Function at 0xa09c40
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push edi
push esi
push ebx
sub esp, 0x4c
mov esi, dword [ebp + 8]
mov dword [ebp - 0x30], 0
mov ecx, dword [esi + 0x44]
mov edx, dword [esi + 0x68]
mov dword [ebp - 0x34], ecx
sub ecx, 1
sete al
movzx eax, al
sub eax, 1
and eax, dword [esi + 0x4c]
cmp dword [esi + 0x74], 1
mov dword [ebp - 0x2c], edx
je 0xa0a9df
mov edi, dword [esi + 0x50]
test edi, edi
je 0xa0a06a
cmp eax, 3
sete cl
movzx eax, cl
shl eax, 2
mov dword [ebp - 0x24], eax
mov dword [esp + 4], 8
mov dword [esp], esi
call fcn.009fe4d0
cmp dword [ebp - 0x34], 1
mov dword [0xf8c6a0], eax
je 0xa0a705
mov dword [esp + 4], 2
mov dword [esp], esi
call fcn.009fe540
mov edx, dword [ebp - 0x34]
test edx, edx
mov dword [0xf8c6a4], eax
jle 0xa0aa07
mov eax, dword [sym.imp.msvcrt.dll__iob]
xor edi, edi
mov dword [ebp - 0x20], 0
add eax, 0x40
mov dword [ebp - 0x38], eax
jmp 0xa09ee7
mov dword [esp + 4], 2
mov dword [esp], esi
call fcn.009fe540
mov ebx, dword [esi + 0x5038]
mov dword [edi + 0xf8c6b8], eax
mov ecx, dword [esi + 0x5034]
movzx eax, byte [ebx]
shl eax, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
and dword [esi + 0x5034], 7
add dword [esi + 0x5038], ecx
shr al, 7
movzx edx, al
mov dword [edi + 0xf8c6bc], edx
mov dword [esp + 4], 5
mov dword [esp], esi
call fcn.009fe540
mov dword [esp + 4], 5
mov dword [esp], esi
mov dword [edi + 0xf8c6c0], eax
call fcn.009fe540
mov dword [edi + 0xf8c6c8], 0
mov dword [esp + 4], 3
mov dword [esp], esi
mov dword [edi + 0xf8c6c4], eax
call fcn.009fe540
mov ecx, dword [0xf2a240]
lea edx, [eax*8]
shl eax, 5
add eax, dword [edi + 0xf8c70c]
test ecx, ecx
mov dword [edi + 0xf8c700], eax
je 0xa09dac
mov ebx, dword [ebp - 0x20]
shr edx, 3
lea eax, [ebx + ebx*2]
mov dword [ecx + eax*4 + 0x291a8], edx
mov dword [esp + 4], 3
mov dword [esp], esi
call fcn.009fe540
mov ecx, dword [0xf2a240]
lea edx, [eax*8]
shl eax, 5
add eax, dword [edi + 0xf8c70c]
test ecx, ecx
mov dword [edi + 0xf8c704], eax
je 0xa09dec
mov ebx, dword [ebp - 0x20]
shr edx, 3
lea eax, [ebx + ebx*2]
mov dword [ecx + eax*4 + 0x291ac], edx
mov dword [esp + 4], 3
mov dword [esp], esi
call fcn.009fe540
mov ecx, dword [0xf2a240]
lea edx, [eax*8]
shl eax, 5
add eax, dword [edi + 0xf8c70c]
test ecx, ecx
mov dword [edi + 0xf8c708], eax
je 0xa09e2c
mov ebx, dword [ebp - 0x20]
shr edx, 3
lea eax, [ebx + ebx*2]
mov dword [ecx + eax*4 + 0x291b0], edx
mov eax, dword [edi + 0xf8c6b8]
test eax, eax
je 0xa0a81b
cmp eax, 2
je 0xa0a853
xor eax, eax
cmp dword [ebp - 0x2c], 8
sete al
sub eax, 1
and eax, 0xffffffe5
add eax, 0x36
mov dword [edi + 0xf8c6ec], eax
mov dword [edi + 0xf8c6f0], 0x120
mov ebx, dword [esi + 0x5038]
mov ecx, dword [esi + 0x5034]
movzx edx, byte [ebx]
shl edx, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
add dword [esi + 0x5038], ecx
mov ebx, dword [esi + 0x5038]
shr dl, 7
and dword [esi + 0x5034], 7
movzx eax, dl
mov dword [edi + 0xf8c6f8], eax
mov ecx, dword [esi + 0x5034]
movzx edx, byte [ebx]
add dword [ebp - 0x20], 1
mov eax, dword [ebp - 0x20]
shl edx, cl
add ecx, 1
shr dl, 7
mov dword [esi + 0x5034], ecx
sar ecx, 3
add dword [esi + 0x5038], ecx
movzx ecx, dl
and dword [esi + 0x5034], 7
mov dword [edi + 0xf8c6fc], ecx
add edi, 0xd0
cmp dword [ebp - 0x34], eax
jle 0xa0aa07
mov dword [esp + 4], 0xc
mov dword [esp], esi
call fcn.009fe4d0
mov dword [esp + 4], 9
mov dword [esp], esi
mov dword [edi + 0xf8c6ac], eax
call fcn.009fe540
cmp eax, 0x120
mov dword [edi + 0xf8c6b0], eax
ja 0xa0a740
mov dword [esp + 4], 8
mov dword [esp], esi
call fcn.009fe540
mov edx, eax
mov eax, dword [ebp - 0x24]
sub eax, edx
lea ecx, [eax*4 + 0xf3a730]
mov eax, dword [0xf2a240]
mov dword [edi + 0xf8c70c], ecx
test eax, eax
je 0xa09f55
mov ebx, dword [ebp - 0x20]
mov dword [eax + ebx*4 + 0x29188], edx
mov edx, dword [ebp - 0x30]
test edx, edx
je 0xa09f63
add dword [edi + 0xf8c70c], 8
mov dword [esp + 4], 9
mov dword [esp], esi
call fcn.009fe4d0
mov ebx, dword [esi + 0x5038]
mov dword [edi + 0xf8c6b4], eax
mov ecx, dword [esi + 0x5034]
movzx eax, byte [ebx]
shl eax, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
and dword [esi + 0x5034], 7
add dword [esi + 0x5038], ecx
test al, al
js 0xa09cea
mov dword [esp + 4], 5
mov dword [esp], esi
call fcn.009fe540
imul ebx, dword [ebp - 0x20], 0xd0
mov dword [esp + 4], 5
mov dword [esp], esi
mov dword [ebx + 0xf8c6c0], eax
call fcn.009fe540
mov dword [esp + 4], 5
mov dword [esp], esi
mov dword [edi + 0xf8c6c4], eax
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [edi + 0xf8c6c8], eax
call fcn.009fe540
mov dword [esp + 4], 3
mov dword [esp], esi
mov ebx, eax
call fcn.009fe540
mov edx, dword [ebp - 0x2c]
add ebx, 1
mov dword [edi + 0xf8c6b8], 0
mov dword [edi + 0xf8c6bc], 0
lea ecx, [edx + edx*8]
shl ecx, 3
lea edx, [ecx + ebx]
add ecx, eax
lea ebx, [ebx + ecx + 1]
movzx edx, word [edx + edx + 0xc01bd0]
movzx eax, word [ebx + ebx + 0xc01bd0]
sar dx, 1
sar ax, 1
movsx edx, dx
cwde
mov dword [edi + 0xf8c6ec], edx
mov dword [edi + 0xf8c6f0], eax
jmp 0xa09e65
cmp eax, 3
sete al
movzx edi, al
shl edi, 2
mov dword [ebp - 0x1c], edi
mov dword [esp + 4], 9
mov dword [esp], esi
call fcn.009fe4d0
cmp dword [ebp - 0x34], 1
mov dword [0xf8c6a0], eax
je 0xa0a9ed
mov dword [esp + 4], 3
mov dword [esp], esi
call fcn.009fe540
mov edx, dword [ebp - 0x34]
test edx, edx
mov dword [0xf8c6a4], eax
jle 0xa0a3a4
mov edi, dword [ebp - 0x34]
mov dword [0xf8c6a8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
lea ebx, [edi - 1]
mov edi, 0xd0
and ebx, 7
cmp dword [ebp - 0x34], 1
mov dword [ebp - 0x14], 1
mov dword [0xf8c710], eax
jle 0xa0a3a4
test ebx, ebx
je 0xa0a264
cmp ebx, 1
je 0xa0a22e
cmp ebx, 2
je 0xa0a204
cmp ebx, 3
je 0xa0a1da
cmp ebx, 4
lea esi, [esi]
je 0xa0a1b0
cmp ebx, 5
je 0xa0a186
cmp ebx, 6
nop
je 0xa0a15c
mov dword [0xf8c778], 0xffffffff
mov di, 0x1a0
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
mov dword [ebp - 0x14], 2
mov dword [0xf8c7e0], eax
mov dword [edi + 0xf8c6a8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
add dword [ebp - 0x14], 1
mov dword [edi + 0xf8c710], eax
add edi, 0xd0
mov dword [edi + 0xf8c6a8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
add dword [ebp - 0x14], 1
mov dword [edi + 0xf8c710], eax
add edi, 0xd0
mov dword [edi + 0xf8c6a8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
add dword [ebp - 0x14], 1
mov dword [edi + 0xf8c710], eax
add edi, 0xd0
mov dword [edi + 0xf8c6a8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
add dword [ebp - 0x14], 1
mov dword [edi + 0xf8c710], eax
add edi, 0xd0
mov dword [edi + 0xf8c6a8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
add dword [ebp - 0x14], 1
mov dword [edi + 0xf8c710], eax
add edi, 0xd0
mov dword [edi + 0xf8c6a8], 0xffffffff
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
add dword [ebp - 0x14], 1
mov ebx, dword [ebp - 0x14]
mov dword [edi + 0xf8c710], eax
add edi, 0xd0
cmp dword [ebp - 0x34], ebx
jle 0xa0a3a4
mov dword [edi + 0xf8c6a8], 0xffffffff
lea ebx, [edi + 0xd0]
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [edi + 0xf8c710], eax
mov dword [ebx + 0xf8c6a8], 0xffffffff
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [ebx + 0xf8c710], eax
lea ebx, [edi + 0x1a0]
mov dword [ebx + 0xf8c6a8], 0xffffffff
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [ebx + 0xf8c710], eax
lea ebx, [edi + 0x270]
mov dword [ebx + 0xf8c6a8], 0xffffffff
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [ebx + 0xf8c710], eax
lea ebx, [edi + 0x340]
mov dword [ebx + 0xf8c6a8], 0xffffffff
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [ebx + 0xf8c710], eax
lea ebx, [edi + 0x410]
mov dword [ebx + 0xf8c6a8], 0xffffffff
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [ebx + 0xf8c710], eax
lea ebx, [edi + 0x4e0]
mov dword [ebx + 0xf8c6a8], 0xffffffff
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [ebx + 0xf8c710], eax
lea ebx, [edi + 0x5b0]
add edi, 0x680
mov dword [ebx + 0xf8c6a8], 0xffffffff
call fcn.009fe540
add dword [ebp - 0x14], 8
