Function at 0x4f5f7b
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
mov eax, 0x2464
call fcn.005269f0
push ebx
push esi
xor eax, eax
push edi
mov edi, dword [ebp + 8]
mov ebx, dword [edi + 8]
lea esi, [esp + 0x10]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], eax
mov dword [esp + 0x18], eax
call fcn.004fb062
and dword [esp + 0x24], 0
and dword [esp + 0x28], 0
cmp ebx, 2
mov dword [esp + 0x2c], 0x48a854
mov dword [esp + 0x30], edi
jbe 0x4f5fde
mov eax, dword [edi + 4]
mov eax, dword [eax + 8]
call fcn.004e4062
cmp eax, 1
jne 0x4f5fde
mov dword [esp + 0xc], 0x80000000
mov eax, dword [edi + 4]
mov esi, dword [eax]
lea eax, [esp + 0x450]
push eax
lea eax, [esp + 0x1464]
push eax
lea eax, [esp + 0xc60]
push eax
lea eax, [esp + 0x58]
push eax
lea eax, [esp + 0x2c]
push eax
push ecx
call fcn.004e3f67
pop ecx
push eax
lea edi, [esp + 0x1c80]
call fcn.004f6730
test al, al
jne 0x4f603a
mov dword [0x48a85c], 2
lea eax, [esp + 0x24]
call fcn.004f5715
cmp dword [esp + 0x10], 0
jmp 0x4f6356
mov edi, dword [esp + 0x1c]
push 3
pop esi
cmp edi, esi
je 0x4f6052
cmp edi, 1
je 0x4f6052
mov dword [0x48a85c], esi
jmp 0x4f6027
push edi
mov ebx, 0x48a864
mov eax, 0x48a548
call fcn.004f682a
test al, al
jne 0x4f607d
call dword [fcn.004672d0]
mov dword [0x48a860], eax
mov dword [0x48a85c], 4
jmp 0x4f6027
cmp edi, esi
je 0x4f61eb
cmp edi, 1
jne 0x4f6097
cmp dword [0x48a82c], 2
je 0x4f61eb
xor ebx, ebx
lea esi, [esp + 0x34]
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x40], ebx
mov dword [esp + 0x48], ebx
call fcn.004fb089
test al, al
mov eax, dword [esp + 0x3c]
jne 0x4f60bf
mov eax, 0x429703
push ebx
push ebx
push edi
lea ecx, [esp + 0x45c]
push ecx
lea ecx, [esp + 0x1470]
push ecx
push dword [esp + 0x60]
lea ecx, [esp + 0xc70]
push ecx
push dword [0x48a864]
call eax
cmp eax, ebx
mov dword [esp + 0x24], eax
jne 0x4f6127
call dword [fcn.004672d0]
mov esi, dword [fcn.00467308]
mov dword [0x48a860], eax
mov dword [0x48a85c], 7
cmp dword [esp + 0x34], ebx
je 0x4f6115
push dword [esp + 0x34]
call esi
lea eax, [esp + 0x24]
call fcn.004f5715
cmp dword [esp + 0x10], ebx
jmp 0x4f6271
cmp byte [0x48a7d8], bl
je 0x4f6136
or dword [esp + 0xc], 2
jmp 0x4f613b
or dword [esp + 0xc], 1
push ebx
push dword [esp + 0x10]
lea ecx, [esp + 0x1c70]
push 0x80000000
push ecx
push eax
lea esi, [esp + 0x54]
call fcn.004fb0b8
call eax
cmp eax, ebx
mov dword [esp + 0x28], eax
jne 0x4f618d
call dword [fcn.004672d0]
mov dword [0x48a85c], 8
cmp dword [esp + 0x40], ebx
mov esi, dword [fcn.00467308]
mov dword [0x48a860], eax
je 0x4f6109
push dword [esp + 0x40]
call esi
jmp 0x4f6109
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
mov esi, dword [eax + 4]
push 0x46d578
push ecx
call fcn.004e3f67
pop ecx
push eax
call fcn.0052448b
mov edi, eax
cmp edi, ebx
pop ecx
pop ecx
jne 0x4f61c2
call dword [fcn.004672d0]
mov dword [0x48a85c], 9
jmp 0x4f6171
cmp dword [esp + 0x40], ebx
je 0x4f61d2
push dword [esp + 0x40]
call dword [fcn.00467308]
cmp dword [esp + 0x34], ebx
je 0x4f62c1
push dword [esp + 0x34]
call dword [fcn.00467308]
jmp 0x4f62c1
mov edi, dword [ebp + 8]
mov eax, dword [edi + 4]
mov esi, dword [eax]
push 0x47073c
call dword [fcn.004672e8]
mov ebx, eax
test ebx, ebx
je 0x4f6218
push 0x4707e0
push ebx
call dword [fcn.00467310]
test eax, eax
mov dword [esp + 0x1c], eax
jne 0x4f6220
mov dword [esp + 0x1c], 0x4353ba
xor eax, eax
push eax
push dword [esp + 0x10]
push eax
push eax
call fcn.004e3f67
push eax
push dword [0x48a864]
call dword [esp + 0x34]
test eax, eax
mov dword [esp + 0x28], eax
jne 0x4f6282
call dword [fcn.004672d0]
mov dword [0x48a85c], 5
test ebx, ebx
mov esi, dword [fcn.00467308]
mov dword [0x48a860], eax
je 0x4f6263
push ebx
call esi
lea eax, [esp + 0x24]
call fcn.004f5715
cmp dword [esp + 0x10], 0
je 0x4f6362
push dword [esp + 0x10]
call esi
jmp 0x4f6362
mov eax, dword [edi + 4]
mov esi, dword [eax + 4]
push 0x46d578
push ecx
call fcn.004e3f67
pop ecx
push eax
call fcn.0052448b
mov edi, eax
test edi, edi
pop ecx
pop ecx
jne 0x4f62b4
call dword [fcn.004672d0]
mov dword [0x48a85c], 6
jmp 0x4f6251
test ebx, ebx
je 0x4f62bf
push ebx
call dword [fcn.00467308]
xor ebx, ebx
mov dword [esp + 0x20], 1
cmp dword [esp + 0x24], ebx
jne 0x4f62df
push dword [esp + 0x28]
call fcn.004f636b
cmp eax, 0xc8
jne 0x4f6338
lea esi, [esp + 0x10]
call fcn.004fb062
mov eax, dword [esp + 0x18]
cmp eax, ebx
jne 0x4f62f5
mov eax, 0x43b339
lea ecx, [esp + 0x20]
push ecx
push 0x400
lea ecx, [esp + 0x58]
push ecx
push dword [esp + 0x34]
call eax
test eax, eax
je 0x4f6338
cmp dword [esp + 0x20], ebx
je 0x4f6342
push edi
push 1
push dword [esp + 0x28]
lea eax, [esp + 0x5c]
push eax
call fcn.00524774
mov eax, dword [esp + 0x30]
add dword [0x48a858], eax
add esp, 0x10
cmp eax, ebx
jne 0x4f62c9
jmp 0x4f6342
mov dword [0x48a85c], 0xa
push edi
call fcn.00524868
pop ecx
lea eax, [esp + 0x24]
call fcn.004f5715
cmp dword [esp + 0x10], ebx
je 0x4f6362
push dword [esp + 0x10]
call dword [fcn.00467308]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4