Function at 0x4d79d0
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xc
mov edi, edx
mov esi, ecx
mov eax, dword [esp + 0x28]
or eax, dword [esp + 0x20]
mov dword [esp + 8], ecx
je 0x4d7a31
mov esi, dword [esi]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [esi], 0
je 0x4d7a29
xor ebx, ebx
mov ebp, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add ebx, 1
cmp ebx, dword [esi]
jne 0x4d7a10
mov byte [esi + 4], 0
mov esi, dword [esp + 8]
mov ebx, dword [esi]
add dword [ebx], 1
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7b
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
mov eax, dword [esp + 0x20]
test eax, eax
je 0x4d7b5d
lea ebp, [edi + eax*4]
mov al, 1
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov dword [esp], ebp
jmp 0x4d7a95
push 2
call esi
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov ebp, dword [esp]
mov byte [ebx + 4], 1
add edi, 4
xor eax, eax
cmp edi, ebp
je 0x4d7b33
mov ecx, dword [edi]
test al, 1
je 0x4d7ab0
test ecx, ecx
je 0x4d7b15
mov edx, ebx
call fcn.004d2a40
jmp 0x4d7a88
mov dword [esp + 4], ecx
push 2
call esi
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call esi
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebx], 0
je 0x4d7af9
xor ebp, ebp
nop
push 2
call esi
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add ebp, 1
cmp ebp, dword [ebx]
jne 0x4d7ae0
mov byte [ebx + 4], 0
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4d7a68
mov edx, ebx
call fcn.004d2a40
jmp 0x4d7a81
push 2
call esi
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x4d7a88
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [ebx], 0xffffffff
cmp dword [esp + 0x20], 0
mov esi, dword [esp + 8]
je 0x4d7b76
mov byte [ebx + 4], 1
jmp 0x4d7b76
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [ebx], 0xffffffff
mov edi, dword [esi]
mov bl, byte [edi + 4]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp dword [esp + 0x28], 0
jne 0x4d7ba7
test bl, bl
jne 0x4d7ba7
push eax
push 1
push 2
push 0x50e2ca
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov esi, dword [edi]
jmp 0x4d7c01
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d7bfb
xor esi, esi
mov ebx, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[eax + eax]
nop
push 2
call ebx
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add esi, 1
cmp esi, dword [edi]
jne 0x4d7be0
jmp 0x4d7bfd
xor esi, esi
mov byte [edi + 4], 0
add esi, 1
mov dword [edi], esi
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7b
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
mov eax, dword [esp + 0x28]
test eax, eax
je 0x4d7d29
mov esi, dword [esp + 0x24]
lea ebx, [esi + eax*4]
mov al, 1
mov ebp, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov dword [esp], ebx
jmp 0x4d7c69
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov ebx, dword [esp]
mov byte [edi + 4], 1
add esi, 4
xor eax, eax
cmp esi, ebx
je 0x4d7d03
mov ecx, dword [esi]
test al, 1
je 0x4d7c80
test ecx, ecx
je 0x4d7ce5
mov edx, edi
call fcn.004d2a40
jmp 0x4d7c5c
mov dword [esp + 4], ecx
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d7cc9
xor ebx, ebx
nop
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add ebx, 1
cmp ebx, dword [edi]
jne 0x4d7cb0
mov byte [edi + 4], 0
mov ecx, dword [esp + 4]
test ecx, ecx
je 0x4d7c3c
mov edx, edi
call fcn.004d2a40
jmp 0x4d7c55
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x4d7c5c
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [edi], 0xffffffff
cmp dword [esp + 0x28], 0
je 0x4d7d42
mov byte [edi + 4], 1
jmp 0x4d7d42
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [edi], 0xffffffff
mov esi, dword [esp + 0x30]
mov edi, dword [esp + 0x2c]
mov eax, dword [esp + 8]
mov ebx, dword [eax]
mov al, byte [ebx + 4]
mov byte [esp + 4], al
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp byte [esp + 4], 0
je 0x4d7dc3
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebx], 0
je 0x4d7db9
xor ebp, ebp
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word [eax + eax]
push 2
call edi
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add ebp, 1
cmp ebp, dword [ebx]
jne 0x4d7da0
mov byte [ebx + 4], 0
mov edi, dword [esp + 0x2c]
jmp 0x4d7dd5
push eax
push 1
push 2
push 0x50e2ca
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
sub esi, edi
push edi
push esi
push str.__.s_
push eax
call fcn.004cf310
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
ret