Function at 0x40e040
Capabilities:
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x652d35
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xd4
mov eax, dword [0x6ee06c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ecx + 0x98]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x5c]
call fcn.0040feb0
push 0x3a8
sub esp, 0x18
mov byte [ebp - 4], 1
lea eax, [ebx + 0xc]
mov ecx, esp
push eax
call fcn.0040ac50
lea eax, [ebp - 0xe0]
push eax
call fcn.004bfac4
add esp, 0x20
mov byte [ebp - 4], 2
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x40e0cd
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.00410220
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xcc]
cmp edx, 8
jb 0x40e11d
mov ecx, dword [ebp - 0xe0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e113
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5c0
push edx
push ecx
call fcn.004244c5
add esp, 8
push 4
push str..dat
lea ecx, [ebp - 0x5c]
call fcn.00410220
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebp - 0x44]
call fcn.0040ac50
push esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call fcn.0040a990
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
xorps xmm0, xmm0
cmovae eax, dword [ebp - 0x44]
mov byte [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
test ecx, ecx
je 0x40e1a1
test eax, eax
je 0x40e17f
cmp ecx, 0x11
ja 0x40e17b
push ecx
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004e8000
add esp, 0xc
jmp 0x40e1a1
test eax, eax
jne 0x40e18c
call fcn.004efe6a
mov dword [eax], 0x16
jmp 0x40e19c
cmp ecx, 0x11
jbe 0x40e1a1
call fcn.004efe6a
mov dword [eax], 0x22
call fcn.004eb816
push 0x2b4
call fcn.004244ff
add esp, 4
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0040c720
mov dword [ebp - 0x2c], eax
push 0x38
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 4
push 0
push eax
call fcn.004e7e30
add esp, 0xc
lea ecx, [ebp - 0xc4]
call fcn.004c0ecc
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xe0]
push 5
push str.token
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.0040ad50
lea eax, [ebx + 0x24]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c0ffa
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40e26a
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e260
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5c5
push edx
push ecx
call fcn.004244c5
add esp, 8
push 3
push 0x6d8f08
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.0040ad50
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c0ffa
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40e2ef
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e2e5
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5ca
push edx
push ecx
call fcn.004244c5
add esp, 8
push 5
push str.count
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0xf
mov byte [ebp - 0xe0], 0
call fcn.0040ad50
lea eax, [ebx + 0x3c]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c0ffa
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40e374
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e36a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5cf
push edx
push ecx
call fcn.004244c5
add esp, 8
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c1381
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp - 0x8c]
mov ecx, esp
push eax
call fcn.0040ac50
lea eax, [ebp - 0xe0]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040c160
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040ab30
mov edx, dword [ebp - 0xcc]
cmp edx, 0x10
jb 0x40e3f0
mov ecx, dword [ebp - 0xe0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e3e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5d4
push edx
push ecx
call fcn.004244c5
add esp, 8
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x74]
call fcn.0040d580
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push 0x6d8f14
cmovae eax, dword [ebp - 0x5c]
push eax
lea eax, [ebp - 0xc8]
mov dword [ebp - 0xc8], 0
push eax
call fcn.004f0e65
mov ecx, dword [ebp - 0xc8]
add esp, 0xc
test ecx, ecx
je 0x40e457
cmp dword [ebp - 0x60], 0x10
lea eax, [ebp - 0x74]
push ecx
push dword [ebp - 0x64]
cmovae eax, dword [ebp - 0x74]
push 1
push eax
call fcn.004efd99
push dword [ebp - 0xc8]
call fcn.004efa5e
add esp, 0x14
mov edx, dword [ebp - 0x60]
cmp edx, 0x10
jb 0x40e48b
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e481
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5d9
push edx
push ecx
call fcn.004244c5
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x40e4d8
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e4ce
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5de
push edx
push ecx
call fcn.004244c5
add esp, 8
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.004c0f7d
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x40e509
mov eax, dword [ecx]
push 1
call dword [eax]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x40e53d
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40e533
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5e3
push edx
push ecx
call fcn.004244c5
add esp, 8
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 8
jb 0x40e585
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40e57b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40e5e8
push edx
push ecx
call fcn.004244c5
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
lea ecx, [ebx + 0xc]
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.0040df60
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00423e75
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x4c
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
call fcn.004eb826
int3