byte [0x5813b3], 1
mov dword [0x5813b4], esi
mov eax, dword [ebp - 0xb4]
mov edx, eax
lea ecx, [ebp - 0x264]
call fcn.004d9d00
mov dword [ebp - 4], 0
lea ecx, [ebp - 0xe4]
mov edx, dword [edi + 8]
call fcn.00410a90
push 2
push 0x550cb4
push ecx
mov ecx, eax
mov byte [ebp - 4], 1
call fcn.0046c520
mov dword [ebp - 0xbc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xcc], xmm0
mov dword [ebp - 0xb8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xcc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xbc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 1
push 0x550cb0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 2
call fcn.00465e80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x21c], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xb8]
movq qword [ebp - 0x20c], xmm0
cmp ecx, 0xf
jbe 0x4d8a91
mov edx, dword [ebp - 0xcc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8a87
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d8adc
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 0
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
cmp ecx, 0xf
jbe 0x4d8aec
mov edx, dword [ebp - 0xe4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8ae2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4d8ae2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0053382f
add esp, 8
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd0], 0xf
mov byte [ebp - 0xe4], 0
mov byte [ebp - 4], 3
lea esi, [ebp - 0x13]
mov ecx, 0x25
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
mov ah, dl
shl al, 2
add ah, al
add ah, ah
sub cl, ah
add cl, 0x30
mov byte [esi], cl
mov ecx, edx
test ecx, ecx
jne 0x4d8b13
push ecx
lea eax, [ebp - 0x13]
push eax
push esi
lea ecx, [ebp - 0xfc]
call fcn.00469660
push 2
push 0x550cb4
push ecx
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 4
call fcn.0046c520
mov dword [ebp - 0x104], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x114], xmm0
mov dword [ebp - 0x100], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x114], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x104], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 1
push 0x550cb0
lea ecx, [ebp - 0x114]
mov byte [ebp - 4], 5
call fcn.00465e80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x8c], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 4
mov ecx, dword [ebp - 0x100]
movq qword [ebp - 0x7c], xmm0
cmp ecx, 0xf
jbe 0x4d8c19
mov edx, dword [ebp - 0x114]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8c0f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d8c64
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0xe8]
mov dword [ebp - 0x104], 0
mov dword [ebp - 0x100], 0xf
mov byte [ebp - 0x114], 0
cmp ecx, 0xf
jbe 0x4d8c74
mov edx, dword [ebp - 0xfc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8c6a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4d8c6a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0053382f
add esp, 8
mov dword [ebp - 0xec], 0
mov dword [ebp - 0xe8], 0xf
mov byte [ebp - 0xfc], 0
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x18c]
mov edx, dword [edi]
call fcn.00410a90
push 2
push 0x550cb4
push ecx
mov ecx, eax
mov byte [ebp - 4], 7
call fcn.0046c520
mov dword [ebp - 0xbc], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xcc], xmm0
mov dword [ebp - 0xb8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xcc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xbc], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 1
push 0x550cb0
lea ecx, [ebp - 0xcc]
mov byte [ebp - 4], 8
call fcn.00465e80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x174], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 7
mov ecx, dword [ebp - 0xb8]
movq qword [ebp - 0x164], xmm0
cmp ecx, 0xf
jbe 0x4d8d71
mov edx, dword [ebp - 0xcc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8d67
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d8dbc
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x178]
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xb8], 0xf
mov byte [ebp - 0xcc], 0
cmp ecx, 0xf
jbe 0x4d8dcc
mov edx, dword [ebp - 0x18c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8dc2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4d8dc2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0053382f
add esp, 8
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0xf
mov byte [ebp - 0x18c], 0
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x1a4]
mov edx, dword [edi + 4]
call fcn.00410a90
push 2
push 0x550cb4
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xa
call fcn.0046c520
