Function at 0x4d86d0
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x20
mov ebx, edx
mov al, byte [esp + 0x48]
mov byte [esp + 3], al
mov al, byte [esp + 0x44]
mov byte [esp + 2], al
mov eax, dword [esp + 0x40]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x3c]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x34]
mov dword [esp + 0x18], eax
mov dword [esp + 4], ecx
mov esi, dword [ecx]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [esi], 0
je 0x4d8759
xor edi, edi
mov ebp, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
nop word cs:[eax + eax]
nop dword [eax]
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [esi]
jne 0x4d8740
mov byte [esi + 4], 0
mov eax, dword [esp + 4]
mov ebp, dword [eax]
add dword [ebp], 1
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7b
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
mov eax, dword [esp + 0x18]
test eax, eax
je 0x4d888f
lea edi, [ebx + eax*4]
mov al, 1
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
mov dword [esp + 0x1c], edi
jmp 0x4d87c8
push 2
call esi
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov edi, dword [esp + 0x1c]
mov byte [ebp + 4], 1
add ebx, 4
xor eax, eax
cmp ebx, edi
je 0x4d8864
mov ecx, dword [ebx]
test al, 1
je 0x4d87e0
test ecx, ecx
je 0x4d8846
mov edx, ebp
call fcn.004d2a40
jmp 0x4d87bb
mov dword [esp + 0x10], ecx
push 2
call esi
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call esi
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebp], 0
je 0x4d882a
xor edi, edi
push 2
call esi
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add edi, 1
cmp edi, dword [ebp]
jne 0x4d8810
mov byte [ebp + 4], 0
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x4d879a
mov edx, ebp
call fcn.004d2a40
jmp 0x4d87b3
push 2
call esi
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x4d87bb
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [ebp], 0xffffffff
cmp dword [esp + 0x18], 0
mov edi, dword [esp + 0x14]
je 0x4d88ad
mov byte [ebp + 4], 1
jmp 0x4d88ad
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [ebp], 0xffffffff
mov edi, dword [esp + 0x14]
mov eax, dword [esp + 4]
mov ebx, dword [eax]
mov ebp, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [ebx], 0
je 0x4d8909
xor esi, esi
nop word cs:[eax + eax]
nop
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add esi, 1
cmp esi, dword [ebx]
jne 0x4d88f0
mov byte [ebx + 4], 0
test edi, edi
je 0x4d891c
mov ecx, edi
mov edx, ebx
call fcn.004d2a40
jmp 0x4d8939
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov byte [ebx + 4], 1
mov eax, dword [esp + 4]
mov edi, dword [eax]
mov bl, byte [edi + 4]
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp dword [esp + 0xc], 0
jne 0x4d8972
test bl, bl
jne 0x4d8972
push eax
push 1
push 2
push 0x50e2ca
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov esi, dword [edi]
jmp 0x4d89c1
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d89bb
xor esi, esi
nop word [eax + eax]
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add esi, 1
cmp esi, dword [edi]
jne 0x4d89a0
jmp 0x4d89bd
xor esi, esi
mov byte [edi + 4], 0
add esi, 1
mov dword [edi], esi
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7b
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4d8aeb
mov esi, dword [esp + 8]
lea eax, [esi + eax*4]
mov dword [esp + 0x10], eax
mov al, 1
jmp 0x4d8a27
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
mov esi, dword [esp + 8]
mov byte [edi + 4], 1
add esi, 4
xor eax, eax
cmp esi, dword [esp + 0x10]
je 0x4d8ac1
mov ebx, dword [esi]
test al, 1
je 0x4d8a40
test ebx, ebx
je 0x4d8aa3
mov ecx, ebx
mov edx, edi
call fcn.004d2a40
jmp 0x4d8a18
mov dword [esp + 8], esi
push 2
call ebp
add esp, 4
push eax
push 0x2c
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
push 2
call ebp
add esp, 4
push eax
push 0xa
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
cmp dword [edi], 0
je 0x4d8a89
xor esi, esi
nop
push 2
call ebp
add esp, 4
push eax
push 0x20
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add esi, 1
cmp esi, dword [edi]
jne 0x4d8a70
mov byte [edi + 4], 0
test ebx, ebx
je 0x4d89f7
mov ecx, ebx
mov edx, edi
call fcn.004d2a40
jmp 0x4d8a10
push 2
call ebp
add esp, 4
push eax
push 1
push 6
push str._null_
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fwrite
add esp, 0x10
jmp 0x4d8a18
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [edi], 0xffffffff
cmp dword [esp + 0xc], 0
mov al, byte [esp + 2]
je 0x4d8b08
mov byte [edi + 4], 1
jmp 0x4d8b08
push 2
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
push eax
push 0x7d
call sub.api_ms_win_crt_stdio_l1_1_0.dll_fputc
add esp, 8
add dword [edi], 0xffffffff
mov al, byte [esp + 2]
mov esi, dword [esp + 4]
mov ecx, dword [esi]
movzx edx, al
call fcn.004d7960
mov ecx, dword [esi]
movzx edx, byte [esp + 3]
add esp, 0x20
pop esi
pop edi
pop ebx
pop ebp
jmp fcn.004d7960