Function at 0x6a00e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xfc
mov eax, dword [0x82aea4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp + 0xc]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xf4], eax
xor eax, eax
lea edx, [ebp - 0x48]
mov dword [ebp - 0xd8], ecx
mov byte [ebp - 0xd3], al
mov byte [ebp - 0xd1], al
mov dword [ebp - 0xdc], eax
test dl, 3
jne 0x6a0162
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], eax
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], eax
jmp 0x6a0171
push 0x44
push eax
lea eax, [ebp - 0x48]
push eax
call sub.MSVCR100.dll_memset
add esp, 0xc
push ebx
push esi
push edi
mov ecx, dword [ebp - 0xe4]
lea ebx, [ebx]
movsx eax, byte [ecx]
inc ecx
mov dword [ebp - 0xe4], ecx
test eax, eax
je 0x6a0336
cmp eax, 0x25
jne 0x6a0180
xor eax, eax
xor edi, edi
xor ebx, ebx
xor esi, esi
mov byte [ebp - 0xd2], al
mov edx, dword [ebp - 0xe4]
movsx ecx, byte [edx]
inc edx
mov dword [ebp - 0xe4], edx
test ecx, ecx
je 0x6a0336
lea edx, [ecx - 0x24]
cmp edx, 0x54
ja case.0x6a01d0.37
movzx edx, byte [edx + 0x6a096c]
jmp dword [edx*4 + 0x6a0940]
lea eax, [eax + eax*4]
lea eax, [ecx + eax*2 - 0x30]
jmp case.0x6a01d0.39
cmp byte [ebp - 0xd2], 0
je 0x6a01f0
mov byte [ebp - 0xd3], 1
mov byte [ebp - 0xd2], 1
xor eax, eax
jmp case.0x6a01d0.39
mov byte [ebp - 0xd1], 1
test eax, eax
jle case.0x6a0369.0
cmp eax, 0x10
jg case.0x6a0369.0
cmp byte [ebp - 0xd2], 0
je 0x6a0251
mov ecx, dword [ebp + eax*4 - 0x48]
test ecx, ecx
je 0x6a022d
cmp ecx, 1
jne case.0x6a0369.0
mov dword [ebp + eax*4 - 0x48], 1
cmp dword [ebp - 0xdc], eax
jg 0x6a0243
mov dword [ebp - 0xdc], eax
mov byte [ebp - 0xd2], 0
xor eax, eax
jmp case.0x6a01d0.39
mov esi, eax
xor eax, eax
jmp case.0x6a01d0.39
test ebx, ebx
je 0x6a0268
mov edi, 1
jmp case.0x6a01d0.39
mov ebx, 1
jmp case.0x6a01d0.39
test esi, esi
je 0x6a0302
test edi, edi
je 0x6a0285
mov ecx, 3
jmp 0x6a028d
xor ecx, ecx
test ebx, ebx
setne cl
inc ecx
mov eax, dword [ebp + esi*4 - 0x48]
test eax, eax
je 0x6a029d
cmp eax, ecx
jne case.0x6a0369.0
mov dword [ebp + esi*4 - 0x48], ecx
jmp 0x6a02f2
test esi, esi
je 0x6a0302
mov eax, dword [ebp + esi*4 - 0x48]
test eax, eax
je 0x6a02b4
cmp eax, 1
jne case.0x6a0369.0
mov dword [ebp + esi*4 - 0x48], 1
jmp 0x6a02f2
test esi, esi
je 0x6a0302
mov eax, dword [ebp + esi*4 - 0x48]
test eax, eax
je 0x6a02cf
cmp eax, 5
jne case.0x6a0369.0
mov dword [ebp + esi*4 - 0x48], 5
jmp 0x6a02f2
test esi, esi
je 0x6a0302
mov eax, dword [ebp + esi*4 - 0x48]
test eax, eax
je 0x6a02ea
cmp eax, 4
jne case.0x6a0369.0
mov dword [ebp + esi*4 - 0x48], 4
cmp dword [ebp - 0xdc], esi
jg case.0x6a01d0.37
mov dword [ebp - 0xdc], esi
jmp case.0x6a01d0.37
mov byte [ebp - 0xd3], 1
cmp byte [ebp - 0xd2], 0
je 0x6a0174
mov byte [ebp - 0xd3], 1
jmp 0x6a0174
pop edi
pop esi
or eax, 0xffffffff
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret
cmp byte [ebp - 0xd1], 0
je 0x6a0348
cmp byte [ebp - 0xd3], 0
jne case.0x6a0369.0
mov esi, dword [ebp - 0xdc]
mov eax, 1
cmp esi, eax
jl 0x6a03ad
mov edx, dword [ebp - 0xd8]
lea ecx, [ecx]
mov ecx, dword [ebp + eax*4 - 0x48]
cmp ecx, 5
ja case.default.0x6a0369
jmp dword [ecx*4 + 0x6a09c4]
mov ecx, dword [edx]
add edx, 8
mov dword [ebp + eax*8 - 0xd0], ecx
mov ecx, dword [edx - 4]
mov dword [ebp + eax*8 - 0xcc], ecx
jmp case.default.0x6a0369
fld qword [edx]
add edx, 8
fstp qword [ebp + eax*8 - 0xd0]
jmp case.default.0x6a0369
mov ecx, dword [edx]
add edx, 4
mov dword [ebp + eax*8 - 0xd0], ecx
inc eax
cmp eax, esi
jle 0x6a0360
mov dword [ebp - 0xd8], edx
mov eax, dword [ebp - 0xf4]
movsx ebx, byte [eax]
mov dword [ebp - 0xe4], eax
test ebx, ebx
je 0x6a092a
jmp 0x6a03d0
inc dword [ebp - 0xe4]
mov esi, dword [ebp - 0xe8]
cmp ebx, 0x25
je 0x6a041f
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x6a0416
mov eax, dword [esi]
cmp eax, ecx
jb 0x6a0416
mov edx, dword [esi + 0xc]
test edx, edx
je case.0x6a048b.38
mov ecx, dword [esi + 4]
sub eax, ecx
je 0x6a0411
push edx
push eax
push 1
push ecx
call dword [sym.imp.MSVCR100.dll_fwrite]
add esp, 0x10
add dword [esi + 0x10], eax
mov edx, dword [esi + 4]
mov dword [esi], edx
mov eax, dword [esi]
mov byte [eax], bl
jmp 0x6a0917
xor eax, eax
xor edi, edi
xor ebx, ebx
mov dword [ebp - 0xf4], eax
mov dword [ebp - 0xec], eax
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0xf8], eax
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xe0], eax
mov byte [ebp - 0xd2], al
xor cl, cl
jmp case.0x6a048b.39
mov edx, dword [ebp - 0xe4]
movsx esi, byte [edx]
inc edx
mov dword [ebp - 0xe4], edx
test esi, esi
je 0x6a092a
lea edx, [esi - 0x24]
cmp edx, 0x54
ja case.0x6a048b.38
movzx edx, byte [edx + 0x6a0a20]
jmp dword [edx*4 + 0x6a09dc]
mov dword [ebp - 0xec], 1
jmp case.0x6a048b.39
mov dword [ebp - 0xf4], 1
jmp case.0x6a048b.39
test eax, eax
jne case.0x6a048b.49
test ebx, ebx
jne case.0x6a048b.49
mov dword [ebp - 0xfc], 0x30
lea eax, [eax + eax*4]
lea eax, [esi + eax*2 - 0x30]
jmp case.0x6a048b.39
test cl, cl
je 0x6a04d4
xor cl, cl
mov ebx, 1
xor eax, eax
jmp case.0x6a048b.39
mov edi, eax
mov ebx, 1
xor eax, eax
jmp case.0x6a048b.39
cmp byte [ebp - 0xd1], 0
je 0x6a04f8
mov byte [ebp - 0xd2], 1
mov cl, 1
xor eax, eax
jmp case.0x6a048b.39
mov eax, dword [ebp - 0xd8]
add eax, 4
mov dword [ebp - 0xd8], eax
mov eax, dword [eax - 4]
test ebx, ebx
je 0x6a052d
mov dword [ebp - 0xdc], eax
test eax, eax
jns 0x6a0541
xor ebx, ebx
mov dword [ebp - 0xdc], 0
mov cl, 1
xor eax, eax
jmp case.0x6a048b.39
mov edi, eax
test eax, eax
jns 0x6a0541
neg eax
mov dword [ebp - 0xec], 1
mov edi, eax
mov cl, 1
xor eax, eax
jmp case.0x6a048b.39
cmp byte [ebp - 0xd2], 0
je 0x6a05a3
mov eax, dword [ebp + eax*8 - 0xd0]
test ebx, ebx
je 0x6a0581
mov dword [ebp - 0xdc], eax
test eax, eax
jns 0x6a0595
xor ebx, ebx
mov dword [ebp - 0xdc], 0
mov byte [ebp - 0xd2], bl
xor eax, eax
jmp case.0x6a048b.39
mov edi, eax
test eax, eax
jns 0x6a0595
neg eax
mov dword [ebp - 0xec], 1
mov edi, eax
mov byte [ebp - 0xd2], 0
xor eax, eax
jmp case.0x6a048b.39
mov dword [ebp - 0xe0], eax
xor eax, eax
jmp case.0x6a048b.39
cmp dword [ebp - 0xf0], 0
je 0x6a05c8
mov dword [ebp - 0xf8], 1
jmp case.0x6a048b.39
mov dword [ebp - 0xf0], 1
jmp case.0x6a048b.39
test cl, cl
jne 0x6a05e9
test ebx, ebx
je 0x6a05e7
mov dword [ebp - 0xdc], eax
jmp 0x6a05e9
mov edi, eax
cmp byte [ebp - 0xd1], 0
je 0x6a0638
cmp dword [ebp - 0xf8], 0
je 0x6a0611
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ebp + ecx*8 - 0xd0]
mov edx, dword [ebp + ecx*8 - 0xcc]
jmp 0x6a066a
cmp dword [ebp - 0xf0], 0
je 0x6a0629
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ebp + ecx*8 - 0xd0]
jmp 0x6a0669
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp + edx*8 - 0xd0]
jmp 0x6a0669
cmp dword [ebp - 0xf8], 0
je 0x6a0657
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
add ecx, 8
mov dword [ebp - 0xd8], ecx
jmp 0x6a066a
mov eax, dword [ebp - 0xd8]
add eax, 4
mov dword [ebp - 0xd8], eax
mov eax, dword [eax - 4]
cdq
mov ecx, dword [ebp - 0xdc]
push ebx
push ecx
mov ecx, dword [ebp - 0xfc]
push ecx
mov ecx, dword [ebp - 0xec]
push edi
push ecx
mov ecx, dword [ebp - 0xf4]
push ecx
mov ecx, dword [ebp - 0xe8]
push esi
push edx
push eax
call fcn.0069fd10
add esp, 0x24
jmp case.0x6a048b.38
test cl, cl
jne 0x6a06b0
test ebx, ebx
je 0x6a06ae
mov dword [ebp - 0xdc], eax
jmp 0x6a06b0
mov edi, eax
cmp byte [ebp - 0xd1], 0
je 0x6a06ff
cmp dword [ebp - 0xf8], 0
je 0x6a06d8
mov ecx, dword [ebp - 0xe0]
mov eax, dword [ebp + ecx*8 - 0xd0]
mov edx, dword [ebp + ecx*8 - 0xcc]
jmp 0x6a0732
cmp dword [ebp - 0xf0], 0
je 0x6a06f0
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp + edx*8 - 0xd0]
jmp 0x6a0730
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp + eax*8 - 0xd0]
jmp 0x6a0730
cmp dword [ebp - 0xf8], 0
je 0x6a071e
mov ecx, dword [ebp - 0xd8]
mov eax, dword [ecx]
mov edx, dword [ecx + 4]
add ecx, 8
mov dword [ebp - 0xd8], ecx
jmp 0x6a0732
mov eax, dword [ebp - 0xd8]
add eax, 4
mov dword [ebp - 0xd8], eax
mov eax, dword [eax - 4]
xor edx, edx
mov ecx, dword [ebp - 0xdc]
push ebx
push ecx
mov ecx, dword [ebp - 0xfc]
push ecx
mov ecx, dword [ebp - 0xec]
push edi
push ecx
mov ecx, dword [ebp - 0xf4]
push ecx
mov ecx, dword [ebp - 0xe8]
push esi
push edx
push eax
call fcn.0069fd10
add esp, 0x24
jmp case.0x6a048b.38
test cl, cl
jne 0x6a0770
test ebx, ebx
jne 0x6a0770
mov edi, eax
cmp byte [ebp - 0xd1], 0
je 0x6a0789
mov edx, dword [ebp - 0xe0]
movzx eax, byte [ebp + edx*8 - 0xd0]
jmp 0x6a079c
mov eax, dword [ebp - 0xd8]
add eax, 4
mov dword [ebp - 0xd8], eax
movzx eax, byte [eax - 4]
mov ecx, dword [ebp - 0xec]
push ecx
push eax
mov eax, dword [ebp - 0xe8]
mov ecx, edi
call fcn.0069ff10
add esp, 8
jmp case.0x6a048b.38
test cl, cl
jne 0x6a07cb
test ebx, ebx
je 0x6a07c9
mov dword [ebp - 0xdc], eax
jmp 0x6a07cb
mov edi, eax
cmp byte [ebp - 0xd1], 0
je 0x6a07e3
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp + edx*8 - 0xd0]
jmp 0x6a07f5
mov eax, dword [ebp - 0xd8]
add eax, 4
mov dword [ebp - 0xd8], eax
mov eax, dword [eax - 4]
mov ecx, dword [ebp - 0xec]
push ebx
push ecx
mov ecx, dword [ebp - 0xdc]
push eax
mov eax, dword [ebp - 0xe8]
mov edx, edi
call fcn.0069fc00
add esp, 0xc
jmp case.0x6a048b.38
cmp byte [ebp - 0xd1], 0
je 0x6a0831
mov edx, dword [ebp - 0xe0]
mov eax, dword [ebp + edx*8 - 0xd0]
jmp 0x6a0843
mov eax, dword [ebp - 0xd8]
add eax, 4
mov dword [ebp - 0xd8], eax
mov eax, dword [eax - 4]
push eax
lea eax, [ebp - 0x44]
push 0x772d50
push eax
call dword [sym.imp.MSVCR100.dll_sprintf]
mov esi, dword [ebp - 0xe8]
lea ecx, [ebp - 0x44]
push ecx
call fcn.0069f990
add esp, 0x10
jmp case.0x6a048b.38
test cl, cl
jne 0x6a087c
test ebx, ebx
je 0x6a087a
mov dword [ebp - 0xdc], eax
jmp 0x6a087c
mov edi, eax
cmp byte [ebp - 0xd1], 0
je 0x6a0894
mov edx, dword [ebp - 0xe0]
fld qword [ebp + edx*8 - 0xd0]
jmp 0x6a08a5
mov eax, dword [ebp - 0xd8]
fld qword [eax]
add eax, 8
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xfc]
mov edx, dword [ebp - 0xec]
push eax
mov eax, dword [ebp - 0xf4]
push ebx
push ecx
mov ecx, dword [ebp - 0xdc]
push edx
push eax
push esi
sub esp, 8
mov edx, edi
fstp qword [esp]
call fcn.0069ffd0
add esp, 0x20
jmp case.0x6a048b.38
mov esi, dword [ebp - 0xe8]
mov ecx, dword [esi + 8]
test ecx, ecx
je 0x6a0912
mov eax, dword [esi]
cmp eax, ecx
jb 0x6a0912
mov edx, dword [esi + 0xc]
test edx, edx
je case.0x6a048b.38
mov ecx, dword [esi + 4]
sub eax, ecx
je 0x6a090d
push edx
push eax
push 1
push ecx
call dword [sym.imp.MSVCR100.dll_fwrite]
add esp, 0x10
add dword [esi + 0x10], eax
mov ecx, dword [esi + 4]
mov dword [esi], ecx
mov edx, dword [esi]
mov byte [edx], 0x25
inc dword [esi]
mov eax, dword [ebp - 0xe4]
movsx ebx, byte [eax]
test ebx, ebx
jne 0x6a03d0
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
xor eax, eax
pop ebx
call fcn.006a8ca2
mov esp, ebp
pop ebp
ret