Function at 0x47901b
Capabilities:
Write file on windows

Disassembly:
jmp 0x523350
mov eax, 0x4240
call fcn.004765be
mov eax, dword [0x5f13b0]
xor eax, esp
mov dword [esp + 0x423c], eax
push ebx
mov ebx, dword [esp + 0x4254]
push ebp
mov ebp, dword [esp + 0x4250]
push esi
push edi
mov esi, ecx
cmp ebx, 3
je 0x52339d
cmp ebx, 2
je 0x523446
cmp ebx, 1
je 0x523446
mov eax, 0x10000
jmp 0x5236a8
mov eax, dword [esi + 4]
mov edi, dword [esp + 0x4254]
cmp edi, eax
je 0x523400
cmp eax, 0xffffffff
je 0x5233bb
mov eax, dword [esi]
push eax
call fcn.00476c9e
add esp, 4
mov eax, dword [esi]
mov dword [esi + 4], 0xffffffff
cmp edi, dword [eax + 4]
jge 0x523393
cmp edi, dword [eax + 0x10]
jge 0x5233d7
push eax
call fcn.00476af0
add esp, 4
mov ecx, dword [esi]
cmp dword [ecx + 0x10], edi
jge 0x5233f2
mov edi, edi
mov edx, dword [esi]
push edx
call fcn.00477a68
mov eax, dword [esi]
add esp, 4
cmp dword [eax + 0x10], edi
jl 0x5233e0
mov ecx, dword [esi]
push ecx
call fcn.004773ba
add esp, 4
mov dword [esi + 4], edi
mov edx, dword [esp + 0x425c]
mov eax, dword [esi]
push edx
push ebp
push eax
call fcn.00478e4a
mov edi, eax
add esp, 0xc
test edi, edi
jle 0x523424
mov eax, 0x600
jmp 0x5236a8
mov ecx, dword [esi]
push ecx
call fcn.00476c9e
add esp, 4
mov eax, edi
neg eax
sbb eax, eax
mov dword [esi + 4], 0xffffffff
and eax, 0x5000000
jmp 0x5236a8
or edi, 0xffffffff
cmp dword [esi + 4], edi
je 0x523459
mov edx, dword [esi]
push edx
call fcn.00476c9e
add esp, 4
mov eax, dword [esi]
mov dword [esi + 4], edi
mov edi, dword [esp + 0x4254]
cmp edi, dword [eax + 4]
jge 0x523393
cmp edi, dword [eax + 0x10]
jge 0x52347c
push eax
call fcn.00476af0
add esp, 4
mov eax, dword [esi]
cmp dword [eax + 0x10], edi
jge 0x523495
mov ecx, dword [esi]
push ecx
call fcn.00477a68
mov edx, dword [esi]
add esp, 4
cmp dword [edx + 0x10], edi
jl 0x523483
lea eax, [esp + 0x1c]
push eax
push edi
mov ecx, esi
call fcn.00477eaa
test byte [esp + 0x124], 0x10
je 0x5234cc
cmp ebx, 1
je 0x5234c5
lea ecx, [esp + 0x20]
push ecx
add esi, 0x138
push esi
call fcn.00476edd
add esp, 8
xor eax, eax
jmp 0x5236a8
mov edi, ebp
cmp ebx, 1
je 0x5235cb
mov al, byte [ebp]
mov ecx, ebp
test al, al
je 0x52358f
cmp al, 0x2f
je 0x5234ec
cmp al, 0x5c
jne 0x5234ef
lea edi, [ecx + 1]
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x5234e4
cmp edi, ebp
je 0x52358f
lea edx, [esp + 0x148]
mov eax, ebp
sub edx, ebp
lea ebx, [ebx]
mov cl, byte [eax]
mov byte [edx + eax], cl
inc eax
test cl, cl
jne 0x523510
sub edi, ebp
mov byte [esp + edi + 0x147], cl
mov al, byte [esp + 0x148]
cmp al, 0x2f
je 0x523540
cmp al, 0x5c
je 0x523540
cmp byte [esp + 0x149], 0x3a
je 0x523540
xor bl, bl
jmp 0x523542
mov bl, 1
lea edx, [esp + 0x148]
push 0x572f68
push edx
call fcn.00478d3c
mov edi, eax
lea eax, [esp + 0x150]
push 0x572f64
push eax
call fcn.00478d3c
add esp, 0x10
test eax, eax
setne cl
test edi, edi
setne dl
or cl, dl
or cl, bl
jne 0x52358f
lea eax, [esp + 0x20]
push eax
lea ecx, [esi + 0x138]
push ecx
call fcn.00476edd
add esp, 8
push ebp
lea edx, [esi + 0x138]
push edx
lea eax, [esp + 0x150]
push str._s_s
push eax
call fcn.004775d1
add esp, 0x10
push 0
push 0
push 2
push 0
push 0
push 0x40000000
lea ecx, [esp + 0x160]
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
jne 0x5235da
mov eax, 0x200
jmp 0x5236a8
mov edx, dword [esi]
push edx
call fcn.004773ba
mov ecx, dword [esi]
push 0x4000
lea eax, [esp + 0x254]
push eax
push ecx
mov byte [esp + 0x23], 0
call fcn.00478e4a
add esp, 0x10
test eax, eax
jl 0x52363e
mov ebx, dword [sym.imp.KERNEL32.dll_WriteFile]
je 0x523647
push 0
lea edx, [esp + 0x18]
push edx
push eax
lea eax, [esp + 0x258]
push eax
push edi
call ebx
test eax, eax
je 0x523642
mov edx, dword [esi]
push 0x4000
lea ecx, [esp + 0x250]
push ecx
push edx
call fcn.00478e4a
add esp, 0xc
test eax, eax
jge 0x523609
mov bl, 1
jmp 0x52364b
mov byte [esp + 0x13], 1
mov bl, byte [esp + 0x13]
push edi
call dword [sym.imp.KERNEL32.dll_GetFileType]
cmp eax, 1
jne 0x52366e
test bl, bl
jne 0x52366e
lea eax, [esp + 0x14]
push eax
lea ecx, [esp + 0x13c]
push ecx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
lea edx, [esp + 0x14]
push edx
mov eax, edx
push eax
mov ecx, edx
push ecx
push edi
call dword [sym.imp.KERNEL32.dll_SetFileTime]
cmp dword [esp + 0x4260], 1
je 0x523691
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [esi]
push edx
call fcn.00476c9e
movzx eax, bl
add esp, 4
neg eax
sbb eax, eax
and eax, 0x400
mov ecx, dword [esp + 0x424c]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.004785f8
add esp, 0x4240
ret 0x10