Function at 0xf11ed0
Capabilities:
Write file on windows

Disassembly:
push ebp
push edi
push esi
push ebx
sub esp, 0x4c
mov edi, dword [esp + 0x60]
mov ebp, dword [esp + 0x70]
mov esi, dword [esp + 0x74]
test byte [esi + 0x3c], 0x40
je 0xf11f20
mov eax, dword [esi + 8]
mov eax, dword [eax + 0x30]
test eax, eax
je 0xf11f20
mov dword [esp + 0x14], esi
mov dword [esp + 0x10], ebp
mov edx, dword [esp + 0x6c]
mov dword [esp + 0xc], edx
mov ecx, dword [esp + 0x68]
mov dword [esp + 8], ecx
mov edx, dword [esp + 0x64]
mov dword [esp + 4], edx
mov dword [esp], edi
call eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
mov dword [esp], esi
call fcn.00f01a20
cmp ebp, eax
jne 0xf11fd0
mov dword [esp + 8], 0xac
mov dword [esp + 4], str.rsa_sign.c
mov dword [esp], ebp
call fcn.00ef5760
mov ebx, eax
test eax, eax
je 0xf12140
cmp edi, 0x72
je 0xf12010
mov dword [esp + 0x10], 1
mov dword [esp + 0xc], esi
mov dword [esp + 8], ebx
mov ecx, dword [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp], ebp
call fcn.00f01a90
mov esi, eax
test eax, eax
jle 0xf12090
cmp edi, 0x72
jne 0xf120a0
cmp eax, 0x24
je 0xf12120
mov dword [esp + 0x10], 0xbd
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x68
mov dword [esp + 4], 0x91
mov dword [esp], 4
call fcn.00eefad0
xor eax, eax
jmp 0xf12049
mov dword [esp + 0x10], 0x9e
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x77
mov dword [esp + 4], 0x91
mov dword [esp], 4
call fcn.00eefad0
xor eax, eax
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
cmp dword [esp + 0x68], 0x24
je 0xf11f5b
mov dword [esp + 0x10], 0xb3
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x83
mov dword [esp + 4], 0x91
mov dword [esp], 4
call fcn.00eefad0
xor eax, eax
test ebx, ebx
je 0xf11f18
jmp 0xf12060
mov dword [esp + 4], ebp
mov dword [esp], ebx
mov dword [esp + 0x2c], eax
call fcn.00f0b2a0
mov dword [esp], ebx
call fcn.00ef5c50
mov eax, dword [esp + 0x2c]
add esp, 0x4c
pop ebx
pop esi
pop edi
pop ebp
ret
xor eax, eax
jmp 0xf12049
mov dword [esp + 0x3c], ebx
mov dword [esp + 8], eax
lea eax, [esp + 0x3c]
mov dword [esp + 4], eax
mov dword [esp], 0
call fcn.00f52c00
mov edx, eax
test eax, eax
je 0xf12090
add esi, ebx
cmp dword [esp + 0x3c], esi
je 0xf12180
mov dword [esp + 0x10], 0xc8
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x68
mov dword [esp + 4], 0x91
mov dword [esp], 4
mov dword [esp + 0x2c], edx
call fcn.00eefad0
xor eax, eax
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov dword [esp + 0x2c], eax
call fcn.00f52c80
mov eax, dword [esp + 0x2c]
jmp 0xf12060
mov ecx, 0x24
mov esi, ebx
mov edi, dword [esp + 0x64]
repe cmpsb byte [esi], byte es:[edi]
jne 0xf11f97
mov eax, 1
jmp 0xf12049
mov dword [esp + 0x10], 0xaf
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x41
mov dword [esp + 4], 0x91
mov dword [esp], 4
call fcn.00eefad0
xor eax, eax
jmp 0xf11f18
mov eax, dword [eax]
mov ecx, dword [eax + 4]
test ecx, ecx
je 0xf121a0
mov dword [esp], ecx
mov dword [esp + 0x2c], edx
call fcn.00f52ca0
cmp eax, 5
mov edx, dword [esp + 0x2c]
jne 0xf121f0
mov eax, dword [edx]
mov eax, dword [eax]
mov dword [esp], eax
mov dword [esp + 0x2c], edx
call fcn.00effd80
cmp edi, eax
mov edx, dword [esp + 0x2c]
je 0xf12242
cmp edi, 4
je 0xf1220d
cmp edi, 3
jne 0xf121c9
cmp eax, 7
je 0xf12212
mov dword [esp + 0x10], 0xec
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x64
jmp 0xf120e6
mov dword [esp + 0x10], 0xd1
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x68
jmp 0xf120e6
cmp eax, 8
jne 0xf121c9
mov eax, dword [sym.imp.msvcrt.dll__iob]
add eax, 0x40
mov dword [esp + 0xc], eax
mov dword [esp + 8], 0x34
mov dword [esp + 4], 1
mov dword [esp], str.signature_has_problems__re_make_with_post_SSLeay045_n
mov dword [esp + 0x2c], edx
call sub.msvcrt.dll_fwrite
mov edx, dword [esp + 0x2c]
mov eax, dword [edx + 4]
mov ecx, dword [esp + 0x68]
cmp ecx, dword [eax]
jne 0xf12264
mov edi, dword [eax + 8]
cmp ecx, ecx
mov esi, dword [esp + 0x64]
repe cmpsb byte [esi], byte es:[edi]
jne 0xf12264
mov eax, 1
jmp 0xf12104
mov dword [esp + 0x10], 0x102
mov dword [esp + 0xc], str.rsa_sign.c
mov dword [esp + 8], 0x68
jmp 0xf120e6