Function at 0x4f21c0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x104
mov eax, dword [0x5b107c]
xor eax, esp
mov dword [esp + 0x100], eax
mov eax, dword [ebp + 8]
mov ecx, dword [0x67cc98]
push ebx
push esi
push edi
mov dword [esp + 0x20], eax
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f224c
mov edi, 0x1b0
lea esp, [esp]
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [0x67cc98]
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f2220
cmp dword [esp + 0x10], 0
jne 0x4f2200
jmp 0x4f224c
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x28], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor edx, edx
mov dword [esp + 0x2c], eax
cmp dword [esi + 0x10], edx
setne dl
mov dword [esp + 0x30], edx
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f22b0
mov edi, 0x4c5
mov ecx, dword [0x67cc98]
lea eax, [esp + 0x10]
push eax
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f2284
cmp dword [esp + 0x10], 0
jne 0x4f2264
jmp 0x4f22b0
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x38], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor ecx, ecx
mov dword [esp + 0x3c], eax
cmp dword [esi + 0x10], ecx
setne cl
mov dword [esp + 0x40], ecx
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f234b
mov esi, 0x4bd
lea esp, [esp]
mov ecx, dword [0x67cc98]
lea edx, [esp + 0x10]
push edx
call fcn.00574b80
mov edi, dword [eax]
cmp dword [edi + 8], esi
je 0x4f22f0
cmp dword [esp + 0x10], 0
jne 0x4f22d0
jmp 0x4f234b
mov eax, edi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x48], eax
mov eax, edi
call fcn.004019d0
call fcn.00577600
movzx esi, word [0x69aacc]
mov dword [esp + 0x4c], eax
call fcn.00534e40
test eax, eax
jne 0x4f2390
push 0x40
push eax
push 0x65f958
call sub.MSVCR100.dll_memset
push esi
push str.NoMapInfo_:__d
push 0x65f958
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x18
mov edx, dword [0x656848]
mov dword [esp + 0x50], edx
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
mov ebx, 1
test eax, eax
je 0x4f23fe
mov edi, 0x1a8
lea esp, [esp]
mov ecx, dword [0x67cc98]
lea eax, [esp + 0x10]
push eax
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f23a9
cmp dword [esp + 0x10], 0
jne 0x4f2370
jmp 0x4f23fe
mov eax, dword [eax + 0x84]
and eax, 0x40
je 0x4f2341
xor ecx, ecx
cmp dword [edi + 0x10], ecx
setne cl
mov dword [esp + 0x50], ecx
jmp 0x4f234b
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x58], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor ecx, ecx
mov dword [esp + 0x5c], eax
cmp dword [esi + 0x10], ecx
setne cl
mov dword [esp + 0x60], ecx
movzx eax, word [esi + 0x244]
cmp ax, bx
jne 0x4f23e8
or dword [esp + 0x60], 4
jmp 0x4f23fe
cmp eax, 2
jne 0x4f23f4
or dword [esp + 0x60], 8
jmp 0x4f23fe
cmp eax, 3
jne 0x4f23fe
or dword [esp + 0x60], 0x10
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f247a
mov edi, 0xe8
jmp 0x4f2420
mov ecx, dword [0x67cc98]
lea edx, [esp + 0x10]
push edx
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f2440
cmp dword [esp + 0x10], 0
jne 0x4f2420
jmp 0x4f247a
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x68], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
mov dword [esp + 0x6c], eax
xor eax, eax
cmp dword [esi + 0x10], eax
setne al
mov dword [esp + 0x70], eax
cmp dword [esi + 0x2dc], 0
je 0x4f247a
or dword [esp + 0x70], 2
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f253a
mov edi, 0x11a
jmp 0x4f24a0
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [0x67cc98]
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f24c0
cmp dword [esp + 0x10], 0
jne 0x4f24a0
jmp 0x4f253a
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x78], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor edx, edx
mov dword [esp + 0x7c], eax
cmp dword [esi + 0x10], edx
setne dl
mov dword [esp + 0x80], edx
mov eax, dword [esi + 0x9d4c]
cmp eax, ebx
jne 0x4f2503
or dword [esp + 0x80], 4
jmp 0x4f251f
cmp eax, 2
jne 0x4f2512
or dword [esp + 0x80], 8
jmp 0x4f251f
cmp eax, 4
jne 0x4f251f
or dword [esp + 0x80], 0x10
mov eax, dword [esi + 0x9d4c]
mov ecx, dword [esi + eax*4 + 0x9d1c]
movzx edx, byte [ecx + 0x2ce]
mov dword [esp + 0x84], edx
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f259a
mov esi, 0x610
mov ecx, dword [0x67cc98]
lea eax, [esp + 0x10]
push eax
call fcn.00574b80
mov eax, dword [eax]
cmp dword [eax + 8], esi
je 0x4f2572
cmp dword [esp + 0x10], 0
jne 0x4f2552
jmp 0x4f259a
cmp dword [eax + 0x10], 0
je 0x4f2585
or dword [esp + 0x80], 0x100
jmp 0x4f259a
mov eax, 0x100
test dword [esp + 0x80], eax
je 0x4f259a
xor dword [esp + 0x80], eax
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f2643
mov edi, 0xf2
jmp 0x4f25c0
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [0x67cc98]
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f25e0
cmp dword [esp + 0x10], 0
jne 0x4f25c0
jmp 0x4f2643
