Function at 0x4844b9
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x60
mov eax, dword [0x4b1810]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
push 0x5c
mov eax, dword [ebx]
mov dword [ebp - 0x48], ebx
mov eax, dword [eax + 0x8664]
mov dword [ebp - 0x40], eax
push dword [eax]
call fcn.004948a0
mov ebx, dword [ebx]
xorps xmm0, xmm0
pop ecx
pop ecx
mov dword [ebp - 0x4c], eax
movlpd qword [ebp - 0x5c], xmm0
call fcn.004781cd
mov ecx, dword [ebx + 0x154]
mov edi, edx
mov edx, dword [ebp - 0x48]
mov esi, eax
mov dword [edx + 0x280], ecx
lea ecx, [ebx + 0x53c]
mov eax, dword [ebx + 0x104]
mov dword [edx + 0x284], eax
mov eax, dword [edx]
mov dword [eax + 0xdc], ecx
mov eax, dword [ebp - 0x4c]
test eax, eax
jne 0x484536
push 0x25
pop eax
jmp 0x484747
cmp byte [eax + 1], 0
je 0x48452e
mov eax, dword [ebx + 0x8650]
or eax, dword [ebx + 0x8654]
je 0x484551
push 0x409b1c
jmp 0x484593
mov eax, dword [edx]
push dword [eax + 0x330]
mov eax, dword [ebp - 0x40]
push 0x8301
push dword [eax]
call fcn.004a8b92
add esp, 0xc
test eax, eax
jns 0x484586
mov eax, dword [ebp - 0x40]
push dword [eax]
push 0x409b20
push ebx
call fcn.00476566
add esp, 0xc
push 0x17
jmp 0x484530
push eax
call fcn.00492e84
mov dword [esp], 0x409b3c
mov eax, dword [ebp - 0x40]
push dword [eax]
call fcn.004958e8
mov dword [ebp - 0x44], eax
pop ecx
pop ecx
test eax, eax
je 0x48456f
mov edx, dword [ebx + 0x1b0]
mov ecx, dword [ebx + 0x1b4]
cmp edx, 0xffffffff
jne 0x4845bb
cmp ecx, edx
je 0x4845c9
push ecx
push edx
push ebx
call fcn.0047e6ab
mov eax, dword [ebp - 0x44]
add esp, 0xc
xor ecx, ecx
mov dword [ebp - 0x60], ecx
cmp dword [ebx + 0x8654], ecx
jg 0x484629
jl 0x4845e0
cmp dword [ebx + 0x8650], ecx
jae 0x484629
lea ecx, [ebp - 0x3c]
push ecx
push eax
call fcn.00493559
pop ecx
push eax
call fcn.0049683f
pop ecx
pop ecx
test eax, eax
je 0x484617
push dword [ebp - 0x44]
call fcn.004942d8
mov eax, dword [ebp - 0x40]
push dword [eax]
push 0x409b40
push ebx
call fcn.00476566
add esp, 0x10
jmp 0x484582
mov eax, dword [ebp - 0x24]
mov dword [ebx + 0x8650], eax
mov eax, dword [ebp - 0x20]
mov dword [ebx + 0x8654], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x54], eax
lea eax, [ebp - 0x58]
push eax
push 0x4000
push dword [ebp - 0x48]
call fcn.0046f814
add esp, 0xc
mov dword [ebp - 0x40], eax
test eax, eax
jne 0x484739
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x50], ecx
test ecx, ecx
jle 0x484722
mov eax, dword [ebx + 0x8654]
mov edx, dword [ebx + 0x8650]
mov dword [ebp - 0x40], eax
mov eax, edx
or eax, dword [ebp - 0x40]
je 0x48469c
mov eax, dword [ebp - 0x40]
cmp dword [ebp - 0x60], eax
jg 0x4846fa
jl 0x484686
cmp ecx, edx
ja 0x4846fa
sub edx, ecx
push 0
pop ecx
sbb eax, ecx
mov dword [ebx + 0x8650], edx
mov dword [ebx + 0x8654], eax
mov dword [ebp - 0x50], ecx
lea edx, [ebx + 0x53c]
push dword [ebp - 0x44]
push ecx
push 1
push edx
call fcn.00491c59
mov ecx, dword [ebp - 0x50]
add esp, 0x10
cmp eax, ecx
jne 0x48471d
mov edx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x4c]
add edx, ecx
push 0
pop ecx
adc eax, ecx
mov dword [ebp - 0x54], edx
push eax
push edx
push ebx
mov dword [ebp - 0x4c], eax
call fcn.0047e691
push dword [ebp - 0x48]
call fcn.0047e82d
add esp, 0x10
test eax, eax
jne 0x484719
push edi
push esi
push ebx
call fcn.0047e4f7
add esp, 0xc
mov dword [ebp - 0x40], eax
test eax, eax
je 0x484635
jmp 0x484739
mov eax, edx
lea edx, [ebx + 0x53c]
sub ecx, eax
add edx, eax
xor eax, eax
mov dword [ebp - 0x50], ecx
mov dword [ebx + 0x8650], eax
mov dword [ebx + 0x8654], eax
jmp 0x4846a2
push 0x2a
jmp 0x48471f
push 0x37
pop esi
jmp 0x48473c
push dword [ebp - 0x48]
call fcn.0047e82d
pop ecx
mov ecx, dword [ebp - 0x40]
test eax, eax
push 0x2a
pop edx
cmovne ecx, edx
mov dword [ebp - 0x40], ecx
mov esi, dword [ebp - 0x40]
push dword [ebp - 0x44]
call fcn.004942d8
pop ecx
mov eax, esi
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00491511
mov esp, ebp
pop ebp
ret