Function at 0x411570
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push esi
mov esi, ecx
cmp dword [esi + 0x38], 0
je 0x4115fc
cmp byte [esi + 0x3d], 0
je 0x4115fc
mov eax, dword [esi]
push edi
push 0xffffffffffffffff
call dword [eax + 0xc]
cmp eax, 0xffffffff
je 0x4115f4
mov ecx, dword [esi + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [esi + 0x40]
push eax
call edx
sub eax, 0
je 0x4115c6
sub eax, 1
je 0x4115ca
sub eax, 2
jne 0x4115f4
mov byte [esi + 0x3d], al
mov al, 1
pop edi
pop esi
mov esp, ebp
pop ebp
ret
mov byte [esi + 0x3d], 0
mov edi, dword [ebp - 4]
lea eax, [ebp - 0x24]
sub edi, eax
je 0x4115e7
push dword [esi + 0x4c]
push edi
push 1
push eax
call fcn.0042de88
add esp, 0x10
cmp edi, eax
jne 0x4115f4
cmp byte [esi + 0x3d], 0
pop edi
sete al
pop esi
mov esp, ebp
pop ebp
ret
pop edi
xor al, al
pop esi
mov esp, ebp
pop ebp
ret
mov al, 1
pop esi
mov esp, ebp
pop ebp
ret

Function at 0x411700
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
push ebx
push esi
mov esi, ecx
push edi
cmp dword [esi + 0x4c], 0
je 0x4117c3
mov edi, dword [esi + 0xc]
lea eax, [esi + 0x3c]
cmp dword [edi], eax
jne 0x411733
mov edx, dword [esi + 0x54]
mov ecx, dword [esi + 0x50]
sub edx, ecx
mov dword [edi], ecx
mov eax, dword [esi + 0x1c]
mov dword [eax], ecx
mov eax, dword [esi + 0x2c]
mov dword [eax], edx
cmp dword [esi + 0x38], 0
lea edi, [esi + 0x3d]
je 0x41177e
cmp byte [edi], 0
je 0x41177e
mov eax, dword [esi]
mov ecx, esi
push 0xffffffffffffffff
call dword [eax + 0xc]
cmp eax, 0xffffffff
jne 0x411753
xor al, al
jmp 0x411780
mov ecx, dword [esi + 0x38]
mov eax, dword [ecx]
mov edx, dword [eax + 0x20]
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 4]
push eax
lea eax, [ebp - 0x24]
push eax
lea eax, [esi + 0x40]
push eax
call edx
sub eax, 0
je 0x41179b
sub eax, 1
je 0x41179e
sub eax, 2
jne 0x41174f
mov byte [edi], al
mov al, 1
push dword [esi + 0x4c]
xor ebx, ebx
test al, al
cmovne ebx, esi
call fcn.0042d90f
xor ecx, ecx
add esp, 4
test eax, eax
cmovne ebx, ecx
jmp 0x4117c8
mov byte [edi], 0
mov ebx, dword [ebp - 4]
lea eax, [ebp - 0x24]
sub ebx, eax
je 0x4117bb
push dword [esi + 0x4c]
push ebx
push 1
push eax
call fcn.0042de88
add esp, 0x10
cmp ebx, eax
jne 0x41174f
cmp byte [edi], 0
sete al
jmp 0x411780
xor ebx, ebx
lea edi, [esi + 0x3d]
lea eax, [esi + 4]
mov byte [esi + 0x48], 0
mov dword [esi + 0xc], eax
lea edx, [esi + 8]
lea eax, [esi + 0x14]
mov byte [edi], 0
mov dword [esi + 0x1c], eax
lea ecx, [esi + 0x18]
mov dword [esi + 0x20], ecx
lea eax, [esi + 0x24]
mov dword [esi + 0x2c], eax
lea eax, [esi + 0x28]
mov dword [esi + 0x30], eax
mov dword [esi + 0x10], edx
mov dword [edx], 0
mov dword [ecx], 0
mov dword [eax], 0
mov eax, dword [esi + 0xc]
pop edi
mov dword [eax], 0
mov eax, ebx
mov ecx, dword [esi + 0x1c]
mov dword [ecx], 0
mov ecx, dword [esi + 0x2c]
mov dword [ecx], 0
mov dword [esi + 0x4c], 0
mov ecx, dword [0x4a0a60]
mov edx, dword [0x4a0a64]
mov dword [esi + 0x40], ecx
mov dword [esi + 0x44], edx
mov dword [esi + 0x38], 0
pop esi
pop ebx
mov esp, ebp
pop ebp
ret