Function at 0x5836d0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xec
mov eax, dword [0x6a0290]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, ecx
mov ecx, 0x5fad18
push 0x234
call fcn.004c64f0
test eax, eax
je 0x583728
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xe4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xe0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xdc], ecx
push 0x622
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x583765
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xd4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xd0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xcc], ecx
push 0x618
mov ecx, 0x5fad18
call fcn.004c64f0
mov esi, eax
test esi, esi
je 0x5837b4
cvttss2si ecx, dword [esi + 0x8e4]
mov dword [ebp - 0xc4], ecx
cvttss2si ecx, dword [esi + 0x8e8]
mov dword [ebp - 0xc0], ecx
mov ecx, esi
call fcn.0050c7f0
test eax, eax
je 0x5837ab
xor eax, eax
cmp dword [esi + 0xe], eax
setne al
jmp 0x5837ae
mov eax, dword [edi + 0x1e]
mov dword [ebp - 0xbc], eax
push 0x22c
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x58381a
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xb4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xb0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xac], ecx
movzx eax, word [eax + 0x948]
cmp eax, 1
jne 0x583802
or ecx, 4
jmp 0x583814
cmp eax, 2
jne 0x58380c
or ecx, 8
jmp 0x583814
cmp eax, 3
jne 0x58381a
or ecx, 0x10
mov dword [ebp - 0xac], ecx
push 0xe4
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x583869
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xa4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xa0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x9c], ecx
cmp dword [eax + 0xade], 0
je 0x583869
or ecx, 2
mov dword [ebp - 0x9c], ecx
push 0x153
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x5838de
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x94], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x90], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x8c], ecx
mov edx, dword [eax + 0x22d28]
cmp edx, 1
jne 0x5838b6
or ecx, 4
jmp 0x5838c8
cmp edx, 2
jne 0x5838c0
or ecx, 8
jmp 0x5838c8
cmp edx, 4
jne 0x5838ce
or ecx, 0x10
mov dword [ebp - 0x8c], ecx
mov ecx, eax
call fcn.00449230
movzx eax, al
mov dword [ebp - 0x88], eax
push 0x798
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x58391b
cmp dword [eax + 0xe], 0
je 0x583903
or dword [ebp - 0x8c], 0x100
jmp 0x58391b
mov eax, dword [ebp - 0x8c]
test eax, 0x100
je 0x58391b
xor eax, 0x100
mov dword [ebp - 0x8c], eax
push 0xea
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x583974
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x84], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x80], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x7c], ecx
mov al, byte [eax + 0x93b]
cmp al, 1
jne 0x583961
or ecx, 4
jmp 0x583971
cmp al, 2
jne 0x58396a
or ecx, 8
jmp 0x583971
cmp al, 3
jne 0x583974
or ecx, 0x10
mov dword [ebp - 0x7c], ecx
push 0x5f
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x5839a5
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x74], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x70], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x6c], ecx
push 0xbe
mov ecx, 0x5fad18
call fcn.004c64f0
mov edx, eax
test edx, edx
je 0x583a23
cvttss2si ecx, dword [edx + 0x8e4]
mov dword [ebp - 0x64], ecx
cvttss2si ecx, dword [edx + 0x8e8]
mov dword [ebp - 0x60], ecx
xor ecx, ecx
cmp dword [edx + 0xe], ecx
setne cl
mov dword [ebp - 0x5c], ecx
cmp byte [edx + 0x93b], 1
jne 0x583a14
mov eax, dword [0x6d228c]
or ecx, 4
mov dword [ebp - 0x5c], ecx
mov al, byte [eax + 0x93b]
cmp al, 1
jne 0x5839fe
or ecx, 0x20
jmp 0x583a11
cmp al, 2
jne 0x583a07
or ecx, 0x40
jmp 0x583a11
cmp al, 3
jne 0x583a14
or ecx, 0x80
mov dword [ebp - 0x5c], ecx
mov eax, dword [edx + 0x944]
mov eax, dword [eax + 0x9c6]
mov dword [ebp - 0x58], eax
push 0x4ac
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x583a84
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x54], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x50], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x4c], ecx
cmp byte [eax + 0x93b], 1
jne 0x583a66
or ecx, 4
mov dword [ebp - 0x4c], ecx
cmp byte [eax + 0x93b], 2
jne 0x583a75
or ecx, 8
mov dword [ebp - 0x4c], ecx
cmp byte [eax + 0x93b], 3
jne 0x583a84
or ecx, 0x10
mov dword [ebp - 0x4c], ecx
push 0x6c4
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x583ab8
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x44], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x40], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x3c], ecx
push 0x656
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x583b01
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x34], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x30], ecx
cmp dword [eax + 0xe], 0
je 0x583afa
mov dword [ebp - 0x2c], 1
mov dword [0x6d3750], 1
jmp 0x583b01
mov dword [ebp - 0x2c], 0
push 0x265
mov ecx, 0x5fad18
call fcn.004c64f0
test eax, eax
je 0x583b46
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x24], ecx
cvttss2si eax, dword [eax + 0x8e8]
mov dword [ebp - 0x20], eax
xor eax, eax
cmp dword [0x6d2358], eax
setne al
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [0x6d2354], eax
setne al
mov dword [ebp - 0x18], eax
mov ecx, dword [0x6d82c4]
test ecx, ecx
je 0x583b6e
cvttss2si eax, dword [ecx + 0x8e4]
mov dword [ebp - 0x14], eax
cvttss2si eax, dword [ecx + 0x8e8]
mov dword [ebp - 0x10], eax
mov eax, dword [0x6d82c0]
mov dword [ebp - 8], eax
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x583bd2
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
lea eax, [ebp - 0xe8]
push 0
push eax
push 4
lea eax, [ebp - 0xec]
mov dword [ebp - 0xec], 0x6111101
push eax
push edi
call esi
push 0
lea eax, [ebp - 0xe8]
push eax
push 0xe0
lea eax, [ebp - 0xe4]
push eax
push edi
call esi
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0058de24
mov esp, ebp
pop ebp
ret 4