Function at 0x10007d70
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x90
mov eax, dword [0x10022040]
xor eax, esp
mov dword [esp + 0x8c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 3]
mov dword [esp + 0x64], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x5c], eax
mov dword [esp + 0x60], edx
lea eax, [edx + 4]
mov dword [esp + 0x58], eax
mov esi, 0x76d35fce
lea ebx, [esp + 0x74]
lea edi, [esp + 0x70]
jmp 0x10007dd0
push ebp
push dword [esp + 0x18]
call fcn.1000fa20
add esp, 8
mov esi, 0x25b6a215
nop dword [eax + eax]
cmp esi, 0xfc96cbf0
jg 0x10007e40
cmp esi, 0xbb0152c6
jg 0x10007ec0
cmp esi, 0xa4db8423
jg 0x10007f4e
cmp esi, 0x8d04094c
je 0x1000801b
cmp esi, 0x96b71848
jne 0x10007dd0
mov eax, dword [esp + 0x48]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov ebp, dword [esp + 8]
add ebp, 1
mov eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
mov esi, 0xbb0152c7
cmp ebp, 0x1000
jae 0x10007dd0
mov esi, 0x29c342e4
jmp 0x10007dd0
cmp esi, 0x68da3a9c
jg 0x10007f10
cmp esi, 0x29c342e3
jle 0x10007f9e
cmp esi, 0x29c342e4
je 0x10007db6
cmp esi, 0x52127a1d
jne 0x10007dd0
mov eax, dword [esp + 0x10]
mov dword [esp + 0x34], eax
mov dword [esp + 0x38], edi
mov eax, dword [esp + 0x38]
mov dword [esp + 0x70], 0
mov eax, dword [esp + 0x20]
mov eax, dword [eax]
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x24]
mov eax, dword [eax]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x3c]
mov esi, 0x8d04094c
cmp ecx, dword [esp + 0x40]
je 0x10007dd0
mov esi, 0xb698a559
jmp 0x10007dd0
cmp esi, 0xc4b8f365
jg 0x10007fde
cmp esi, 0xbb0152c7
je 0x10008033
cmp esi, 0xbe6d36e4
jne 0x10007dd0
mov ebp, dword [esp + 8]
mov eax, ebp
not eax
and eax, 0x24
add eax, ebp
and ebp, 0x24
add ebp, eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov esi, 0x29c342e4
jmp 0x10007dd0
cmp esi, 0x68da3a9d
je 0x1000808c
cmp esi, 0x692c5436
je 0x100080b3
cmp esi, 0x76d35fce
jne 0x10007dd0
cmp byte [esp + 3], 0
mov esi, 0xfc96cbf1
jne 0x10007dd0
mov esi, 0xe1b6018a
jmp 0x10007dd0
cmp esi, 0xa4db8424
je 0x100080e3
cmp esi, 0xb698a559
jne 0x10007dd0
mov dword [esp + 4], ebx
lea eax, [esp + 0x84]
mov dword [esp + 0x6c], eax
lea eax, [esp + 0x88]
mov dword [esp + 0x44], eax
mov dword [esp + 0x48], ebx
mov dword [esp + 0x18], 0
mov esi, 0x692c5436
mov ecx, dword [esp + 0x3c]
mov dword [esp + 0x1c], ecx
jmp 0x10007dd0
cmp esi, 0x25b6a215
jne 0x100081cc
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x4c]
add ecx, 0x18
mov esi, 0x8d04094c
mov dword [esp + 0x1c], ecx
cmp ecx, dword [esp + 0x40]
mov ecx, dword [esp + 0x50]
mov ecx, dword [esp + 0x50]
mov dword [esp + 0x18], ecx
je 0x10007dd0
mov esi, 0x692c5436
jmp 0x10007dd0
cmp esi, 0xe1b6018a
jne 0x100081da
mov eax, dword [esp + 0x60]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
mov eax, dword [esp + 0x58]
mov dword [esp + 0x24], eax
mov edx, dword [esp + 0x24]
mov esi, 0xfc96cbf1
cmp ecx, dword [edx]
je 0x10007dd0
mov esi, 0x68da3a9d
jmp 0x10007dd0
push dword [esp + 0x34]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x38]
mov esi, 0xfc96cbf1
jmp 0x10007dd0
mov dword [esp + 0x68], ebp
mov eax, dword [esp + 0xc]
mov eax, dword [eax - 4]
mov dword [esp + 0x54], eax
mov esi, dword [esp + 0xc]
lea ecx, [esi - 4]
mov eax, dword [esp + 0x54]
mov edx, ecx
and edx, eax
lea ebp, [edx + esi]
add ebp, 0xfffffffc
mov edx, 3
sub edx, esi
mov esi, edx
and esi, eax
add esi, ebp
or ecx, eax
not ecx
add ecx, esi
or edx, eax
add edx, eax
sub ecx, edx
mov esi, 0xbe6d36e4
cmp ecx, 0x20
jb 0x1000807f
mov esi, 0xc4b8f366
lea edi, [esp + 0x70]
mov ebp, dword [esp + 0x68]
jmp 0x10007dd0
mov ecx, dword [esp + 0x64]
mov dword [esp + 0x28], ecx
mov eax, dword [esp + 0x5c]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
cmp dword [eax], 0x10
mov dword [esp + 0x30], ecx
mov eax, dword [esp + 0x30]
jae 0x100080fd
mov eax, dword [esp + 0x28]
jmp 0x100080ff
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x4c]
mov ecx, ebx
call fcn.1000e510
mov eax, dword [esp + 0x6c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x48]
jae 0x10008143
mov ecx, dword [esp + 4]
jmp 0x10008145
mov eax, dword [esp + 0x2c]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x30]
jae 0x10008186
mov eax, dword [esp + 0x28]
jmp 0x10008188
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1001e960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, 0xa4db8424
mov dword [esp + 0x10], eax
cmp eax, 0xffffffff
je 0x10007dd0
mov esi, 0x52127a1d
jmp 0x10007dd0
mov ecx, dword [ecx]
push 0
push edi
push eax
push ecx
push dword [esp + 0x44]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x70]
add eax, dword [esp + 0x18]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x44]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
mov esi, 0x96b71848
cmp ecx, 0x10
jae 0x10007dd0
mov esi, 0x25b6a215
jmp 0x10007dd0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1001e950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, 0xfc96cbf1
mov dword [esp + 0x10], eax
cmp eax, 0xffffffff
je 0x10007dd0
mov esi, 0x52127a1d
jmp 0x10007dd0
cmp esi, 0xfc96cbf1
jne 0x10007dd0
jmp 0x100081eb
cmp esi, 0xc4b8f366
jne 0x10007dd0
call fcn.100119dd
mov ecx, dword [esp + 0x8c]
xor ecx, esp
call fcn.1000ff2a
add esp, 0x90
pop esi
pop edi
pop ebx
pop ebp
ret