mov dword [ebp - 0x11c], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x12c], xmm0
mov dword [ebp - 0x118], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x12c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x11c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 1
push 0x550cb0
lea ecx, [ebp - 0x12c]
mov byte [ebp - 4], 0xb
call fcn.00465e80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1d4], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x118]
movq qword [ebp - 0x1c4], xmm0
cmp ecx, 0xf
jbe 0x4d8eca
mov edx, dword [ebp - 0x12c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8ec0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d8f15
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x190]
mov dword [ebp - 0x11c], 0
mov dword [ebp - 0x118], 0xf
mov byte [ebp - 0x12c], 0
cmp ecx, 0xf
jbe 0x4d8f25
mov edx, dword [ebp - 0x1a4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d8f1b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4d8f1b
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0053382f
add esp, 8
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0xf
mov byte [ebp - 0x1a4], 0
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x15c]
mov edx, dword [edi]
call fcn.00410a90
push 2
push 0x550cb4
push ecx
mov ecx, eax
mov byte [ebp - 4], 0xd
call fcn.0046c520
mov dword [ebp - 0x134], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0x144], xmm0
mov dword [ebp - 0x130], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x144], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x134], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 1
push 0x550cb0
lea ecx, [ebp - 0x144]
mov byte [ebp - 4], 0xe
call fcn.00465e80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x1bc], xmm0
movq xmm0, qword [eax + 0x10]
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
mov byte [ebp - 4], 0xd
mov ecx, dword [ebp - 0x130]
movq qword [ebp - 0x1ac], xmm0
cmp ecx, 0xf
jbe 0x4d9026
mov edx, dword [ebp - 0x144]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d901c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9222
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x148]
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0xf
mov byte [ebp - 0x144], 0
cmp ecx, 0xf
jbe 0x4d907f
mov edx, dword [ebp - 0x15c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d9075
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9222
push ecx
push edx
call fcn.0053382f
add esp, 8
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0xf
mov byte [ebp - 0x15c], 0
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0xe4]
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0xd4], 0
push str.__
movups xmmword [ebp - 0xe4], xmm0
mov dword [ebp - 0xd0], 0
call fcn.0046a110
lea eax, [ebp - 0x8c]
mov byte [ebp - 4], 0x10
push eax
lea eax, [ebp - 0x174]
push eax
push dword [ebp - 0x70]
lea eax, [ebp - 0x1d4]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea edx, [ebp - 0xe4]
lea ecx, [ebp - 0x24c]
call fcn.004d81e0
mov byte [ebp - 4], 0xf
add esp, 0x14
mov ecx, dword [ebp - 0xd0]
cmp ecx, 0xf
jbe 0x4d9143
mov edx, dword [ebp - 0xe4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d9139
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9222
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 0xc
mov ecx, dword [ebp - 0x1a8]
cmp ecx, 0xf
jbe 0x4d9181
mov edx, dword [ebp - 0x1bc]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d9177
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9222
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 9
mov ecx, dword [ebp - 0x1c0]
cmp ecx, 0xf
jbe 0x4d91bb
mov edx, dword [ebp - 0x1d4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d91b1
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9222
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x160]
cmp ecx, 0xf
jbe 0x4d91f5
mov edx, dword [ebp - 0x174]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d91eb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4d9222
push ecx
push edx
call fcn.0053382f
add esp, 8
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x78]
cmp ecx, 0xf
jbe 0x4d9232
mov edx, dword [ebp - 0x8c]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4d9228
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4d9228
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0053382f
add esp, 8
push 0x40
lea eax, [ebp - 0x68]
mov byte [ebp - 4], 0x11
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0x74]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__time64]
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0x98]
