Function at 0x4d24f0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x3c
mov ecx, dword [esp + 0x48]
push ebx
push ebp
mov ebp, dword [esp + 0x48]
mov ebx, dword [ecx + 0x54]
push esi
mov eax, dword [ebp + 0x18]
xor esi, esi
mov edx, dword [ebx + 0x3ba0]
mov dword [esp + 0x18], eax
mov eax, dword [0x672fa4]
push edi
test eax, eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0x20], esi
mov dword [esp + 0x14], edx
je 0x4d26ab
mov eax, dword [ebp + 0x28]
push eax
call fcn.004b52e0
add esp, 4
mov dword [ebp + 0x2c], eax
test eax, eax
je 0x4d2951
mov eax, dword [0x672fa0]
test eax, eax
je 0x4d26ab
lea ecx, [esp + 0x24]
lea edx, [esp + 0x28]
push ecx
lea eax, [esp + 0x30]
push edx
lea ecx, [esp + 0x38]
push eax
lea edx, [esp + 0x40]
push ecx
lea eax, [esp + 0x48]
push edx
lea ecx, [esp + 0x50]
push eax
lea edx, [esp + 0x58]
push ecx
lea eax, [esp + 0x60]
xor ebp, ebp
push edx
push eax
push ebp
call fcn.0045c7d0
mov ecx, dword [0x6694b8]
shl ecx, 0xb
push ecx
call fcn.004b6a10
mov esi, dword [esp + 0x3c]
mov ebx, dword [0x672fa0]
mov dword [esp + 0x44], eax
add esp, 0x2c
mov eax, dword [esi + 0x14]
mov edx, dword [esi + 0x3858]
test eax, eax
mov dword [esp + 0x48], edx
mov dword [esi + 0x3858], ebp
jne 0x4d25cd
mov ax, word [esi + 0x3ad0]
push eax
call fcn.004b5030
add esp, 4
mov dword [esi + 0x14], eax
test ebx, ebx
jbe 0x4d267c
mov ecx, dword [0x6694b8]
mov edi, dword [esp + 0x18]
shl ecx, 0xb
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov esi, dword [0x6694b8]
cmp ebx, esi
ja 0x4d25fe
mov esi, ebx
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x10]
xor edi, edi
push esi
push eax
push edi
push ebp
push ecx
call fcn.0041b660
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x40]
add esp, 0x14
push edx
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x3c]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x4c]
push eax
mov eax, dword [esp + 0x54]
push ecx
mov ecx, dword [esp + 0x5c]
push edx
mov edx, esi
push eax
push ecx
shl edx, 0xb
push edx
push edi
push 0x800
push edi
push ebp
call fcn.004f5ce0
mov ecx, dword [esp + 0x78]
push edx
push eax
mov eax, dword [esp + 0x48]
mov edx, dword [ecx + 0x2c]
push eax
push edx
call fcn.004b6d60
sub ebx, esi
add esp, 0x38
add ebp, esi
test ebx, ebx
ja 0x4d25d5
mov esi, dword [esp + 0x10]
mov eax, dword [esi + 0x14]
push eax
call fcn.004b51a0
mov edx, dword [esp + 0x1c]
mov ecx, dword [esp + 0x4c]
push edx
mov dword [esi + 0x14], 0
mov dword [esi + 0x3858], ecx
call fcn.004b6a50
mov ebp, dword [esp + 0x58]
mov ebx, dword [esp + 0x18]
add esp, 8
mov eax, dword [0x6694b8]
shl eax, 0xb
push eax
push 0x40
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov edi, eax
test edi, edi
mov dword [esp + 0x50], edi
jne 0x4d26e6
push 0x613d00
push 0x2706
call fcn.004dd120
push eax
push 1
push ebp
call fcn.004d8f20
add esp, 0x14
jmp 0x4d293e
mov ecx, dword [0x6694b8]
xor eax, eax
shl ecx, 0xb
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [0x6c7d78]
mov esi, dword [0x672fa0]
test eax, eax
je 0x4d271b
push str.Writing_media...