mov dword [ebx + 0xf8c710], eax
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x34], eax
jg 0xa0a264
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x18], 0
lea ecx, [ebx + ebx*8]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x34]
cmp dword [ebp - 0x10], edx
jl 0xa0a3e0
add dword [ebp - 0x18], 1
cmp dword [ebp - 0x18], 1
jg 0xa0a89b
mov edx, dword [ebp - 0x34]
mov dword [ebp - 0x10], 0
cmp dword [ebp - 0x10], edx
jge 0xa0a3c3
mov dword [esp + 4], 0xc
mov dword [esp], esi
call fcn.009fe4d0
imul ecx, dword [ebp - 0x18], 0x68
imul edx, dword [ebp - 0x10], 0xd0
mov dword [esp + 4], 9
mov dword [esp], esi
lea edi, [ecx + edx]
mov dword [edi + 0xf8c6ac], eax
call fcn.009fe540
cmp eax, 0x120
mov dword [edi + 0xf8c6b0], eax
ja 0xa0a870
mov dword [esp + 4], 8
mov dword [esp], esi
call fcn.009fe540
mov edx, dword [ebp - 0x1c]
sub edx, eax
mov ecx, eax
lea ebx, [edx*4 + 0xf3a730]
mov edx, dword [0xf2a240]
mov dword [edi + 0xf8c70c], ebx
test edx, edx
je 0xa0a466
mov eax, dword [ebp - 0x18]
mov ebx, dword [ebp - 0x10]
lea eax, [ebx + eax*2]
mov dword [ebp - 0x40], eax
mov dword [edx + eax*4 + 0x29188], ecx
mov ecx, dword [ebp - 0x30]
test ecx, ecx
je 0xa0a474
add dword [edi + 0xf8c70c], 8
mov dword [esp + 4], 4
mov dword [esp], esi
call fcn.009fe540
mov dword [edi + 0xf8c6b4], eax
mov eax, dword [esi + 0x5038]
mov ecx, dword [esi + 0x5034]
movzx edx, byte [eax]
shl edx, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
and dword [esi + 0x5034], 7
add dword [esi + 0x5038], ecx
test dl, dl
jns 0xa0a766
mov dword [esp + 4], 2
mov dword [esp], esi
call fcn.009fe540
mov dword [edi + 0xf8c6b8], eax
mov eax, dword [esi + 0x5038]
mov ecx, dword [esi + 0x5034]
movzx edx, byte [eax]
shl edx, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
and dword [esi + 0x5034], 7
add dword [esi + 0x5038], ecx
shr dl, 7
movzx ebx, dl
mov dword [edi + 0xf8c6bc], ebx
mov dword [esp + 4], 5
mov dword [esp], esi
call fcn.009fe540
mov dword [esp + 4], 5
mov dword [esp], esi
mov dword [edi + 0xf8c6c0], eax
call fcn.009fe540
mov dword [edi + 0xf8c6c8], 0
mov dword [esp + 4], 3
mov dword [esp], esi
mov dword [edi + 0xf8c6c4], eax
call fcn.009fe540
mov ebx, dword [0xf2a240]
lea ecx, [eax*8]
shl eax, 5
add eax, dword [edi + 0xf8c70c]
test ebx, ebx
mov dword [edi + 0xf8c700], eax
je 0xa0a58d
mov eax, dword [ebp - 0x10]
shr ecx, 3
lea edx, [eax + eax*2]
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*2]
mov dword [ebp - 0x40], eax
shl eax, 3
lea edx, [eax + edx*4]
mov dword [ebx + edx + 0x291a8], ecx
mov dword [esp + 4], 3
mov dword [esp], esi
call fcn.009fe540
mov ebx, dword [0xf2a240]
lea ecx, [eax*8]
shl eax, 5
