Function at 0x1009f110
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1024bf76
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x28
push ebx
push esi
mov esi, ecx
mov dword [ebp - 0x24], 0
push edi
mov dword [ebp - 0x20], 7
mov eax, dword [esi + 0x2678]
lea edi, [esi + 0x2418]
mov ecx, edi
lea eax, [eax + eax*4]
lea ebx, [eax*8 + 0x2678]
xor eax, eax
mov word [ebp - 0x34], ax
lea edx, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1009f160
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x34]
call fcn.1001a600
push 0
lea eax, [ebp - 0x34]
mov dword [ebp - 4], 0
push ebx
push eax
call sym.WMCommon.dll_public:_static_bool___cdecl_WM::GMFileSystemUtils::CreateEmptyFile_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___long_long___int64__
add esp, 0xc
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x34]
mov bl, al
call fcn.1001a5a0
test bl, bl
jne 0x1009f1b7
pop edi
pop esi
xor al, al
pop ebx
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov dword [ebp - 0x1c], vtable.WM::GMFile.0
mov dword [ebp - 0x18], 0xffffffff
mov ecx, edi
mov dword [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
mov word [ebp - 0x34], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1009f1e5
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x34]
call fcn.1001a600
push 0x80
push 3
push 3
push 0x40000000
lea eax, [ebp - 0x34]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x1c]
call sym.WMCommon.dll_public:_bool___thiscall_WM::GMFile::Create_class_std::basic_string_wchar_t__struct_std::char_traits_wchar_t___class_std::allocator_wchar_t___const___unsigned_int__unsigned_int__unsigned_int__unsigned_int_
lea ecx, [ebp - 0x34]
mov byte [ebp - 4], 1
mov bl, al
call fcn.1001a5a0
test bl, bl
je 0x1009f310
lea ecx, [esi + 8]
test ecx, ecx
je 0x1009f310
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
je 0x1009f313
push 0
lea edx, [ebp - 0x10]
push edx
push 0x2678
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1009f310
cmp dword [ebp - 0x10], 0x2678
jne 0x1009f310
mov eax, dword [esi + 0x268c]
test eax, eax
je 0x1009f28e
push eax
call fcn.1006e708
add esp, 4
mov dword [esi + 0x268c], 0
mov eax, dword [esi + 0x2678]
xor ecx, ecx
mov edx, 0x28
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1006e70d
xor edi, edi
mov dword [esi + 0x268c], eax
add esp, 4
cmp dword [esi + 0x2678], edi
jbe 0x1009f309
xor ebx, ebx
nop
mov eax, dword [esi + 0x268c]
mov ecx, esi
add eax, ebx
push eax
push edi
call sym.WMCommon.dll_private:_void___thiscall_WM::GMHttpDownload::GetBlock_unsigned_int__struct_WM::GMHttpDownload::GMHttpDownloadFileBlock__
mov ecx, dword [esi + 0x268c]
add ecx, ebx
je 0x1009f310
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffffff
je 0x1009f313
push 0
lea edx, [ebp - 0x14]
push edx
push 0x28
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1009f310
cmp dword [ebp - 0x14], 0x28
jne 0x1009f310
inc edi
add ebx, 0x28
cmp edi, dword [esi + 0x2678]
jb 0x1009f2c0
mov eax, dword [ebp - 0x18]
mov bl, 1
jmp 0x1009f315
mov eax, dword [ebp - 0x18]
xor bl, bl
mov dword [ebp - 0x1c], vtable.WM::GMFile.0
cmp eax, 0xffffffff
je 0x1009f328
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0xc]
mov al, bl
pop edi
pop esi
pop ebx
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret