Function at 0x479459
Capabilities:
Accept command line arguments
Write file on windows

Disassembly:
push 0x9c
mov eax, 0x49413b
call fcn.00427e31
xor ebx, ebx
xor eax, eax
push 7
pop esi
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], esi
mov word [ebp - 0x28], ax
mov dword [ebp - 4], ebx
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
xor ecx, ecx
mov dword [ebp - 0x70], ebx
mov word [ebp - 0x70], cx
lea ecx, [ebp - 0x70]
push eax
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], esi
call fcn.00402048
inc ebx
mov byte [ebp - 4], bl
call fcn.0047b198
xor ecx, ecx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x74], ecx
lea ecx, [ebp - 0x88]
push eax
call fcn.00405ca7
push 0x37
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 2
push eax
mov ecx, 0x4c0fec
call fcn.00408313
mov esi, eax
push 0x4ab830
lea edx, [ebp - 0x88]
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x40]
call fcn.00401a90
pop ecx
push esi
push eax
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x58]
push dword [ebp - 0xa4]
call fcn.00407c2e
mov byte [ebp - 0xa4], 0
lea eax, [ebp - 0x58]
push dword [ebp - 0xa4]
lea ecx, [ebp - 0x28]
push eax
call fcn.00401a64
lea ecx, [ebp - 0x58]
call fcn.0040172c
lea ecx, [ebp - 0x40]
call fcn.0040172c
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 2
call fcn.0040172c
push 8
pop edi
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
push 0x4ab84c
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.00437e2b
mov esi, eax
pop ecx
pop ecx
test esi, esi
je 0x4795d5
lea edx, [ebp - 0x70]
lea ecx, [ebp - 0x58]
call fcn.0040a462
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x58]
cmp dword [ebp - 0x44], 0x10
push esi
push dword [ebp - 0x48]
cmovae ecx, dword [ebp - 0x58]
push ebx
push ecx
call fcn.00437a87
push esi
push ebx
push ebx
push 0x4ab890
call fcn.00437a87
add esp, 0x20
lea ecx, [ebp - 0x40]
mov edx, 0x4e76cc
call fcn.0040a462
cmp dword [ebp - 0x30], 0
je 0x4795be
cmp dword [ebp - 0x2c], 0x10
lea eax, [ebp - 0x40]
push esi
push dword [ebp - 0x30]
cmovae eax, dword [ebp - 0x40]
push ebx
push eax
call fcn.00437a87
add esp, 0x10
push esi
call fcn.0043751a
pop ecx
lea ecx, [ebp - 0x40]
call fcn.00405c7c
lea ecx, [ebp - 0x58]
call fcn.00405c7c
mov eax, dword [ebp - 0x74]
mov ebx, 0x1000
cmp eax, edi
jb 0x479628
mov ecx, dword [ebp - 0x88]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], ecx
cmp eax, ebx
jb 0x47961f
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0xa4]
push eax
call fcn.004016dc
mov eax, dword [ebp - 0xa8]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa4]
push eax
push ecx
call fcn.004272f3
pop ecx
pop ecx
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x5c]
cmp eax, edi
jb 0x479677
mov ecx, dword [ebp - 0x70]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], ecx
cmp eax, ebx
jb 0x47966e
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004016dc
mov eax, dword [ebp - 0xa4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa8]
push eax
push ecx
call fcn.004272f3
pop ecx
pop ecx
call fcn.0047afa7
cmp dword [0x4e7728], edi
mov esi, 0x4e7714
push ecx
mov eax, esi
mov ecx, esp
cmovae eax, dword [0x4e7714]
push eax
call fcn.00407164
mov ecx, dword [0x4e79d0]
call fcn.0047d8ad
pop ecx
test eax, eax
je 0x4796af
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x4e7728], edi
cmovae esi, dword [0x4e7714]
push esi
call fcn.0043747b
cmp dword [ebp - 0x18], 0
pop ecx
je 0x4796f5
cmp dword [ebp - 0x14], edi
lea ecx, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x28]
call fcn.00408927
test al, al
je 0x4796f5
cmp dword [ebp - 0x14], edi
lea eax, [ebp - 0x28]
cmovae eax, dword [ebp - 0x28]
push eax
call fcn.0043747b
pop ecx
mov eax, dword [ebp - 0x14]
cmp eax, edi
jb 0x479740
mov ecx, dword [ebp - 0x28]
lea eax, [eax*2 + 2]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa8], ecx
cmp eax, ebx
jb 0x479737
lea eax, [ebp - 0xa4]
push eax
lea eax, [ebp - 0xa8]
push eax
call fcn.004016dc
mov eax, dword [ebp - 0xa4]
pop ecx
pop ecx
mov ecx, dword [ebp - 0xa8]
push eax
push ecx
call fcn.004272f3
pop ecx
pop ecx
call fcn.00427de0
ret