Function at 0x100059c0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100454ec
mov eax, dword fs:[0]
push eax
sub esp, 0x8b0
mov eax, dword [0x1005fa60]
xor eax, esp
mov dword [esp + 0x8a8], eax
push ebx
push esi
push edi
mov eax, dword [0x1005fa60]
xor eax, esp
push eax
lea eax, [esp + 0x8c0]
mov dword fs:[0], eax
mov edi, dword [ebp + 0xc]
lea ecx, [esp + 0x64]
xor eax, eax
mov dword [esp + 0x78], 7
push eax
push 0x100527d4
mov dword [esp + 0x7c], 0
mov word [esp + 0x6c], ax
call fcn.100085a0
mov ebx, dword [ebp + 8]
lea eax, [esp + 0x64]
push ebx
push eax
mov ecx, 0x100669b0
mov dword [esp + 0x8d0], 0
call fcn.10004560
test eax, eax
jne 0x10005a5d
push str.tGVX405OFrAJFP2fVXKDsdcGnu4r2mwdsDHbUQWi5_d4XYqXAIbEMcRb3EIox3rL18jc_tY
push eax
call fcn.10011650
add esp, 8
xor ebx, ebx
jmp 0x10005ada
xor eax, eax
mov dword [esp + 0x60], 7
push eax
push 0x100527d4
lea ecx, [esp + 0x54]
mov dword [esp + 0x64], 0
mov word [esp + 0x54], ax
call fcn.100085a0
push ebx
lea eax, [esp + 0x50]
mov byte [esp + 0x8cc], 1
push eax
mov ecx, 0x100669b0
call fcn.10004840
test eax, eax
jne 0x10005b15
push str.G9mDfW6lU1Fsp48noA0cz7LynNzdqsWa83eKI6LaKpQ0ExtzG7jJkIPFSky4MbUq1VnPtpkQ
push 0
call fcn.10011650
add esp, 8
xor ebx, ebx
cmp dword [esp + 0x60], 8
jb 0x10005ac3
push dword [esp + 0x4c]
call fcn.10018fac
add esp, 4
xor eax, eax
mov dword [esp + 0x60], 7
mov dword [esp + 0x5c], 0
mov word [esp + 0x4c], ax
cmp dword [esp + 0x78], 8
jb 0x10005aed
push dword [esp + 0x64]
call fcn.10018fac
add esp, 4
mov eax, ebx
mov ecx, dword [esp + 0x8c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x8a8]
xor ecx, esp
call fcn.1001811f
mov esp, ebp
pop ebp
ret 8
mov eax, dword [edi]
cmp eax, dword [edi + 4]
jne 0x10005b23
push str.JGd37C7D7ACXDthKLMGmvkEL26Uhg7c9TiaehHkhMv8hXdD8L7SLAOdtxV4IucM
jmp 0x10005aa4
push edi
push ebx
call fcn.10005620
test eax, eax
je 0x10005aae
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xffffffffffffffff
mov dword [ecx + 0x14], 7
mov dword [ecx + 0x10], 0
push eax
mov word [ecx], ax
lea eax, [esp + 0x6c]
push eax
call fcn.10007ef0
mov ecx, 0x10066a1c
call fcn.100026b0
test eax, eax
jne 0x10005b7c
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CqtnVGivNkDV4jC83wbmc8UdMtZp_jdfEhrmtbblVxuMRYyeN_CsTnHYGVh4EYY40QUf5778kiVtyqYPL0mIvUpKSqj
push 0
call fcn.10011650
add esp, 0xc
jmp 0x10005aae
mov ecx, 0x10066a1c
call fcn.100027a0
cmp dword [0x100669b0], 0
jne 0x10005bcc
sub esp, 0x18
lea eax, [esp + 0x7c]
mov ecx, esp
push eax
call fcn.10006320
call fcn.10004c40
test eax, eax
jne 0x10005bcc
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.P7CGL0yxhYCPHLt8SlzaV2pp8io1IBEYoOw12EUlHnw2x2CKdFjMe6v8HNQiJ42ju94WziC0Gdzer4HXefYMLaDEvh0xUJH8WY30kAsWgmLE_SbNfiqBqtL4E0s
push 0
call fcn.10011650
add esp, 0xc
mov ecx, 0x10066a1c
call fcn.100027f0
jmp 0x10005aae
mov esi, dword [edi]
xor ebx, ebx
mov edi, dword [edi + 4]
mov dword [esp + 0x14], ebx
cmp esi, edi
je 0x10005e41
nop
xor eax, eax
mov dword [esp + 0x44], 7
push 0xffffffffffffffff
push eax
push esi
lea ecx, [esp + 0x3c]
mov dword [esp + 0x4c], 0
mov word [esp + 0x3c], ax
call fcn.10007ef0
