Function at 0x4e1a60
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
sub esp, 0xec
push esi
push edi
mov edi, ecx
push 0x1e2
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1aa9
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0x14], eax
fld dword [esi + 0x208]
call fcn.00551860
mov dword [esp + 0x18], eax
xor eax, eax
cmp dword [esi + 0x10], eax
setne al
mov dword [esp + 0x1c], eax
push 0x4f9
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1ade
mov ecx, esi
call fcn.00451fe0
test eax, eax
je 0x4e1ad7
xor ecx, ecx
cmp dword [esi + 0x10], ecx
setne cl
mov dword [esp + 0x3c], ecx
jmp 0x4e1ade
mov edx, dword [edi + 0x20]
mov dword [esp + 0x3c], edx
push ebx
push ebp
push 0x1da
mov ecx, 0x62adb0
call fcn.004373d0
test eax, eax
mov edi, 8
mov ebp, 0x10
mov ebx, 1
je 0x4e1b37
xor ecx, ecx
cmp dword [eax + 0x10], ecx
setne cl
mov dword [esp + 0x54], ecx
movzx eax, word [eax + 0x270]
cmp ax, bx
jne 0x4e1b21
or dword [esp + 0x54], 4
jmp 0x4e1b37
cmp ax, 2
jne 0x4e1b2d
or dword [esp + 0x54], edi
jmp 0x4e1b37
cmp ax, 3
jne 0x4e1b37
or dword [esp + 0x54], ebp
push 0xec
mov ecx, 0x62adb0
call fcn.004373d0
test eax, eax
je 0x4e1b64
xor edx, edx
cmp dword [eax + 0x10], edx
setne dl
mov dword [esp + 0x64], edx
cmp dword [eax + 0x308], 0
je 0x4e1b64
or dword [esp + 0x64], 2
push 0x121
mov ecx, 0x62adb0
call fcn.004373d0
test eax, eax
je 0x4e1bb6
xor ecx, ecx
cmp dword [eax + 0x10], ecx
setne cl
mov dword [esp + 0x74], ecx
mov edx, dword [eax + 0xd030]
cmp edx, ebx
jne 0x4e1b94
or dword [esp + 0x74], 4
jmp 0x4e1ba8
cmp edx, 2
jne 0x4e1b9f
or dword [esp + 0x74], edi
jmp 0x4e1ba8
cmp edx, 4
jne 0x4e1ba8
or dword [esp + 0x74], ebp
mov ecx, eax
call fcn.004bc3b0
movzx edx, al
mov dword [esp + 0x78], edx
push 0x64c
mov ecx, 0x62adb0
call fcn.004373d0
test eax, eax
je 0x4e1be8
cmp dword [eax + 0x10], 0
je 0x4e1bd9
or dword [esp + 0x74], 0x100
jmp 0x4e1be8
mov eax, 0x100
test dword [esp + 0x74], eax
je 0x4e1be8
xor dword [esp + 0x74], eax
push 0xf6
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1c59
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0x7c], eax
fld dword [esi + 0x208]
call fcn.00551860
mov dword [esp + 0x80], eax
xor eax, eax
cmp dword [esi + 0x10], eax
setne al
mov dword [esp + 0x84], eax
mov al, byte [esi + 0x263]
cmp al, bl
jne 0x4e1c41
or dword [esp + 0x84], 4
jmp 0x4e1c59
cmp al, 2
jne 0x4e1c4e
or dword [esp + 0x84], edi
jmp 0x4e1c59
cmp al, 3
jne 0x4e1c59
or dword [esp + 0x84], ebp
push 0x60
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1c9e
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0x8c], eax
fld dword [esi + 0x208]
call fcn.00551860
xor ecx, ecx
mov dword [esp + 0x90], eax
cmp dword [esi + 0x10], ecx
setne cl
mov dword [esp + 0x94], ecx
push 0xc6
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1d43
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0x9c], eax
fld dword [esi + 0x208]
call fcn.00551860
xor edx, edx
mov dword [esp + 0xa0], eax
cmp dword [esi + 0x10], edx
setne dl
mov dword [esp + 0xa4], edx
cmp byte [esi + 0x263], bl
jne 0x4e1d30
or dword [esp + 0xa4], 4
mov eax, dword [0x63aec4]
mov al, byte [eax + 0x263]
cmp al, bl
jne 0x4e1d13
or dword [esp + 0xa4], 0x20
jmp 0x4e1d30
cmp al, 2
jne 0x4e1d21
or dword [esp + 0xa4], 0x40
jmp 0x4e1d30
cmp al, 3
jne 0x4e1d30
or dword [esp + 0xa4], 0x80
mov ecx, dword [esi + 0x26c]
mov edx, dword [ecx + 0x2f0]
mov dword [esp + 0xa8], edx
push 0x355
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1dbb
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0xac], eax
fld dword [esi + 0x208]
call fcn.00551860
mov dword [esp + 0xb0], eax
xor eax, eax
cmp dword [esi + 0x10], eax
setne al
mov dword [esp + 0xb4], eax
cmp byte [esi + 0x263], bl
jne 0x4e1d9b
or dword [esp + 0xb4], 4
cmp byte [esi + 0x263], 2
jne 0x4e1dab
or dword [esp + 0xb4], edi
cmp byte [esi + 0x263], 3
jne 0x4e1dbb
or dword [esp + 0xb4], ebp
push 0x58a
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1e03
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0xbc], eax
fld dword [esi + 0x208]
call fcn.00551860
xor ecx, ecx
mov dword [esp + 0xc0], eax
cmp dword [esi + 0x10], ecx
setne cl
mov dword [esp + 0xc4], ecx
push 0x524
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
je 0x4e1e5c
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0xcc], eax
fld dword [esi + 0x208]
call fcn.00551860
mov dword [esp + 0xd0], eax
cmp dword [esi + 0x10], 0
je 0x4e1e51
mov dword [esp + 0xd4], ebx
mov dword [0x64e5f8], ebx
jmp 0x4e1e5c
mov dword [esp + 0xd4], 0
push 0x213
mov ecx, 0x62adb0
call fcn.004373d0
mov esi, eax
test esi, esi
pop ebp
pop ebx
je 0x4e1ebb
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0xd4], eax
fld dword [esi + 0x208]
call fcn.00551860
xor edx, edx
cmp dword [0x63af8c], edx
mov dword [esp + 0xd8], eax
setne dl
xor eax, eax
cmp dword [0x63af88], eax
setne al
mov dword [esp + 0xdc], edx
mov dword [esp + 0xe0], eax
mov esi, dword [0x64eb94]
test esi, esi
je 0x4e1ef6
fld dword [esi + 0x204]
call fcn.00551860
mov dword [esp + 0xe4], eax
fld dword [esi + 0x208]
call fcn.00551860
mov ecx, dword [0x64eb90]
mov dword [esp + 0xe8], eax
mov dword [esp + 0xf0], ecx
mov edx, dword [esp + 0xf8]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x4e1f71
mov eax, dword [0x66b200]
mov edi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [esp + 0xc]
push ecx
push 4
lea edx, [esp + 0x18]
push edx
push esi
mov dword [esp + 0x20], 0x6111101
mov dword [esp + 0x24], eax
call edi
push 0
lea eax, [esp + 0xc]
push eax
push 4
lea ecx, [esp + 0x1c]
push ecx
push esi
call edi
push 0
lea edx, [esp + 0xc]
push edx
push 0xe0
lea eax, [esp + 0x20]
push eax
push esi
call edi
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop esi
add esp, 0xec
ret 4