Function at 0x6ac41e30
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x6c
mov edi, dword [ebp + 8]
mov edx, dword [ebp + 0xc]
mov ebx, dword [ebp + 0x10]
mov eax, dword [edi]
mov dword [esp + 4], edx
mov dword [esp], edi
call dword [eax + 0x7c]
mov esi, eax
mov eax, dword [edi]
sub esp, 8
mov dword [esp + 0xc], 0x6ac54064
mov dword [esp + 8], 0x6ac54128
mov dword [esp + 4], esi
mov dword [esp], edi
call dword [eax + 0x178]
sub esp, 0x10
test eax, eax
je 0x6ac421f5
mov ecx, dword [edi]
mov dword [esp + 8], eax
mov eax, dword [ebp + 0xc]
mov dword [esp], edi
mov dword [esp + 4], eax
call dword [ecx + 0x190]
mov dword [ebp - 0x5c], eax
mov eax, dword [edi]
sub esp, 0xc
mov dword [esp + 4], esi
mov dword [esp], edi
call dword [eax + 0x5c]
mov esi, dword [ebp - 0x5c]
sub esp, 8
test esi, esi
je 0x6ac42020
cmp ebx, 0x9600
je 0x6ac42390
jle 0x6ac41f20
cmp ebx, 0xe1000
je 0x6ac423c0
lea esi, [esi]
jg 0x6ac41fd0
cmp ebx, 0x38400
je 0x6ac423d0
jle 0x6ac42050
cmp ebx, 0x70800
je 0x6ac42360
jle 0x6ac422d0
cmp ebx, 0x7a120
je 0x6ac42160
cmp ebx, 0x8ca00
mov edi, 0x1006
je 0x6ac420f0
jmp 0x6ac420e4
cmp ebx, 0x258
je 0x6ac423e0
lea esi, [esi]
jg 0x6ac41f80
cmp ebx, 0x6e
je 0x6ac423f0
nop
lea esi, [esi]
jle 0x6ac42077
cmp ebx, 0x96
je 0x6ac42350
jle 0x6ac42300
cmp ebx, 0xc8
je 0x6ac42190
cmp ebx, 0x12c
mov edi, 7
je 0x6ac420f0
jmp 0x6ac420e4
cmp ebx, 0x12c0
je 0x6ac42410
lea esi, [esi]
jle 0x6ac420c0
cmp ebx, 0x3840
je 0x6ac42340
jle 0x6ac422e6
cmp ebx, 0x4b00
je 0x6ac421b0
cmp ebx, 0x7080
mov edi, 0x2002
je 0x6ac420f0
jmp 0x6ac420e4
cmp ebx, 0x1e8480
je 0x6ac42400
lea esi, [esi]
jle 0x6ac42092
cmp ebx, 0x2dc6c0
je 0x6ac42330
jle 0x6ac42316
cmp ebx, 0x3567e0
je 0x6ac42180
cmp ebx, 0x3d0900
mov edi, 0x100f
je 0x6ac420f0
jmp 0x6ac420e4
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 8], 0x26
mov dword [esp + 4], 1
mov dword [esp], str.get_java_var:_invalid_file_descriptor_n
add eax, 0x40
mov dword [esp + 0xc], eax
call sub.msvcrt.dll_fwrite
jmp 0x6ac41eb3
cmp ebx, 0x1c200
je 0x6ac423a4
cmp ebx, 0x1f400
je 0x6ac421a0
cmp ebx, 0xe100
jne 0x6ac420e4
mov edi, 0x1001
jmp 0x6ac420f0
cmp ebx, 0x32
je 0x6ac423b0
cmp ebx, 0x4b
je 0x6ac42167
test ebx, ebx
jne 0x6ac420e4
xor edi, edi
nop
jmp 0x6ac420f0
cmp ebx, 0x119400
je 0x6ac42380
cmp ebx, 0x16e360
je 0x6ac42170
cmp ebx, 0xf4240
jne 0x6ac420e4
mov edi, 0x1008
jmp 0x6ac420f0
cmp ebx, 0x708
je 0x6ac42370
cmp ebx, 0x960
je 0x6ac421c0
cmp ebx, 0x4b0
je 0x6ac4239a
test ebx, ebx
js 0x6ac42151
mov edi, ebx
lea esi, [esi]
lea ebx, [ebp - 0x54]
mov dword [esp + 4], ebx
mov dword [esp], esi
mov dword [ebp - 0x58], 0
call fcn.6ac4b3d0
test eax, eax
js 0x6ac42151
mov eax, dword [ebp - 0x4c]
and eax, 0xffffffcf
cmp dword [ebp + 0x14], 6
je 0x6ac421e0
jle 0x6ac421d0
cmp dword [ebp + 0x14], 7
je 0x6ac421e8
or eax, 0x30
cmp dword [ebp + 0x14], 8
jne 0x6ac42151
cmp dword [ebp + 0x18], 2
je 0x6ac42221
cmp dword [ebp + 0x18], 3
je 0x6ac422c0
cmp dword [ebp + 0x18], 1
