Function at 0x475690
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x515578
mov eax, dword fs:[0]
push eax
sub esp, 0x28
mov eax, dword [0x56a8e0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, ecx
mov edi, dword [ebp + 8]
mov esi, 0xffff
cmp si, di
jne 0x4756d1
xor eax, eax
jmp 0x4758a7
mov eax, dword [ebx + 0x20]
mov ecx, dword [eax]
test ecx, ecx
je 0x475705
mov edx, dword [ebx + 0x30]
mov esi, dword [edx]
lea eax, [ecx + esi*2]
cmp ecx, eax
jae 0x475700
lea ecx, [esi - 1]
mov dword [edx], ecx
mov edx, dword [ebx + 0x20]
mov ax, di
mov esi, dword [edx]
lea ecx, [esi + 2]
mov dword [edx], ecx
mov word [esi], di
jmp 0x4758a7
mov esi, 0xffff
cmp dword [ebx + 0x50], 0
je 0x4758a4
mov edx, dword [ebx + 0xc]
lea eax, [ebx + 0x44]
cmp dword [edx], eax
jne 0x47572f
mov eax, dword [ebx + 0x38]
mov ecx, dword [ebx + 0x3c]
mov dword [edx], eax
mov eax, dword [ebx + 0x1c]
mov dword [eax], ecx
mov eax, dword [ebx + 0x2c]
sub ecx, ecx
sar ecx, 1
mov dword [eax], ecx
cmp dword [ebx + 0x40], 0
jne 0x475757
push dword [ebx + 0x50]
push edi
call fcn.004987bf
add esp, 8
cmp ax, si
movzx eax, di
jne 0x4758a7
mov eax, 0xffff
jmp 0x4758a7
movzx eax, di
mov dword [ebp - 0x2c], eax
mov ecx, 0xf
mov byte [ebp - 0x28], 0
xorps xmm0, xmm0
movq qword [ebp - 0x28], xmm0
lea eax, [ebp - 0x28]
cmp ecx, 0x10
cmovae eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x18], 8
mov byte [eax + 8], 0
mov dword [ebp - 4], 0
lea ecx, [ecx]
cmp dword [ebp - 0x14], 0x10
mov esi, dword [ebx + 0x40]
lea eax, [ebp - 0x30]
mov edi, dword [esi]
push eax
mov eax, dword [ebp - 0x18]
lea ecx, [ebp - 0x28]
cmovae ecx, dword [ebp - 0x28]
lea edx, [ebp - 0x28]
cmovae edx, dword [ebp - 0x28]
add eax, ecx
push eax
push edx
lea eax, [ebp - 0x34]
push eax
lea eax, [ebp - 0x2a]
push eax
lea eax, [ebp - 0x2c]
push eax
lea eax, [ebx + 0x48]
push eax
mov ecx, esi
call dword [edi + 0x1c]
test eax, eax
js 0x47588e
cmp eax, 1
jg 0x475862
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x30]
cmp edi, 0x10
lea eax, [ebp - 0x28]
cmovae eax, ecx
sub esi, eax
je 0x47580a
push dword [ebx + 0x50]
lea eax, [ebp - 0x28]
push esi
cmp edi, 0x10
cmovae eax, ecx
push 1
push eax
call fcn.0049814f
add esp, 0x10
cmp esi, eax
jne 0x475834
lea eax, [ebp - 0x2c]
mov byte [ebx + 0x46], 1
cmp dword [ebp - 0x34], eax
jne 0x475851
test esi, esi
jne 0x475790
cmp dword [ebp - 0x18], 0x20
jae 0x475844
push esi
push 8
lea ecx, [ebp - 0x28]
call fcn.00451b00
jmp 0x475790
mov eax, 0xffff
movzx eax, ax
movzx eax, ax
movzx esi, ax
jmp 0x475893
mov eax, 0xffff
movzx eax, ax
movzx esi, ax
jmp 0x475893
mov eax, dword [ebp + 8]
movzx eax, ax
movzx eax, ax
movzx eax, ax
movzx esi, ax
jmp 0x475893
cmp eax, 3
jne 0x47588e
push dword [ebx + 0x50]
push dword [ebp - 0x2c]
call fcn.0046d2d0
add esp, 8
test al, al
je 0x475884
mov eax, dword [ebp + 8]
movzx eax, ax
movzx esi, ax
jmp 0x475893
mov eax, 0xffff
movzx esi, ax
jmp 0x475893
mov esi, 0xffff
cmp dword [ebp - 0x14], 0x10
jb 0x4758a4
push dword [ebp - 0x28]
call fcn.00493278
add esp, 4
mov ax, si
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00493d56
mov esp, ebp
pop ebp
ret 4