Function at 0x4d7fb0
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x1c
mov dword [esp + 8], edx
mov al, byte [esp + 0x44]
mov byte [esp + 3], al
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov esi, dword [esp + 0x3c]
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x30]
mov dword [esp + 0x10], eax
mov dword [esp + 4], ecx
mov ebp, dword [ecx]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebp], 0
je 0x4d803a
xor edi, edi
mov ebx, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[eax + eax]
nop dword [eax + eax]
push 2
call ebx
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [ebp]
jne 0x4d8020
mov byte [ebp + 4], 0
mov eax, dword [esp + 4]
mov ebp, dword [eax]
mov ecx, dword [esp + 8]
test ecx, ecx
je 0x4d8055
mov edx, ebp
call fcn.004d2a40
jmp 0x4d8072
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov byte [ebp + 4], 1
mov eax, dword [esp + 4]
mov ebx, dword [eax]
mov ebp, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebx], 0
je 0x4d80c9
xor edi, edi
nop dword [eax]
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [ebx]
jne 0x4d80b0
mov byte [ebx + 4], 0
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4d80de
mov edx, ebx
call fcn.004d2a40
jmp 0x4d80fb
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov byte [ebx + 4], 1
mov eax, dword [esp + 4]
mov edi, dword [eax]
mov bl, byte [edi + 4]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
test bl, bl
je 0x4d815f
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d8159
xor ebx, ebx
nop
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add ebx, 1
cmp ebx, dword [edi]
jne 0x4d8140
mov byte [edi + 4], 0
jmp 0x4d8171
push eax
push 1
push 2
push 0x50e2ca
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov edi, dword [esp + 0x18]
mov ebx, dword [esp + 0x14]
push 2
call ebp
add esp, 4
sub edi, ebx
push ebx
push edi
push str.__.s_
push eax
call fcn.004cf310
add esp, 0x10
mov eax, dword [esp + 4]
mov edi, dword [eax]
mov bl, byte [edi + 4]
push 2
call ebp
add esp, 4
cmp dword [esp + 0xc], 0
jne 0x4d81c3
test bl, bl
jne 0x4d81c3
push eax
push 1
push 2
push 0x50e2ca
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov ebx, dword [edi]
jmp 0x4d8211
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d820b
xor ebx, ebx
nop dword [eax + eax]
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add ebx, 1
cmp ebx, dword [edi]
jne 0x4d81f0
jmp 0x4d820d
xor ebx, ebx
mov byte [edi + 4], 0
add ebx, 1
mov dword [edi], ebx
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7b
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4d833b
lea eax, [esi + eax*4]
mov dword [esp + 0x10], eax
mov al, 1
jmp 0x4d8273
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov esi, dword [esp + 8]
mov byte [edi + 4], 1
add esi, 4
xor eax, eax
cmp esi, dword [esp + 0x10]
je 0x4d8311
mov ebx, dword [esi]
test al, 1
je 0x4d8290
test ebx, ebx
je 0x4d82f3
mov ecx, ebx
mov edx, edi
call fcn.004d2a40
jmp 0x4d8264
mov dword [esp + 8], esi
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d82d9
xor esi, esi
nop
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add esi, 1
cmp esi, dword [edi]
jne 0x4d82c0
mov byte [edi + 4], 0
test ebx, ebx
je 0x4d8243
mov ecx, ebx
mov edx, edi
call fcn.004d2a40
jmp 0x4d825c
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x4d8264
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [edi], 0xffffffff
cmp dword [esp + 0xc], 0
mov dl, byte [esp + 3]
je 0x4d8358
mov byte [edi + 4], 1
jmp 0x4d8358
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [edi], 0xffffffff
mov dl, byte [esp + 3]
mov eax, dword [esp + 4]
mov ecx, dword [eax]
movzx edx, dl
add esp, 0x1c
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.004d7960