Function at 0x5ac250
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xec
mov eax, dword [0x6d5760]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 8]
push esi
push edi
mov edi, ecx
mov ecx, 0x6301e0
push 0x234
call fcn.004f1650
test eax, eax
je 0x5ac2a8
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xe4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xe0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xdc], ecx
push 0x61d
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac2e5
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xd4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xd0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xcc], ecx
push 0x613
mov ecx, 0x6301e0
call fcn.004f1650
mov esi, eax
test esi, esi
je 0x5ac334
cvttss2si ecx, dword [esi + 0x8e4]
mov dword [ebp - 0xc4], ecx
cvttss2si ecx, dword [esi + 0x8e8]
mov dword [ebp - 0xc0], ecx
mov ecx, esi
call fcn.00535c40
test eax, eax
je 0x5ac32b
xor eax, eax
cmp dword [esi + 0xe], eax
setne al
jmp 0x5ac32e
mov eax, dword [edi + 0x1e]
mov dword [ebp - 0xbc], eax
push 0x22c
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac39a
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xb4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xb0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0xac], ecx
movzx eax, word [eax + 0x948]
cmp eax, 1
jne 0x5ac382
or ecx, 4
jmp 0x5ac394
cmp eax, 2
jne 0x5ac38c
or ecx, 8
jmp 0x5ac394
cmp eax, 3
jne 0x5ac39a
or ecx, 0x10
mov dword [ebp - 0xac], ecx
push 0xe4
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac3e9
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0xa4], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0xa0], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x9c], ecx
cmp dword [eax + 0xade], 0
je 0x5ac3e9
or ecx, 2
mov dword [ebp - 0x9c], ecx
push 0x153
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac45e
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x94], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x90], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x8c], ecx
mov edx, dword [eax + 0x22d28]
cmp edx, 1
jne 0x5ac436
or ecx, 4
jmp 0x5ac448
cmp edx, 2
jne 0x5ac440
or ecx, 8
jmp 0x5ac448
cmp edx, 4
jne 0x5ac44e
or ecx, 0x10
mov dword [ebp - 0x8c], ecx
mov ecx, eax
call fcn.00474c30
movzx eax, al
mov dword [ebp - 0x88], eax
push 0x790
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac49b
cmp dword [eax + 0xe], 0
je 0x5ac483
or dword [ebp - 0x8c], 0x100
jmp 0x5ac49b
mov eax, dword [ebp - 0x8c]
test eax, 0x100
je 0x5ac49b
xor eax, 0x100
mov dword [ebp - 0x8c], eax
push 0xea
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac4f4
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x84], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x80], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x7c], ecx
mov al, byte [eax + 0x93b]
cmp al, 1
jne 0x5ac4e1
or ecx, 4
jmp 0x5ac4f1
cmp al, 2
jne 0x5ac4ea
or ecx, 8
jmp 0x5ac4f1
cmp al, 3
jne 0x5ac4f4
or ecx, 0x10
mov dword [ebp - 0x7c], ecx
push 0x5f
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac525
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x74], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x70], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x6c], ecx
push 0xbe
mov ecx, 0x6301e0
call fcn.004f1650
mov edx, eax
test edx, edx
je 0x5ac5a3
cvttss2si ecx, dword [edx + 0x8e4]
mov dword [ebp - 0x64], ecx
cvttss2si ecx, dword [edx + 0x8e8]
mov dword [ebp - 0x60], ecx
xor ecx, ecx
cmp dword [edx + 0xe], ecx
setne cl
mov dword [ebp - 0x5c], ecx
cmp byte [edx + 0x93b], 1
jne 0x5ac594
mov eax, dword [0x71360c]
or ecx, 4
mov dword [ebp - 0x5c], ecx
mov al, byte [eax + 0x93b]
cmp al, 1
jne 0x5ac57e
or ecx, 0x20
jmp 0x5ac591
cmp al, 2
jne 0x5ac587
or ecx, 0x40
jmp 0x5ac591
cmp al, 3
jne 0x5ac594
or ecx, 0x80
mov dword [ebp - 0x5c], ecx
mov eax, dword [edx + 0x944]
mov eax, dword [eax + 0x9c6]
mov dword [ebp - 0x58], eax
push 0x4a9
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac604
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x54], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x50], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x4c], ecx
cmp byte [eax + 0x93b], 1
jne 0x5ac5e6
or ecx, 4
mov dword [ebp - 0x4c], ecx
cmp byte [eax + 0x93b], 2
jne 0x5ac5f5
or ecx, 8
mov dword [ebp - 0x4c], ecx
cmp byte [eax + 0x93b], 3
jne 0x5ac604
or ecx, 0x10
mov dword [ebp - 0x4c], ecx
push 0x6bc
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac638
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x44], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x40], ecx
xor ecx, ecx
cmp dword [eax + 0xe], ecx
setne cl
mov dword [ebp - 0x3c], ecx
push 0x64e
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac681
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x34], ecx
cvttss2si ecx, dword [eax + 0x8e8]
mov dword [ebp - 0x30], ecx
cmp dword [eax + 0xe], 0
je 0x5ac67a
mov dword [ebp - 0x2c], 1
mov dword [0x714ac8], 1
jmp 0x5ac681
mov dword [ebp - 0x2c], 0
push 0x265
mov ecx, 0x6301e0
call fcn.004f1650
test eax, eax
je 0x5ac6c6
cvttss2si ecx, dword [eax + 0x8e4]
mov dword [ebp - 0x24], ecx
cvttss2si eax, dword [eax + 0x8e8]
mov dword [ebp - 0x20], eax
xor eax, eax
cmp dword [0x7136d8], eax
setne al
mov dword [ebp - 0x1c], eax
xor eax, eax
cmp dword [0x7136d4], eax
setne al
mov dword [ebp - 0x18], eax
mov ecx, dword [0x7196cc]
test ecx, ecx
je 0x5ac6ee
cvttss2si eax, dword [ecx + 0x8e4]
mov dword [ebp - 0x14], eax
cvttss2si eax, dword [ecx + 0x8e8]
mov dword [ebp - 0x10], eax
mov eax, dword [0x7196c8]
mov dword [ebp - 8], eax
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push ebx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
cmp edi, 0xffffffff
je 0x5ac752
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
lea eax, [ebp - 0xe8]
push 0
push eax
push 4
lea eax, [ebp - 0xec]
mov dword [ebp - 0xec], 0x6111101
push eax
push edi
call esi
push 0
lea eax, [ebp - 0xe8]
push eax
push 0xe0
lea eax, [ebp - 0xe4]
push eax
push edi
call esi
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.005b6a74
mov esp, ebp
pop ebp
ret 4