Function at 0x483d60
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x5c0
mov eax, dword [0x4c32cc]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
push ebx
push esi
mov esi, edx
push edi
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x5c0], ecx
push esi
mov edx, 0x7ffffffe
mov eax, 0x104
lea ecx, [ebp - 0x21c]
call fcn.00401000
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call edi
xor ebx, ebx
xor ecx, ecx
cmp eax, ebx
jle 0x483dda
lea edx, [ebp - 0x21c]
sub esi, edx
lea edx, [esi + ecx]
mov dl, byte [ebp + edx - 0x21c]
mov byte [ebp + ecx - 0x21c], dl
cmp dl, 0x2e
je 0x483dd3
inc ecx
cmp ecx, eax
jl 0x483db6
jmp 0x483dda
mov byte [ebp + ecx - 0x21c], bl
mov byte [ebp + ecx - 0x21c], bl
lea ebx, [ebp - 0x114]
call fcn.0047ea60
mov eax, 0x104
mov ecx, ebx
cmp byte [ecx], 0
je 0x483dfe
inc ecx
dec eax
jne 0x483df3
jmp 0x483e43
test eax, eax
je 0x483e43
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [ebp + edx - 0x114]
je 0x483e3f
mov ebx, str._vault_
lea esi, [ecx + edx + 0x7ffffefb]
sub ebx, eax
test esi, esi
je 0x483e3b
mov dl, byte [ebx + eax]
test dl, dl
je 0x483e3b
mov byte [eax], dl
inc eax
dec esi
dec ecx
jne 0x483e27
jmp 0x483e3f
test ecx, ecx
jne 0x483e40
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [ebp - 0x114]
mov edi, edi
cmp byte [ecx], 0
je 0x483e5b
inc ecx
dec eax
jne 0x483e50
jmp 0x483ea1
test eax, eax
je 0x483ea1
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [ebp + edx - 0x114]
je 0x483e9d
lea ebx, [ebp - 0x21c]
lea esi, [ecx + edx + 0x7ffffefb]
sub ebx, eax
test esi, esi
je 0x483e99
mov dl, byte [ebx + eax]
test dl, dl
je 0x483e99
mov byte [eax], dl
inc eax
dec esi
dec ecx
jne 0x483e85
jmp 0x483e9d
test ecx, ecx
jne 0x483e9e
dec eax
mov byte [eax], 0
mov eax, 0x104
lea ecx, [ebp - 0x114]
lea esp, [esp]
cmp byte [ecx], 0
je 0x483ebb
inc ecx
dec eax
jne 0x483eb0
jmp 0x483f00
test eax, eax
je 0x483f00
mov edx, 0x104
sub edx, eax
mov ecx, 0x104
sub ecx, edx
lea eax, [ebp + edx - 0x114]
je 0x483efc
mov ebx, str..bat
lea esi, [ecx + edx + 0x7ffffefb]
sub ebx, eax
test esi, esi
je 0x483ef8
mov dl, byte [ebx + eax]
test dl, dl
je 0x483ef8
mov byte [eax], dl
inc eax
dec esi
dec ecx
jne 0x483ee4
jmp 0x483efc
test ecx, ecx
jne 0x483efd
dec eax
mov byte [eax], 0
push 0x1041
lea eax, [ebp - 0x5b4]
push eax
lea ecx, [ebp - 0x114]
push ecx
call dword [sym.imp.KERNEL32.dll_OpenFile]
mov esi, eax
cmp esi, 0xffffffff
jne 0x483f33
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.004a01d6
mov esp, ebp
pop ebp
ret
push str._echo_off_r_n_r_n
lea edx, [ebp - 0x52c]
push 0x30c
push edx
call fcn.00402830
add esp, 0xc
push 0
lea eax, [ebp - 0x5b8]
push eax
lea ecx, [ebp - 0x52c]
push ecx
call edi
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
push eax
lea edx, [ebp - 0x52c]
push edx
push esi
call ebx
push str._cls_r_n_r_n
lea eax, [ebp - 0x52c]
push 0x30c
push eax
call fcn.00402830
add esp, 0xc
push 0
lea ecx, [ebp - 0x5b8]
push ecx
lea edx, [ebp - 0x52c]
push edx
call edi
push eax
lea eax, [ebp - 0x52c]
push eax
push esi
call ebx
lea ecx, [ebp - 0x21c]
push ecx
push str._echo__This_script_will_copy_the_file__s_to_its_original_location.__r_n_r_n
lea edx, [ebp - 0x52c]
push 0x30c
push edx
call fcn.00402830
add esp, 0x10
push 0
lea eax, [ebp - 0x5b8]
push eax
lea ecx, [ebp - 0x52c]
push ecx
call edi
push eax
lea edx, [ebp - 0x52c]
push edx
push esi
call ebx
push str.pause_r_n_r_n
lea eax, [ebp - 0x52c]
push 0x30c
push eax
call fcn.00402830
add esp, 0xc
push 0
lea ecx, [ebp - 0x5b8]
push ecx
lea edx, [ebp - 0x52c]
push edx
call edi
push eax
lea eax, [ebp - 0x52c]
push eax
push esi
call ebx
mov ecx, dword [ebp - 0x5bc]
mov edx, dword [ebp - 0x5c0]
push ecx
push edx
push str.move____s_____s__r_n_r_n
lea eax, [ebp - 0x52c]
push 0x30c
push eax
call fcn.00402830
add esp, 0x14
push 0
lea ecx, [ebp - 0x5b8]
push ecx
lea edx, [ebp - 0x52c]
push edx
call edi
push eax
lea eax, [ebp - 0x52c]
push eax
push esi
call ebx
mov ecx, dword [ebp - 0x5bc]
push ecx
push str.attrib_H___s__r_n_r_n
lea edx, [ebp - 0x52c]
push 0x30c
push edx
call fcn.00402830
add esp, 0x10
push 0
lea eax, [ebp - 0x5b8]
push eax
lea ecx, [ebp - 0x52c]
push ecx
call edi
push eax
lea edx, [ebp - 0x52c]
push edx
push esi
call ebx
push str.exit_r_n_r_n
lea eax, [ebp - 0x52c]
push 0x30c
push eax
call fcn.00402830
add esp, 0xc
push 0
lea ecx, [ebp - 0x5b8]
push ecx
lea edx, [ebp - 0x52c]
push edx
call edi
push eax
lea eax, [ebp - 0x52c]
push eax
push esi
call ebx
push esi
call dword [sym.imp.KERNEL32.dll__lclose]
mov ecx, dword [ebp - 8]
pop edi
pop esi
xor ecx, ebp
mov eax, 1
pop ebx
call fcn.004a01d6
mov esp, ebp
pop ebp
ret