Function at 0x4109d0
Capabilities:
Write file on windows

Disassembly:
mov eax, dword [0x48556c]
sub esp, 0x420
inc eax
lea edx, [esp + 0x38]
push ebx
push ebp
mov ebp, dword [esp + 0x42c]
push esi
push edi
mov dword [0x48556c], eax
lea ecx, [ebp + 4]
push ecx
push eax
push str.Create_material__i_:__s
push edx
call dword [sym.imp.USER32.dll_wsprintfA]
lea eax, [esp + 0x58]
add esp, 0x10
test eax, eax
je 0x410ab6
lea edi, [esp + 0x48]
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x410ab6
lea esi, [ecx + 1]
push esi
call fcn.00450d2b
lea ecx, [esp + 0x4c]
mov edi, eax
push esi
push ecx
push edi
call fcn.00450dd0
push edi
push 0x483838
call fcn.00407c90
mov eax, dword [0x483958]
add esp, 0x18
test eax, eax
je 0x410ab6
mov edx, dword [0x48383c]
dec edx
push edx
push 0x483838
call fcn.00407cf0
mov edx, eax
add esp, 8
test edx, edx
je 0x410a8f
lea eax, [esp + 0x1c]
push 0
push eax
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
mov ecx, dword [0x483950]
push edx
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [0x483950]
lea edx, [esp + 0x1c]
push 0
push edx
push 2
push 0x46b2f4
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [0x483950]
push ecx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov ebx, dword [ebp + 0x30]
mov dword [esp + 0x34], 0
lea edi, [ebx*4]
push edi
call fcn.00450d2b
mov ecx, edi
mov esi, eax
mov edx, ecx
xor eax, eax
mov edi, esi
add esp, 4
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
push esi
and ecx, 3
push ebx
rep stosb byte es:[edi], al
mov dword [esp + 0x24], esi
call dword [0x475f00]
mov eax, dword [ebp + 0x30]
xor edi, edi
cmp eax, edi
mov dword [esp + 0x38], edi
mov dword [esp + 0x3c], edi
jbe 0x410feb
mov eax, dword [esp + 0x34]
and eax, 0xffff
mov ecx, dword [esi + eax*4]
push ecx
push 0xde1
call dword [0x475d8c]
push 0
push 0xcf2
call dword [0x476084]
push 1
push 0xcf5
call dword [0x476084]
push 0x46040000
push 0x2200
push 0x2300
call dword [0x476200]
push 0x46240400
push 0x2802
push 0xde1
call dword [0x476230]
push 0x46240400
push 0x2803
push 0xde1
call dword [0x476230]
push 0xba1
call dword [0x475e98]
push 0x46180400
push 0x2800
push 0xde1
call dword [0x476230]
mov eax, dword [0x46b738]
test eax, eax
je 0x410bab
mov edx, dword [0x481dcc]
push edx
jmp 0x410bb0
push 0x46180400
push 0x2801
push 0xde1
call dword [0x476230]
mov eax, dword [esp + 0x434]
mov ebx, dword [ebp + 0x1c]
mov esi, dword [ebp + 0x20]
mov ebp, dword [ebp + 0x54]
mov eax, dword [eax + 0x14]
add ebp, edi
test al, 0x10
mov dword [esp + 0x30], ebx
mov dword [esp + 0x10], esi
mov dword [esp + 0x24], 0
je 0x410d06
test al, 0x20
jne 0x410d06
test al, 0x40
je 0x410c84
mov ecx, esi
imul ecx, ebx
shl ecx, 2
push ecx
call fcn.00450d2b
mov edi, eax
mov eax, dword [esp + 0x438]
mov dword [esp + 0x28], edi
add esp, 4
mov ecx, dword [eax + 0x1c]
imul ecx, dword [eax + 0x20]
shl ecx, 2
mov edx, ecx
or eax, 0xffffffff
