Function at 0x10002a20
Capabilities:
Contain obfuscated stackstrings
Create directory
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10044c1d
push eax
mov dword fs:[0], esp
lea eax, [ebp - 0xa8]
sub esp, 0x9c
push 0x30
push 0
push eax
call sub.VCRUNTIME140.dll_memset
lea eax, [ebp - 0xa8]
push eax
push 0x100465e8
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__stat64i32]
add esp, 0x14
test eax, eax
je 0x10002a75
push str.NuzlockeSave
call dword [sym.imp.api_ms_win_crt_filesystem_l1_1_0.dll__wmkdir]
add esp, 4
xor eax, eax
mov dword [ebp - 0x48], 0x4c5a554e
mov word [ebp - 0x13], ax
mov byte [ebp - 0x11], al
mov eax, dword [0x100508c0]
mov dword [ebp - 0x44], eax
mov eax, dword [0x1005088c]
mov dword [ebp - 0x40], eax
mov eax, dword [0x1005004c]
mov dword [ebp - 0x3c], eax
mov eax, dword [0x10050d34]
mov dword [ebp - 0x38], eax
mov eax, dword [0x10050d98]
mov dword [ebp - 0x34], eax
mov eax, dword [0x10050d20]
mov dword [ebp - 0x30], eax
mov eax, dword [0x10050898]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x100508bc]
mov dword [ebp - 0x28], eax
mov eax, dword [0x100508d0]
mov dword [ebp - 0x24], eax
movzx eax, byte [0x10050d2b]
mov byte [ebp - 0x1c], al
movzx eax, byte [0x10050897]
mov byte [ebp - 0x1b], al
movzx eax, byte [0x10050d17]
mov byte [ebp - 0x1a], al
movzx eax, byte [0x100508cf]
mov byte [ebp - 0x19], al
movzx eax, byte [0x100508ce]
mov byte [ebp - 0x18], al
movzx eax, byte [0x10050895]
push esi
mov byte [ebp - 0x17], al
movzx eax, byte [0x100508cc]
push edi
mov byte [ebp - 0x16], al
movzx eax, byte [0x10050894]
push 0x7588c4
mov byte [ebp - 0x15], al
movzx eax, byte [0x10050d15]
push str.NuzlockeSave_s.nuz
push 0x10050d40
mov dword [ebp - 0x20], 0x4c4f4f42
mov dword [ebp - 0x10], 0x53524143
mov byte [ebp - 0x14], al
call fcn.10001190
push 0x10046628
push 0x10050d40
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen]
mov edi, eax
add esp, 0x14
test edi, edi
jne 0x10002c94
push eax
mov dword [ebp - 0x60], eax
lea ecx, [ebp - 0x60]
push 0x1004643e
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 0xf
mov byte [ebp - 0x60], al
call fcn.1000aef0
lea eax, [ebp - 0x60]
mov dword [ebp - 4], edi
push eax
mov ecx, 0x100500c0
call fcn.1000a600
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x10
jb 0x10002bd4
mov edx, dword [ebp - 0x60]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002bca
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10002bca
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10043db5
add esp, 8
mov edx, str.Cant_open_file
mov ecx, 0x100500b8
call fcn.1000c2e0
mov edx, 0x10050d40
mov ecx, eax
call fcn.1000c2e0
mov edx, str._for_writing:
mov ecx, eax
call fcn.1000c2e0
mov esi, eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
push dword [eax]
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_strerror]
add esp, 4
mov edx, eax
mov ecx, esi
call fcn.1000c2e0
lea eax, [ebp - 0x78]
push eax
call fcn.10009ee0
push eax
mov ecx, 0x10050158
call fcn.1000a2d0
mov ecx, dword [ebp - 0x64]
cmp ecx, 0x10
jb 0x10002c61
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10002c57
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x10002c57
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.10043db5
add esp, 8
mov ecx, str.NUZLOCKE___Error
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
call fcn.1001e140
pop edi
mov byte [0x10050d14], 1
pop esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov esp, ebp
pop ebp
ret
mov esi, dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
lea eax, [ebp - 0x48]
push edi
push 1
push 0x3c
push eax
call esi
push edi
push dword [0x10050068]
push 0x28
push dword [0x1005090c]
call esi
push edi
push 1
push 0x28
push 0x100508d8
call esi
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
mov ecx, dword [ebp - 0xc]
add esp, 0x34
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret