Function at 0x4d7420
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 8
mov dword [esp], edx
mov esi, ecx
mov ebx, dword [ecx]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebx], 0
je 0x4d7479
xor ebp, ebp
mov edi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[eax + eax]
nop dword [eax + eax]
push 2
call edi
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add ebp, 1
cmp ebp, dword [ebx]
jne 0x4d7460
mov ebp, dword [esp + 0x20]
mov byte [ebx + 4], 0
mov ebx, dword [esi]
mov ecx, dword [esp]
test ecx, ecx
je 0x4d7493
mov edx, ebx
call fcn.004d2a40
jmp 0x4d74b0
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov byte [ebx + 4], 1
mov esi, dword [esi]
mov bl, byte [esi + 4]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
test ebp, ebp
jne 0x4d74e2
test bl, bl
jne 0x4d74e2
push eax
push 1
push 2
push 0x50e2ca
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov edi, dword [esi]
jmp 0x4d7531
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [esi], 0
je 0x4d752b
xor edi, edi
mov ebx, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push 2
call ebx
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [esi]
jne 0x4d7510
jmp 0x4d752d
xor edi, edi
mov byte [esi + 4], 0
add edi, 1
mov dword [esi], edi
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7b
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
test ebp, ebp
je 0x4d7658
mov ebx, dword [esp + 0x1c]
lea edi, [ebx + ebp*4]
mov al, 1
mov ebp, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov dword [esp + 4], edi
jmp 0x4d7597
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov edi, dword [esp + 4]
mov byte [esi + 4], 1
add ebx, 4
xor eax, eax
cmp ebx, edi
je 0x4d7632
mov ecx, dword [ebx]
test al, 1
je 0x4d75b0
test ecx, ecx
je 0x4d7614
mov edx, esi
call fcn.004d2a40
jmp 0x4d758a
mov dword [esp], ecx
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [esi], 0
je 0x4d75f9
xor edi, edi
nop
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [esi]
jne 0x4d75e0
mov byte [esi + 4], 0
mov ecx, dword [esp]
test ecx, ecx
je 0x4d7569
mov edx, esi
call fcn.004d2a40
jmp 0x4d7582
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x4d758a
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [esi], 0xffffffff
cmp dword [esp + 0x20], 0
je 0x4d7671
mov byte [esi + 4], 1
jmp 0x4d7671
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [esi], 0xffffffff
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret