Function at 0x4e3cd1
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x5a444f
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x1bec
call fcn.00592460
mov eax, dword [0x606c40]
xor eax, esp
mov dword [esp + 0x1be8], eax
push ebx
push esi
push edi
mov eax, dword [0x606c40]
xor eax, esp
push eax
lea eax, [esp + 0x1c00]
mov dword fs:[0], eax
mov eax, ecx
mov ecx, dword [ebp + 0xc]
xor ebx, ebx
mov dword [esp + 0x20], eax
mov dword [esp + 0x1c], ecx
cmp dword [eax + 4], ebx
je 0x4e41c2
cmp ecx, ebx
je 0x4e41c2
test byte [0x694354], 1
jne 0x4e3d6a
or dword [0x694354], 1
push 0x694334
mov dword [esp + 0x1c0c], ebx
call fcn.0044f1ec
push 0x5b054b
call fcn.0057df1a
or dword [esp + 0x1c0c], 0xffffffff
pop ecx
push 0x3c
pop edi
push 0x3e
pop esi
cmp dword [0x694350], ebx
jne 0x4e3dbd
lea eax, [esp + 0x14]
push eax
mov ebx, 0x694334
mov dword [esp + 0x18], 0x22
call fcn.004e43a9
mov dword [eax], 0x5e33e0
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], edi
call fcn.004e43a9
mov dword [eax], 0x5e33e8
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.004e43a9
mov dword [eax], 0x5e33f0
test byte [0x694354], 2
mov ebx, 0x694314
jne 0x4e3df6
or dword [0x694354], 2
push ebx
mov dword [esp + 0x1c0c], 1
call fcn.0044f1ec
push 0x5b053e
call fcn.0057df1a
or dword [esp + 0x1c0c], 0xffffffff
pop ecx
cmp dword [0x694330], 0
jne 0x4e3e6f
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x22
call fcn.004e43a9
mov dword [eax], str.quot_
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x27
call fcn.004e43a9
mov dword [eax], str.39_
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], edi
call fcn.004e43a9
mov dword [eax], str.lt_
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], esi
call fcn.004e43a9
mov dword [eax], str.gt_
lea eax, [esp + 0x14]
push eax
mov dword [esp + 0x18], 0x26
call fcn.004e43a9
mov dword [eax], str.amp_
lea eax, [esp + 0x24]
push eax
call fcn.004fae32
mov eax, dword [esp + 0x20]
lea edx, [esp + 0x24]
mov dword [esp + 0x1c08], 2
mov ecx, dword [eax + 4]
mov eax, dword [ecx]
push edx
push dword [ebp + 8]
call dword [eax + 4]
mov eax, dword [esp + 0x34]
sub eax, dword [esp + 0x30]
push 0x58
cdq
pop ecx
idiv ecx
cmp eax, 1
mov dword [esp + 0x14], eax
jl 0x4e41b9
mov esi, 0x207
push esi
lea eax, [esp + 0x181]
push 0
push eax
mov byte [esp + 0x188], 0
call fcn.005847c0
mov edi, dword [ebp + 0x10]
add esp, 0xc
test edi, edi
jle 0x4e3ef3
push esi
lea eax, [esp + 0x180]
push str.
