Function at 0x4a8763
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x15c
mov eax, dword [0x5065d0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 6
mov esi, ecx
pop ecx
xor eax, eax
push 0x103
lea edi, [ebp - 0x1f]
push eax
mov byte [ebp - 0x20], 0
rep stosd dword es:[edi], eax
mov byte [ebp - 0x148], al
lea eax, [ebp - 0x147]
push eax
mov dword [ebp - 0x158], esi
call fcn.004ab5d0
add esp, 0xc
xor eax, eax
and dword [ebp - 0x14c], eax
and dword [ebp - 0x154], eax
push 6
pop ecx
lea edi, [ebp - 0x3b]
mov byte [ebp - 0x3c], 0
mov edx, esi
rep stosd dword es:[edi], eax
call fcn.00476b3a
test eax, eax
je 0x4a87d5
xor eax, eax
jmp 0x4a8af2
test ebx, ebx
je 0x4a87ce
push esi
mov ecx, 0x104
lea eax, [ebp - 0x148]
call fcn.00476b6c
pop ecx
mov edx, eax
call fcn.00477617
mov eax, edx
push eax
mov esi, 0x4c93bc
call fcn.00476c7b
mov edi, eax
neg edi
sbb edi, edi
inc edi
xor esi, esi
cmp edi, esi
pop ecx
mov dword [ebp - 0x15c], edi
mov dword [ebp - 0x150], esi
je 0x4a8858
push esi
push esi
push esi
push esi
push esi
push 0x19
pop ecx
lea eax, [ebp - 0x20]
call fcn.0043ed90
add esp, 0x14
lea edx, [ebp - 0x20]
call fcn.00476b3a
test eax, eax
jne 0x4a8858
lea eax, [ebp - 0x20]
push eax
lea eax, [ebp - 0x148]
push eax
call fcn.004777c9
test eax, eax
pop ecx
pop ecx
je 0x4a8858
mov dword [ebp - 0x150], 1
push esi
mov esi, ebx
call fcn.004a9990
pop ecx
lea edx, [ebx + 0x6c]
call fcn.00476b3a
xor esi, esi
test eax, eax
jne 0x4a8874
cmp dword [ebx + 0x24], esi
je 0x4a887f
push 0x19
lea ecx, [ebp - 0x3c]
call fcn.0043f1b2
pop ecx
cmp dword [ebx + 0x88], esi
je 0x4a888c
cmp dword [ebx + 0x24], esi
je 0x4a889e
call fcn.0043f3d5
mov ecx, eax
call fcn.00440c56
mov dword [ebp - 0x14c], eax
cmp dword [ebx + 0x2f8c], esi
jle 0x4a88ab
cmp dword [ebx + 0x24], esi
je 0x4a88b4
call fcn.0043f2a4
mov esi, eax
jmp 0x4a88ba
mov esi, dword [ebp - 0x154]
lea edx, [ebp - 0x3c]
call fcn.00476b3a
test eax, eax
jne 0x4a88d6
lea eax, [ebp - 0x3c]
push eax
push 0x19
pop ecx
lea eax, [ebx + 0x6c]
call fcn.00476b6c
pop ecx
mov eax, dword [ebp - 0x14c]
test eax, eax
je 0x4a88e6
mov dword [ebx + 0x88], eax
test esi, esi
jle 0x4a88f0
mov dword [ebx + 0x2f8c], esi
and dword [ebx + 0x24], 0
cmp dword [ebx + 0x90], 0
mov esi, 0x300c
mov dword [ebx + 0x2f90], 1
mov dword [ebx], esi
jne 0x4a8915
and dword [ebx + 0x8c], 0
mov eax, 0x1f4
cmp dword [ebx + 0x8c], eax
jle 0x4a8928
mov dword [ebx + 0x8c], eax
test edi, edi
je 0x4a8952
call fcn.004aba8c
push eax
push 0
push 0
call fcn.0045ac28
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x148]
push str._stemp_d.sls
push eax
call fcn.004ab54e
add esp, 0x10
xor edx, edx
xor eax, eax
cmp eax, 4
jb 0x4a8960
cmp eax, 8
jb 0x4a8974
cmp eax, 0x90
jl 0x4a896e
cmp eax, 0x94
jl 0x4a8974
movzx ecx, byte [ebx + eax]
add edx, ecx
inc eax
cmp eax, esi
jb 0x4a8956
mov eax, dword [ebx + 0x8c]
add edx, esi
test eax, eax
jle 0x4a89b4
shl eax, 6
xor ecx, ecx
test eax, eax
jle 0x4a89b2
mov eax, dword [ebx + 0x8c]
shl eax, 6
mov dword [ebp - 0x154], eax
mov eax, dword [ebx + 0x90]
movzx edi, byte [eax + ecx]
add edx, edi
inc ecx
cmp ecx, dword [ebp - 0x154]
jl 0x4a89a3
add edx, ecx
mov dword [ebx + 4], edx
push 0x10c
push str..GetSalesSa7.c
mov edx, 0x4c9338
lea ecx, [ebp - 0x148]
call fcn.0041c646
mov edi, eax
test edi, edi
pop ecx
pop ecx
je 0x4a87ce
push edi
push 1
push esi
push ebx
call fcn.004aa5f2
add esp, 0x10
cmp eax, 1
je 0x4a8a13
mov ecx, edi
call fcn.0041ca73
cmp dword [ebp - 0x15c], 0
je 0x4a87ce
lea eax, [ebp - 0x148]
call fcn.0041a140
jmp 0x4a87ce
mov eax, dword [ebx + 0x8c]
xor esi, esi
cmp eax, esi
jle 0x4a8a4f
mov dword [ebp - 0x14c], esi
mov eax, dword [ebx + 0x90]
add eax, dword [ebp - 0x14c]
push edi
push 1
push 0x40
push eax
call fcn.004aa5f2
add dword [ebp - 0x14c], 0x40
add esp, 0x10
inc esi
cmp esi, dword [ebx + 0x8c]
jl 0x4a8a25
mov ecx, edi
call fcn.0041ca73
xor edi, edi
cmp dword [ebp - 0x15c], edi
je 0x4a8aef
cmp dword [ebp - 0x150], edi
je 0x4a8a85
cmp dword [ebp + 8], edi
je 0x4a8a85
push 0x132
push str..GetSalesSa7.c
push 0x40
call fcn.004449ae
add esp, 0xc
call fcn.0049c471
mov edx, dword [ebp - 0x158]
push edi
lea ecx, [ebp - 0x148]
mov esi, eax
call fcn.0041a1eb
test eax, eax
pop ecx
jne 0x4a8acf
call fcn.0049c471
sub eax, esi
cmp eax, 0x1388
jae 0x4a8acf
push 0xfa
call dword [sym.imp.KERNEL32.dll_Sleep]
mov edx, dword [ebp - 0x158]
push edi
lea ecx, [ebp - 0x148]
call fcn.0041a1eb
pop ecx
cmp dword [ebp - 0x150], edi
je 0x4a8ae4
cmp dword [ebp + 8], edi
je 0x4a8ae4
push 0x40
call fcn.00445606
pop ecx
lea eax, [ebp - 0x148]
call fcn.0041a140
xor eax, eax
inc eax
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.004aaeb5
leave
ret