Function at 0x100c5f3
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x814
mov eax, dword [0x1017484]
push ebx
push esi
mov esi, dword [ebp + 8]
push edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 4], eax
xor ebx, ebx
push ebx
lea eax, [ebp - 0x810]
push eax
push 2
lea eax, [ebp - 0x804]
push eax
push esi
mov dword [ebp - 0x808], esi
mov byte [ebp - 0x804], 0xff
mov byte [ebp - 0x803], 0xfe
call edi
push dword [ebp + 0xc]
push esi
call fcn.0100c55c
cmp dword [ebp + 0x14], ebx
je 0x100c661
push dword [ebp + 0x14]
push esi
call fcn.0100c55c
cmp dword [ebp + 0x18], ebx
je 0x100c661
push dword [ebp + 0x18]
push esi
call fcn.0100c55c
cmp dword [0x1019f70], ebx
mov dword [ebp - 0x814], ebx
je 0x100c679
mov dword [ebp - 0x814], 1
cmp dword [0x1019f74], ebx
je 0x100c687
inc dword [ebp - 0x814]
cmp dword [0x1019f78], ebx
je 0x100c695
inc dword [ebp - 0x814]
cmp dword [0x1019f7c], ebx
je 0x100c6a3
inc dword [ebp - 0x814]
cmp dword [0x1019f80], ebx
je 0x100c6b1
inc dword [ebp - 0x814]
cmp dword [0x1019f84], ebx
je 0x100c6bf
inc dword [ebp - 0x814]
cmp dword [ebp - 0x814], ebx
je 0x100cde9
cmp dword [ebp - 0x814], 1
jbe 0x100c6e2
cmp dword [ebp + 0x1c], ebx
je 0x100c6e2
push dword [ebp + 0x1c]
push esi
call fcn.0100c55c
cmp dword [0x1019f70], ebx
mov ebx, dword [sym.imp.msvcrt.dll_wcscpy]
mov esi, dword [sym.imp.msvcrt.dll_wcslen]
je 0x100c817
cmp dword [ebp - 0x814], 1
jbe 0x100c708
push dword [ebp + 0x20]
jmp 0x100c70b
push dword [ebp + 0x24]
push dword [ebp - 0x808]
call fcn.0100c55c
lea eax, [ebp - 0x804]
push 0x1002ae4
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
mov eax, dword [0x1019f70]
test eax, eax
mov dword [ebp - 0x80c], eax
je 0x100c7e0
jmp 0x100c768
mov eax, dword [ebp - 0x80c]
cmp dword [eax], 0
je 0x100c7d3
lea eax, [ebp - 0x804]
push 0x1002ad8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
push 0
lea eax, [ebp - 0x810]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
push dword [ebp - 0x808]
call edi
mov eax, dword [ebp - 0x80c]
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x80c], eax
jne 0x100c762
lea eax, [ebp - 0x804]
push 0x1002ac8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
cmp dword [0x1019f74], 0
je 0x100c941
cmp dword [ebp - 0x814], 1
jbe 0x100c832
push dword [ebp + 0x28]
jmp 0x100c835
push dword [ebp + 0x2c]
push dword [ebp - 0x808]
call fcn.0100c55c
lea eax, [ebp - 0x804]
push 0x1002ae4
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
mov eax, dword [0x1019f74]
test eax, eax
mov dword [ebp - 0x80c], eax
je 0x100c90a
jmp 0x100c892
mov eax, dword [ebp - 0x80c]
cmp dword [eax], 0
je 0x100c8fd
lea eax, [ebp - 0x804]
push 0x1002ad8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
push 0
lea eax, [ebp - 0x810]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
push dword [ebp - 0x808]
call edi
mov eax, dword [ebp - 0x80c]
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x80c], eax
jne 0x100c88c
lea eax, [ebp - 0x804]
push 0x1002ac8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
cmp dword [0x1019f78], 0
je 0x100ca6b
cmp dword [ebp - 0x814], 1
jbe 0x100c95c
push dword [ebp + 0x30]
jmp 0x100c95f
push dword [ebp + 0x34]
push dword [ebp - 0x808]
call fcn.0100c55c
lea eax, [ebp - 0x804]
push 0x1002ae4
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
mov eax, dword [0x1019f78]
test eax, eax
mov dword [ebp - 0x80c], eax
je 0x100ca34
jmp 0x100c9bc