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov edi, dword [esp + 0x434]
xor eax, eax
mov ecx, dword [edi + 0x1c]
imul ecx, dword [edi + 0x20]
test ecx, ecx
jbe 0x410c65
mov edx, dword [esp + 0x24]
lea ecx, [edx + 3]
mov dl, byte [eax + ebp]
inc eax
mov byte [ecx], dl
mov edx, dword [edi + 0x1c]
imul edx, dword [edi + 0x20]
add ecx, 4
cmp eax, edx
jb 0x410c51
mov eax, dword [esp + 0x24]
mov ecx, 0x1908
mov ebp, 4
mov dword [esp + 0x18], ecx
mov dword [esp + 0x14], ecx
mov dword [esp + 0x20], ebp
jmp 0x410d3a
imul esi, ebx
test esi, esi
mov dword [esp + 0x18], 0x8056
mov dword [esp + 0x14], 0x1908
mov dword [esp + 0x20], 4
jbe 0x410cc0
mov ecx, ebp
mov edx, esi
mov ax, word [ecx]
add ecx, 2
mov di, ax
shr di, 0xc
shl eax, 4
or edi, eax
dec edx
mov word [ecx - 2], di
jne 0x410ca7
mov eax, dword [0x47df90]
mov ecx, dword [esp + 0x10]
push eax
push 0x4444
push ecx
push ebx
push ebp
call fcn.004101e0
add esp, 0x14
test esi, esi
jbe 0x410cf7
mov ax, word [ebp]
add ebp, 2
mov edx, eax
shl edx, 0xc
shr ax, 4
or edx, eax
dec esi
mov word [ebp - 2], dx
jne 0x410cde
mov eax, dword [0x47df90]
mov ebp, dword [esp + 0x20]
mov esi, dword [esp + 0x10]
jmp 0x410d3a
mov eax, 0x1907
mov dword [esp + 0x20], 3
mov dword [esp + 0x18], eax
mov dword [esp + 0x14], eax
mov eax, dword [0x47df90]
push eax
push 0xf0565
push esi
push ebx
push ebp
call fcn.004101e0
mov eax, dword [0x47df90]
mov ebp, dword [esp + 0x34]
add esp, 0x14
mov ecx, dword [0x485520]
sub ecx, 0
je 0x410e24
dec ecx
je 0x410e17
dec ecx
jne 0x410e2e
mov dword [esp + 0x28], 4
mov edx, ebp
imul edx, esi
imul edx, ebx
push edx
push eax
mov eax, dword [0x47df90]
push eax
call fcn.00450dd0
mov ecx, dword [esp + 0x34]
mov eax, ebx
xor edx, edx
add esp, 0xc
div ecx
test eax, eax
mov dword [esp + 0x10], eax
jne 0x410d91
mov dword [esp + 0x10], 1
mov eax, esi
xor edx, edx
div ecx
test eax, eax
mov edi, eax
jne 0x410da2
mov edi, 1
mov ecx, dword [0x47d7b0]
mov edx, dword [esp + 0x10]
mov eax, dword [0x47df90]
push 0x3f800000
push 0
push 0
push ecx
push edi
push edx
push eax
push ebp
push esi
push ebx
call fcn.00410410
mov ecx, dword [esp + 0x38]
add esp, 0x28
mov dword [esp + 0x30], ecx
mov dword [esp + 0x10], edi
mov esi, edi
mov ebx, ecx
mov eax, dword [0x46b738]
test eax, eax
je 0x410f7c
mov al, byte [0x485570]
test al, al
je 0x410e52
mov edx, dword [0x47d7b0]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push edx
push 0x1401
push eax
push esi
push ebx
push ecx
push 0xde1
call dword [0x4762e4]
jmp 0x410fa3
mov dword [esp + 0x28], 2
jmp 0x410d5f
mov dword [esp + 0x28], 1
jmp 0x410e39
cmp dword [esp + 0x28], 1
jne 0x410d5f
imul ebp, esi
imul ebp, ebx
mov ecx, dword [0x47d7b0]
push ebp
push eax
push ecx
call fcn.00450dd0
add esp, 0xc
jmp 0x410dd9
cmp esi, ebx
jbe 0x410e5e
mov edi, esi
mov dword [esp + 0x2c], edi
jmp 0x410e64
mov dword [esp + 0x2c], ebx
mov edi, ebx
test edi, edi
mov ecx, 1
