Function at 0x481c00
Capabilities:
Write file on windows

Disassembly:
sub esp, 0x5c
push ebx
mov ebx, dword [esp + 0x88]
push ebp
mov ebp, dword [esp + 0x88]
mov ecx, dword [ebx + 0x92c]
push esi
push edi
mov edi, dword [esp + 0x74]
test ecx, ecx
mov dword [esp + 0x14], 0
mov eax, 0xfffffffe
je 0x481e89
xor esi, esi
cmp edi, esi
jg 0x481c72
jl 0x481c46
cmp dword [esp + 0x70], 0xfffe
ja 0x481c72
cmp dword [esp + 0x7c], esi
jg 0x481c72
jl 0x481c54
cmp dword [esp + 0x78], eax
ja 0x481c72
cmp dword [esp + 0x84], esi
jl 0x481e89
jg 0x481c70
cmp dword [esp + 0x80], eax
jbe 0x481e89
xor esi, esi
mov eax, dword [ebx + 0xa8]
mov dword [esp + 0x14], 1
cmp eax, 0xffffffff
push ebx
jne 0x481d1c
push esi
push 0x4c
push ebp
push esi
call fcn.00483e80
add esp, 0x14
test eax, eax
je 0x481cb2
mov eax, dword [ebx + 0xa0]
pop edi
neg eax
sbb eax, eax
pop esi
and al, 0xf6
pop ebp
add eax, 0x13
pop ebx
add esp, 0x5c
ret
mov ecx, dword [esp + 0x78]
mov edx, dword [esp + 0x7c]
mov eax, 0x2d
mov dword [esp + 0x5c], ecx
mov ecx, dword [esp + 0x84]
mov word [esp + 0x40], ax
mov word [esp + 0x42], ax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x54], eax
mov eax, dword [esp + 0x80]
mov dword [esp + 0x60], edx
mov edx, dword [ebp]
push 1
push esi
push esi
mov dword [esp + 0x40], 0x6064b50
mov dword [esp + 0x44], 0x2c
mov dword [esp + 0x48], esi
mov dword [esp + 0x64], edi
mov dword [esp + 0x70], eax
mov dword [esp + 0x74], ecx
mov dword [esp + 0x2c], 0x7064b50
push edx
jmp 0x481da7
call fcn.00484710
add esp, 4
cmp edx, esi
jg 0x481d42
jl 0x481d2f
cmp eax, 0x4c
jae 0x481d42
push ebx
push ebp
push esi
call fcn.00484830
add esp, 0xc
cmp eax, esi
jne 0x482228
mov edx, dword [esp + 0x70]
mov ecx, dword [esp + 0x7c]
mov eax, 0x2d
mov dword [esp + 0x54], edx
mov edx, dword [esp + 0x80]
mov word [esp + 0x40], ax
mov word [esp + 0x42], ax
mov eax, dword [esp + 0x78]
mov dword [esp + 0x5c], eax
mov eax, dword [esp + 0x84]
mov dword [esp + 0x60], ecx
mov ecx, dword [ebp]
push 1
push esi
push esi
mov dword [esp + 0x40], 0x6064b50
mov dword [esp + 0x44], 0x2c
mov dword [esp + 0x48], esi
mov dword [esp + 0x64], edi
mov dword [esp + 0x70], edx
mov dword [esp + 0x74], eax
mov dword [esp + 0x2c], 0x7064b50
push ecx
call fcn.0047e6b0
add esp, 0x10
mov dword [esp + 0x28], eax
test byte [ebx + 0x5735], 0x80
mov dword [esp + 0x2c], edx
je 0x481ded
mov eax, dword [ebx + 0x5738]
mov ecx, dword [ebx + 0x573c]
mov edx, dword [ebx + 0x5748]
mov dword [esp + 0x44], eax
inc eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x4c], edx
mov dword [esp + 0x50], esi
mov dword [esp + 0x24], ecx
mov dword [esp + 0x30], eax
jmp 0x481e09
mov eax, dword [esp + 0x70]
mov dword [esp + 0x44], esi
mov dword [esp + 0x48], esi
mov dword [esp + 0x4c], eax
mov dword [esp + 0x50], edi
mov dword [esp + 0x24], esi
mov dword [esp + 0x30], esi
push 0x4d
call fcn.004adbfa
add esp, 4
cmp eax, esi
mov dword [esp + 0x94], eax
je 0x482223
mov ecx, 0xe
lea esi, [esp + 0x34]
mov edi, eax
push 0
rep movsd dword es:[edi], dword [esi]
lea edi, [eax + 0x38]
mov ecx, 5
lea esi, [esp + 0x24]
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp]
lea ecx, [esp + 0x14]
push ecx
push 0x4c
push eax
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x481e5c
cmp dword [esp + 0x10], 0x4c
je 0x481e79
mov ecx, dword [esp + 0x94]
push ecx
call fcn.004ad74d
add esp, 4
mov eax, 0xa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret
mov eax, dword [esp + 0x94]
push eax
call fcn.004ad74d
add esp, 4
mov edx, dword [esp + 0x88]
mov eax, dword [ebx + 0xa8]
xor esi, esi
cmp eax, 0xffffffff
lea edi, [edx + 0x16]
push ebx
mov dword [esp + 0x1c], edi
jne 0x4820c2
push esi
push edi
push ebp
push esi
call fcn.00483e80
add esp, 0x14
test eax, eax
je 0x481ed0
mov eax, dword [ebx + 0xa0]
pop edi
neg eax
sbb eax, eax
pop esi
and al, 0xf6
pop ebp
add eax, 0x13
pop ebx
add esp, 0x5c
ret
mov esi, dword [esp + 0x18]
lea eax, [esi + 1]
push eax
call fcn.004adbfa
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x482223
mov dword [ebp], 0x6054b50
test byte [ebx + 0x5735], 0x80
je 0x482008
mov eax, dword [esp + 0x14]
test eax, eax
je 0x481f61
mov ecx, dword [ebx + 0x5738]
mov eax, 0xfffe
cmp ecx, eax
jbe 0x481f1f
lea ecx, [ebp + 4]
mov word [ecx], 0xffff
jmp 0x481f2a
mov dx, word [ebx + 0x5738]
mov word [ebp + 4], dx
cmp dword [ebx + 0x573c], eax
jbe 0x481f3c
lea ecx, [ebp + 6]
mov word [ecx], 0xffff
jmp 0x481f47
mov dx, word [ebx + 0x573c]
mov word [ebp + 6], dx
mov ecx, dword [ebx + 0x5748]
cmp ecx, eax
ja 0x482047
mov dx, cx
mov word [ebp + 8], dx
jmp 0x48204f
mov ax, word [ebx + 0x5738]
mov word [ebp + 4], ax
mov cx, word [ebx + 0x573c]
mov word [ebp + 6], cx
mov dx, word [ebx + 0x5748]
mov word [ebp + 8], dx
mov cx, word [esp + 0x70]
mov edx, dword [esp + 0x78]
mov word [ebp + 0xa], cx
mov dword [ebp + 0xc], edx
mov eax, dword [esp + 0x80]
mov dword [ebp + 0x10], eax
mov ecx, dword [esp + 0x88]
test ecx, ecx
mov word [ebp + 0x14], cx
je 0x481fc7
mov esi, dword [esp + 0x8c]
mov edx, ecx
lea edi, [ebp + 0x16]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x18]
mov ecx, dword [esp + 0x90]
lea eax, [esp + 0x10]
push 0
push eax
mov edx, dword [ecx]
push esi
push ebp
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x48220d
cmp dword [esp + 0x10], esi
je 0x4821c2
push ebp
call fcn.004ad74d
add esp, 4
mov eax, 0xa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret
lea eax, [ebp + 4]
mov dword [eax], 0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x482039
mov eax, dword [esp + 0x74]
test eax, eax
mov eax, 0xfffe
