Function at 0x4f7d00
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x130
mov eax, dword [0x6a73f0]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
mov esi, dword [ebp + 8]
mov ecx, 0x69cd90
push edi
push 0x77f
call fcn.004440f0
test eax, eax
je 0x4f7d41
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x24], ecx
cvttss2si eax, dword [eax + 0x891]
mov dword [ebp - 0x20], eax
push 0x84f
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7d75
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x14], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0x10], ecx
xor ecx, ecx
cmp dword [eax + 0x20], ecx
setne cl
mov dword [ebp - 0xc], ecx
push 0x1dd
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7db2
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x124], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0x120], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x11c], ecx
push 0x493
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7def
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x114], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0x110], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x10c], ecx
push 0xed
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7e3e
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0xe4], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0xe0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xdc], ecx
cmp dword [eax + 0x9ec], 0
je 0x4f7e3e
or ecx, 2
mov dword [ebp - 0xdc], ecx
push 0x126
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7e97
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xcc], ecx
mov edx, dword [eax + 0x2b9fe]
cmp edx, 1
jne 0x4f7e6f
or ecx, 4
jmp 0x4f7e81
cmp edx, 2
jne 0x4f7e79
or ecx, 8
jmp 0x4f7e81
cmp edx, 4
jne 0x4f7e87
or ecx, 0x10
mov dword [ebp - 0xcc], ecx
mov ecx, eax
call fcn.004cf8d0
movzx eax, al
mov dword [ebp - 0xc8], eax
push 0x5d2
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7ed4
cmp dword [eax + 0xe], 0
je 0x4f7ebc
or dword [ebp - 0xcc], 0x100
jmp 0x4f7ed4
mov eax, dword [ebp - 0xcc]
test eax, 0x100
je 0x4f7ed4
xor eax, 0x100
mov dword [ebp - 0xcc], eax
push 0xf3
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7f36
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0xc4], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0xc0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xbc], ecx
mov al, byte [eax + 0x949]
cmp al, 1
jne 0x4f7f20
or ecx, 4
jmp 0x4f7f30
cmp al, 2
jne 0x4f7f29
or ecx, 8
jmp 0x4f7f30
cmp al, 3
jne 0x4f7f36
or ecx, 0x10
mov dword [ebp - 0xbc], ecx
push 0x61
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f7f70
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0xb4], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0xb0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xac], ecx
push 0xc7
mov ecx, 0x69cd90
call fcn.004440f0
mov edx, eax
test edx, edx
je 0x4f8000
cvttss2si ecx, dword [edx + 0x88d]
mov dword [ebp - 0xa4], ecx
cvttss2si ecx, dword [edx + 0x891]
mov dword [ebp - 0xa0], ecx
xor ecx, ecx
cmp dword [edx + 0xe], ecx
setne cl
mov dword [ebp - 0x9c], ecx
cmp byte [edx + 0x949], 1
jne 0x4f7fee
mov eax, dword [0x6b264c]
or ecx, 4
mov dword [ebp - 0x9c], ecx
mov al, byte [eax + 0x949]
cmp al, 1
jne 0x4f7fd5
or ecx, 0x20
jmp 0x4f7fe8
cmp al, 2
jne 0x4f7fde
or ecx, 0x40
jmp 0x4f7fe8
cmp al, 3
jne 0x4f7fee
or ecx, 0x80
mov dword [ebp - 0x9c], ecx
mov eax, dword [edx + 0x952]
mov eax, dword [eax + 0x9d4]
mov dword [ebp - 0x98], eax
push 0x352
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f8073
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x94], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0x90], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x8c], ecx
cmp byte [eax + 0x949], 1
jne 0x4f804f
or ecx, 4
mov dword [ebp - 0x8c], ecx
cmp byte [eax + 0x949], 2
jne 0x4f8061
or ecx, 8
mov dword [ebp - 0x8c], ecx
cmp byte [eax + 0x949], 3
jne 0x4f8073
or ecx, 0x10
mov dword [ebp - 0x8c], ecx
push 0x512
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f80aa
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x84], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0x80], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x7c], ecx
push 0x4aa
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f80f3
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x74], ecx
cvttss2si ecx, dword [eax + 0x891]
mov dword [ebp - 0x70], ecx
cmp dword [eax + 0xe], 0
je 0x4f80ec
mov dword [ebp - 0x6c], 1
mov dword [0x6ce7c0], 1
jmp 0x4f80f3
mov dword [ebp - 0x6c], 0
push 0x216
mov ecx, 0x69cd90
call fcn.004440f0
test eax, eax
je 0x4f8138
cvttss2si ecx, dword [eax + 0x88d]
mov dword [ebp - 0x64], ecx
cvttss2si eax, dword [eax + 0x891]
mov dword [ebp - 0x60], eax
xor eax, eax
cmp dword [0x6b2714], eax
setne al
mov dword [ebp - 0x5c], eax
xor eax, eax
cmp dword [0x6b2710], eax
setne al
mov dword [ebp - 0x58], eax
mov ecx, dword [0x6ceea4]
test ecx, ecx
je 0x4f8160
cvttss2si eax, dword [ecx + 0x88d]
mov dword [ebp - 0x54], eax
cvttss2si eax, dword [ecx + 0x891]
mov dword [ebp - 0x50], eax
mov eax, dword [0x6ceea0]
mov dword [ebp - 0x48], eax
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push esi
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x4f81e6
movzx ecx, byte [0x6eb5d6]
lea eax, [ebp - 0x128]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
push eax
push 4
lea eax, [ebp - 0x12c]
mov dword [ebp - 0x12c], 0x6111101
push eax
push edi
mov dword [ebp - 0x130], ecx
call esi
push 0
lea eax, [ebp - 0x128]
push eax
push 4
lea eax, [ebp - 0x130]
push eax
push edi
call esi
push 0
lea eax, [ebp - 0x128]
push eax
push 0x120
lea eax, [ebp - 0x124]
push eax
push edi
call esi
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.00575c70
mov esp, ebp
pop ebp
ret 4