Function at 0x4b1bb3
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
sub esp, 0x334
mov eax, dword [0x5f2e68]
xor eax, esp
mov dword [esp + 0x330], eax
push ebx
push esi
mov esi, dword [ebp + 0xc]
push edi
mov edi, 0x103
push edi
xor ebx, ebx
lea eax, [esp + 0x235]
push ebx
push eax
mov dword [esp + 0x24], esi
mov byte [esp + 0x23c], 0
call fcn.005306b0
add esp, 0xc
push edi
lea eax, [esp + 0x12d]
push ebx
push eax
mov byte [esp + 0x134], bl
call fcn.005306b0
add esp, 0xc
push edi
lea eax, [esp + 0x25]
push ebx
push eax
mov byte [esp + 0x2c], bl
call fcn.005306b0
add esp, 0xc
cmp esi, ebx
mov dword [esp + 0x10], ebx
jne 0x4b1c33
xor eax, eax
jmp 0x4b202d
mov ecx, dword [ebp + 8]
cmp ecx, 0xffffffff
mov ebx, str.c_config.lcg
jne 0x4b1c67
lea eax, [esp + 0x128]
call fcn.004ccb8b
xor eax, eax
call fcn.004b0df7
push eax
mov ecx, 0x104
lea eax, [esp + 0x234]
call fcn.004ccc3f
jmp 0x4b1c84
test ecx, ecx
jne 0x4b1c87
lea eax, [esp + 0x128]
call fcn.004ccb8b
push ebx
lea edi, [esp + 0x234]
call fcn.00470e3d
pop ecx
jmp 0x4b1cc9
push 0x5f5380
xor eax, eax
call fcn.0047077a
push eax
lea eax, [esp + 0x130]
push 0x58fec4
push eax
call fcn.00531b2f
push ebx
push str.P2_DC001
lea eax, [esp + 0x140]
push eax
lea eax, [esp + 0x24c]
push 0x5affac
push eax
call fcn.00531b2f
add esp, 0x24
push ebx
push 0
push 0
call fcn.00493154
pop ecx
pop ecx
push eax
push 0x553c34
lea eax, [esp + 0x2c]
push 0x104
push eax
call fcn.004ce4e5
add esp, 0x14
lea edi, [esp + 0x20]
call fcn.00432263
test eax, eax
je 0x4b1d71
mov eax, edi
call fcn.004314ff
mov ebx, dword [sym.imp.KERNEL32.dll_Sleep]
push 0xfa
call ebx
call fcn.00432263
test eax, eax
je 0x4b1d71
mov eax, edi
call fcn.004314ff
push 0x226
call ebx
call fcn.00432263
test eax, eax
je 0x4b1d71
mov eax, edi
call fcn.004314ff
push 0x226
call ebx
call fcn.00432263
test eax, eax
je 0x4b1d71
mov eax, edi
call fcn.004314ff
mov ecx, dword [ebp + 8]
mov eax, edi
push str._GetLastError_
push eax
xor eax, eax
call fcn.0047077a
push eax
push str.:8:PostPayments__s__FAILED:_DeleteFile__s__FAILED:_This_could_happen_on_a_limited_user_account___:__s
call fcn.0042b70b
add esp, 0x10
jmp 0x4b1c2c
push 1
push dword [ebp + 8]
call fcn.004b0fde
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x4b1d9d
mov ecx, dword [ebp + 8]
call fcn.0047077a
push eax
push str.:5:PostPayments__s__FAILED:_GetPayments___FAILED:_out_of_memory.
call fcn.0042b70b
pop ecx
pop ecx
jmp 0x4b1c2c
push 0x1d0b
push str..ProcessCC.c
mov edx, 0x54f4b4
lea ecx, [esp + 0x28]
call fcn.00434df1
test eax, eax
pop ecx
pop ecx
mov dword [esp + 0x14], eax
jne 0x4b1de4
mov ecx, dword [ebp + 8]
lea eax, [esp + 0x20]
push eax
xor eax, eax
call fcn.0047077a
push eax
push str.:8:PostPayments__s__FAILED:_The_temp_local_file___s__could_not_be_opened_for_writing_
call fcn.0042b70b
add esp, 0xc
push edi
call fcn.0053061e
jmp 0x4b1d97
mov eax, dword [edi + 0x7c]
mov ecx, dword [esi + 0x7c]
lea ebx, [eax + ecx + 1]
mov eax, edi
call fcn.004b1a0e
mov ebx, eax
test ebx, ebx
jne 0x4b1e33
push dword [esi + 0x7c]
mov ecx, dword [ebp + 8]
push dword [0x7c]
call fcn.0047077a
push eax
push str.:5:PostPayments__s__FAILED:_AllocatePaymentNodeArray__d___d__1__FAILED.