push eax
call fcn.00583b80
add esp, 0xc
dec edi
jne 0x4e3eda
and dword [esp + 0x18], 0
cmp dword [esp + 0x14], 0
jle 0x4e41b9
push dword [esp + 0x18]
lea esi, [esp + 0x28]
call fcn.004a4c79
mov esi, eax
cmp byte [esi + 8], 0
je 0x4e4028
push 0
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], 0xf
call fcn.0040703e
mov byte [esp + 0x1c08], 3
cmp dword [esi + 0x28], 8
jb 0x4e3f42
mov ecx, dword [esi + 0x14]
jmp 0x4e3f45
lea ecx, [esi + 0x14]
test ecx, ecx
je 0x4e3f55
lea eax, [esp + 0x3c]
push eax
mov edx, ebx
call fcn.004e41e8
push 0x103
lea eax, [esp + 0x79]
push 0
push eax
mov byte [esp + 0x80], 0
call fcn.005847c0
add esp, 0xc
push dword [esi + 0x50]
lea eax, [esp + 0x180]
push dword [esi + 0x48]
push eax
push str._s_DT__H3_ADD_DATE__d__LAST_MODIFIED__d__
lea eax, [esp + 0x84]
push 0xffffffffffffffff
push eax
call fcn.004e4892
mov edi, dword [esp + 0x34]
lea eax, [esp + 0x8c]
push eax
push 0x5cb97c
push edi
call fcn.00583a42
mov eax, dword [esp + 0x64]
add esp, 0x24
cmp dword [esp + 0x54], 0x10
jae 0x4e3fbc
lea eax, [esp + 0x40]
push eax
push 0x5cb97c
push edi
call fcn.00583a42
add esp, 0xc
push str.__H3__n
push 0x5cb97c
push edi
call fcn.00583a42
add esp, 0xc
lea eax, [esp + 0x17c]
push eax
push str._s_DL__p__n
push edi
call fcn.00583926
mov eax, dword [ebp + 0x10]
mov ecx, dword [esp + 0x2c]
add esp, 0xc
inc eax
push eax
push edi
push dword [esi]
call fcn.004e3cd1
lea eax, [esp + 0x17c]
push eax
push str._s__DL__p__n
push edi
call fcn.00583926
add esp, 0xc
push 0
push 1
lea ecx, [esp + 0x44]
jmp 0x4e419a
push 0xf
pop edi
push 0
lea ecx, [esp + 0x5c]
mov dword [esp + 0x74], edi
call fcn.0040703e
mov byte [esp + 0x1c08], 4
cmp dword [esi + 0x44], 8
jb 0x4e404d
mov ecx, dword [esi + 0x30]
jmp 0x4e4050
lea ecx, [esi + 0x30]
test ecx, ecx
je 0x4e4063
lea eax, [esp + 0x58]
push eax
mov edx, 0x694334
call fcn.004e41e8
push 0
lea ecx, [esp + 0x40]
mov dword [esp + 0x58], edi
call fcn.0040703e
mov byte [esp + 0x1c08], 5
cmp dword [esi + 0x28], 8
jb 0x4e4085
mov ecx, dword [esi + 0x14]
jmp 0x4e4088
lea ecx, [esi + 0x14]
test ecx, ecx
je 0x4e4098
lea eax, [esp + 0x3c]
push eax
mov edx, ebx
call fcn.004e41e8
push 0x1047
lea eax, [esp + 0xbb1]
push 0
push eax
mov byte [esp + 0xbb8], 0
call fcn.005847c0
add esp, 0xc
push 0x823
lea eax, [esp + 0x389]
push 0
push eax
mov byte [esp + 0x390], 0
call fcn.005847c0
mov eax, dword [esp + 0x68]
add esp, 0xc
cmp dword [esp + 0x70], 0x10
jae 0x4e40e5
lea eax, [esp + 0x5c]
push dword [esi + 0x50]
push dword [esi + 0x48]
push eax
lea eax, [esp + 0x188]
push eax
push str._s_DT__A_HREF__s__ADD_DATE__d__LAST_MODIFIED__d_
lea eax, [esp + 0xbc0]
push 0xffffffffffffffff
push eax
call fcn.004e48b1
mov eax, dword [esp + 0x5c]
add esp, 0x1c
cmp dword [esp + 0x54], 0x10
jae 0x4e411a
lea eax, [esp + 0x40]
push eax
push str.__s__A__n
lea eax, [esp + 0x38c]
push 0xffffffffffffffff
push eax
call fcn.004e48d0
lea eax, [esp + 0xbbc]
add esp, 0x10
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4e413c
push dword [esp + 0x1c]
sub eax, esi
push eax
xor edi, edi
inc edi
lea eax, [esp + 0xbb4]
push edi
push eax
call fcn.00581b18
lea eax, [esp + 0x394]
add esp, 0x10
lea esi, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x4e4168
push dword [esp + 0x1c]
sub eax, esi
push eax
lea eax, [esp + 0x38c]
push edi
push eax
call fcn.00581b18
add esp, 0x10
push 0
push edi
lea ecx, [esp + 0x44]
call fcn.00406f79
push 0
push edi
lea ecx, [esp + 0x60]
mov byte [esp + 0x1c10], 2
call fcn.00406f79
inc dword [esp + 0x18]
mov eax, dword [esp + 0x18]
cmp eax, dword [esp + 0x14]
jl 0x4e3f03
lea esi, [esp + 0x24]
call fcn.004a4c3f
mov ecx, dword [esp + 0x1c00]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x1be8]
xor ecx, esp
call fcn.0057d6ce
mov esp, ebp
pop ebp
ret 0xc