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], esi
je 0x410e81
add ecx, ecx
mov eax, edi
xor edx, edx
div ecx
test eax, eax
jne 0x410e75
mov edx, dword [0x47d7b0]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x10]
push edx
mov edx, dword [esp + 0x1c]
push 0x1401
push eax
push 0
push ecx
push ebx
push edx
push 0
push 0xde1
mov ebp, 1
mov esi, 2
call dword [0x47622c]
test edi, 0xfffffffe
je 0x410fa3
mov ecx, dword [0x47d7b0]
jmp 0x410ece
mov ebx, dword [esp + 0x30]
mov eax, ebx
xor edx, edx
div esi
test eax, eax
mov ebx, eax
jne 0x410edf
mov ebx, 1
mov eax, dword [esp + 0x10]
xor edx, edx
div esi
test eax, eax
mov edi, eax
jne 0x410ef2
mov edi, 1
mov eax, dword [0x47df90]
push 0x3f800000
mov edx, dword [esp + 0x44]
push 0
push 0
push eax
mov eax, dword [esp + 0x54]
push edi
push ebx
push ecx
mov ecx, dword [esp + 0x3c]
push ecx
push edx
push eax
call fcn.00410410
mov ecx, dword [0x47df90]
mov edx, dword [esp + 0x3c]
mov eax, dword [esp + 0x40]
add esp, 0x28
push ecx
push 0x1401
push edx
push 0
mov ecx, ebp
push edi
push ebx
and ecx, 0xffff
push eax
push ecx
push 0xde1
call dword [0x47622c]
mov eax, dword [0x47d7b0]
mov ecx, dword [0x47df90]
mov dword [0x47df90], eax
mov eax, dword [esp + 0x2c]
add esi, esi
xor edx, edx
div esi
inc ebp
mov dword [esp + 0x44], ebx
mov dword [esp + 0x40], edi
mov dword [0x47d7b0], ecx
test eax, eax
jne 0x410eca
jmp 0x410fa3
mov edx, dword [0x47d7b0]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
push edx
push 0x1401
push eax
push 0
push esi
push ebx
push ecx
push 0
push 0xde1
call dword [0x47622c]
mov eax, dword [esp + 0x24]
test eax, eax
je 0x410fb4
push eax
call fcn.00450d9f
add esp, 4
mov ecx, dword [esp + 0x434]
mov edi, dword [esp + 0x38]
mov ebx, dword [esp + 0x34]
mov eax, dword [esp + 0x3c]
mov ebp, dword [ecx + 0x2c]
mov edx, dword [ecx + 0x30]
mov esi, dword [esp + 0x1c]
add edi, ebp
inc ebx
inc eax
cmp eax, edx
mov dword [esp + 0x38], edi
mov dword [esp + 0x34], ebx
mov dword [esp + 0x3c], eax
mov ebp, ecx
jb 0x410b08
mov edx, 0x46d918
mov dword [ebp + 0x50], esi
test edx, edx
je 0x41109f
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
je 0x41109f
lea esi, [ecx + 1]
push esi
call fcn.00450d2b
mov edi, eax
push esi
push 0x46d918
push edi
call fcn.00450dd0
push edi
push 0x483838
call fcn.00407c90
mov eax, dword [0x483958]
add esp, 0x18
test eax, eax
je 0x41109f
mov eax, dword [0x48383c]
dec eax
push eax
push 0x483838
call fcn.00407cf0
mov edx, eax
add esp, 8
test edx, edx
je 0x411077
lea ecx, [esp + 0x1c]
push 0
push ecx
mov edi, edx
or ecx, 0xffffffff
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
push ecx
push edx
mov edx, dword [0x483950]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ecx, dword [0x483950]
lea eax, [esp + 0x1c]
push 0
push eax
push 2
push 0x46b2f4
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [0x483950]
push edx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x420
ret