je 0x6ac422b7
mov eax, 1
lea esp, [ebp - 0xc]
pop ebx
pop esi
pop edi
pop ebp
ret 0x18
mov edi, 0x1005
jmp 0x6ac420f0
mov edi, 2
jmp 0x6ac420f0
mov edi, 0x100a
jmp 0x6ac420f0
mov edi, 0x100e
jmp 0x6ac420f0
mov edi, 6
jmp 0x6ac420f0
mov edi, 0x2003
jmp 0x6ac420f0
mov edi, 0xe
jmp 0x6ac420f0
mov edi, 0xb
jmp 0x6ac420f0
cmp dword [ebp + 0x14], 5
je 0x6ac42133
jmp 0x6ac42151
or eax, 0x10
jmp 0x6ac42133
or eax, 0x20
nop
lea esi, [esi]
jmp 0x6ac42133
mov eax, dword [edi]
mov dword [esp], edi
call dword [eax + 0x40]
mov eax, dword [edi]
sub esp, 4
mov dword [esp], edi
call dword [eax + 0x44]
mov eax, dword [edi]
sub esp, 4
mov dword [esp + 4], esi
xor esi, esi
mov dword [esp], edi
call dword [eax + 0x5c]
sub esp, 8
jmp 0x6ac41eb3
or eax, 0x40
and eax, 0xbffffcff
cmp dword [ebp + 0x1c], 4
mov dword [ebp - 0x4c], eax
ja case.default.0x6ac42239
mov ecx, dword [ebp + 0x1c]
jmp dword [ecx*4 + 0x6ac54154]
or eax, 0x40000300
mov dword [ebp - 0x4c], eax
test edi, edi
je 0x6ac42447
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6ac4ab20
test eax, eax
js 0x6ac4241a
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6ac4aab0
test eax, eax
js 0x6ac4241a
mov dword [esp + 8], ebx
mov dword [esp + 4], 0
mov dword [esp], esi
call fcn.6ac4b7c0
mov edx, eax
xor eax, eax
test edx, edx
jns 0x6ac42156
jmp 0x6ac42151
or eax, 0x40000100
mov dword [ebp - 0x4c], eax
jmp case.0x6ac42239.0
or ah, 1
mov dword [ebp - 0x4c], eax
jmp case.0x6ac42239.0
or ah, 3
mov dword [ebp - 0x4c], eax
jmp case.0x6ac42239.0
and eax, 0xffffffbf
jmp 0x6ac42224
or eax, 0x40
and eax, 0xffffffcf
jmp 0x6ac42224
cmp ebx, 0x3e800
mov edi, 0x2004
je 0x6ac420f0
jmp 0x6ac420e4
cmp ebx, 0x2580
mov edi, 0xd
je 0x6ac420f0
jmp 0x6ac420e4
cmp ebx, 0x86
mov edi, 4
je 0x6ac420f0
jmp 0x6ac420e4
cmp ebx, 0x2625a0
mov edi, 0x100c
je 0x6ac420f0
jmp 0x6ac420e4
mov edi, 0x100d
jmp 0x6ac420f0
mov edi, 0x2001
jmp 0x6ac420f0
mov edi, 5
jmp 0x6ac420f0
mov edi, 0x1004
jmp 0x6ac420f0
mov edi, 0xa
jmp 0x6ac420f0
mov edi, 0x1009
jmp 0x6ac420f0
mov edi, 0xf
jmp 0x6ac420f0
mov edi, 9
jmp 0x6ac420f0
mov edi, 0x1002
jmp 0x6ac420f0
mov edi, 1
jmp 0x6ac420f0
mov edi, 0x1007
jmp 0x6ac420f0
mov edi, 0x1003
jmp 0x6ac420f0
mov edi, 8
jmp 0x6ac420f0
mov edi, 3
jmp 0x6ac420f0
mov edi, 0x100b
jmp 0x6ac420f0
mov edi, 0xc
jmp 0x6ac420f0
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6ac4ab20
test eax, eax
js 0x6ac42151
mov dword [esp + 4], edi
mov dword [esp], ebx
call fcn.6ac4aab0
test eax, eax
jns 0x6ac42278
jmp 0x6ac42151
lea edx, [ebp - 0x58]
mov dword [esp + 8], edx
mov dword [esp + 4], 0x5415
mov dword [esp], esi
mov dword [ebp - 0x5c], edx
call fcn.6ac4c4a0
mov edx, dword [ebp - 0x5c]
mov dword [esp + 4], 0x5418
mov dword [esp], esi
and dword [ebp - 0x58], 0xfffffffd
mov dword [esp + 8], edx
call fcn.6ac4c4a0
jmp 0x6ac42250
mov eax, dword [ebp + 0x1c]
mov dword [esp], str.Parity_missed__i_n
mov dword [esp + 4], eax
call sub.msvcrt.dll_printf
jmp 0x6ac42151