Function at 0x41c6f0
Capabilities:
Write file on windows

Disassembly:
sub esp, 0xb8
push ebx
mov ebx, dword [esp + 0xc4]
mov eax, 0x84
push ebp
push esi
push edi
mov word [esp + 0x40], ax
mov eax, 0x20
push ebx
mov word [esp + 0x20], ax
call sym.find_string.exe__sys_error_none_4
mov ebp, dword [esp + 0xd4]
mov edi, dword [ebp]
cmp byte [edi + 0x298a], 0
jne 0x41ca3f
mov eax, dword [esp + 0xcc]
lea ecx, [esp + 0x40]
push ebx
push ecx
mov byte [esp + 0x1b], 0
mov byte [eax], 0
lea eax, [edi + 0x5c]
push eax
call sym.find_string.exe__file_read_env_12
mov esi, dword [esp + 0xd8]
lea ecx, [edi + 0x568]
mov eax, dword [esi]
add eax, 0x50c
push eax
push ecx
call sym.find_string.exe__string_copy_8
mov ecx, dword [esi]
mov eax, dword [edi + 0x970]
push ebx
mov dword [ecx + 0x914], eax
call sym.find_string.exe__file_eof_4
test al, al
jne 0x41ca3f
push ebx
call sym.find_string.exe__sys_error_4
test al, al
jne 0x41ca50
cmp word [esp + 0x42], 5
jl 0x41ca3f
mov eax, 1
nop word [eax + eax]
cmp byte [esp + eax + 0x43], 0x20
jne 0x41ca3f
inc eax
cmp eax, 4
jle 0x41c7b0
cmp byte [esp + 0x48], 0x2e
jne 0x41ca5d
push ebx
lea eax, [esp + 0x20]
mov dword [esp + 0x18], 6
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x4c]
push eax
call sym.find_string.exe__string_token_16
push ebx
call sym.find_string.exe__sys_error_4
test al, al
je 0x41c821
push 1
call fcn.0040af0c
push eax
push 0x15
push 1
push str.Missing_command_name.
call fcn.0040b1a1
push 0x431ec0
call fcn.00401410
add esp, 0x18
push ebp
call fcn.0041be40
jmp 0x41ca00
lea eax, [esp + 0x1c]
push eax
call sym.find_string.exe__string_upcase_4
lea eax, [esp + 0x18]
push eax
push str.FILL_NFILL_BLANK
lea eax, [esp + 0x24]
push eax
call sym.find_string.exe__string_tkpick80_12
mov eax, dword [esp + 0x18]
sub eax, 1
je 0x41c931
sub eax, 1
je 0x41c911
sub eax, 1
je 0x41c901
push 1
call fcn.0040af0c
push eax
push 0x16
push 1
push 0x431ec4
call fcn.0040b1a1
mov ax, word [esp + 0x32]
add esp, 0x14
cmp ax, 0x20
jle 0x41c89e
cwde
push 0x4354b8
sub eax, 0x20
push eax
push 0x431edc
call fcn.00401410
mov ax, word [esp + 0x2a]
add esp, 0xc
test ax, ax
jle 0x41c8b5
cmp ax, 0x20
jge 0x41c8ae
movsx esi, ax
jmp 0x41c8b7
mov esi, 0x20
jmp 0x41c8b7
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [esp + 0x2c]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 2
push 1
push 0x431ee0
call fcn.0040b1a1
push 0x431ee4
call fcn.00401410
add esp, 0x2c
push ebp
call fcn.0041be40
mov esi, dword [esp + 0xd8]
jmp 0x41ca00
xor eax, eax
mov byte [esp + 0x13], 1
mov word [edi + 0x986], ax
jmp 0x41c938
cmp byte [edi + 0x298b], 0
je 0x41c928
xor eax, eax
mov byte [esp + 0x13], 1
mov word [edi + 0x986], ax
mov byte [edi + 0x298b], 0
jmp 0x41c938
mov byte [edi + 0x298b], 1
push ebx
lea eax, [esp + 0x20]
push eax
lea eax, [esp + 0x1c]
push eax
lea eax, [esp + 0x4c]
push eax
call sym.find_string.exe__string_token_16
push ebx
call sym.find_string.exe__string_eos_4
test al, al
jne 0x41c9f9
push 1
call fcn.0040af0c
push eax
push 0x25
push 1
push str.Too_many_cmds.__First_excess_cmd_is__
call fcn.0040b1a1
mov ax, word [esp + 0x32]
add esp, 0x14
cmp ax, 0x20
jle 0x41c99b
cwde
push 0x4354b9
sub eax, 0x20
push eax
push 0x431f10
call fcn.00401410
mov ax, word [esp + 0x2a]
add esp, 0xc
test ax, ax
jle 0x41c9b2
cmp ax, 0x20
jge 0x41c9ab
movsx esi, ax
jmp 0x41c9b4
mov esi, 0x20
jmp 0x41c9b4
xor esi, esi
push 1
call fcn.0040af0c
push eax
push esi
lea eax, [esp + 0x2c]
push 1
push eax
call fcn.0040b1a1
push 1
call fcn.0040af0c
push eax
push 2
push 1
push 0x431f14
call fcn.0040b1a1
push 0x431f18
call fcn.00401410
add esp, 0x2c
push ebp
call fcn.0041be40
mov esi, dword [esp + 0xd8]
cmp byte [esp + 0x13], 0
jne 0x41ca76
push ebx
lea eax, [esp + 0x44]
push eax
lea eax, [edi + 0x5c]
push eax
call sym.find_string.exe__file_read_env_12
mov eax, dword [esi]
add eax, 0x50c
push eax
lea eax, [edi + 0x568]
push eax
call sym.find_string.exe__string_copy_8
mov ecx, dword [esi]
mov eax, dword [edi + 0x970]
push ebx
mov dword [ecx + 0x914], eax
call sym.find_string.exe__file_eof_4
test al, al
je 0x41c787
mov eax, dword [esp + 0xcc]
mov byte [eax], 1
mov byte [edi + 0x298a], 1
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb8
ret 0x14
push dword [esp + 0xdc]
lea eax, [edi + 0x984]
push ebp
push eax
lea eax, [esp + 0x4c]
push eax
call fcn.0041c230
mov eax, 1
mov word [edi + 0x2988], ax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0xb8
ret 0x14