call fcn.004f4f40
add esp, 4
cmp esi, dword [esp + 0x14]
jae 0x4d2867
push 1
call fcn.004cf280
mov eax, dword [esp + 0x18]
mov ecx, dword [0x6694b8]
sub eax, esi
add esp, 4
cmp eax, ecx
mov ebx, ecx
jae 0x4d275a
mov edi, dword [esp + 0x50]
mov ebx, eax
shl ecx, 0xb
mov edx, ecx
xor eax, eax
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [esp + 0x50]
mov ecx, dword [esp + 0x58]
push 0
push ebx
push eax
push ecx
call fcn.004c9260
mov edi, eax
add esp, 0x10
test edi, edi
je 0x4d293e
mov eax, dword [0x672fa4]
test eax, eax
je 0x4d27ad
push 0
push 0
push 0
push 0
mov eax, dword [ebp + 0x2c]
push 0
push 0
mov edx, ebx
push 0
push 0
shl edx, 0xb
push 0
push edx
push 0xffffffffffffffff
push 0xffffffffffffffff
push edi
push eax
call fcn.004b6d60
add esp, 0x38
jmp 0x4d27d4
mov ecx, dword [0x6694b8]
mov edx, dword [esp + 0x1c]
shl ecx, 0xb
push 0x800
push ecx
push edi
push esi
push edx
push ebp
call fcn.004cc8c0
add esp, 0x18
test eax, eax
je 0x4d28b2
mov eax, dword [0x672fa8]
test eax, eax
je 0x4d2803
mov eax, dword [0x672fa0]
test eax, eax
je 0x4d2803
mov eax, dword [0x6694b8]
mov ecx, dword [esp + 0x10]
push eax
push esi
push edi
push ecx
call fcn.00427dd0
add esp, 0x10
test eax, eax
je 0x4d293e
mov edx, dword [0x6694b8]
mov eax, dword [esp + 0x58]
add esi, edx
mov edx, dword [esp + 0x50]
push 1
push ebx
push edx
push eax
call fcn.004c9260
mov eax, dword [0x6c7d78]
mov ecx, dword [esp + 0x24]
add esp, 0x10
test eax, eax
mov eax, dword [0x672fa0]
je 0x4d2848
sub ecx, eax
mov edx, esi
push 0
push ecx
sub edx, eax
push 0
push edx
call fcn.004f4f40
add esp, 0x10
jmp 0x4d2859
mov edx, esi
sub ecx, eax
sub edx, eax
push ecx
push edx
push ebp
call fcn.004d9720
add esp, 0xc
cmp esi, dword [esp + 0x14]
jb 0x4d2725
mov ebx, dword [esp + 0x10]
push 0x64
push 0x64
push ebp
call fcn.004d9720
mov eax, dword [0x672fa8]
add esp, 0xc
test eax, eax
je 0x4d2904
mov eax, dword [0x672fa0]
test eax, eax
je 0x4d2904
mov eax, dword [0x672fa4]
test eax, eax
je 0x4d28eb
mov ecx, dword [0x6694b8]
mov edx, dword [ebp + 0x2c]
push ecx
push edx
push ebx
push ebp
call fcn.00427e50
add esp, 0x10
test eax, eax
je 0x4d293e
jmp 0x4d2904
mov eax, dword [esp + 0x1c]
push eax
call fcn.004c9ce0
add esp, 4
push eax
push esi
push 0x231
push str.Error_writing_data.
push 0x18e2
call fcn.004dd120
add esp, 8
push eax
push str._s___d__08x__08x_
push 1
push ebp
call fcn.004d8f20
add esp, 0x1c
jmp 0x4d293e
mov eax, dword [0x6694b8]
mov ecx, dword [esp + 0x1c]
push eax
push ecx
push ebx
push ebp
call fcn.00427e50
add esp, 0x10
test eax, eax
je 0x4d293e
mov eax, dword [0x6c7d78]
test eax, eax
je 0x4d2921
call fcn.004f4f40
push 0x615af0
call fcn.004f4f50
add esp, 4
jmp 0x4d2936
call fcn.004d9450
cmp eax, 1
jne 0x4d2936
push 0
push ebp
call fcn.004d9620
add esp, 8
mov dword [esp + 0x20], 1
mov eax, dword [esp + 0x50]
test eax, eax
je 0x4d294d
push eax
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov esi, dword [esp + 0x20]
mov eax, dword [0x672fa4]
test eax, eax
je 0x4d298c
mov eax, dword [ebp + 0x2c]
test eax, eax
je 0x4d298c
test esi, esi
je 0x4d2979
mov edx, dword [esp + 0x58]
mov ecx, dword [ebp + 0x28]
mov eax, dword [edx + 0x54]
push eax
push ecx
call fcn.00441380
add esp, 8
mov edx, dword [ebp + 0x2c]
push edx
call fcn.004b6a60
add esp, 4
mov dword [ebp + 0x2c], 0
mov eax, esi
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x3c
ret