Function at 0x424f7b
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x2464
call fcn.004559f0
push ebx
push esi
xor eax, eax
push edi
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 8]
lea esi, [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
call fcn.0042a062
and dword [esp + 0x24], 0
and dword [esp + 0x28], 0
cmp ebx, 2
mov dword [esp + 0x2c], 0x48a854
mov dword [esp + 0x30], edi
jbe 0x424fde
mov eax, dword [edi + 4]
mov eax, dword [eax + 8]
call fcn.00413062
cmp eax, 1
jne 0x424fde
mov dword [esp + 0xc], 0x80000000
mov eax, dword [edi + 4]
mov esi, dword [eax]
lea eax, [esp + 0x450]
push eax
lea eax, [esp + 0x1464]
push eax
lea eax, [esp + 0xc60]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.00412f67
pop ecx
push eax
lea edi, [esp + 0x1c80]
call fcn.00425730
test al, al
jne 0x42503a
mov dword [0x48a85c], 2
lea eax, [esp + 0x24]
call fcn.00424715
cmp dword [esp + 0x10], 0
jmp 0x425356
mov edi, dword [esp + 0x1c]
push 3
pop esi
cmp edi, esi
je 0x425052
cmp edi, 1
je 0x425052
mov dword [0x48a85c], esi
jmp 0x425027
push edi
mov ebx, 0x48a864
mov eax, 0x48a548
call fcn.0042582a
test al, al
jne 0x42507d
call dword [0x4672d0]
mov dword [0x48a860], eax
mov dword [0x48a85c], 4
jmp 0x425027
cmp edi, esi
je 0x4251eb
cmp edi, 1
jne 0x425097
cmp dword [0x48a82c], 2
je 0x4251eb
xor ebx, ebx
lea esi, [esp + 0x34]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], ebx
call fcn.0042a089
test al, al
mov eax, dword [esp + 0x3c]
jne 0x4250bf
mov eax, 0x429703
push ebx
push ebx
push edi
lea ecx, [esp + 0x45c]
push ecx
lea ecx, [esp + 0x1470]
push ecx
push dword [esp + 0x60]
lea ecx, [esp + 0xc70]
push ecx
push dword [0x48a864]
call eax
cmp eax, ebx
mov dword [esp + 0x24], eax
jne 0x425127
call dword [0x4672d0]
mov esi, dword [0x467308]
mov dword [0x48a860], eax
mov dword [0x48a85c], 7
cmp dword [esp + 0x34], ebx
je 0x425115
push dword [esp + 0x34]
call esi
lea eax, [esp + 0x24]
call fcn.00424715
cmp dword [esp + 0x10], ebx
jmp 0x425271
cmp byte [0x48a7d8], bl
je 0x425136
or dword [esp + 0xc], 2
jmp 0x42513b
or dword [esp + 0xc], 1
push ebx
push dword [esp + 0x10]
lea ecx, [esp + 0x1c70]
push 0x80000000
push ecx
push eax
lea esi, [esp + 0x54]
call fcn.0042a0b8
call eax
cmp eax, ebx
mov dword [esp + 0x28], eax
jne 0x42518d
call dword [0x4672d0]
mov dword [0x48a85c], 8
cmp dword [esp + 0x40], ebx
mov esi, dword [0x467308]
mov dword [0x48a860], eax
je 0x425109
push dword [esp + 0x40]
call esi
jmp 0x425109
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov esi, dword [eax + 4]
push 0x46d578
push ecx
call fcn.00412f67
pop ecx
push eax
call fcn.0045348b
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
jne 0x4251c2
call dword [0x4672d0]
mov dword [0x48a85c], 9
jmp 0x425171
cmp dword [esp + 0x40], ebx
je 0x4251d2
push dword [esp + 0x40]
call dword [0x467308]
cmp dword [esp + 0x34], ebx
je 0x4252c1
push dword [esp + 0x34]
call dword [0x467308]
jmp 0x4252c1
mov edi, dword [ebp + 8]
mov eax, dword [edi + 4]
mov esi, dword [eax]
push 0x47073c
call dword [0x4672e8]
mov ebx, eax
test ebx, ebx
je 0x425218
push 0x4707e0
push ebx
call dword [0x467310]
test eax, eax
mov dword [esp + 0x1c], eax
jne 0x425220
mov dword [esp + 0x1c], 0x4353ba
xor eax, eax
push eax
push dword [esp + 0x10]
push eax
push eax
call fcn.00412f67
push eax
push dword [0x48a864]
call dword [esp + 0x34]
test eax, eax
mov dword [esp + 0x28], eax
jne 0x425282
call dword [0x4672d0]
mov dword [0x48a85c], 5
test ebx, ebx
mov esi, dword [0x467308]
mov dword [0x48a860], eax
je 0x425263
push ebx
call esi
lea eax, [esp + 0x24]
call fcn.00424715
cmp dword [esp + 0x10], 0
je 0x425362
push dword [esp + 0x10]
call esi
jmp 0x425362
mov eax, dword [edi + 4]
mov esi, dword [eax + 4]
push 0x46d578
push ecx
call fcn.00412f67
pop ecx
push eax
call fcn.0045348b
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x4252b4
call dword [0x4672d0]
mov dword [0x48a85c], 6
jmp 0x425251
test ebx, ebx
je 0x4252bf
push ebx
call dword [0x467308]
xor ebx, ebx
mov dword [esp + 0x20], 1
cmp dword [esp + 0x24], ebx
jne 0x4252df
push dword [esp + 0x28]
call fcn.0042536b
cmp eax, 0xc8
jne 0x425338
lea esi, [esp + 0x10]
call fcn.0042a062
mov eax, dword [esp + 0x18]
cmp eax, ebx
jne 0x4252f5
mov eax, 0x43b339
lea ecx, [esp + 0x20]
push ecx
push 0x400
lea ecx, [esp + 0x58]
push ecx
push dword [esp + 0x34]
call eax
test eax, eax
je 0x425338
cmp dword [esp + 0x20], ebx
je 0x425342
push edi
push 1
push dword [esp + 0x28]
lea eax, [esp + 0x5c]
push eax
call fcn.00453774
mov eax, dword [esp + 0x30]
add dword [0x48a858], eax
add esp, 0x10
cmp eax, ebx
jne 0x4252c9
jmp 0x425342
mov dword [0x48a85c], 0xa
push edi
call fcn.00453868
pop ecx
lea eax, [esp + 0x24]
call fcn.00424715
cmp dword [esp + 0x10], ebx
je 0x425362
push dword [esp + 0x10]
call dword [0x467308]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4