Function at 0x424bd0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x18
mov eax, 4
imul ecx, eax, 0x2958
mov edx, dword [ecx + 0x497c50]
xor edx, 0x18b08c27
mov eax, 4
imul ecx, eax, 0x2958
mov dword [ecx + 0x497c50], edx
mov edx, 2
imul eax, edx, 0x1747
movsx ecx, word [eax + 0x490a20]
sub ecx, 0x396d8634
mov edx, 2
imul eax, edx, 0x1747
mov word [eax + 0x490a20], cx
cmp dword [0x4a6220], 0
jne 0x424c9e
mov ecx, 4
imul edx, ecx, 0x17c0
mov eax, 4
imul ecx, eax, 0x3587
mov eax, 0xddc383b8
sub eax, dword [ecx + 0x497c50]
mov ecx, dword [edx + 0x497c50]
sub ecx, eax
mov edx, 4
imul eax, edx, 0x17c0
mov dword [eax + 0x497c50], ecx
call fcn.00457e40
mov dword [0x4a6220], eax
mov ecx, 2
imul edx, ecx, 0x1f41
movsx eax, word [edx + 0x490a20]
xor eax, 0x42b42631
mov ecx, 2
imul edx, ecx, 0x1f41
mov word [edx + 0x490a20], ax
mov eax, 2
imul ecx, eax, 0x15c6
movsx edx, word [ecx + 0x490a20]
add edx, 0x76e2e6c6
mov eax, 2
imul ecx, eax, 0x15c6
mov word [ecx + 0x490a20], dx
push 3
push 0x10aa
call fcn.004465d0
add esp, 8
mov dword [ebp - 0xc], eax
mov edx, 2
imul eax, edx, 0x204a
movsx ecx, word [eax + 0x490a20]
cmp ecx, 0x493537ec
jl 0x424d1e
mov edx, 4
imul eax, edx, 0x3066
mov ecx, dword [eax + 0x497c50]
sub ecx, 0x53ca7f9f
mov edx, 4
imul eax, edx, 0x3066
mov dword [eax + 0x497c50], ecx
jmp 0x424d47
mov ecx, 2
imul edx, ecx, 0xac9
movsx eax, word [edx + 0x490a20]
add eax, 0x2c5b448b
mov ecx, 2
imul edx, ecx, 0xac9
mov word [edx + 0x490a20], ax
mov eax, dword [ebp - 0xc]
push eax
mov ecx, dword [ebp + 8]
push ecx
call fcn.00466c21
add esp, 8
mov dword [ebp - 8], eax
mov edx, 4
imul eax, edx, 0x17bb
mov ecx, dword [eax + 0x497c50]
or ecx, 0xe8a0b728
mov edx, 4
imul eax, edx, 0x17bb
mov dword [eax + 0x497c50], ecx
mov ecx, dword [ebp - 0xc]
push ecx
push 3
call fcn.004479c0
add esp, 8
mov edx, 2
imul eax, edx, 0x10a5
movsx ecx, word [eax + 0x490a20]
shl ecx, 9
sub ecx, 0x5162f2a9
cmp ecx, 0xb9fdeff2
jle 0x424df5
mov edx, 2
imul eax, edx, 0x12a7
mov ecx, 4
imul edx, ecx, 0xfed
mov ecx, dword [edx + 0x497c50]
sar ecx, 2
and ecx, 0xa2b7ea4f
movsx edx, word [eax + 0x490a20]
or edx, ecx
mov eax, 2
imul ecx, eax, 0x12a7
mov word [ecx + 0x490a20], dx
jmp 0x424e55
mov edx, 4
imul eax, edx, 0x21dd
mov ecx, dword [eax + 0x497c50]
shl ecx, 7
cmp ecx, 0x19fe5b22
jne 0x424e55
mov edx, 4
imul eax, edx, 0x7f5
mov ecx, 0x44e02d6a
sub ecx, dword [eax + 0x497c50]
or ecx, 0xae9a54aa
mov dword [ebp - 0x14], ecx
mov edx, 4
imul eax, edx, 0x7f5
mov ecx, dword [eax + 0x497c50]
add ecx, 1
mov edx, 4
imul eax, edx, 0x7f5
mov dword [eax + 0x497c50], ecx
cmp dword [ebp - 8], 0
jne 0x425022
mov ecx, 4
imul edx, ecx, 0x2c85
mov eax, 2
imul ecx, eax, 0x321b
movsx eax, word [ecx + 0x490a20]
mov ecx, dword [edx + 0x497c50]
add ecx, eax
mov edx, 4
imul eax, edx, 0x2c85
mov dword [eax + 0x497c50], ecx