jl 0x48202e
jg 0x482047
cmp dword [esp + 0x70], eax
ja 0x482047
mov dx, word [esp + 0x70]
mov word [ebp + 8], dx
jmp 0x48204f
mov ax, word [esp + 0x70]
mov word [ebp + 8], ax
jmp 0x481f82
lea ecx, [ebp + 8]
mov word [ecx], 0xffff
mov ecx, dword [esp + 0x74]
test ecx, ecx
jl 0x482069
jg 0x48205f
cmp dword [esp + 0x70], eax
jbe 0x482069
lea ecx, [ebp + 0xa]
mov word [ecx], 0xffff
jmp 0x482072
mov dx, word [esp + 0x70]
mov word [ebp + 0xa], dx
mov eax, dword [esp + 0x7c]
test eax, eax
jl 0x48208e
jg 0x482083
cmp dword [esp + 0x78], 0xfffffffe
jbe 0x48208e
lea eax, [ebp + 0xc]
mov dword [eax], 0xffffffff
jmp 0x482095
mov ecx, dword [esp + 0x78]
mov dword [ebp + 0xc], ecx
mov eax, dword [esp + 0x84]
test eax, eax
jl 0x481f92
jg 0x4820b4
cmp dword [esp + 0x80], 0xfffffffe
jbe 0x481f92
lea edx, [ebp + 0x10]
mov dword [edx], 0xffffffff
jmp 0x481f9c
call fcn.00484710
add esp, 4
cmp edx, esi
jg 0x4820e8
jl 0x4820d4
cmp eax, edi
jae 0x4820e8
push ebx
push ebp
push 0
call fcn.00484830
add esp, 0xc
test eax, eax
jne 0x482228
mov esi, dword [esp + 0x18]
lea eax, [esi + 1]
push eax
call fcn.004adbfa
mov ebp, eax
add esp, 4
test ebp, ebp
je 0x482223
mov dword [ebp], 0x6054b50
test byte [ebx + 0x5735], 0x80
je 0x4821d5
mov eax, dword [esp + 0x14]
test eax, eax
je 0x48213c
lea edx, [ebp + 4]
or ecx, 0xffffffff
or eax, 0xffffffff
mov dword [edx], ecx
mov word [edx + 4], cx
lea ecx, [ebp + 0xa]
mov dword [ebp + 0xa], eax
mov dword [ecx + 4], eax
mov word [ecx + 8], ax
jmp 0x482177
mov ax, word [ebx + 0x5738]
mov word [ebp + 4], ax
mov cx, word [ebx + 0x573c]
mov word [ebp + 6], cx
mov dx, word [ebx + 0x5748]
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x80]
mov word [ebp + 8], dx
mov dx, word [esp + 0x70]
mov word [ebp + 0xa], dx
mov dword [ebp + 0xc], eax
mov dword [ebp + 0x10], ecx
mov ecx, dword [esp + 0x88]
test ecx, ecx
mov word [ebp + 0x14], cx
je 0x4821a2
mov esi, dword [esp + 0x8c]
mov edx, ecx
lea edi, [ebp + 0x16]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [esp + 0x18]
mov ecx, dword [ebx + 0xa8]
lea eax, [esp + 0x10]
push 0
push eax
push esi
push ebp
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x48220d
cmp dword [esp + 0x10], esi
jne 0x48220d
push ebp
call fcn.004ad74d
add esp, 4
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret
lea eax, [ebp + 4]
mov dword [eax], 0
mov eax, dword [esp + 0x14]
test eax, eax
je 0x482203
lea ecx, [ebp + 8]
or eax, 0xffffffff
mov word [ecx], 0xffff
lea ecx, [ebp + 0xa]
mov dword [ebp + 0xa], eax
mov dword [ecx + 4], eax
mov word [ecx + 8], ax
jmp 0x482177
mov dx, word [esp + 0x70]
jmp 0x482159
push ebp
call fcn.004ad74d
add esp, 4
mov eax, 0xa
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret
mov eax, 4
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x5c
ret