call fcn.0042b70b
add esp, 0x10
test edi, edi
je 0x4b1e25
push edi
call fcn.0053061e
pop ecx
mov ecx, dword [esp + 0x14]
call fcn.00435239
jmp 0x4b1c2c
mov eax, dword [esp + 0x18]
xor esi, esi
cmp dword [eax + 0x7c], esi
mov edi, 0x13c
jle 0x4b1e60
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
push ebx
call fcn.004b1b0b
mov eax, dword [esp + 0x1c]
add dword [esp + 0x20], edi
inc esi
cmp esi, dword [eax + 0x7c]
pop ecx
jl 0x4b1e47
push dword [esp + 0x14]
mov eax, dword [ebx + 0x7c]
push 1
mov dword [esp + 0x18], eax
lea eax, [esp + 0x18]
push 4
push eax
call fcn.00531aad
xor esi, esi
add esp, 0x10
cmp dword [esp + 0x10], esi
jle 0x4b1ea0
mov edx, ebx
mov dword [edx], edi
mov dword [edx + 8], 0x70
call fcn.004b19f3
mov dword [edx + 4], eax
inc esi
add edx, edi
cmp esi, dword [esp + 0x10]
jl 0x4b1e86
push dword [esp + 0x14]
push dword [esp + 0x14]
push edi
push ebx
call fcn.00531aad
add esp, 0x10
cmp eax, dword [esp + 0x10]
je 0x4b1ee3
push dword [esp + 0x10]
mov ecx, dword [ebp + 8]
xor eax, eax
call fcn.0047077a
push eax
push str.:7:PostPayments__s__FAILED:_fwrite___FAILED_to_write__d_nodes.
call fcn.0042b70b
mov ecx, dword [esp + 0x20]
add esp, 0xc
call fcn.00435239
push ebx
jmp 0x4b1ddd
push ebx
call fcn.0053061e
pop ecx
mov ecx, dword [esp + 0x14]
call fcn.00435239
xor esi, esi
push esi
push esi
push esi
push str.CCPAYCODE222
lea eax, [esp + 0x240]
push eax
lea eax, [esp + 0x34]
push eax
call fcn.00404a1b
add esp, 0x18
test eax, eax
jg 0x4b202a
mov edi, dword [ebp + 8]
lea eax, [esp + 0x230]
push eax
lea eax, [esp + 0x24]
push eax
xor eax, eax
mov ecx, edi
call fcn.0047077a
push eax
push str.:7:PostPayments__s__FAILED:_CreateArchive___s_____s___FAILED:_The_payments_could_not_be_posted_to_TAMS.
call fcn.0042b70b
add esp, 0x10
lea edx, [esp + 0x128]
call fcn.004ccc0d
test eax, eax
jne 0x4b1c2c
call fcn.0046b2ee
mov ecx, eax
call fcn.004707d3
cmp edi, eax
je 0x4b1c2c
cmp dword [0x6fa384], esi
jne 0x4b1c2c
push esi
mov dword [0x6fa384], 1
call fcn.0046b32c
push eax
call fcn.0046b30d
push eax
lea eax, [esp + 0x134]
push eax
call fcn.0047829d
add esp, 0x10
call fcn.0046b32c
push eax
call fcn.0046b30d
push eax
lea ecx, [esp + 0x130]
call fcn.004777b1
cmp eax, esi
pop ecx
pop ecx
jge 0x4b1fe4
push str._GetLastError_
call fcn.0046b32c
push eax
call fcn.0046b30d
push eax
lea eax, [esp + 0x134]
push eax
xor eax, eax
mov ecx, edi
call fcn.0047077a
push eax
push str.:7:PostPayments__s_:_LogonToServer__s___s___s__failed_because_of_invalid_user_name_and_password:__s
jmp 0x4b200e
jle 0x4b2016
push str._GetLastError_
call fcn.0046b32c
push eax
call fcn.0046b30d
push eax
lea eax, [esp + 0x134]
push eax
xor eax, eax
mov ecx, edi
call fcn.0047077a
push eax
push str.:6:PostPayments__s_:_LogonToServer__s___s___s__failed:__s
call fcn.0042bd38
add esp, 0x18
push dword [esp + 0x18]
push edi
call fcn.004b1bb3
pop ecx
pop ecx
mov dword [0x6fa384], esi
jmp 0x4b202d
xor eax, eax
inc eax
mov ecx, dword [esp + 0x33c]
pop edi
pop esi
pop ebx
xor ecx, esp
call fcn.005317e7
mov esp, ebp
pop ebp
ret