Function at 0x490d00
Capabilities:
Write file on windows

Disassembly:
sub esp, 0x10
push ebx
push esi
push edi
mov edi, edx
mov eax, dword [edi + 4]
xor esi, esi
cmp eax, esi
mov dword [esp + 0x14], ecx
mov ebx, 1
mov dword [esp + 0xc], esi
mov dword [esp + 0x18], esi
je 0x490d55
cmp byte [eax], 0x2d
jne 0x490d55
push 0x62
push eax
call fcn.005912e0
add esp, 8
test eax, eax
je 0x490d3a
mov dword [esp + 0x18], ebx
mov eax, dword [edi + 4]
push 0x6e
push eax
call fcn.005912e0
add esp, 8
test eax, eax
je 0x490d50
mov dword [esp + 0xc], ebx
mov ebx, 2
mov ecx, dword [edi + ebx*4]
cmp ecx, esi
jne 0x490d70
mov edx, dword [edi]
push esi
push esi
xor ecx, ecx
call fcn.004803b0
pop edi
pop esi
pop ebx
add esp, 0x10
ret 0xc
push ebp
mov ebp, dword [esp + 0x24]
mov edx, ebp
mov al, byte [ecx]
inc ecx
mov byte [edx], al
inc edx
test al, al
jne 0x490d77
mov eax, ebp
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x490d86
sub eax, edx
cmp eax, 0x5a
jbe 0x490daa
mov edx, dword [edi]
push 3
push esi
xor ecx, ecx
call fcn.004803b0
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret 0xc
mov ecx, ebp
call fcn.0048fe00
mov esi, eax
xor eax, eax
cmp esi, eax
jne 0x490dcf
mov edx, dword [edi]
push 3
push eax
xor ecx, ecx
call fcn.004803b0
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret 0xc
mov dword [0x5ed448], esi
inc ebx
mov dword [esi + 0x16c], eax
mov dword [esi + 0x170], eax
mov ecx, dword [edi + ebx*4]
cmp ecx, eax
jne 0x490dfe
mov edx, dword [edi]
push eax
push eax
xor ecx, ecx
call fcn.004803b0
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret 0xc
cmp dword [esp + 0x1c], eax
je 0x490e38
cmp byte [ecx], 0x26
jne 0x490db9
mov edx, ebp
call fcn.0041d580
xor ebx, ebx
cmp eax, ebx
jne 0x490e2c
mov edx, dword [edi]
push 3
push ebx
xor ecx, ecx
call fcn.004803b0
pop ebp
pop edi
pop esi
pop ebx
add esp, 0x10
ret 0xc
mov ecx, dword [eax + 0xc]
mov edx, dword [eax]
mov edi, dword [eax + 8]
add ecx, edx
jmp 0x490e5f
push edi
mov edx, ebp
mov ecx, ebx
mov byte [ebp], 0
call fcn.005039a0
mov eax, ebp
lea edx, [eax + 1]
jmp 0x490e50
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x490e50
sub eax, edx
mov edi, eax
mov ecx, ebp
xor ebx, ebx
push ebx
lea edx, [esp + 0x18]
push edx
push edi
mov dword [esp + 0x20], ebx
mov eax, dword [esi + 0x168]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
mov ebp, dword [esp + 0x28]
je 0x490f20
jmp 0x490e90
cmp dword [esp + 0x14], edi
mov eax, dword [esp + 0x2c]
jne 0x490f6b
cmp eax, ebx
je 0x490ee7
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x490eb6
cmp eax, 1
jne 0x490f90
add edi, 2
push esi
push edi
xor edx, edx
mov ecx, 0x93e
call fcn.0041f1a0
push eax
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [0x5c9d44]
add esp, 0x10
push ecx
mov ecx, dword [esp + 0x1c]
mov edx, ebp
mov dword [0x5bfd5c], ebx
call fcn.00514ad0
cmp dword [esp + 0x10], 1
jne 0x490f90
push ebx
lea edx, [esp + 0x18]
push edx
mov edi, 2
push edi
mov dword [esp + 0x20], ebx
mov eax, dword [esi + 0x168]
push 0x5a4be8
push eax
mov dword [esp + 0x24], edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x490e90
cmp dword [esp + 0x2c], ebx
je 0x490f56
push esi
xor edx, edx
mov ecx, 0x93d
call fcn.0041f1a0
push eax
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
mov ecx, dword [0x5c9d44]
add esp, 0xc
push ecx
mov ecx, dword [esp + 0x1c]
mov edx, ebp
mov dword [0x5bfd5c], ebx
call fcn.00514ad0
pop ebp
mov eax, 1
pop edi
mov dword [esi + 0x170], eax
pop esi
pop ebx
add esp, 0x10
ret 0xc
cmp eax, ebx
je 0x490f56
push esi
xor edx, edx
mov ecx, 0x93d
call fcn.0041f1a0
push eax
push ebp
call dword [sym.imp.USER32.dll_wsprintfA]
mov edx, dword [0x5c9d44]
add esp, 0xc
push edx
jmp 0x490f45
pop ebp
pop edi
pop esi
mov eax, 1
pop ebx
add esp, 0x10
ret 0xc