push 0x3e8
call dword [0x490994]
mov ecx, 4
imul edx, ecx, 0x2587
mov eax, dword [edx + 0x497c50]
xor eax, 0x3f96b569
mov ecx, 4
imul edx, ecx, 0x2587
mov dword [edx + 0x497c50], eax
push 3
push 0x10aa
call fcn.004465d0
add esp, 8
mov dword [ebp - 0x10], eax
mov eax, 2
imul ecx, eax, 0xab6
movsx edx, word [ecx + 0x490a20]
or edx, 0xc6bdd9a1
or edx, 0x31186c1
mov dword [ebp - 0x18], edx
mov eax, 2
imul ecx, eax, 0xab6
mov dx, word [ecx + 0x490a20]
add dx, 1
mov eax, 2
imul ecx, eax, 0xab6
mov word [ecx + 0x490a20], dx
cmp dword [ebp - 0x18], 0xdfff33a5
je 0x424faf
mov edx, 4
imul eax, edx, 0x931
mov ecx, 4
imul edx, ecx, 0x21e1
mov ecx, dword [edx + 0x497c50]
not ecx
mov edx, dword [eax + 0x497c50]
xor edx, ecx
cmp edx, 0x367e2270
jle 0x424f87
mov eax, 4
imul ecx, eax, 0x1e6d
mov edx, dword [ecx + 0x497c50]
add edx, 0x4abdd9c0
mov eax, 4
imul ecx, eax, 0x1e6d
mov dword [ecx + 0x497c50], edx
jmp 0x424faf
mov edx, 4
imul eax, edx, 0xcbe
mov ecx, dword [eax + 0x497c50]
add ecx, 0x3f183966
mov edx, 4
imul eax, edx, 0xcbe
mov dword [eax + 0x497c50], ecx
mov ecx, dword [ebp - 0x10]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.00466c21
add esp, 8
mov dword [ebp - 8], eax
mov eax, 2
imul ecx, eax, 0x2048
movsx edx, word [ecx + 0x490a20]
add edx, 0x2dcf6a9b
mov eax, 2
imul ecx, eax, 0x2048
mov word [ecx + 0x490a20], dx
mov edx, dword [ebp - 0x10]
push edx
push 3
call fcn.004479c0
add esp, 8
mov eax, 4
imul ecx, eax, 0x2481
mov edx, dword [ecx + 0x497c50]
sub edx, 0x293757b
mov eax, 4
imul ecx, eax, 0x2481
mov dword [ecx + 0x497c50], edx
mov edx, 4
imul eax, edx, 0x212b
mov ecx, dword [eax + 0x497c50]
or ecx, 0x6cbe9ced
mov edx, 4
imul eax, edx, 0x212b
mov dword [eax + 0x497c50], ecx
cmp dword [ebp - 8], 0
je 0x425136
mov ecx, 4
imul edx, ecx, 0x10e7
mov eax, 2
imul ecx, eax, 0x1997
movsx eax, word [ecx + 0x490a20]
imul ecx, eax, 0x6bd4cee2
mov edx, dword [edx + 0x497c50]
xor edx, ecx
mov eax, 4
imul ecx, eax, 0x10e7
mov dword [ecx + 0x497c50], edx
mov edx, dword [ebp - 8]
push edx
push 1
push 4
push 0x4a6220
call fcn.00466dd4
add esp, 0x10
mov eax, 2
imul ecx, eax, 0x171a
mov dx, word [ecx + 0x490a20]
add dx, 1
mov word [ebp - 2], dx
mov eax, 2
imul ecx, eax, 0x171a
mov dx, word [ebp - 2]
mov word [ecx + 0x490a20], dx
movsx eax, word [ebp - 2]
xor eax, 0xb3f66f6e
mov ecx, 4
imul edx, ecx, 0x742
mov ecx, dword [edx + 0x497c50]
or ecx, eax
mov edx, 4
imul eax, edx, 0x742
mov dword [eax + 0x497c50], ecx
mov ecx, dword [ebp - 8]
push ecx
call fcn.004668f6
add esp, 4
mov edx, 4
imul eax, edx, 0x19dd
mov ecx, dword [eax + 0x497c50]
and ecx, 0x3cdfeddf
mov edx, 4
imul eax, edx, 0x19dd
mov dword [eax + 0x497c50], ecx
mov ecx, 4
imul edx, ecx, 0xb49
imul eax, dword [edx + 0x497c50], 0xfdcdc52c
mov ecx, 4
imul edx, ecx, 0xb49
mov dword [edx + 0x497c50], eax
mov esp, ebp
pop ebp
ret