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x88], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor edx, edx
mov dword [esp + 0x8c], eax
cmp dword [esi + 0x10], edx
setne dl
mov dword [esp + 0x90], edx
mov al, byte [esi + 0x237]
cmp al, bl
jne 0x4f2629
or dword [esp + 0x90], 4
jmp 0x4f2643
cmp al, 2
jne 0x4f2637
or dword [esp + 0x90], 8
jmp 0x4f2643
cmp al, 3
jne 0x4f2643
or dword [esp + 0x90], 0x10
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f26b5
mov edi, 0x60
jmp 0x4f2660
mov ecx, dword [0x67cc98]
lea eax, [esp + 0x10]
push eax
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f2680
cmp dword [esp + 0x10], 0
jne 0x4f2660
jmp 0x4f26b5
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0x98], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor ecx, ecx
mov dword [esp + 0x9c], eax
cmp dword [esi + 0x10], ecx
setne cl
mov dword [esp + 0xa0], ecx
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f2783
mov edi, 0xc2
mov ecx, dword [0x67cc98]
lea edx, [esp + 0x10]
push edx
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f26f4
cmp dword [esp + 0x10], 0
jne 0x4f26d1
jmp 0x4f2783
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0xa8], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
mov dword [esp + 0xac], eax
xor eax, eax
cmp dword [esi + 0x10], eax
setne al
mov dword [esp + 0xb0], eax
cmp byte [esi + 0x237], bl
jne 0x4f2770
or dword [esp + 0xb0], 4
mov ecx, dword [0x65fd2c]
mov al, byte [ecx + 0x237]
cmp al, bl
jne 0x4f2753
or dword [esp + 0xb0], 0x20
jmp 0x4f2770
cmp al, 2
jne 0x4f2761
or dword [esp + 0xb0], 0x40
jmp 0x4f2770
cmp al, 3
jne 0x4f2770
or dword [esp + 0xb0], 0x80
mov edx, dword [esi + 0x240]
mov eax, dword [edx + 0x2c4]
mov dword [esp + 0xb4], eax
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f2827
mov edi, 0x34e
nop
lea ecx, [esp + 0x10]
push ecx
mov ecx, dword [0x67cc98]
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f27c0
cmp dword [esp + 0x10], 0
jne 0x4f27a0
jmp 0x4f2827
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0xb8], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor edx, edx
mov dword [esp + 0xbc], eax
cmp dword [esi + 0x10], edx
setne dl
mov dword [esp + 0xc0], edx
cmp byte [esi + 0x237], bl
jne 0x4f2805
or dword [esp + 0xc0], 4
cmp byte [esi + 0x237], 2
jne 0x4f2816
or dword [esp + 0xc0], 8
cmp byte [esi + 0x237], 3
jne 0x4f2827
or dword [esp + 0xc0], 0x10
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f2895
mov edi, 0x54f
nop
mov ecx, dword [0x67cc98]
lea eax, [esp + 0x10]
push eax
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f2860
cmp dword [esp + 0x10], 0
jne 0x4f2840
jmp 0x4f2895
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0xc8], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor ecx, ecx
mov dword [esp + 0xcc], eax
cmp dword [esi + 0x10], ecx
setne cl
mov dword [esp + 0xd0], ecx
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f2916
mov edi, 0x4e9
lea ecx, [ecx]
mov ecx, dword [0x67cc98]
lea edx, [esp + 0x10]
push edx
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f28d0
cmp dword [esp + 0x10], 0
jne 0x4f28b0
jmp 0x4f2916
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0xd8], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
mov dword [esp + 0xdc], eax
cmp dword [esi + 0x10], 0
je 0x4f290b
mov dword [esp + 0xe0], ebx
mov dword [0x681aa8], ebx
jmp 0x4f2916
mov dword [esp + 0xe0], 0
mov ecx, dword [0x67cc98]
call fcn.00575150
mov dword [esp + 0x10], eax
test eax, eax
je 0x4f299a
mov edi, 0x1e1
mov edi, edi
mov ecx, dword [0x67cc98]
lea eax, [esp + 0x10]
push eax
call fcn.00574b80
mov esi, dword [eax]
cmp dword [esi + 8], edi
je 0x4f2950
cmp dword [esp + 0x10], 0
jne 0x4f2930
jmp 0x4f299a
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0xe8], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
xor ecx, ecx
cmp dword [0x65fdf4], ecx
mov dword [esp + 0xec], eax
setne cl
xor edx, edx
cmp dword [0x65fdf0], edx
setne dl
mov dword [esp + 0xf0], ecx
mov dword [esp + 0xf4], edx
mov esi, dword [0x6820e4]
test esi, esi
je 0x4f29d6
mov eax, esi
call fcn.004019c0
call fcn.00577600
mov dword [esp + 0xf8], eax
mov eax, esi
call fcn.004019d0
call fcn.00577600
mov dword [esp + 0xfc], eax
mov eax, dword [0x6820e0]
mov dword [esp + 0x104], eax
mov ecx, dword [esp + 0x20]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x4f2a4f
mov edx, dword [0x698dd4]
mov edi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [esp + 0x18]
push eax
push 4
lea ecx, [esp + 0x24]
push ecx
push esi
mov dword [esp + 0x2c], 0x6111101
mov dword [esp + 0x30], edx
call edi
push 0
lea edx, [esp + 0x18]
push edx
push 4
lea eax, [esp + 0x28]
push eax
push esi
call edi
push 0
lea ecx, [esp + 0x18]
push ecx
push 0xe0
lea edx, [esp + 0x34]
push edx
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [esp + 0x10c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005762ee
mov esp, ebp
pop ebp
ret 4