Function at 0x1004bf30
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x24
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x18], ebx
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov edx, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x18]
mov edi, dword [ebp + 0x1c]
mov esi, dword [ebp + 0x20]
mov dword [ebp - 4], eax
mov dword [ebp - 8], edx
mov dword [ebp - 0xc], ecx
lea edx, [ebp - 0x1c]
push 4
push eax
push edx
push ebx
call fcn.10026824
add esp, 0x10
test eax, eax
je 0x1004bf98
movzx edx, byte [ebp + 0x10]
test dl, 1
je 0x1004bf87
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
movzx eax, ax
mov esp, ebp
pop ebp
ret
push 0x100b600c
push ebx
push 2
push eax
call fcn.100149ac
add esp, 0x10
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ebp + 0x10]
movzx eax, byte [ecx + 0x12b]
and eax, 0xffffffbf
and edx, 1
shl edx, 6
or eax, edx
mov byte [ecx + 0x12b], al
mov edx, dword [ebp - 0x1c]
movzx eax, byte [ebp + 0x10]
movzx ebx, byte [edx + 0x12b]
and ebx, 0x7f
and eax, 2
shr eax, 1
and eax, 1
shl eax, 7
or ebx, eax
movzx eax, byte [ebp + 0x12]
mov byte [edx + 0x12b], bl
mov edx, dword [ebp - 0x1c]
movzx ecx, byte [edx + 0x12e]
and ecx, 0xfffffff3
and eax, 0xffffffc0
shr eax, 6
and eax, 3
shl eax, 2
or ecx, eax
movzx eax, byte [ebp + 0x13]
mov byte [edx + 0x12e], cl
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx + 0x12e]
and edx, 0xffffffef
and eax, 1
shl eax, 4
or edx, eax
mov byte [ecx + 0x12e], dl
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ebp + 0x13]
movzx eax, byte [ecx + 0x12f]
and eax, 0xfffffffe
and edx, 2
shr edx, 1
and edx, 1
or eax, edx
mov byte [ecx + 0x12f], al
movzx eax, byte [ebp + 0x13]
test eax, 0x80
je 0x1004c058
lea eax, [ebp + 0x2b]
and eax, 0xfffffffc
mov edx, dword [eax]
mov dword [ebp - 0x20], edx
jmp 0x1004c05d
xor eax, eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0xf0], 0
mov ebx, dword [ebp - 0x1c]
movzx eax, byte [ebx + 0x129]
test al, 0x20
je 0x1004c87f
test al, 0x40
je 0x1004c131
mov edx, dword [ebx + 0x18]
test edx, edx
je 0x1004c66c
movzx eax, byte [edx + 0x3c]
test al, 2
je 0x1004c0cf
mov eax, 0x2f
mov dword [edx + 0x30], eax
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx + 0x18]
mov dword [ecx + 0x34], eax
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx + 0x64]
test eax, eax
je 0x1004c0bd
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x64], edx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov eax, 0x2f
mov esp, ebp
pop ebp
ret
movzx ecx, byte [ebx + 0x12b]
movzx esi, byte [ebx + 0x12c]
mov edx, ecx
and edx, 0x40
mov edi, 2
xor eax, eax
test edx, edx
setne al
test ecx, 0x80
jne 0x1004c0fb
mov edi, 0
test esi, 1
mov edx, 4
jne 0x1004c10d
mov edx, 0
or eax, edi
or eax, edx
mov edx, 0x2f
push edx
push edx
push eax
push 0xffffffffffffffff
push ebx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
movzx eax, byte [ebx + 0x12a]
test al, 0x40
jne 0x1004c1f0
mov edx, dword [ebx + 0x18]
test edx, edx
je 0x1004c68b
movzx eax, byte [edx + 0x3c]
test al, 2
je 0x1004c18e
mov dword [edx + 0x30], 0x101
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0x18]
mov dword [edx + 0x34], 0x1f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x64]
test eax, eax
je 0x1004c17c
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x64], edx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov eax, 0x101
mov esp, ebp
pop ebp
ret
push 0x1f
push 0x101
movzx ecx, byte [ebx + 0x12b]
movzx esi, byte [ebx + 0x12c]
mov edx, ecx
and edx, 0x40
mov edi, 2
xor eax, eax
test edx, edx
setne al
test ecx, 0x80
mov edx, 4
jne 0x1004c1c6
mov edi, 0
test esi, 1
jne 0x1004c1d3
mov edx, 0
or eax, edi
or eax, edx
push eax
push 0xffffffffffffffff
push ebx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
movzx edx, byte [ebx + 0x12b]
test dl, 8
je 0x1004c2a6
mov ecx, dword [ebx + 0x18]
test ecx, ecx
je 0x1004c6aa
movzx eax, byte [ecx + 0x3c]
test al, 2
je 0x1004c24e
mov dword [ecx + 0x30], 0x102
mov eax, dword [ebp - 0x1c]
mov edx, dword [eax + 0x18]
mov dword [edx + 0x34], 0x1f
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x64]
test eax, eax
je 0x1004c23c
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x64], edx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov eax, 0x102
mov esp, ebp
pop ebp
ret
push 0x1f
push 0x102
mov ecx, edx
and ecx, 0x40
mov esi, 2
mov edi, 4
xor eax, eax
test ecx, ecx
setne al
test edx, 0x80
movzx edx, byte [ebx + 0x12c]
jne 0x1004c27f
mov esi, 0
test dl, 1
jne 0x1004c289
mov edi, 0
or eax, esi
or eax, edi
push eax
push 0xffffffffffffffff
push ebx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
test dl, 4
jne 0x1004c352
mov ecx, dword [ebx + 0x18]
test ecx, ecx
je 0x1004c6c9
movzx eax, byte [ecx + 0x3c]
test al, 2
je 0x1004c2fa
mov eax, 0x22a
mov dword [ecx + 0x30], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x18]
mov dword [edx + 0x34], eax
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx + 0x64]
test eax, eax
je 0x1004c2e8
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x64], edx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov eax, 0x22a
mov esp, ebp
pop ebp
ret
mov ecx, edx
and ecx, 0x40
mov esi, 2
mov edi, 4
xor eax, eax
test ecx, ecx
setne al
test edx, 0x80
movzx edx, byte [ebx + 0x12c]
jne 0x1004c324
mov esi, 0
test dl, 1
mov edx, 0x22a
push edx
push edx
jne 0x1004c335
mov edi, 0
or eax, esi
or eax, edi
push eax
push 0xffffffffffffffff
push ebx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
mov eax, edi
sub eax, 1
mov ecx, esi
sbb ecx, 0
jl 0x1004c38d
mov eax, dword [ebx + 0xa8]
test eax, eax
je 0x1004c430
mov dword [ebp - 0x24], edx
cdq
mov ecx, edi
sub ecx, eax
mov eax, esi
sbb eax, edx
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
jl 0x1004c430
or ecx, dword [ebp - 0x20]
je 0x1004c430
mov ecx, dword [ebx + 0x18]
test ecx, ecx
je 0x1004c6e8
movzx eax, byte [ecx + 0x3c]
test al, 2
je 0x1004c3d8
mov eax, 0x19
mov dword [ecx + 0x30], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x18]
mov dword [edx + 0x34], eax
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx + 0x64]
test eax, eax
je 0x1004c3c6
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x64], edx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov eax, 0x19
mov esp, ebp
pop ebp
ret
mov ecx, edx
and ecx, 0x40
mov esi, 2
mov edi, 4
