Function at 0x486fb0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
mov eax, dword [0x659780]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [0x65e9a0], 0xffffffff
mov eax, 4
shl eax, 1
mov dword [eax + 0x65e9a8], 0xffffffff
mov ecx, 4
shl ecx, 0
mov dword [ecx + 0x65e9a8], 0xffffffff
mov edx, 4
imul eax, edx, 0
mov dword [eax + 0x65e9a8], 0xffffffff
mov dword [0x65e9b8], 0xffffffff
mov ecx, dword [0x65e9b8]
mov dword [0x65e9b4], ecx
mov edx, dword [0x65e9b4]
mov dword [ebp - 0x188], edx
mov dword [0x65e9c0], 0
mov eax, dword [0x65e9c0]
mov dword [0x65e9bc], eax
mov ecx, dword [0x65e9bc]
mov dword [0x65e9a4], ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.00484af0
add esp, 4
cmp dword [ebp + 8], 0
je 0x48719e
mov eax, dword [ebp + 8]
mov dword [eax], 0
push 0x5b3268
push 0x5b3270
call fcn.005201f3
add esp, 4
push eax
call fcn.0052a8b0
add esp, 8
mov dword [0x65e9bc], eax
cmp dword [0x65e9bc], 0
jne 0x487091
jmp 0x4873b6
push 0x180
push 0x4302
mov ecx, dword [0x65e9bc]
push ecx
call fcn.005368d0
add esp, 0xc
mov dword [0x65e9b4], eax
cmp dword [0x65e9b4], 0xffffffff
jne 0x4870bd
jmp 0x4873b6
mov edx, dword [0x65e9b4]
push edx
call fcn.004877b0
add esp, 4
mov dword [ebp - 0x18c], eax
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x18c]
mov dword [eax + 0x65e9a8], ecx
mov edx, 4
shl edx, 1
mov eax, dword [ebp - 0x18c]
mov dword [edx + 0x65e9a8], eax
cmp dword [ebp + 0xc], 0
jne 0x487179
push 0x5b3278
push 0x5b3280
call fcn.005201f3
add esp, 4
push eax
call fcn.0052a8b0
add esp, 8
mov dword [0x65e9a4], eax
cmp dword [0x65e9a4], 0
jne 0x48712d
jmp 0x4873b6
push 0x180
push 0x300
mov ecx, dword [0x65e9a4]
push ecx
call fcn.005368d0
add esp, 0xc
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xffffffff
jne 0x48715a
jmp 0x4873b6
mov edx, dword [ebp - 0x188]
push edx
call fcn.004877b0
add esp, 4
mov ecx, 4
imul edx, ecx, 0
mov dword [edx + 0x65e9a8], eax
jmp 0x48719e
push 0x5b3288
mov eax, dword [0x65e9bc]
push eax
call fcn.00514e20
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
cmp dword [edx], 0
jne 0x48719e
jmp 0x4873b6
cmp dword [ebp + 0xc], 0
je 0x487243
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
push 0x5b328c
push str.TEMP
call fcn.005201f3
add esp, 4
push eax
call fcn.0052a8b0
add esp, 8
mov dword [0x65e9c0], eax
cmp dword [0x65e9c0], 0
jne 0x4871df
jmp 0x4873b6
push 0x180
push 0x8302
mov ecx, dword [0x65e9c0]
push ecx
call fcn.005368d0
add esp, 0xc
mov dword [0x65e9b8], eax
cmp dword [0x65e9b8], 0xffffffff
jne 0x48720b
jmp 0x4873b6
push 0x5b329c
mov edx, dword [0x65e9b8]
push edx
call fcn.005348c0
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
cmp dword [edx], 0
jne 0x487231
jmp 0x4873b6
mov eax, dword [ebp + 0x10]
mov dword [0x65e9c4], eax
mov eax, 1
jmp 0x4873bd
push 1
push 0x65e9a8
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00487660
add esp, 0xc
cmp eax, 0xffffffff
jne 0x487267
mov dword [ebp - 0x190], 0
jmp 0x487271
mov dword [ebp - 0x190], 1
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0
jne 0x4872f1
call fcn.00470e80
push eax
push 0x5b32a0
lea eax, [ebp - 0x184]
push eax
call fcn.0041c6b0
add esp, 0xc
lea ecx, [ebp - 0x184]
sub eax, ecx
mov dword [ebp - 0x198], eax
push 0
lea edx, [ebp - 0x19c]
push edx
mov eax, dword [ebp - 0x198]
push eax
lea ecx, [ebp - 0x184]
push ecx
mov edx, 4
shl edx, 0
mov eax, dword [edx + 0x65e9a8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 4
shl ecx, 0
mov edx, dword [ecx + 0x65e9a8]
push edx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x48730d
push 0
mov eax, dword [0x65e9a0]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call fcn.0053935d
add esp, 0xc
call fcn.00487640
cmp dword [ebp + 8], 0
je 0x4873a6
cmp dword [0x65e9b4], 0xffffffff
je 0x487339
mov edx, dword [0x65e9b4]
push edx
call fcn.00535740
add esp, 4
mov dword [0x65e9b4], 0xffffffff
mov eax, dword [ebp - 0x188]
push eax
call fcn.00535740
add esp, 4
push 0x5b32d4
mov ecx, dword [0x65e9bc]
push ecx
call fcn.00514e20
add esp, 8
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp + 8]
cmp dword [eax], 0
jne 0x4873a6
call fcn.00522a70
mov ecx, dword [eax]
push ecx
call fcn.00522c30
add esp, 4
push eax
mov edx, dword [0x65e9bc]
push edx
push str._error_opening_temp_file___s_:__s_
lea eax, [ebp - 0x184]
push eax
call fcn.0040aec0
add esp, 0x10
lea ecx, [ebp - 0x184]
push ecx
call fcn.00487590
add esp, 4
jmp 0x4873b6
mov eax, dword [ebp - 0x194]
jmp 0x4873bd
call fcn.004877d0
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0050d210
mov esp, ebp
pop ebp
ret