Function at 0x4d8da0
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 8
mov ebx, edx
mov dword [esp + 4], ecx
mov ebp, dword [ecx]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebp], 0
je 0x4d8dfa
xor edi, edi
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[eax + eax]
nop dword [eax]
push 2
call esi
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [ebp]
jne 0x4d8de0
mov edi, dword [esp + 0x20]
mov byte [ebp + 4], 0
mov eax, str.true
mov esi, str.false
test bl, bl
cmovne esi, eax
mov ebp, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push 2
call ebp
add esp, 4
push eax
push esi
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputs
add esp, 8
mov eax, dword [esp + 4]
mov ebx, dword [eax]
mov al, byte [ebx + 4]
mov byte [esp + 3], al
push 2
call ebp
add esp, 4
cmp byte [esp + 3], 0
je 0x4d8e8f
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebx], 0
je 0x4d8e89
xor esi, esi
nop dword [eax + eax]
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add esi, 1
cmp esi, dword [ebx]
jne 0x4d8e70
mov byte [ebx + 4], 0
jmp 0x4d8ea1
push eax
push 1
push 2
push 0x50e2ca
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov ebx, dword [esp + 0x24]
push 2
call ebp
add esp, 4
mov ecx, dword [esp + 0x1c]
sub edi, ecx
push ecx
push edi
push str.__.s_
push eax
call fcn.004cf310
add esp, 0x10
mov eax, dword [esp + 4]
mov edi, dword [eax]
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d8f19
xor esi, esi
nop word cs:[eax + eax]
nop dword [eax]
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add esi, 1
cmp esi, dword [edi]
jne 0x4d8f00
mov byte [edi + 4], 0
test ebx, ebx
je 0x4d8f2c
mov ecx, ebx
mov edx, edi
call fcn.004d2a40
jmp 0x4d8f49
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov ebx, dword [esp + 0x28]
mov byte [edi + 4], 1
mov eax, dword [esp + 4]
mov esi, dword [eax]
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [esi], 0
je 0x4d8fa9
xor edi, edi
nop word cs:[eax + eax]
nop dword [eax]
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [esi]
jne 0x4d8f90
mov byte [esi + 4], 0
test ebx, ebx
je 0x4d8fbc
mov ecx, ebx
mov edx, esi
call fcn.004d2a40
jmp 0x4d8fd9
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov byte [esi + 4], 1
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret