Function at 0x40dfd0
Capabilities:
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x652cb5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xd4
mov eax, dword [0x6ee06c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ecx + 0x98]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x5c]
call fcn.0040fc30
push 0x3a8
sub esp, 0x18
mov byte [ebp - 4], 1
lea eax, [ebx + 0xc]
mov ecx, esp
push eax
call fcn.0040abe0
lea eax, [ebp - 0xdc]
push eax
call fcn.004c0344
add esp, 0x20
mov byte [ebp - 4], 2
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x40e05d
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040ffa0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xc8]
cmp edx, 8
jb 0x40e0ad
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e0a3
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e52f
push edx
push ecx
call fcn.00424265
add esp, 8
push 4
push str..dat
lea ecx, [ebp - 0x5c]
call fcn.0040ffa0
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebp - 0x44]
call fcn.0040abe0
push esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call fcn.0040a920
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
xorps xmm0, xmm0
cmovae eax, dword [ebp - 0x44]
mov byte [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
test ecx, ecx
je 0x40e131
test eax, eax
je 0x40e10f
cmp ecx, 0x11
ja 0x40e10b
push ecx
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004e7fd0
add esp, 0xc
jmp 0x40e131
test eax, eax
jne 0x40e11c
call fcn.004efd9f
mov dword [eax], 0x16
jmp 0x40e12c
cmp ecx, 0x11
jbe 0x40e131
call fcn.004efd9f
mov dword [eax], 0x22
call fcn.004eb7e6
push 0x2b4
call fcn.0042429f
add esp, 4
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0040c6d0
mov dword [ebp - 0x2c], eax
push 0x38
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 4
push 0
push eax
call fcn.004e7e00
add esp, 0xc
lea ecx, [ebp - 0xc4]
call fcn.004c18a8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xdc]
push 5
push str.token
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
call fcn.0040ace0
lea eax, [ebx + 0x24]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c19d6
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40e1fa
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e1f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e534
push edx
push ecx
call fcn.00424265
add esp, 8
push 3
push 0x6d8f68
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
call fcn.0040ace0
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c19d6
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40e27f
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e275
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e539
push edx
push ecx
call fcn.00424265
add esp, 8
push 5
push str.count
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
call fcn.0040ace0
lea eax, [ebx + 0x3c]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c19d6
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40e304
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e2fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e53e
push edx
push ecx
call fcn.00424265
add esp, 8
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c1d5d
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp - 0x8c]
mov ecx, esp
push eax
call fcn.0040abe0
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040c110
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040aac0
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40e380
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e376
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e543
push edx
push ecx
call fcn.00424265
add esp, 8
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x74]
call fcn.0040d530
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push 0x6d8f74
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.004f0d83
cmp dword [ebp - 0x60], 0x10
lea ecx, [ebp - 0x74]
mov esi, eax
cmovae ecx, dword [ebp - 0x74]
push esi
push dword [ebp - 0x64]
push 1
push ecx
call fcn.004efcce
push esi
call fcn.004ef993
mov edx, dword [ebp - 0x60]
add esp, 0x1c
cmp edx, 0x10
jb 0x40e3fa
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e3f0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e548
push edx
push ecx
call fcn.00424265
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x40e447
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e43d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e54d
push edx
push ecx
call fcn.00424265
add esp, 8
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.004c1959
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x40e478
mov eax, dword [ecx]
push 1
call dword [eax]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x40e4ac
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e4a2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e552
push edx
push ecx
call fcn.00424265
add esp, 8
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 8
jb 0x40e4f4
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e4ea
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e557
push edx
push ecx
call fcn.00424265
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
lea ecx, [ebx + 0xc]
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.0040def0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00423c15
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x4c
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
int3