mov eax, dword [ebp - 0x80c]
cmp dword [eax], 0
je 0x100ca27
lea eax, [ebp - 0x804]
push 0x1002ad8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
push 0
lea eax, [ebp - 0x810]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
push dword [ebp - 0x808]
call edi
mov eax, dword [ebp - 0x80c]
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x80c], eax
jne 0x100c9b6
lea eax, [ebp - 0x804]
push 0x1002ac8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
cmp dword [0x1019f7c], 0
je 0x100cb95
cmp dword [ebp - 0x814], 1
jbe 0x100ca86
push dword [ebp + 0x38]
jmp 0x100ca89
push dword [ebp + 0x3c]
push dword [ebp - 0x808]
call fcn.0100c55c
lea eax, [ebp - 0x804]
push 0x1002ae4
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
mov eax, dword [0x1019f7c]
test eax, eax
mov dword [ebp - 0x80c], eax
je 0x100cb5e
jmp 0x100cae6
mov eax, dword [ebp - 0x80c]
cmp dword [eax], 0
je 0x100cb51
lea eax, [ebp - 0x804]
push 0x1002ad8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
push 0
lea eax, [ebp - 0x810]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
push dword [ebp - 0x808]
call edi
mov eax, dword [ebp - 0x80c]
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x80c], eax
jne 0x100cae0
lea eax, [ebp - 0x804]
push 0x1002ac8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
cmp dword [0x1019f80], 0
je 0x100ccbf
cmp dword [ebp - 0x814], 1
jbe 0x100cbb0
push dword [ebp + 0x40]
jmp 0x100cbb3
push dword [ebp + 0x44]
push dword [ebp - 0x808]
call fcn.0100c55c
lea eax, [ebp - 0x804]
push 0x1002ae4
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
mov eax, dword [0x1019f80]
test eax, eax
mov dword [ebp - 0x80c], eax
je 0x100cc88
jmp 0x100cc10
mov eax, dword [ebp - 0x80c]
cmp dword [eax], 0
je 0x100cc7b
lea eax, [ebp - 0x804]
push 0x1002ad8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
push 0
lea eax, [ebp - 0x810]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
push dword [ebp - 0x808]
call edi
mov eax, dword [ebp - 0x80c]
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x80c], eax
jne 0x100cc0a
lea eax, [ebp - 0x804]
push 0x1002ac8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
cmp dword [0x1019f84], 0
je 0x100cde9
cmp dword [ebp - 0x814], 1
jbe 0x100ccda
push dword [ebp + 0x48]
jmp 0x100ccdd
push dword [ebp + 0x4c]
push dword [ebp - 0x808]
call fcn.0100c55c
lea eax, [ebp - 0x804]
push 0x1002ae4
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
mov eax, dword [0x1019f84]
test eax, eax
mov dword [ebp - 0x80c], eax
je 0x100cdb2
jmp 0x100cd3a
mov eax, dword [ebp - 0x80c]
cmp dword [eax], 0
je 0x100cda5
lea eax, [ebp - 0x804]
push 0x1002ad8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
push 0
lea eax, [ebp - 0x810]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
mov eax, dword [ebp - 0x80c]
push dword [eax]
push dword [ebp - 0x808]
call edi
mov eax, dword [ebp - 0x80c]
mov eax, dword [eax + 8]
test eax, eax
mov dword [ebp - 0x80c], eax
jne 0x100cd34
lea eax, [ebp - 0x804]
push 0x1002ac8
push eax
call ebx
pop ecx
pop ecx
push 0
lea eax, [ebp - 0x810]
push eax
lea eax, [ebp - 0x804]
push eax
call esi
pop ecx
lea eax, [eax + eax + 2]
push eax
lea eax, [ebp - 0x804]
push eax
push dword [ebp - 0x808]
call edi
push dword [ebp + 0x10]
push dword [ebp - 0x808]
call fcn.0100c55c
mov ecx, dword [ebp - 4]
pop edi
xor eax, eax
pop esi
inc eax
pop ebx
call fcn.01012bde
leave
ret 0x48