Function at 0x4b1808
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4b1d33
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
mov eax, esi
call fcn.00404b88
push eax
call sub.kernel32.dll_CreateFileA
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
je 0x4b1d1d
xor eax, eax
push ebp
push 0x4b1d16
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov al, bl
cmp eax, 0x80
jg 0x4b18ca
je 0x4b1b03
cmp eax, 0x40
jg 0x4b18aa
je 0x4b1a0f
sub eax, 1
jb 0x4b191b
sub eax, 0xf
je 0x4b1958
sub eax, 0x10
je 0x4b1995
sub eax, 0x10
je 0x4b19d2
jmp 0x4b1ce0
sub eax, 0x50
je 0x4b1a4c
sub eax, 0x10
je 0x4b1a89
sub eax, 0x10
je 0x4b1ac6
jmp 0x4b1ce0
cmp eax, 0xc0
jg 0x4b18f9
je 0x4b1bf7
sub eax, 0x90
je 0x4b1b40
sub eax, 0x10
je 0x4b1b7d
sub eax, 0x10
je 0x4b1bba
jmp 0x4b1ce0
sub eax, 0xd0
je 0x4b1c34
sub eax, 0x10
je 0x4b1c6e
sub eax, 0x10
je 0x4b1ca8
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b12b4
push eax
xor eax, eax
call fcn.004b12b4
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b194a
mov al, 2
call fcn.004b12b4
cmp eax, dword [ebp - 0xc]
je 0x4b194e
xor eax, eax
jmp 0x4b1950
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1330
push eax
xor eax, eax
call fcn.004b1330
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1987
mov al, 2
call fcn.004b1330
cmp eax, dword [ebp - 0xc]
je 0x4b198b
xor eax, eax
jmp 0x4b198d
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b13ac
push eax
xor eax, eax
call fcn.004b13ac
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b19c4
mov al, 2
call fcn.004b13ac
cmp eax, dword [ebp - 0xc]
je 0x4b19c8
xor eax, eax
jmp 0x4b19ca
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1428
push eax
xor eax, eax
call fcn.004b1428
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1a01
mov al, 2
call fcn.004b1428
cmp eax, dword [ebp - 0xc]
je 0x4b1a05
xor eax, eax
jmp 0x4b1a07
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b14a4
push eax
xor eax, eax
call fcn.004b14a4
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1a3e
mov al, 2
call fcn.004b14a4
cmp eax, dword [ebp - 0xc]
je 0x4b1a42
xor eax, eax
jmp 0x4b1a44
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1520
push eax
xor eax, eax
call fcn.004b1520
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1a7b
mov al, 2
call fcn.004b1520
cmp eax, dword [ebp - 0xc]
je 0x4b1a7f
xor eax, eax
jmp 0x4b1a81
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b159c
push eax
xor eax, eax
call fcn.004b159c
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1ab8
mov al, 2
call fcn.004b159c
cmp eax, dword [ebp - 0xc]
je 0x4b1abc
xor eax, eax
jmp 0x4b1abe
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1618
push eax
xor eax, eax
call fcn.004b1618
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1af5
mov al, 2
call fcn.004b1618
cmp eax, dword [ebp - 0xc]
je 0x4b1af9
xor eax, eax
jmp 0x4b1afb
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1694
push eax
xor eax, eax
call fcn.004b1694
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1b32
mov al, 2
call fcn.004b1694
cmp eax, dword [ebp - 0xc]
je 0x4b1b36
xor eax, eax
jmp 0x4b1b38
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1710
push eax
xor eax, eax
call fcn.004b1710
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1b6f
mov al, 2
call fcn.004b1710
cmp eax, dword [ebp - 0xc]
je 0x4b1b73
xor eax, eax
jmp 0x4b1b75
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1238
push eax
xor eax, eax
call fcn.004b1238
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1bac
mov al, 2
call fcn.004b1238
cmp eax, dword [ebp - 0xc]
je 0x4b1bb0
xor eax, eax
jmp 0x4b1bb2
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b11bc
push eax
xor eax, eax
call fcn.004b11bc
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1be9
mov al, 2
call fcn.004b11bc
cmp eax, dword [ebp - 0xc]
je 0x4b1bed
xor eax, eax
jmp 0x4b1bef
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1140
push eax
xor eax, eax
call fcn.004b1140
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1c26
mov al, 2
call fcn.004b1140
cmp eax, dword [ebp - 0xc]
je 0x4b1c2a
xor eax, eax
jmp 0x4b1c2c
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b178c
push eax
xor eax, eax
call fcn.004b178c
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1c63
mov al, 2
call fcn.004b178c
cmp eax, dword [ebp - 0xc]
je 0x4b1c67
xor eax, eax
jmp 0x4b1c69
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b10c4
push eax
xor eax, eax
call fcn.004b10c4
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1c9d
mov al, 2
call fcn.004b10c4
cmp eax, dword [ebp - 0xc]
je 0x4b1ca1
xor eax, eax
jmp 0x4b1ca3
mov al, 1
mov byte [ebp - 1], al
jmp 0x4b1ce0
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004b1048
push eax
xor eax, eax
call fcn.004b1048
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4b1cd7
mov al, 2
call fcn.004b1048
cmp eax, dword [ebp - 0xc]
je 0x4b1cdb
xor eax, eax
jmp 0x4b1cdd
mov al, 1
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
jne 0x4b1cff
mov eax, esi
call fcn.00404b88
mov edx, eax
lea eax, [ebp - 0x10]
call fcn.004048c0
mov eax, dword [ebp - 0x10]
call fcn.0040998c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b1d1d
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_CloseHandle
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4b1d3a
lea eax, [ebp - 0x10]
call fcn.004046c8
ret