xor eax, eax
test ecx, ecx
setne al
test edx, 0x80
movzx edx, byte [ebx + 0x12c]
jne 0x1004c402
mov esi, 0
test dl, 1
mov edx, 0x19
push edx
push edx
jne 0x1004c413
mov edi, 0
or eax, esi
or eax, edi
push eax
push 0xffffffffffffffff
push ebx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
movzx eax, byte [ebx + 0x12d]
test al, 1
je 0x1004c47f
mov edx, dword [ebx + 0x90]
mov ecx, dword [ebx + 0x94]
mov dword [ebp - 0x20], ecx
mov eax, edx
add eax, 0xffffffff
adc ecx, 0xffffffff
neg eax
add eax, edi
neg ecx
add ecx, esi
or eax, ecx
jne 0x1004c46c
mov eax, dword [ebx + 0xc0]
sub dword [ebx + 0x40], eax
mov ebx, dword [ebp - 0x1c]
jmp 0x1004c47f
mov eax, dword [ebp - 0x20]
neg edx
add edx, edi
neg eax
add eax, esi
or edx, eax
jne 0x1004c707
mov dword [ebx + 0x90], edi
mov dword [ebx + 0x94], esi
mov ebx, dword [ebp - 0x1c]
mov ebx, dword [ebx + 0x58]
xor eax, eax
mov dword [ebx], eax
mov dword [ebx + 4], eax
mov dword [ebx + 8], eax
mov dword [ebx + 0xc], eax
mov dword [ebx + 0x10], eax
mov dword [ebx + 0x14], eax
mov dword [ebx + 0x18], eax
mov dword [ebx + 0x1c], eax
mov dword [ebx + 0x20], eax
mov dword [ebx + 0x24], eax
mov dword [ebx + 0x28], eax
mov dword [ebx + 0x2c], eax
mov dword [ebx + 0x30], eax
mov dword [ebx + 0x34], eax
mov dword [ebx + 0x38], eax
mov dword [ebx + 0x3c], eax
mov dword [ebx + 0x40], eax
mov dword [ebx + 0x44], eax
mov dword [ebx + 0x48], eax
mov dword [ebx + 0x4c], eax
mov dword [ebx + 0x50], eax
mov eax, dword [ebp - 0x1c]
movzx edx, byte [ebp + 0x10]
mov dword [ebx], eax
test dl, 8
jne 0x1004c4ea
mov eax, dword [ebp + 0x24]
mov dword [ebx + 8], eax
jmp 0x1004c5ad
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 0x24]
call fcn.10018fd4
add esp, 8
test eax, eax
je 0x1004c5a3
mov edx, dword [ebp - 0x1c]
mov ebx, dword [edx + 0x18]
test ebx, ebx
je 0x1004c849
movzx ecx, byte [ebx + 0x3c]
test cl, 2
je 0x1004c546
mov dword [ebx + 0x30], eax
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx + 0x18]
mov dword [ecx + 0x34], eax
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebx + 0x64]
test edx, edx
je 0x1004c539
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x64], ecx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push eax
push eax
movzx esi, byte [edx + 0x12b]
movzx edi, byte [edx + 0x12c]
mov ebx, esi
and ebx, 0x40
xor ecx, ecx
test ebx, ebx
setne cl
test esi, 0x80
mov ebx, 2
jne 0x1004c574
mov ebx, 0
test edi, 1
mov esi, 4
jne 0x1004c586
mov esi, 0
or ecx, ebx
or ecx, esi
push ecx
push 0xffffffffffffffff
push edx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x20]
or byte [ebx + 0x4f], 2
mov dword [ebx + 8], eax
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ecx + 0x40]
test eax, eax
je 0x1004c871
movzx edx, byte [ecx + 0x128]
test dl, 1
je 0x1004c5e3
movzx edx, byte [ecx + 0x12b]
test dl, 4
je 0x1004c5e3
movsx edx, byte [ecx + 0x11d]
cmp edx, 2
je 0x1004c863
mov dword [ecx + 0x3c], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x3c]
mov dword [ecx + 0x48], edx
mov esi, dword [ebp - 0x1c]
mov ebx, dword [esi + 0x3c]
mov dword [esi + 0x4c], ebx
mov ecx, dword [ebp - 0x1c]
movzx edi, byte [ecx + 0x128]
test edi, 4
