Function at 0x473900
Capabilities:
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x6c
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x98]
mov esi, dword [esp + 0x80]
mov ebx, dword [esp + 0x9c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 0x50], ecx
movzx ecx, byte [esi]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x94]
mov dword [esp + 0x54], ebx
mov edx, dword [esp + 0x84]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0xa0]
mov edi, dword [esp + 0x8c]
mov ebx, dword [esp + 0xa8]
mov dword [esp + 0x58], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x5c], eax
test cl, cl
je 0x473a80
cmp cl, 0xe5
je 0x473a20
mov eax, esi
mov dword [esp + 0x48], edx
call fcn.00473250
test ebx, ebx
mov edx, dword [esp + 0x48]
mov ebp, eax
je 0x473b80
cmp eax, 7
je 0x473ab0
cmp edx, 1
setne al
test edi, edi
je 0x4739d5
test al, al
je 0x4739d5
cmp ebp, 4
je 0x473ad0
mov dword [esp + 0x88], str.Directory_does_not_have__.__entry.
mov dword [esp + 0x84], 5
jmp 0x473a07
mov edx, dword [esp + 0x38]
test edx, edx
je 0x473a47
test al, al
je 0x473a47
mov eax, esi
call fcn.00473250
cmp eax, 4
je 0x473d80
mov dword [esp + 0x88], str.Directory_does_not_have__..__entry.
mov dword [esp + 0x84], 7
mov eax, dword [ebx]
mov dword [esp + 0x80], eax
mov eax, dword [ebx + 0xc]
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
jmp eax
test ebx, ebx
je 0x473b80
cmp edx, 1
setne al
test edi, edi
je 0x473a36
test al, al
jne 0x4739bd
mov ebp, dword [esp + 0x38]
test ebp, ebp
je 0x473a42
test al, al
jne 0x4739f1
mov ebp, 5
lea eax, [ebp - 2]
mov edx, dword [esp + 0x40]
cmp eax, 2
seta al
test edx, edx
setne dl
or eax, edx
mov byte [esp + 0x48], al
cmp byte [esp + 0x48], 0
je 0x473bf0
xor eax, eax
xor edx, edx
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
ret
test ebx, ebx
je 0x473b80
cmp edx, 1
setne al
test edi, edi
je 0x473a9a
test al, al
jne 0x4739bd
mov edx, dword [esp + 0x38]
test edx, edx
je 0x473a6a
test al, al
je 0x473a6a
jmp 0x4739f1
mov eax, dword [ebx]
mov dword [esp + 0x84], 0
mov dword [esp + 0x88], eax
mov eax, dword [ebx + 4]
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
jmp eax
mov eax, dword [esi]
cmp dword [0x549630], eax
jne 0x4739bd
mov eax, dword [esi + 4]
cmp dword [0x549634], eax
jne 0x4739bd
movzx eax, word [esi + 8]
cmp word [0x549638], ax
jne 0x4739bd
movzx eax, byte [esi + 0xa]
cmp byte [0x54963a], al
jne 0x4739bd
cmp dword [esp + 0x58], 0
je 0x473e64
xor edx, edx
cmp dword [esp + 0x4c], 2
jne 0x473b2b
movzx eax, word [esi + 0x14]
shl eax, 0x10
mov edx, eax
movzx eax, word [esi + 0x1a]
or eax, edx
mov edx, dword [esp + 0x58]
mov edx, dword [edx]
cmp eax, edx
je 0x473e64
mov dword [esp + 0x90], eax
mov dword [esp + 0x8c], edx
mov dword [esp + 0x88], str.First_cluster_of_directory__.__entry_is_invalid._Expected:__lu__present:__lu
mov dword [esp + 0x84], 6
mov eax, dword [ebx]
mov dword [esp + 0x80], eax
mov eax, dword [ebx + 0xc]
add esp, 0x6c
pop ebx
pop esi
pop edi
pop ebp
jmp eax
mov ebx, dword [fcn.004a1b90]
mov dword [esp], 2
call ebx
mov dword [esp + 8], 0x548cc0
mov dword [esp + 4], str.__s__Invalid_argument:_handler__NULL
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [esp], 2
call ebx
mov dword [esp + 8], 2
mov dword [esp + 0xc], eax
mov dword [esp + 4], 1
mov dword [esp], 0x548cf5
call sub.msvcrt.dll_fwrite
mov dword [esp], 2
call ebx
mov dword [esp], eax
call sub.msvcrt.dll_fflush
mov eax, 0x16
xor edx, edx
jmp 0x473a6e
mov eax, dword [esp + 0x50]
mov edx, dword [esp + 0x54]
or edi, dword [esp + 0x38]
add eax, 2
mov dword [esp + 0x58], edi
movzx edi, word [esi + 0x1a]
adc edx, 0
mov dword [esp + 0x40], eax
mov dword [esp + 0x44], edx
cmp cl, 0xe5
je 0x473cf1
mov eax, esi
call fcn.00473250
cmp eax, 4
mov dword [esp + 0x50], eax
sete byte [esp + 0x48]
xor edx, edx
cmp dword [esp + 0x4c], 2
je 0x473e20
mov eax, dword [esp + 0x58]
or edi, edx
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], edi
test eax, eax
jne 0x473e30
cmp byte [esp + 0x48], 0
je 0x473e30
cmp edi, 1
jbe 0x473e53
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp dword [esp + 0x38], eax
sbb ecx, edx
jae 0x473e53
cmp dword [esp + 0x50], 3
mov edx, dword [esi + 0x1c]
sete al
test edi, edi
setne cl
mov dword [esp + 0x48], edx
test al, cl
je 0x473ca1
test edx, edx
je 0x473ee5
mov eax, dword [esp + 0x48]
xor edx, edx
cmp ebp, 4
je 0x473ea1
xor ecx, ecx
cmp dword [esp + 0x4c], 2
jne 0x473cc0
movzx ecx, word [esi + 0x14]
shl ecx, 0x10
movzx esi, word [esi + 0x1a]
or esi, ecx
jne 0x473a6a
mov edi, eax
or edi, edx
je 0x473a6a
mov dword [esp + 0x88], str.Invalid_non_zero_size_field_set_for_file_without_any_allocation.
