Function at 0x40d960
Capabilities:
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x652cb5
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xd4
mov eax, dword [0x6ee06c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebx + 8]
lea eax, [ecx + 0x50]
mov dword [ebp - 4], 0
push eax
lea ecx, [ebp - 0x5c]
call fcn.0040fc30
push 0x3a8
sub esp, 0x18
mov byte [ebp - 4], 1
lea eax, [ebx + 0xc]
mov ecx, esp
push eax
call fcn.0040abe0
lea eax, [ebp - 0xdc]
push eax
call fcn.004c0344
add esp, 0x20
mov byte [ebp - 4], 2
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x40d9ea
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
lea ecx, [ebp - 0x5c]
call fcn.0040ffa0
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0xc8]
cmp edx, 8
jb 0x40da3a
mov ecx, dword [ebp - 0xdc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40da30
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40debc
push edx
push ecx
call fcn.00424265
add esp, 8
push 4
push str..dat
lea ecx, [ebp - 0x5c]
call fcn.0040ffa0
lea eax, [ebx + 0xc]
push eax
lea ecx, [ebp - 0x44]
call fcn.0040abe0
push esi
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 3
call fcn.0040a920
cmp dword [ebp - 0x30], 0x10
lea eax, [ebp - 0x44]
mov ecx, dword [ebp - 0x34]
xorps xmm0, xmm0
cmovae eax, dword [ebp - 0x44]
mov byte [ebp - 0x18], 0
movups xmmword [ebp - 0x28], xmm0
test ecx, ecx
je 0x40dabe
test eax, eax
je 0x40da9c
cmp ecx, 0x11
ja 0x40da98
push ecx
push eax
lea eax, [ebp - 0x28]
push eax
call fcn.004e7fd0
add esp, 0xc
jmp 0x40dabe
test eax, eax
jne 0x40daa9
call fcn.004efd9f
mov dword [eax], 0x16
jmp 0x40dab9
cmp ecx, 0x11
jbe 0x40dabe
call fcn.004efd9f
mov dword [eax], 0x22
call fcn.004eb7e6
push 0x2b4
call fcn.0042429f
add esp, 4
mov dword [ebp - 0x2c], eax
lea ecx, [ebp - 0x28]
push ecx
mov ecx, eax
call fcn.0040c6d0
mov dword [ebp - 0x2c], eax
push 0x38
lea eax, [ebp - 0xc4]
mov byte [ebp - 4], 4
push 0
push eax
call fcn.004e7e00
add esp, 0xc
lea ecx, [ebp - 0xc4]
call fcn.004c18a8
mov byte [ebp - 4], 5
lea ecx, [ebp - 0xdc]
push 5
push str.token
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
call fcn.0040ace0
lea eax, [ebx + 0x24]
mov byte [ebp - 4], 6
push eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c19d6
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40db87
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40db7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dec1
push edx
push ecx
call fcn.00424265
add esp, 8
push 3
push 0x6d8f68
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
call fcn.0040ace0
lea eax, [ebx + 0xc]
mov byte [ebp - 4], 7
push eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c19d6
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40dc0c
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dc02
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dec6
push edx
push ecx
call fcn.00424265
add esp, 8
push 5
push str.count
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0xf
mov byte [ebp - 0xdc], 0
call fcn.0040ace0
lea eax, [ebx + 0x3c]
mov byte [ebp - 4], 8
push eax
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c19d6
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40dc91
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dc87
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40decb
push edx
push ecx
call fcn.00424265
add esp, 8
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0xc4]
call fcn.004c1d5d
sub esp, 0x18
mov byte [ebp - 4], 9
lea eax, [ebp - 0x8c]
mov ecx, esp
push eax
call fcn.0040abe0
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x2c]
call fcn.0040c110
push eax
lea ecx, [ebp - 0x8c]
call fcn.0040aac0
mov edx, dword [ebp - 0xc8]
cmp edx, 0x10
jb 0x40dd0d
mov ecx, dword [ebp - 0xdc]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dd03
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ded0
push edx
push ecx
call fcn.00424265
add esp, 8
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x74]
call fcn.0040d530
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push 0x6d8f74
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.004f0d83
cmp dword [ebp - 0x60], 0x10
lea ecx, [ebp - 0x74]
mov esi, eax
cmovae ecx, dword [ebp - 0x74]
push esi
push dword [ebp - 0x64]
push 1
push ecx
call fcn.004efcce
push esi
call fcn.004ef993
mov edx, dword [ebp - 0x60]
add esp, 0x1c
cmp edx, 0x10
jb 0x40dd87
mov ecx, dword [ebp - 0x74]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40dd7d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40ded5
push edx
push ecx
call fcn.00424265
add esp, 8
mov byte [ebp - 4], 5
mov edx, dword [ebp - 0x78]
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
cmp edx, 0x10
jb 0x40ddd4
mov ecx, dword [ebp - 0x8c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40ddca
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40deda
push edx
push ecx
call fcn.00424265
add esp, 8
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.004c1959
mov byte [ebp - 4], 0xa
mov ecx, dword [ebp - 0x2c]
test ecx, ecx
je 0x40de05
mov eax, dword [ecx]
push 1
call dword [eax]
mov edx, dword [ebp - 0x30]
cmp edx, 0x10
jb 0x40de39
mov ecx, dword [ebp - 0x44]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x40de2f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dedf
push edx
push ecx
call fcn.00424265
add esp, 8
mov edx, dword [ebp - 0x48]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0xf
mov byte [ebp - 0x44], 0
cmp edx, 8
jb 0x40de81
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x40de77
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40dee4
push edx
push ecx
call fcn.00424265
add esp, 8
xor eax, eax
mov dword [ebp - 0x4c], 0
lea ecx, [ebx + 0xc]
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
call fcn.0040def0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.00423c15
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x4c
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
call fcn.004eb7f6
int3