je 0x1004c62d
movzx edx, byte [ecx + 0x12a]
test dl, 0x40
je 0x1004c62d
movzx edx, byte [ecx + 0x12b]
test dl, 4
je 0x1004c62d
mov edx, dword [ecx + 0xc0]
add edx, 0xfffffffe
jmp 0x1004c633
mov edx, dword [ecx + 0xc0]
add eax, edx
mov dword [ecx + 0x44], eax
mov eax, dword [ebp - 0x1c]
push dword [eax + 0xc0]
push 0x20
push dword [eax + 0x40]
call fcn.1007f474
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 4]
push eax
push edx
push ecx
call sym.libifcoremd.dll_for_write_dir_fmt_xmit
add esp, 0x18
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push ebx
mov eax, 0x2f
push eax
push eax
push 1
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push ebx
push 0x1f
push 0x101
push 1
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push ebx
push 0x1f
push 0x102
push 1
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push ebx
mov eax, 0x22a
push eax
push eax
push 1
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push ebx
mov eax, 0x19
push eax
push eax
push 1
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x24]
push 0
push eax
mov ecx, dword [ebx + 0x38]
mov edx, dword [ebx + 0x40]
sub edx, ecx
push edx
push ecx
push dword [ebx + 0xb4]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x20], eax
test eax, eax
je 0x1004c83c
mov ecx, eax
mov eax, dword [ebx + 0x38]
and byte [ebx + 0x12d], 0xfe
mov dword [ebx + 0x40], eax
add eax, dword [ebx + 0xc0]
mov dword [ebx + 0x44], eax
xor edx, edx
mov dword [ebx + 0xa0], edx
mov dword [ebx + 0xa4], edx
cmp ecx, 0xffffffff
je 0x1004c761
mov ebx, dword [ebp - 0x1c]
jmp 0x1004c47f
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebx + 0xb8], eax
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx + 0x18]
test ecx, ecx
je 0x1004c81d
movzx eax, byte [ecx + 0x3c]
test al, 2
je 0x1004c7bb
mov eax, 0x26
mov dword [ecx + 0x30], eax
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ecx + 0x18]
mov dword [edx + 0x34], eax
mov ebx, dword [ebp - 0x1c]
mov eax, dword [ebx + 0x64]
test eax, eax
je 0x1004c7a9
xor edx, edx
mov dword [eax + 4], edx
mov eax, dword [ebp - 0x1c]
mov dword [eax + 0x64], edx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov eax, 0x26
mov esp, ebp
pop ebp
ret
movzx ebx, byte [edx + 0x12b]
movzx esi, byte [edx + 0x12c]
mov ecx, ebx
and ecx, 0x40
mov edi, 2
xor eax, eax
test ecx, ecx
setne al
test ebx, 0x80
jne 0x1004c7e7
mov edi, 0
test esi, 1
mov ecx, 4
jne 0x1004c7f9
mov ecx, 0
or eax, edi
or eax, ecx
mov ecx, 0x26
push ecx
push ecx
push eax
push 0xffffffffffffffff
push edx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push edx
mov eax, 0x26
push eax
push eax
push 1
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
mov eax, 0xffffffff
mov dword [ebp - 0x20], eax
jmp 0x1004c72e
push edx
push eax
push eax
push 1
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
lea edx, [eax + 1]
mov dword [ecx + 0x3c], edx
mov byte [eax], 0x20
jmp 0x1004c5e6
mov eax, dword [ecx + 0x38]
mov dword [ecx + 0x40], eax
mov ecx, dword [ebp - 0x1c]
jmp 0x1004c5bb
movzx edx, byte [ebp + 0x10]
push 1
push 4
movzx eax, byte [ebx + 0x128]
push 2
and eax, 0xfffffffe
and edx, 0xffffff80
shr edx, 7
and edx, 1
or eax, edx
movzx edx, byte [ebp + 0x12]
mov byte [ebx + 0x128], al
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [ecx + 0x128]
and eax, 0xfffffffd
movzx ebx, byte [ebp + 0x13]
and edx, 4
shr edx, 2
and edx, 1
add edx, edx
or eax, edx
mov byte [ecx + 0x128], al
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [ecx + 0x128]
and ebx, 8
shr ebx, 3
and ebx, 1
and eax, 0xfffffffb
mov edx, ebx
shl edx, 2
or eax, edx
movzx edx, byte [ebp + 0x13]
mov byte [ecx + 0x128], al
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [ecx + 0x128]
and eax, 0xfffffff7
and edx, 4
shr edx, 2
and edx, 1
shl edx, 3
or eax, edx
mov byte [ecx + 0x128], al
mov edx, ebx
shl edx, 5
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [ecx + 0x128]
and eax, 0xffffffdf
or eax, edx
movzx edx, byte [ebp + 0x13]
mov byte [ecx + 0x128], al
mov ecx, dword [ebp - 0x1c]
movzx eax, byte [ecx + 0x131]
and eax, 0xfffffffe
and edx, 0x10
shr edx, 4
and edx, 1
or eax, edx
mov byte [ecx + 0x131], al
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0x131]
and eax, 0xfffffffd
add ebx, ebx
or eax, ebx
mov byte [edx + 0x131], al
mov ebx, dword [ebp - 0x1c]
movzx eax, byte [ebx + 0x128]
and eax, 0xffffffbf
movzx edx, byte [ebp + 0x13]
and edx, 0x20
shr edx, 5
and edx, 1
mov ecx, edx
shl ecx, 6
or eax, ecx
mov byte [ebx + 0x128], al
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x20]
movzx eax, byte [ecx + 0x128]
and eax, 0x7f
shl edx, 7
or eax, edx
mov byte [ecx + 0x128], al
mov edx, dword [ebp - 0x1c]
movzx ecx, byte [edx + 0x129]
and ecx, 0xfffffffe
mov eax, ebx
and eax, 1
or ecx, eax
mov byte [edx + 0x129], cl
mov eax, ebx
and eax, 2
mov ecx, dword [ebp - 0x1c]
movzx edx, byte [ecx + 0x131]
and edx, 0xfffffff7
shr eax, 1
and eax, 1
shl eax, 3
or edx, eax
mov byte [ecx + 0x131], dl
mov edx, dword [ebp - 0x1c]
movzx eax, byte [edx + 0x129]
and eax, 0xfffffff9
and ebx, 0xc
shr ebx, 2
and ebx, 3
add ebx, ebx
or eax, ebx
mov byte [edx + 0x129], al
push dword [ebp - 0x1c]
call fcn.1002b098
add esp, 0x10
test eax, eax
je 0x1004caba
mov edx, dword [ebp - 0x1c]
mov ebx, dword [edx + 0x18]
test ebx, ebx
je 0x1004cac9
movzx ecx, byte [ebx + 0x3c]
test cl, 2
je 0x1004ca5d
mov dword [ebx + 0x30], eax
mov edx, dword [ebp - 0x1c]
mov ecx, dword [edx + 0x18]
mov dword [ecx + 0x34], eax
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebx + 0x64]
test edx, edx
je 0x1004ca50
xor ecx, ecx
mov dword [edx + 4], ecx
mov edx, dword [ebp - 0x1c]
mov dword [edx + 0x64], ecx
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
push eax
push eax
movzx esi, byte [edx + 0x12b]
movzx edi, byte [edx + 0x12c]
mov ebx, esi
and ebx, 0x40
xor ecx, ecx
test ebx, ebx
setne cl
test esi, 0x80
mov ebx, 2
jne 0x1004ca8b
mov ebx, 0
test edi, 1
mov esi, 4
jne 0x1004ca9d
mov esi, 0
or ecx, ebx
or ecx, esi
push ecx
push 0xffffffffffffffff
push edx
call fcn.10077ea0
add esp, 0x14
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret
mov ebx, dword [ebp - 0x1c]
movzx eax, byte [ebx + 0x129]
jmp 0x1004c07c
push edx
push eax
push eax
push 2
call fcn.10014254
add esp, 0x10
mov ebx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0x14]
mov esp, ebp
pop ebp
ret