mov dword [esp + 0x84], 4
jmp 0x473a07
cmp dword [esp + 0x4c], 2
je 0x473e18
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], 0
cmp edi, 1
jne 0x473e80
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x50], eax
mov eax, 0x5491d4
lea esi, [esi]
mov edx, dword [esp + 0x40]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x38]
mov dword [esp + 0x18], 2
mov dword [esp + 0x1c], edx
mov edx, dword [esp + 0x3c]
mov dword [esp + 0x20], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], edx
mov dword [esp + 8], str.Invalid_value__I64u_for__s_first_cluster_number__Min:__lu__Max:__I64u_
mov dword [esp + 4], 1
mov eax, dword [ebx]
mov dword [esp], eax
mov eax, dword [esp + 0x50]
call eax
mov edi, edx
or edi, eax
jne 0x473a6e
mov eax, dword [esi + 0x1c]
mov dword [esp + 0x48], eax
jmp 0x473ca1
mov eax, dword [esi]
cmp dword [0x549624], eax
jne 0x4739f1
mov eax, dword [esi + 4]
cmp dword [0x549628], eax
jne 0x4739f1
movzx eax, word [esi + 8]
cmp word [0x54962c], ax
jne 0x4739f1
movzx eax, byte [esi + 0xa]
cmp byte [0x54962e], al
jne 0x4739f1
cmp dword [esp + 0x5c], 0
je 0x473a47
xor eax, eax
cmp dword [esp + 0x4c], 2
jne 0x473ddb
movzx edx, word [esi + 0x14]
mov eax, edx
shl eax, 0x10
movzx edx, word [esi + 0x1a]
or edx, eax
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
cmp edx, eax
je 0x473ec8
mov dword [esp + 0x90], edx
mov dword [esp + 0x8c], eax
mov dword [esp + 0x88], str.First_cluster_of_directory__..__entry_is_invalid._Expected:__lu__present:__lu
mov dword [esp + 0x84], 8
jmp 0x473b63
mov dword [esp + 0x50], 5
movzx edx, word [esi + 0x14]
shl edx, 0x10
jmp 0x473c3b
cmp edi, 1
jne 0x473e88
mov eax, dword [ebx + 0xc]
cmp byte [esp + 0x48], 0
mov edi, 0x5491ca
mov dword [esp + 0x50], eax
mov eax, 0x5491d4
cmovne eax, edi
jmp 0x473d20
mov eax, dword [ebx + 0xc]
mov dword [esp + 0x50], eax
mov eax, 0x5491ca
jmp 0x473d20
mov eax, dword [esp + 0x38]
test eax, eax
jne 0x473d80
mov eax, dword [esp + 0x40]
test eax, eax
setne byte [esp + 0x48]
jmp 0x473a5f
mov dword [esp + 0x50], 5
mov edx, dword [esp + 0x44]
mov ecx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
cmp dword [esp + 0x38], eax
sbb ecx, edx
jae 0x473e35
jmp 0x473c81
mov eax, dword [esp + 0x48]
test eax, eax
je 0x473a6a
mov dword [esp + 0x88], str.Invalid_non_zero_size_field_set_for_directory.
mov dword [esp + 0x84], 3
jmp 0x473a07
lea eax, [ebp - 2]
cmp eax, 2
mov eax, dword [esp + 0x40]
seta dl
test eax, eax
setne al
or eax, edx
mov byte [esp + 0x48], al
jmp 0x473a5f
mov eax, dword [esp + 0x38]
mov edx, dword [esp + 0x3c]
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], edx
mov dword [esp + 0x14], eax
mov dword [esp + 0x18], edx
mov dword [esp + 8], str.Invalid_non_0x_I64X_value__I64u___0x_I64X_for_file_first_cluster_number_with_0_sized_allocation.
mov dword [esp + 4], 2
mov eax, dword [ebx]
mov dword [esp], eax
call dword [ebx + 0xc]
jmp 0x473d67