Function at 0x100a93c0
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 8
mov ebx, dword [esp + 0x1c]
mov eax, dword [0x1026f9c0]
xor eax, esp
mov dword [esp + 4], eax
mov eax, dword [ebx + 0x98]
test eax, eax
je 0x100a9419
cmp byte [ebx + 1], 0
je 0x100a9419
mov byte [eax], 0
mov esi, dword [ebx + 0x98]
test esi, esi
je 0x100a9419
mov ecx, esi
call fcn.100c1050
mov eax, dword [0x102709d0]
test eax, eax
je 0x100a9409
dec dword [eax + 0x374]
push dword [0x102709d8]
push esi
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x98], 0
cmp byte [ebx], 0
je 0x100a9bbc
cmp byte [ebx + 0x2db8], 0
je 0x100a949b
mov edi, dword [ebx + 0x20]
test edi, edi
je 0x100a949b
mov ebp, dword [0x102709d0]
mov dword [0x102709d0], ebx
mov dword [ebx + 0x2dbc], 0
mov dword [esp], 0
mov eax, esp
push eax
call fcn.100bafe0
add esp, 4
mov esi, eax
push 0x10166ab1
push edi
call fcn.100a48c0
add esp, 8
test eax, eax
je 0x100a9495
mov edi, eax
push eax
push dword [esp + 4]
push 1
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
add esp, 0x10
push edi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [0x102709d0], ebp
mov eax, dword [ebx + 0x19c8]
test eax, eax
jle 0x100a94f0
xor edi, edi
jmp 0x100a94cb
push dword [0x102709d8]
push esi
call dword [0x1026f980]
add esp, 8
mov eax, dword [ebx + 0x19c8]
inc edi
cmp edi, eax
jge 0x100a94f0
mov ecx, dword [ebx + 0x19d0]
mov esi, dword [ecx + edi*4]
test esi, esi
je 0x100a94c6
mov ecx, esi
call fcn.100a7860
mov eax, dword [0x102709d0]
test eax, eax
je 0x100a94b0
dec dword [eax + 0x374]
jmp 0x100a94b0
mov eax, dword [ebx + 0x19d0]
test eax, eax
je 0x100a9538
mov dword [ebx + 0x19cc], 0
mov dword [ebx + 0x19c8], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a951e
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x19d0], 0
mov eax, dword [ebx + 0x19dc]
test eax, eax
je 0x100a9580
mov dword [ebx + 0x19d8], 0
mov dword [ebx + 0x19d4], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9566
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x19dc], 0
mov eax, dword [ebx + 0x19e8]
test eax, eax
je 0x100a95c8
mov dword [ebx + 0x19e4], 0
mov dword [ebx + 0x19e0], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a95ae
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x19e8], 0
mov dword [ebx + 0x1a08], 0
mov eax, dword [ebx + 0x19f4]
test eax, eax
je 0x100a961a
mov dword [ebx + 0x19f0], 0
mov dword [ebx + 0x19ec], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9600
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x19f4], 0
mov eax, dword [ebx + 0x1a00]
test eax, eax
je 0x100a9662
mov dword [ebx + 0x19fc], 0
mov dword [ebx + 0x19f8], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9648
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1a00], 0
mov dword [ebx + 0x1b38], 0
mov dword [ebx + 0x1a10], 0
mov dword [ebx + 0x1a0c], 0
mov dword [ebx + 0x1a7c], 0
mov dword [ebx + 0x1a68], 0
mov dword [ebx + 0x1a14], 0
mov eax, dword [ebx + 0x1b04]
test eax, eax
je 0x100a96e6
mov dword [ebx + 0x1b00], 0
mov dword [ebx + 0x1afc], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a96cc
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1b04], 0
mov eax, dword [ebx + 0x1b10]
test eax, eax
je 0x100a972e
mov dword [ebx + 0x1b0c], 0
mov dword [ebx + 0x1b08], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9714
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1b10], 0
mov eax, dword [ebx + 0x1b1c]
test eax, eax
je 0x100a9776
mov dword [ebx + 0x1b18], 0
mov dword [ebx + 0x1b14], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a975c
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1b1c], 0
mov eax, dword [ebx + 0x1b28]
test eax, eax
je 0x100a97be
mov dword [ebx + 0x1b24], 0
