Function at 0x10117de
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov ecx, dword [ebp + 8]
test ecx, ecx
je 0x1011838
mov eax, dword [ebp + 0xc]
test eax, eax
je 0x1011838
movzx edx, byte [ecx]
push esi
shr edx, 4
mov dx, word [edx*2 + 0x1001d0c]
mov word [eax], dx
movzx esi, byte [ecx]
push 0xf
pop edx
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 2], si
movzx esi, byte [ecx + 1]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 4], si
movzx esi, byte [ecx + 1]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 6], si
movzx esi, byte [ecx + 2]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 8], si
movzx esi, byte [ecx + 2]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0xa], si
movzx esi, byte [ecx + 3]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0xc], si
movzx esi, byte [ecx + 3]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0xe], si
movzx esi, byte [ecx + 4]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x10], si
movzx esi, byte [ecx + 4]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x12], si
movzx esi, byte [ecx + 5]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x14], si
movzx esi, byte [ecx + 5]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x16], si
movzx esi, byte [ecx + 6]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x18], si
movzx esi, byte [ecx + 6]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x1a], si
movzx esi, byte [ecx + 7]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x1c], si
movzx esi, byte [ecx + 7]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x1e], si
movzx esi, byte [ecx + 8]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x20], si
movzx esi, byte [ecx + 8]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x22], si
movzx esi, byte [ecx + 9]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x24], si
movzx esi, byte [ecx + 9]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x26], si
movzx esi, byte [ecx + 0xa]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x28], si
movzx esi, byte [ecx + 0xa]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x2a], si
movzx esi, byte [ecx + 0xb]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x2c], si
movzx esi, byte [ecx + 0xb]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x2e], si
movzx esi, byte [ecx + 0xc]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x30], si
movzx esi, byte [ecx + 0xc]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x32], si
movzx esi, byte [ecx + 0xd]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x34], si
movzx esi, byte [ecx + 0xd]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x36], si
movzx esi, byte [ecx + 0xe]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x38], si
movzx esi, byte [ecx + 0xe]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x3a], si
movzx esi, byte [ecx + 0xf]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x3c], si
movzx esi, byte [ecx + 0xf]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x3e], si
movzx esi, byte [ecx + 0x10]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x40], si
movzx esi, byte [ecx + 0x10]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x42], si
movzx esi, byte [ecx + 0x11]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x44], si
movzx esi, byte [ecx + 0x11]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x46], si
movzx esi, byte [ecx + 0x12]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x48], si
movzx esi, byte [ecx + 0x12]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x4a], si
movzx esi, byte [ecx + 0x13]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x4c], si
movzx esi, byte [ecx + 0x13]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x4e], si
movzx esi, byte [ecx + 0x14]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x50], si
movzx esi, byte [ecx + 0x14]
and esi, edx
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x52], si
movzx esi, byte [ecx + 0x15]
shr esi, 4
mov si, word [esi*2 + 0x1001d0c]
mov word [eax + 0x54], si
movzx ecx, byte [ecx + 0x15]
and ecx, edx
mov cx, word [ecx*2 + 0x1001d0c]
mov word [eax + 0x56], cx
xor ecx, ecx
mov word [eax + 0x58], cx
xor eax, eax
pop esi
jmp 0x101183d
mov eax, 0x80070057
pop ebp
ret 8