Function at 0x40d9b0
Capabilities:
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x652d35
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xd4
mov eax, dword [0x6ee06c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ecx + 0x50]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x5c]
call fcn.0040feb0
push 0x3a8
sub esp, 0x18
mov byte [ebp - 4], 1
lea eax, [ebx + 0xc]
mov ecx, esp
push eax
call fcn.0040ac50
lea eax, [ebp - 0xe0]
push eax
call fcn.004bfac4
add esp, 0x20
mov byte [ebp - 4], 2
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x40da3a
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.00410220
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xcc]
cmp edx, 8
jb 0x40da8a
mov ecx, dword [ebp - 0xe0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40da80
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df2d
push edx
push ecx
call fcn.004244c5
add esp, 8
push 4
push str..dat
lea ecx, [ebp - 0x5c]
call fcn.00410220
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebp - 0x44]
call fcn.0040ac50
push esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call fcn.0040a990
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
xorps xmm0, xmm0
cmovae eax, dword [ebp - 0x44]
mov byte [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
test ecx, ecx
je 0x40db0e
test eax, eax
je 0x40daec
cmp ecx, 0x11
ja 0x40dae8
push ecx
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004e8000
add esp, 0xc
jmp 0x40db0e
test eax, eax
jne 0x40daf9
call fcn.004efe6a
mov dword [eax], 0x16
jmp 0x40db09
cmp ecx, 0x11
jbe 0x40db0e
call fcn.004efe6a
mov dword [eax], 0x22
call fcn.004eb816
push 0x2b4
call fcn.004244ff
add esp, 4
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0040c720
mov dword [ebp - 0x2c], eax
push 0x38
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 4
push 0
push eax
call fcn.004e7e30
add esp, 0xc
lea ecx, [ebp - 0xc4]
call fcn.004c0ecc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xe0]
push 5
push str.token
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.0040ad50
lea eax, [ebx + 0x24]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c0ffa
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40dbd7
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dbcd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df32
push edx
push ecx
call fcn.004244c5
add esp, 8
push 3
push 0x6d8f08
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.0040ad50
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c0ffa
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40dc5c
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dc52
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df37
push edx
push ecx
call fcn.004244c5
add esp, 8
push 5
push str.count
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.0040ad50
lea eax, [ebx + 0x3c]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c0ffa
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40dce1
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dcd7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df3c
push edx
push ecx
call fcn.004244c5
add esp, 8
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c1381
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp - 0x8c]
mov ecx, esp
push eax
call fcn.0040ac50
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040c160
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040ab30
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40dd5d
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dd53
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df41
push edx
push ecx
call fcn.004244c5
add esp, 8
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x74]
call fcn.0040d580
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push 0x6d8f14
cmovae eax, dword [ebp - 0x5c]
push eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xc8], 0
push eax
call fcn.004f0e65
mov ecx, dword [ebp - 0xc8]
add esp, 0xc
test ecx, ecx
je 0x40ddc4
cmp dword [ebp - 0x60], 0x10
lea eax, [ebp - 0x74]
push ecx
push dword [ebp - 0x64]
cmovae eax, dword [ebp - 0x74]
push 1
push eax
call fcn.004efd99
push dword [ebp - 0xc8]
call fcn.004efa5e
add esp, 0x14
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x40ddf8
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ddee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df46
push edx
push ecx
call fcn.004244c5
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x40de45
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40de3b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df4b
push edx
push ecx
call fcn.004244c5
add esp, 8
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.004c0f7d
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x40de76
mov eax, dword [ecx]
push 1
call dword [eax]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x40deaa
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dea0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df50
push edx
push ecx
call fcn.004244c5
add esp, 8
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 8
jb 0x40def2
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40dee8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40df55
push edx
push ecx
call fcn.004244c5
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
lea ecx, [ebx + 0xc]
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.0040df60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00423e75
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x4c
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
int3