Function at 0x486c70
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
mov eax, dword [0x6552e0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [0x65a498], 0xffffffff
mov eax, 4
shl eax, 1
mov dword [eax + 0x65a4a0], 0xffffffff
mov ecx, 4
shl ecx, 0
mov dword [ecx + 0x65a4a0], 0xffffffff
mov edx, 4
imul eax, edx, 0
mov dword [eax + 0x65a4a0], 0xffffffff
mov dword [0x65a4b0], 0xffffffff
mov ecx, dword [0x65a4b0]
mov dword [0x65a4ac], ecx
mov edx, dword [0x65a4ac]
mov dword [ebp - 0x188], edx
mov dword [0x65a4b8], 0
mov eax, dword [0x65a4b8]
mov dword [0x65a4b4], eax
mov ecx, dword [0x65a4b4]
mov dword [0x65a49c], ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.00484900
add esp, 4
cmp dword [ebp + 8], 0
je 0x486e5e
mov eax, dword [ebp + 8]
mov dword [eax], 0
push 0x5aef78
push 0x5aef80
call fcn.0051fd23
add esp, 4
push eax
call fcn.0052a3e0
add esp, 8
mov dword [0x65a4b4], eax
cmp dword [0x65a4b4], 0
jne 0x486d51
jmp 0x487076
push 0x180
push 0x4302
mov ecx, dword [0x65a4b4]
push ecx
call fcn.00536c30
add esp, 0xc
mov dword [0x65a4ac], eax
cmp dword [0x65a4ac], 0xffffffff
jne 0x486d7d
jmp 0x487076
mov edx, dword [0x65a4ac]
push edx
call fcn.00487470
add esp, 4
mov dword [ebp - 0x18c], eax
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x18c]
mov dword [eax + 0x65a4a0], ecx
mov edx, 4
shl edx, 1
mov eax, dword [ebp - 0x18c]
mov dword [edx + 0x65a4a0], eax
cmp dword [ebp + 0xc], 0
jne 0x486e39
push 0x5aef88
push 0x5aef90
call fcn.0051fd23
add esp, 4
push eax
call fcn.0052a3e0
add esp, 8
mov dword [0x65a49c], eax
cmp dword [0x65a49c], 0
jne 0x486ded
jmp 0x487076
push 0x180
push 0x300
mov ecx, dword [0x65a49c]
push ecx
call fcn.00536c30
add esp, 0xc
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xffffffff
jne 0x486e1a
jmp 0x487076
mov edx, dword [ebp - 0x188]
push edx
call fcn.00487470
add esp, 4
mov ecx, 4
imul edx, ecx, 0
mov dword [edx + 0x65a4a0], eax
jmp 0x486e5e
push 0x5aef98
mov eax, dword [0x65a4b4]
push eax
call fcn.00514970
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
cmp dword [edx], 0
jne 0x486e5e
jmp 0x487076
cmp dword [ebp + 0xc], 0
je 0x486f03
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
push 0x5aef9c
push str.TEMP
call fcn.0051fd23
add esp, 4
push eax
call fcn.0052a3e0
add esp, 8
mov dword [0x65a4b8], eax
cmp dword [0x65a4b8], 0
jne 0x486e9f
jmp 0x487076
push 0x180
push 0x8302
mov ecx, dword [0x65a4b8]
push ecx
call fcn.00536c30
add esp, 0xc
mov dword [0x65a4b0], eax
cmp dword [0x65a4b0], 0xffffffff
jne 0x486ecb
jmp 0x487076
push 0x5aefac
mov edx, dword [0x65a4b0]
push edx
call fcn.00534c20
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
cmp dword [edx], 0
jne 0x486ef1
jmp 0x487076
mov eax, dword [ebp + 0x10]
mov dword [0x65a4bc], eax
mov eax, 1
jmp 0x48707d
push 1
push 0x65a4a0
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00487320
add esp, 0xc
cmp eax, 0xffffffff
jne 0x486f27
mov dword [ebp - 0x190], 0
jmp 0x486f31
mov dword [ebp - 0x190], 1
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0
jne 0x486fb1
call fcn.00470ca0
push eax
push 0x5aefb0
lea eax, [ebp - 0x184]
push eax
call fcn.0041c540
add esp, 0xc
lea ecx, [ebp - 0x184]
sub eax, ecx
mov dword [ebp - 0x198], eax
push 0
lea edx, [ebp - 0x19c]
push edx
mov eax, dword [ebp - 0x198]
push eax
lea ecx, [ebp - 0x184]
push ecx
mov edx, 4
shl edx, 0
mov eax, dword [edx + 0x65a4a0]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 4
shl ecx, 0
mov edx, dword [ecx + 0x65a4a0]
push edx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x486fcd
push 0
mov eax, dword [0x65a498]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call fcn.005396bd
add esp, 0xc
call fcn.00487300
cmp dword [ebp + 8], 0
je 0x487066
cmp dword [0x65a4ac], 0xffffffff
je 0x486ff9
mov edx, dword [0x65a4ac]
push edx
call fcn.00535aa0
add esp, 4
mov dword [0x65a4ac], 0xffffffff
mov eax, dword [ebp - 0x188]
push eax
call fcn.00535aa0
add esp, 4
push 0x5aefe4
mov ecx, dword [0x65a4b4]
push ecx
call fcn.00514970
add esp, 8
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp + 8]
cmp dword [eax], 0
jne 0x487066
call fcn.005225a0
mov ecx, dword [eax]
push ecx
call fcn.00522760
add esp, 4
push eax
mov edx, dword [0x65a4b4]
push edx
push str._error_opening_temp_file___s_:__s_
lea eax, [ebp - 0x184]
push eax
call fcn.0040ad40
add esp, 0x10
lea ecx, [ebp - 0x184]
push ecx
call fcn.00487250
add esp, 4
jmp 0x487076
mov eax, dword [ebp - 0x194]
jmp 0x48707d
call fcn.00487490
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0050ce40
mov esp, ebp
pop ebp
ret