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
lea eax, [ebp - 0x98]
push eax
push str._H:_M:_S
lea eax, [ebp - 0x68]
push 0x40
push eax
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov dword [ebp - 0x1f4], 0
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x1f0], 0
add esp, 0x28
lea edx, [ecx + 1]
movups xmmword [ebp - 0x204], xmm0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4d92a0
sub ecx, edx
lea eax, [ebp - 0x68]
push ecx
push eax
lea ecx, [ebp - 0x204]
call fcn.0046a110
mov edx, 0x25
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1a4]
call fcn.00410a90
push 2
push 0x550cb4
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x13
call fcn.0046c520
mov dword [ebp - 0xd4], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xe4], xmm0
mov dword [ebp - 0xd0], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xe4], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xd4], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 1
push 0x550cb0
lea ecx, [ebp - 0xe4]
mov byte [ebp - 4], 0x14
call fcn.00465e80
lea ecx, [ebp - 0xe4]
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x174], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x164], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
call fcn.00466000
lea ecx, [ebp - 0x1a4]
call fcn.00466000
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x18c]
mov edx, dword [edi]
call fcn.00410a90
push 2
push 0x550cb4
push ecx
mov ecx, eax
mov byte [ebp - 4], 0x16
call fcn.0046c520
mov dword [ebp - 0xec], 0
xorps xmm0, xmm0
movups xmmword [ebp - 0xfc], xmm0
mov dword [ebp - 0xe8], 0
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0xfc], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0xec], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
mov byte [eax], 0
push 1
push 0x550cb0
lea ecx, [ebp - 0xfc]
mov byte [ebp - 4], 0x17
call fcn.00465e80
movups xmm0, xmmword [eax]
movups xmmword [ebp - 0x8c], xmm0
movq xmm0, qword [eax + 0x10]
movq qword [ebp - 0x7c], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0xf
lea ecx, [ebp - 0xfc]
mov byte [eax], 0
call fcn.00466000
lea ecx, [ebp - 0x18c]
call fcn.00466000
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x12c]
mov edx, dword [edi + 4]
call fcn.00410a90
push eax
mov edx, 0x550cb4
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x144]
call fcn.00469060
push 0x550cb0
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x1bc]
call fcn.00469130
add esp, 8
lea ecx, [ebp - 0x144]
call fcn.00466000
lea ecx, [ebp - 0x12c]
call fcn.00466000
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0xcc]
mov edx, dword [edi]
call fcn.00410a90
push eax
mov edx, 0x550cb4
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x114]
call fcn.00469060
push 0x550cb0
mov edx, eax
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x1d4]
call fcn.00469130
add esp, 8
lea ecx, [ebp - 0x114]
call fcn.00466000
lea ecx, [ebp - 0xcc]
call fcn.00466000
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x15c]
push 0xc
xorps xmm0, xmm0
mov dword [ebp - 0x14c], 0
push str.__
movups xmmword [ebp - 0x15c], xmm0
mov dword [ebp - 0x148], 0
call fcn.0046a110
lea eax, [ebp - 0x174]
mov byte [ebp - 4], 0x1f
push eax
lea eax, [ebp - 0x8c]
push eax
lea eax, [ebp - 0x204]
push eax
lea eax, [ebp - 0x1bc]
push eax
lea eax, [ebp - 0x1d4]
push eax
lea edx, [ebp - 0x15c]
lea ecx, [ebp - 0x234]
call fcn.004d81e0
add esp, 0x14
lea ecx, [ebp - 0x15c]
call fcn.00466000
lea ecx, [ebp - 0x1d4]
call fcn.00466000
lea ecx, [ebp - 0x1bc]
call fcn.00466000
lea ecx, [ebp - 0x8c]
call fcn.00466000
lea ecx, [ebp - 0x174]
call fcn.00466000
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1ec]
push 0xb
xorps xmm0, xmm0
mov dword [ebp - 0x1dc], 0
push str.___n
movups xmmword [ebp - 0x1ec], xmm0
mov dword [ebp - 0x1d8], 0
call fcn.0046a110
lea eax, [ebp - 0x264]
mov byte [ebp - 4], 0x21
push eax
lea eax, [ebp - 0x21c]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x1ec]
lea ecx, [ebp - 0xb0]
call fcn.004d9a20
add esp, 0x10
lea ecx, [ebp - 0x1ec]
call fcn.00466000
lea ecx, [ebp - 0x234]
call fcn.00466000
lea ecx, [ebp - 0x204]
call fcn.00466000
lea ecx, [ebp - 0x24c]
call fcn.00466000
lea ecx, [ebp - 0x21c]
call fcn.00466000
lea ecx, [ebp - 0x264]
call fcn.00466000
cmp dword [ebp - 0x9c], 0xf
lea eax, [ebp - 0xb0]
push 0
cmova eax, dword [ebp - 0xb0]
push 0
push dword [ebp - 0xa0]
push eax
push dword [0x5813b4]
call dword [sym.imp.KERNEL32.dll_WriteFile]
lea ecx, [ebp - 0xb0]
call fcn.00466000
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.005335a0
mov esp, ebp
pop ebp
ret