Function at 0x103d1b9
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x25c
mov eax, dword [0x111121c]
push ebx
push esi
push edi
mov edi, edx
lea edx, [ebp - 0x220]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push edx
mov dword [ebp - 0x21c], ecx
mov ecx, dword [eax]
xor esi, esi
push eax
mov dword [ebp - 0x22c], edi
mov dword [ebp - 0x210], 0x80004005
mov dword [ebp - 0x214], esi
mov dword [ebp - 0x220], esi
call dword [ecx + 0x1c]
push dword [ebp - 0x220]
mov ebx, dword [sym.imp.SHLWAPI.dll_wnsprintfW]
push 0x1002d50
lea eax, [ebp - 0x20c]
push 0x104
push eax
call ebx
lea eax, [ebp - 0x20c]
add esp, 0x10
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x23c], esi
mov dword [ebp - 0x238], eax
mov dword [ebp - 0x234], esi
mov dword [ebp - 0x230], esi
call fcn.01064e8a
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
lea ecx, [ebp - 0x214]
push ecx
push eax
lea ecx, [ebp - 0x23c]
mov dword [ebp - 0x224], eax
call fcn.01064e8a
push eax
push edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteFile]
call edi
test eax, eax
je 0x103d43a
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x214], eax
jne 0x103d43a
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
lea edx, [ebp - 0x228]
push edx
push eax
mov dword [ebp - 0x228], esi
call dword [ecx + 0x2c]
cmp eax, esi
mov dword [ebp - 0x210], eax
jl 0x103d43a
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax]
push esi
lea edx, [ebp - 0x25c]
push edx
push 1
push eax
call dword [ecx + 0xc]
test eax, eax
jne 0x103d3f8
mov eax, dword [ebp - 0x254]
lea edx, [ebp - 0x21c]
push edx
push 0x1009c48
mov dword [ebp - 0x21c], esi
mov ecx, dword [eax]
push eax
call dword [ecx]
cmp eax, esi
mov dword [ebp - 0x210], eax
jl 0x103d3e0
mov eax, dword [ebp - 0x21c]
lea edx, [ebp - 0x218]
push edx
mov dword [ebp - 0x218], esi
mov ecx, dword [eax]
push eax
call dword [ecx + 0x2c]
mov eax, dword [ebp - 0x21c]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push dword [ebp - 0x218]
lea eax, [ebp - 0x20c]
push 0x1002da8
push 0x104
push eax
call ebx
lea eax, [ebp - 0x20c]
add esp, 0x10
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x24c], esi
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], esi
mov dword [ebp - 0x240], esi
call fcn.01064e8a
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
lea ecx, [ebp - 0x214]
push ecx
push eax
lea ecx, [ebp - 0x24c]
mov dword [ebp - 0x224], eax
call fcn.01064e8a
push eax
push dword [ebp - 0x22c]
call edi
test eax, eax
je 0x103d3ab
mov eax, dword [ebp - 0x224]
cmp dword [ebp - 0x214], eax
je 0x103d3b5
mov dword [ebp - 0x210], 0x80004005
lea ecx, [ebp - 0x24c]
call fcn.01064bb9
cmp dword [ebp - 0x218], esi
je 0x103d3e0
cmp dword [ebp - 0x218], 0x1111298
je 0x103d3e0
push dword [ebp - 0x218]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov eax, dword [ebp - 0x254]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x210], esi
jge 0x103d2bc
mov eax, dword [ebp - 0x228]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x210], esi
jl 0x103d43a
push esi
lea eax, [ebp - 0x214]
push eax
push 0x23
push 0x1002de4
push dword [ebp - 0x22c]
call edi
test eax, eax
je 0x103d430
cmp dword [ebp - 0x214], 0x23
je 0x103d43a
mov dword [ebp - 0x210], 0x80004005
lea ecx, [ebp - 0x23c]
call fcn.01064bb9
cmp dword [ebp - 0x220], esi
pop edi
pop esi
pop ebx
je 0x103d468
cmp dword [ebp - 0x220], 0x1111298
je 0x103d468
push dword [ebp - 0x220]
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x210]
call fcn.0105eca9
leave
ret 4