Function at 0x486c80
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1a0
mov eax, dword [0x6554d0]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [0x65a688], 0xffffffff
mov eax, 4
shl eax, 1
mov dword [eax + 0x65a690], 0xffffffff
mov ecx, 4
shl ecx, 0
mov dword [ecx + 0x65a690], 0xffffffff
mov edx, 4
imul eax, edx, 0
mov dword [eax + 0x65a690], 0xffffffff
mov dword [0x65a6a0], 0xffffffff
mov ecx, dword [0x65a6a0]
mov dword [0x65a69c], ecx
mov edx, dword [0x65a69c]
mov dword [ebp - 0x188], edx
mov dword [0x65a6a8], 0
mov eax, dword [0x65a6a8]
mov dword [0x65a6a4], eax
mov ecx, dword [0x65a6a4]
mov dword [0x65a68c], ecx
mov edx, dword [ebp + 0x10]
push edx
call fcn.004847d0
add esp, 4
cmp dword [ebp + 8], 0
je 0x486e6e
mov eax, dword [ebp + 8]
mov dword [eax], 0
push 0x5af0e8
push 0x5af0f0
call fcn.0051fd23
add esp, 4
push eax
call fcn.0052a3e0
add esp, 8
mov dword [0x65a6a4], eax
cmp dword [0x65a6a4], 0
jne 0x486d61
jmp 0x487086
push 0x180
push 0x4302
mov ecx, dword [0x65a6a4]
push ecx
call fcn.005363f0
add esp, 0xc
mov dword [0x65a69c], eax
cmp dword [0x65a69c], 0xffffffff
jne 0x486d8d
jmp 0x487086
mov edx, dword [0x65a69c]
push edx
call fcn.00487480
add esp, 4
mov dword [ebp - 0x18c], eax
mov eax, 4
shl eax, 0
mov ecx, dword [ebp - 0x18c]
mov dword [eax + 0x65a690], ecx
mov edx, 4
shl edx, 1
mov eax, dword [ebp - 0x18c]
mov dword [edx + 0x65a690], eax
cmp dword [ebp + 0xc], 0
jne 0x486e49
push 0x5af0f8
push 0x5af100
call fcn.0051fd23
add esp, 4
push eax
call fcn.0052a3e0
add esp, 8
mov dword [0x65a68c], eax
cmp dword [0x65a68c], 0
jne 0x486dfd
jmp 0x487086
push 0x180
push 0x300
mov ecx, dword [0x65a68c]
push ecx
call fcn.005363f0
add esp, 0xc
mov dword [ebp - 0x188], eax
cmp dword [ebp - 0x188], 0xffffffff
jne 0x486e2a
jmp 0x487086
mov edx, dword [ebp - 0x188]
push edx
call fcn.00487480
add esp, 4
mov ecx, 4
imul edx, ecx, 0
mov dword [edx + 0x65a690], eax
jmp 0x486e6e
push 0x5af108
mov eax, dword [0x65a6a4]
push eax
call fcn.00514970
add esp, 8
mov ecx, dword [ebp + 8]
mov dword [ecx], eax
mov edx, dword [ebp + 8]
cmp dword [edx], 0
jne 0x486e6e
jmp 0x487086
cmp dword [ebp + 0xc], 0
je 0x486f13
mov eax, dword [ebp + 0xc]
mov dword [eax], 0
push 0x5af10c
push str.TEMP
call fcn.0051fd23
add esp, 4
push eax
call fcn.0052a3e0
add esp, 8
mov dword [0x65a6a8], eax
cmp dword [0x65a6a8], 0
jne 0x486eaf
jmp 0x487086
push 0x180
push 0x8302
mov ecx, dword [0x65a6a8]
push ecx
call fcn.005363f0
add esp, 0xc
mov dword [0x65a6a0], eax
cmp dword [0x65a6a0], 0xffffffff
jne 0x486edb
jmp 0x487086
push 0x5af11c
mov edx, dword [0x65a6a0]
push edx
call fcn.005343e0
add esp, 8
mov ecx, dword [ebp + 0xc]
mov dword [ecx], eax
mov edx, dword [ebp + 0xc]
cmp dword [edx], 0
jne 0x486f01
jmp 0x487086
mov eax, dword [ebp + 0x10]
mov dword [0x65a6ac], eax
mov eax, 1
jmp 0x48708d
push 1
push 0x65a690
mov ecx, dword [ebp + 0x10]
push ecx
call fcn.00487330
add esp, 0xc
cmp eax, 0xffffffff
jne 0x486f37
mov dword [ebp - 0x190], 0
jmp 0x486f41
mov dword [ebp - 0x190], 1
mov edx, dword [ebp - 0x190]
mov dword [ebp - 0x194], edx
cmp dword [ebp - 0x194], 0
jne 0x486fc1
call fcn.00470dd0
push eax
push 0x5af120
lea eax, [ebp - 0x184]
push eax
call fcn.0041c630
add esp, 0xc
lea ecx, [ebp - 0x184]
sub eax, ecx
mov dword [ebp - 0x198], eax
push 0
lea edx, [ebp - 0x19c]
push edx
mov eax, dword [ebp - 0x198]
push eax
lea ecx, [ebp - 0x184]
push ecx
mov edx, 4
shl edx, 0
mov eax, dword [edx + 0x65a690]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, 4
shl ecx, 0
mov edx, dword [ecx + 0x65a690]
push edx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
jmp 0x486fdd
push 0
mov eax, dword [0x65a688]
push eax
lea ecx, [ebp - 0x1a0]
push ecx
call fcn.00538e7d
add esp, 0xc
call fcn.00487310
cmp dword [ebp + 8], 0
je 0x487076
cmp dword [0x65a69c], 0xffffffff
je 0x487009
mov edx, dword [0x65a69c]
push edx
call fcn.00535260
add esp, 4
mov dword [0x65a69c], 0xffffffff
mov eax, dword [ebp - 0x188]
push eax
call fcn.00535260
add esp, 4
push 0x5af154
mov ecx, dword [0x65a6a4]
push ecx
call fcn.00514970
add esp, 8
mov edx, dword [ebp + 8]
mov dword [edx], eax
mov eax, dword [ebp + 8]
cmp dword [eax], 0
jne 0x487076
call fcn.005225a0
mov ecx, dword [eax]
push ecx
call fcn.00522760
add esp, 4
push eax
mov edx, dword [0x65a6a4]
push edx
push str._error_opening_temp_file___s_:__s_
lea eax, [ebp - 0x184]
push eax
call fcn.0040ae60
add esp, 0x10
lea ecx, [ebp - 0x184]
push ecx
call fcn.00487260
add esp, 4
jmp 0x487086
mov eax, dword [ebp - 0x194]
jmp 0x48708d
call fcn.004874a0
xor eax, eax
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0050ce40
mov esp, ebp
pop ebp
ret