Function at 0x4a619d
Capabilities:
Query environment variable
Read file on windows
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x2114
call fcn.004dc850
mov eax, dword [ebp + 8]
push ebx
push esi
push edi
push dword [eax]
call fcn.0048f76f
xor ebx, ebx
pop ecx
cmp eax, ebx
mov dword [ebp - 4], eax
jne 0x4a61cb
mov eax, 0x335
jmp 0x4a6418
lea eax, [ebp - 0x114]
push 0x104
push eax
push str.TEMP
call dword [sym.imp.KERNEL32.dll_GetEnvironmentVariableA]
lea eax, [ebp - 0x114]
push 0x51d538
push eax
call fcn.004dd760
lea eax, [ebp - 0x114]
push str.t0000002.tmp
push eax
call fcn.004dd760
push 0x51b96c
push dword [ebp + 0xc]
call fcn.004de577
mov edi, eax
add esp, 0x18
cmp edi, ebx
jne 0x4a623a
push dword [ebp + 0xc]
mov esi, 0x32d
push 2
push esi
push 0x545598
push dword [ebp - 4]
call fcn.0045fd8e
add esp, 0x14
jmp 0x4a63ad
lea eax, [ebp - 0x114]
push 0x53f8b8
push eax
call fcn.004de577
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 8], eax
je 0x4a638c
mov esi, 0x1000
test byte [edi + 0xc], 0x10
jne 0x4a6306
push esi
lea eax, [ebp - 0x1114]
push ebx
push eax
call fcn.004d9ad0
push esi
lea eax, [ebp - 0x2114]
push ebx
push eax
call fcn.004d9ad0
push edi
call fcn.004e2a59
mov dword [ebp - 0x10], eax
push edi
push esi
lea eax, [ebp - 0x1114]
push 1
push eax
call fcn.004de387
push dword [ebp + 0x10]
mov dword [ebp - 0xc], eax
lea eax, [ebp - 0x2114]
push dword [ebp - 0x10]
push ebx
push esi
push eax
lea eax, [ebp - 0x1114]
push eax
push dword [ebp + 8]
call fcn.004a65dc
add esp, 0x48
test eax, eax
jne 0x4a62e9
push dword [ebp - 8]
lea eax, [ebp - 0x2114]
push dword [ebp - 0xc]
push 1
push eax
call fcn.004e2f39
add esp, 0x10
cmp eax, dword [ebp - 0xc]
jne 0x4a63f2
jmp 0x4a625d
mov esi, 0x32a
push 2
push esi
push 0x545598
push dword [ebp - 4]
call fcn.0045fd8e
add esp, 0x10
jmp 0x4a63ad
push edi
call fcn.004de06b
push dword [ebp - 8]
call fcn.004de06b
cmp dword [ebp + 0x14], ebx
pop ecx
pop ecx
jne 0x4a6359
mov esi, dword [ebp + 0xc]
push esi
call fcn.004e24fa
cmp eax, 0xffffffff
pop ecx
jne 0x4a6340
lea eax, [ebp - 0x114]
push eax
call fcn.004e24fa
push esi
push 2
mov esi, 0x32e
jmp 0x4a639c
lea eax, [ebp - 0x114]
push esi
push eax
call fcn.004e2fbb
pop ecx
test eax, eax
pop ecx
je 0x4a6416
jmp 0x4a632a
lea eax, [ebp - 0x114]
push 0x51b96c
push eax
call fcn.004de577
mov edi, eax
pop ecx
cmp edi, ebx
pop ecx
je 0x4a621a
push 0x53f8b8
push dword [ebp + 0xc]
call fcn.004de577
pop ecx
cmp eax, ebx
pop ecx
mov dword [ebp - 8], eax
jne 0x4a63b1
push edi
call fcn.004de06b
push dword [ebp + 0xc]
mov esi, 0x330
push 2
push esi
push 0x545598
push dword [ebp - 4]
call fcn.0045fd8e
add esp, 0x18
mov eax, esi
jmp 0x4a6418
test byte [edi + 0xc], 0x10
jne 0x4a63f9
push esi
lea eax, [ebp - 0x1114]
push ebx
push eax
call fcn.004d9ad0
push edi
push esi
lea eax, [ebp - 0x1114]
push 1
push eax
call fcn.004de387
push dword [ebp - 8]
mov dword [ebp - 0xc], eax
push eax
lea eax, [ebp - 0x1114]
push 1
push eax
call fcn.004e2f39
add esp, 0x2c
cmp eax, dword [ebp - 0xc]
je 0x4a63b1
mov eax, 0x330
jmp 0x4a6418
push edi
call fcn.004de06b
push dword [ebp - 8]
call fcn.004de06b
lea eax, [ebp - 0x114]
push eax
call fcn.004e24fa
add esp, 0xc
xor eax, eax
pop edi
pop esi
pop ebx
leave
ret