Function at 0x1011110
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x2ec
mov eax, dword [0x104c68c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
mov ecx, 0xa
mov esi, 0x1001d6c
lea edi, [ebp - 0xc0]
rep movsd dword es:[edi], dword [esi]
mov ax, word [0x10015d4]
mov word [ebp - 0x2e8], ax
push 0x222
push 0
lea ecx, [ebp - 0x2e6]
push ecx
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dx, word [0x10015d4]
mov word [ebp - 0x90], dx
push 0x7e
push 0
lea eax, [ebp - 0x8e]
push eax
call sub.MSVCR80.dll_memset
add esp, 0xc
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 0
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x98], 0
mov dword [ebp - 8], 0
push 0x104debc
push 0x112
lea ecx, [ebp - 0x2e8]
push ecx
call fcn.01010390
push 0x1001cc0
push 0x112
lea edx, [ebp - 0x2e8]
push edx
call fcn.01010ee0
mov eax, dword [0x104c994]
mov dword [ebp - 4], eax
cmp dword [ebp - 4], 0
je 0x1011206
mov ecx, dword [ebp - 4]
push ecx
push 0x75
push 0
push 2
call fcn.01028fb0
add esp, 0x10
push 0
call fcn.01010f70
add esp, 4
mov edx, dword [0x104c994]
mov dword [ebp - 4], edx
cmp dword [ebp - 4], 0
je 0x1011549
mov eax, dword [ebp - 4]
push eax
push 0x76
push 0
push 2
call fcn.01028fb0
add esp, 0x10
lea ecx, [ebp - 0x2e8]
push ecx
call dword [sym.imp.MSVCR80.dll__wcslwr]
add esp, 4
push eax
push 0x77
push 0
push 2
call fcn.01028fb0
add esp, 0x10
push 0
push 0x100080
push 2
push 0
push 0
push 0x40000000
lea edx, [ebp - 0x2e8]
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xffffffff
je 0x101145d
push 0x80
lea eax, [ebp - 0x90]
push eax
push 0x10015d4
push 0x1001960
push 0x1001598
call fcn.01042360
add esp, 0x14
lea ecx, [ebp - 0x90]
push ecx
call dword [sym.imp.MSVCR80.dll__wtol]
add esp, 4
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
cdq
mov ecx, 0x186a0
idiv ecx
mov ecx, eax
imul ecx, ecx, 0xf4240
mov eax, dword [ebp - 0x94]
cdq
mov esi, 0x186a0
idiv esi
mov eax, edx
cdq
mov esi, 0x3e8
idiv esi
imul eax, eax, 0x2710
add ecx, eax
mov eax, dword [ebp - 0x94]
cdq
mov esi, 0x3e8
idiv esi
add ecx, edx
mov dword [ebp - 0x94], ecx
push 0
lea edx, [ebp - 0x2ec]
push edx
push 4
lea eax, [ebp - 0x94]
push eax
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea edx, [ebp - 0x2ec]
push edx
push 4
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x98]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0x104c894
call dword [0x104ef44]
test eax, eax
jne 0x101137d
cmp dword [0x104e7a8], 0
je 0x1011372
cmp dword [0x104e0cc], 0
je 0x1011372
lea edx, [ebp - 0xc0]
push edx
push 0x1001c84
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 8
push 0x104c894
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x104e7a8], 0
je 0x10113a4
cmp dword [0x104e0cc], 0
je 0x10113a4
lea eax, [ebp - 0xc0]
push eax
push 0x1001c50
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 8
mov dword [ebp - 0xc], 0
jmp 0x10113b6
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
cmp edx, dword [0x104c994]
jge 0x101141e
mov eax, dword [ebp - 0xc]
push eax
push 0x104c98c
call dword [sym.imp.SQLSVC90.dll_SHRecMemLock]
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x101141c
push 0
lea ecx, [ebp - 0x2ec]
push ecx
push 0x14
mov edx, dword [ebp - 8]
push edx
mov eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea ecx, [ebp - 0x2ec]
push ecx
mov edx, dword [ebp - 8]
mov eax, dword [edx + 8]
push eax
mov ecx, dword [ebp - 8]
mov edx, dword [ecx + 0xc]
push edx
mov eax, dword [ebp - 0x98]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x10113ad
push 0x104c894
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x104e7a8], 0
je 0x1011450
cmp dword [0x104e0cc], 0
je 0x1011450
lea ecx, [ebp - 0xc0]
push ecx
push 0x1001c1c
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 8
mov edx, dword [ebp - 0x98]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x104c894
call dword [0x104ef44]
test eax, eax
jne 0x101149e
cmp dword [0x104e7a8], 0
je 0x1011493
cmp dword [0x104e0cc], 0
je 0x1011493
lea eax, [ebp - 0xc0]
push eax
push 0x1001c84
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 8
push 0x104c894
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
cmp dword [0x104e7a8], 0
je 0x10114c5
cmp dword [0x104e0cc], 0
je 0x10114c5
lea ecx, [ebp - 0xc0]
push ecx
push 0x1001c50
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 8
mov dword [ebp - 0xc], 0
jmp 0x10114d7
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
cmp eax, dword [0x104c994]
jge 0x1011517
mov ecx, dword [ebp - 0xc]
push ecx
push 0x104c98c
call dword [sym.imp.SQLSVC90.dll_SHRecMemLock]
add esp, 8
mov dword [ebp - 8], eax
cmp dword [ebp - 8], 0
je 0x1011515
mov edx, dword [ebp - 8]
cmp dword [edx + 0xc], 0
je 0x1011515
mov eax, dword [ebp - 8]
mov ecx, dword [eax + 0xc]
push ecx
call fcn.01011d50
add esp, 4
jmp 0x10114ce
push 0x104c894
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x104e7a8], 0
je 0x1011549
cmp dword [0x104e0cc], 0
je 0x1011549
lea edx, [ebp - 0xc0]
push edx
push 0x1001c1c
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 8
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.010471ba
mov esp, ebp
pop ebp
ret