mov dword [ebx + 0x1b20], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a97a4
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1b28], 0
mov eax, dword [ebx + 0x1b34]
test eax, eax
je 0x100a9806
mov dword [ebx + 0x1b30], 0
mov dword [ebx + 0x1b2c], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a97ec
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1b34], 0
mov eax, dword [ebx + 0x1ca8]
test eax, eax
je 0x100a984e
mov dword [ebx + 0x1ca4], 0
mov dword [ebx + 0x1ca0], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9834
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1ca8], 0
mov eax, dword [ebx + 0x1cb4]
test eax, eax
je 0x100a9896
mov dword [ebx + 0x1cb0], 0
mov dword [ebx + 0x1cac], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a987c
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1cb4], 0
lea ecx, [ebx + 0x1cbc]
call fcn.100bcf70
lea ecx, [ebx + 0x1d34]
call fcn.100bcf70
lea ecx, [ebx + 0x1e44]
call fcn.100b42d0
mov eax, dword [ebx + 0x1e68]
test eax, eax
je 0x100a98ff
mov dword [ebx + 0x1e64], 0
mov dword [ebx + 0x1e60], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a98e5
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1e68], 0
mov eax, dword [ebx + 0x1e74]
test eax, eax
je 0x100a9947
mov dword [ebx + 0x1e70], 0
mov dword [ebx + 0x1e6c], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a992d
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1e74], 0
mov eax, dword [ebx + 0x2d98]
test eax, eax
je 0x100a998f
mov dword [ebx + 0x2d94], 0
mov dword [ebx + 0x2d90], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9975
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x2d98], 0
mov eax, dword [ebx + 0x2da4]
test eax, eax
je 0x100a99d7
mov dword [ebx + 0x2da0], 0
mov dword [ebx + 0x2d9c], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a99bd
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x2da4], 0
mov eax, dword [ebx + 0x1e94]
test eax, eax
je 0x100a9a1f
mov dword [ebx + 0x1e90], 0
mov dword [ebx + 0x1e8c], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9a05
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1e94], 0
mov eax, dword [ebx + 0x1ea0]
test eax, eax
je 0x100a9a67
mov dword [ebx + 0x1e9c], 0
mov dword [ebx + 0x1e98], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9a4d
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1ea0], 0
mov eax, dword [ebx + 0x1eac]
test eax, eax
je 0x100a9aaf
mov dword [ebx + 0x1ea8], 0
mov dword [ebx + 0x1ea4], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9a95
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x1eac], 0
mov eax, dword [ebx + 0x2de0]
test eax, eax
je 0x100a9af7
mov dword [ebx + 0x2ddc], 0
mov dword [ebx + 0x2dd8], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9add
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x2de0], 0
mov eax, dword [ebx + 0x2dd4]
test eax, eax
je 0x100a9b3f
mov dword [ebx + 0x2dd0], 0
mov dword [ebx + 0x2dcc], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9b25
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x2dd4], 0
mov esi, dword [ebx + 0x2dec]
test esi, esi
je 0x100a9b71
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp esi, eax
je 0x100a9b67
push dword [ebx + 0x2dec]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [ebx + 0x2dec], 0
mov eax, dword [ebx + 0x2df8]
test eax, eax
je 0x100a9bb9
mov dword [ebx + 0x2df4], 0
mov dword [ebx + 0x2df0], 0
mov ecx, dword [0x102709d0]
test ecx, ecx
je 0x100a9b9f
dec dword [ecx + 0x374]
push dword [0x102709d8]
push eax
call dword [0x1026f980]
add esp, 8
mov dword [ebx + 0x2df8], 0
mov byte [ebx], 0
mov ecx, dword [esp + 4]
xor ecx, esp
call fcn.100f14f8
add esp, 8
pop esi
pop edi
pop ebx
pop ebp
ret