add eax, dword [edi + 0xf8c70c]
test ebx, ebx
mov dword [edi + 0xf8c704], eax
je 0xa0a5dc
mov eax, dword [ebp - 0x10]
shr ecx, 3
lea edx, [eax + eax*2]
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*2]
mov dword [ebp - 0x40], eax
shl eax, 3
lea edx, [eax + edx*4]
mov dword [ebx + edx + 0x291ac], ecx
mov dword [esp + 4], 3
mov dword [esp], esi
call fcn.009fe540
mov ebx, dword [0xf2a240]
lea ecx, [eax*8]
shl eax, 5
add eax, dword [edi + 0xf8c70c]
test ebx, ebx
mov dword [edi + 0xf8c708], eax
je 0xa0a62b
mov eax, dword [ebp - 0x10]
shr ecx, 3
lea edx, [eax + eax*2]
mov eax, dword [ebp - 0x18]
lea eax, [eax + eax*2]
mov dword [ebp - 0x40], eax
shl eax, 3
lea edx, [eax + edx*4]
mov dword [ebx + edx + 0x291b0], ecx
mov ebx, dword [edi + 0xf8c6b8]
test ebx, ebx
je 0xa0a9b1
mov dword [edi + 0xf8c6ec], 0x12
mov dword [edi + 0xf8c6f0], 0x120
mov edi, dword [esi + 0x5038]
mov ecx, dword [esi + 0x5034]
movzx ebx, byte [edi]
imul edi, dword [ebp - 0x18], 0x68
shl ebx, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
add dword [esi + 0x5038], ecx
imul ecx, dword [ebp - 0x10], 0xd0
mov edx, dword [esi + 0x5038]
shr bl, 7
and dword [esi + 0x5034], 7
movzx eax, bl
add edi, ecx
mov dword [edi + 0xf8c6f4], eax
movzx ebx, byte [edx]
mov ecx, dword [esi + 0x5034]
shl ebx, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
add dword [esi + 0x5038], ecx
mov edx, dword [esi + 0x5038]
shr bl, 7
and dword [esi + 0x5034], 7
movzx eax, bl
mov dword [edi + 0xf8c6f8], eax
mov ecx, dword [esi + 0x5034]
movzx ebx, byte [edx]
add dword [ebp - 0x10], 1
shl ebx, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
and dword [esi + 0x5034], 7
add dword [esi + 0x5038], ecx
shr bl, 7
movzx eax, bl
mov dword [edi + 0xf8c6fc], eax
jmp 0xa0a3bb
mov edi, dword [esi + 0x5038]
mov ecx, dword [esi + 0x5034]
movzx ebx, byte [edi]
shl ebx, cl
add ecx, 1
mov dword [esi + 0x5034], ecx
sar ecx, 3
and dword [esi + 0x5034], 7
add dword [esi + 0x5038], ecx
shr bl, 7
movzx edx, bl
mov dword [0xf8c6a4], edx
jmp 0xa09cd1
mov ebx, dword [ebp - 0x38]
mov dword [esp + 8], eax
mov dword [esp + 4], 0xc01b7d
mov dword [esp], ebx
call sub.msvcrt.dll_fprintf
mov dword [edi + 0xf8c6b0], 0x120
jmp 0xa09f1e
mov dword [esp + 4], 5
mov dword [esp], esi
call fcn.009fe540
mov dword [esp + 4], 5
mov dword [esp], esi
mov dword [edi + 0xf8c6c0], eax
call fcn.009fe540
mov dword [esp + 4], 5
mov dword [esp], esi
mov dword [edi + 0xf8c6c4], eax
call fcn.009fe540
mov dword [esp + 4], 4
mov dword [esp], esi
mov dword [edi + 0xf8c6c8], eax
call fcn.009fe540
mov dword [esp + 4], 3
mov dword [esp], esi
mov ebx, eax
call fcn.009fe540
mov ecx, dword [ebp - 0x3c]
add ebx, 1
