Function at 0x4cdfb0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xfffffff0
push ebx
push esi
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov esi, edx
mov ebx, eax
xor eax, eax
push ebp
push 0x4ce4db
push dword fs:[eax]
mov dword fs:[eax], esp
mov byte [ebp - 1], 0
push 0
push 0x80
push 2
push 0
push 1
push 0x40000000
mov eax, esi
call fcn.00405278
push eax
call sub.kernel32.dll_CreateFileA_1
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0xffffffff
je 0x4ce4c5
xor eax, eax
push ebp
push 0x4ce4be
push dword fs:[eax]
mov dword fs:[eax], esp
xor eax, eax
mov al, bl
cmp eax, 0x80
jg 0x4ce072
je 0x4ce2ab
cmp eax, 0x40
jg 0x4ce052
je 0x4ce1b7
sub eax, 1
jb 0x4ce0c3
sub eax, 0xf
je 0x4ce100
sub eax, 0x10
je 0x4ce13d
sub eax, 0x10
je 0x4ce17a
jmp 0x4ce488
sub eax, 0x50
je 0x4ce1f4
sub eax, 0x10
je 0x4ce231
sub eax, 0x10
je 0x4ce26e
jmp 0x4ce488
cmp eax, 0xc0
jg 0x4ce0a1
je 0x4ce39f
sub eax, 0x90
je 0x4ce2e8
sub eax, 0x10
je 0x4ce325
sub eax, 0x10
je 0x4ce362
jmp 0x4ce488
sub eax, 0xd0
je 0x4ce3dc
sub eax, 0x10
je 0x4ce416
sub eax, 0x10
je 0x4ce450
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdb38
push eax
xor eax, eax
call fcn.004cdb38
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce0f2
mov al, 2
call fcn.004cdb38
cmp eax, dword [ebp - 0xc]
je 0x4ce0f6
xor eax, eax
jmp 0x4ce0f8
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdba0
push eax
xor eax, eax
call fcn.004cdba0
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce12f
mov al, 2
call fcn.004cdba0
cmp eax, dword [ebp - 0xc]
je 0x4ce133
xor eax, eax
jmp 0x4ce135
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdc08
push eax
xor eax, eax
call fcn.004cdc08
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce16c
mov al, 2
call fcn.004cdc08
cmp eax, dword [ebp - 0xc]
je 0x4ce170
xor eax, eax
jmp 0x4ce172
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdc70
push eax
xor eax, eax
call fcn.004cdc70
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce1a9
mov al, 2
call fcn.004cdc70
cmp eax, dword [ebp - 0xc]
je 0x4ce1ad
xor eax, eax
jmp 0x4ce1af
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdcd8
push eax
xor eax, eax
call fcn.004cdcd8
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce1e6
mov al, 2
call fcn.004cdcd8
cmp eax, dword [ebp - 0xc]
je 0x4ce1ea
xor eax, eax
jmp 0x4ce1ec
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdd40
push eax
xor eax, eax
call fcn.004cdd40
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce223
mov al, 2
call fcn.004cdd40
cmp eax, dword [ebp - 0xc]
je 0x4ce227
xor eax, eax
jmp 0x4ce229
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdda8
push eax
xor eax, eax
call fcn.004cdda8
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce260
mov al, 2
call fcn.004cdda8
cmp eax, dword [ebp - 0xc]
je 0x4ce264
xor eax, eax
jmp 0x4ce266
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cde10
push eax
xor eax, eax
call fcn.004cde10
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce29d
mov al, 2
call fcn.004cde10
cmp eax, dword [ebp - 0xc]
je 0x4ce2a1
xor eax, eax
jmp 0x4ce2a3
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cde78
push eax
xor eax, eax
call fcn.004cde78
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce2da
mov al, 2
call fcn.004cde78
cmp eax, dword [ebp - 0xc]
je 0x4ce2de
xor eax, eax
jmp 0x4ce2e0
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdee0
push eax
xor eax, eax
call fcn.004cdee0
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce317
mov al, 2
call fcn.004cdee0
cmp eax, dword [ebp - 0xc]
je 0x4ce31b
xor eax, eax
jmp 0x4ce31d
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdad0
push eax
xor eax, eax
call fcn.004cdad0
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce354
mov al, 2
call fcn.004cdad0
cmp eax, dword [ebp - 0xc]
je 0x4ce358
xor eax, eax
jmp 0x4ce35a
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cda68
push eax
xor eax, eax
call fcn.004cda68
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce391
mov al, 2
call fcn.004cda68
cmp eax, dword [ebp - 0xc]
je 0x4ce395
xor eax, eax
jmp 0x4ce397
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cda00
push eax
xor eax, eax
call fcn.004cda00
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce3ce
mov al, 2
call fcn.004cda00
cmp eax, dword [ebp - 0xc]
je 0x4ce3d2
xor eax, eax
jmp 0x4ce3d4
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cdf48
push eax
xor eax, eax
call fcn.004cdf48
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce40b
mov al, 2
call fcn.004cdf48
cmp eax, dword [ebp - 0xc]
je 0x4ce40f
xor eax, eax
jmp 0x4ce411
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cd998
push eax
xor eax, eax
call fcn.004cd998
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce445
mov al, 2
call fcn.004cd998
cmp eax, dword [ebp - 0xc]
je 0x4ce449
xor eax, eax
jmp 0x4ce44b
mov al, 1
mov byte [ebp - 1], al
jmp 0x4ce488
push 0
lea eax, [ebp - 0xc]
push eax
mov al, 2
call fcn.004cd930
push eax
xor eax, eax
call fcn.004cd930
push eax
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_WriteFile_1
test eax, eax
je 0x4ce47f
mov al, 2
call fcn.004cd930
cmp eax, dword [ebp - 0xc]
je 0x4ce483
xor eax, eax
jmp 0x4ce485
mov al, 1
mov byte [ebp - 1], al
cmp byte [ebp - 1], 0
jne 0x4ce4a7
mov eax, esi
call fcn.00405278
mov edx, eax
lea eax, [ebp - 0x10]
call fcn.00404f9c
mov eax, dword [ebp - 0x10]
call fcn.0040b5b0
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ce4c5
mov eax, dword [ebp - 8]
push eax
call sub.kernel32.dll_CloseHandle_1
ret
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x4ce4e2
lea eax, [ebp - 0x10]
call fcn.00404dac
ret