mov byte [esp + 0x8c8], 2
cmp dword [esp + 0x40], 0
jbe 0x10005dd0
xor eax, eax
push 0x7fe
push eax
mov word [esp + 0xbc], ax
lea eax, [esp + 0xbe]
push eax
call fcn.1001af60
add esp, 0xc
lea eax, [esp + 0x18]
push eax
call fcn.10004100
cmp dword [esp + 0x44], 8
lea ecx, [esp + 0x30]
cmovae ecx, dword [esp + 0x30]
cmp dword [eax + 0x14], 8
jb 0x10005c57
mov eax, dword [eax]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push eax
push dword [ebp + 8]
lea eax, [esp + 0xc4]
push str._d_d_s_s
push 0x400
push eax
call fcn.1001812e
add esp, 0x1c
lea ecx, [esp + 0x18]
call fcn.10006460
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [0x100669b0]
mov dword [esp + 0x10], eax
test eax, eax
je 0x10005ccb
push 0
lea eax, [esp + 0x4c]
push eax
lea eax, [esp + 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
push eax
lea eax, [esp + 0xc0]
push eax
push dword [esp + 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov ebx, eax
mov dword [esp + 0x14], ebx
test ebx, ebx
jne 0x10005d7f
cmp dword [esp + 0x44], 8
lea ebx, [esp + 0x30]
cmovae ebx, dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
push str.9Rh5FAH5hJOxKVeuRLuXIaTZBEPEUGp8K4YywXh4rug4VKVlx6DP6pdQfAdRVmL_4t1tw4eKSqFUvoELyaO7a4G2frGXk2vDEm4oRkQ52w0WeB3QSzKj0
push 0
call fcn.10011650
add esp, 0x10
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
sub esp, 0x18
lea eax, [esp + 0x7c]
mov ecx, esp
push eax
call fcn.10006320
call fcn.10004c40
test eax, eax
je 0x10005e05
mov ebx, dword [0x100669b0]
lea eax, [esp + 0x48]
push 0
push eax
lea eax, [esp + 0xbc]
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
add eax, eax
push eax
lea eax, [esp + 0xc0]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [esp + 0x44], 8
lea ebx, [esp + 0x30]
mov dword [esp + 0x14], eax
cmovae ebx, dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push ebx
mov ebx, dword [esp + 0x1c]
push ebx
push str.3iOpCMJVHfq_pP9UlbE0hCf1R1DjHV1ZvLPMSPmZdDO6oDlJpFGMngmj1s0kBlpIaEJIteZTVTP9FOwdgy_3cXk3SUQwrnuaJZSLrXN7eLAetO0Hwt8ka3BF8zPiyIIhfRd5mylnL4rN2Qw
push 4
call fcn.10011650
add esp, 0x14
test ebx, ebx
je 0x10005e30
lea ecx, [esp + 0x7c]
call fcn.10005530
sub esp, 0x18
mov byte [esp + 0x8e0], 3
lea eax, [esp + 0xcc]
mov ecx, esp
push eax
call fcn.10006350
lea eax, [esp + 0x94]
push eax
call fcn.100049b0
test eax, eax
je 0x10005dc7
push 0
lea eax, [esp + 0x80]
mov ecx, 0x100669b4
push eax
call fcn.100030a0
lea ecx, [esp + 0x7c]
call fcn.100055d0
mov byte [esp + 0x8c8], 1
cmp dword [esp + 0x44], 8
jb 0x10005deb
push dword [esp + 0x30]
call fcn.10018fac
add esp, 4
add esi, 0x18
cmp esi, edi
jne 0x10005be0
mov ecx, 0x10066a1c
call fcn.100027f0
jmp 0x10005ab0
cmp dword [esp + 0x44], 8
lea esi, [esp + 0x30]
cmovae esi, dword [esp + 0x30]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push esi
push 0
push str.M0T1bGkjjQUzwphORayzzUgOgw7BwAyGDthKLN_q_RVjhLEhj6IseAyYnEEhWb4aVMTVfPvpN982mtn7muY34gAuiazrYnG4ZVjLcuo5d7ZsRWbEJdjgC1YtU
push 0
call fcn.10011650
mov ebx, dword [esp + 0x28]
add esp, 0x14
lea ecx, [esp + 0x30]
mov byte [esp + 0x8c8], 1
call fcn.10006460
mov ecx, 0x10066a1c
call fcn.100027f0
jmp 0x10005ab0