mov dword [edi + 0xf8c6b8], 0
mov dword [edi + 0xf8c6bc], 0
shl ecx, 3
lea edx, [ecx + ebx]
movzx edx, word [edx + edx + 0xc01bd0]
add ecx, eax
sar dx, 1
movsx edx, dx
mov dword [edi + 0xf8c6ec], edx
lea edx, [ebx + ecx + 1]
movzx eax, word [edx + edx + 0xc01bd0]
sar ax, 1
cwde
mov dword [edi + 0xf8c6f0], eax
jmp 0xa0a64d
mov edx, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 8], 0x36
mov dword [esp + 4], 1
mov dword [esp], 0xc01b98
add edx, 0x40
mov dword [esp + 0xc], edx
call sub.msvcrt.dll_fwrite
mov eax, dword [edi + 0xf8c6b8]
cmp eax, 2
jne 0xa09e43
xor ecx, ecx
cmp dword [ebp - 0x2c], 8
sete cl
sub ecx, 1
and ecx, 0xffffffee
add ecx, 0x24
mov dword [edi + 0xf8c6ec], ecx
jmp 0xa09e5b
mov dword [esp + 8], eax
mov eax, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 4], 0xc01b7d
add eax, 0x40
mov dword [esp], eax
call sub.msvcrt.dll_fprintf
mov dword [edi + 0xf8c6b0], 0x120
jmp 0xa0a425
mov dword [ebp - 0x28], 2
xor ebx, ebx
xor edi, edi
mov esi, dword [ebp - 0x34]
test esi, esi
jle 0xa0a991
imul ecx, edi, 0x68
mov edx, dword [ebp - 0x34]
mov eax, 1
lea esi, [ecx + 0xf8c6a0]
lea ecx, [edx - 1]
and ecx, 7
add ebx, dword [esi + 0xc]
cmp eax, dword [ebp - 0x34]
lea edx, [esi + 0xdc]
je 0xa0a991
test ecx, ecx
je 0xa0a957
cmp ecx, 1
je 0xa0a947
cmp ecx, 2
je 0xa0a93c
cmp ecx, 3
nop
lea esi, [esi]
je 0xa0a931
cmp ecx, 4
je 0xa0a926
cmp ecx, 5
je 0xa0a91b
cmp ecx, 6
nop
je 0xa0a910
add ebx, dword [esi + 0xdc]
mov al, 2
lea edx, [esi + 0x1ac]
add ebx, dword [edx]
add eax, 1
add edx, 0xd0
add ebx, dword [edx]
add eax, 1
add edx, 0xd0
add ebx, dword [edx]
add eax, 1
add edx, 0xd0
add ebx, dword [edx]
add eax, 1
add edx, 0xd0
add ebx, dword [edx]
add eax, 1
add edx, 0xd0
add ebx, dword [edx]
add eax, 1
add edx, 0xd0
cmp eax, dword [ebp - 0x34]
je 0xa0a991
add ebx, dword [edx]
add eax, 8
add ebx, dword [edx + 0xd0]
add ebx, dword [edx + 0x1a0]
add ebx, dword [edx + 0x270]
add ebx, dword [edx + 0x340]
add ebx, dword [edx + 0x410]
add ebx, dword [edx + 0x4e0]
add ebx, dword [edx + 0x5b0]
add edx, 0x680
cmp eax, dword [ebp - 0x34]
jne 0xa0a957
add edi, 1
cmp dword [ebp - 0x28], edi
jg 0xa0a8a6
mov eax, dword [0xf8c6a0]
add esp, 0x4c
shl eax, 3
sub ebx, eax
mov eax, ebx
pop ebx
pop esi
pop edi
pop ebp
ret
mov ecx, dword [sym.imp.msvcrt.dll__iob]
mov dword [esp + 8], 0x36
mov dword [esp + 4], 1
mov dword [esp], 0xc01b98
add ecx, 0x40
mov dword [esp + 0xc], ecx
call sub.msvcrt.dll_fwrite
jmp 0xa0a639
mov ebx, dword [esi + 0x78]
and ebx, 2
mov dword [ebp - 0x30], ebx
jmp 0xa09c78
mov dword [esp + 4], 5
mov dword [esp], esi
call fcn.009fe540
mov dword [0xf8c6a4], eax
jmp 0xa0a0b8
mov dword [ebp - 0x28], 1
jmp 0xa0a8a2