Function at 0x100105d5
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x410
mov dword [ebp - 0x410], ecx
mov dword [ebp - 4], 0
push 0
push 0x80
push 4
push 0
push 2
push 0x40000000
push str..DongleKeyFile.Dat
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x408], eax
cmp dword [ebp - 0x408], 0xffffffff
jne 0x1001061e
xor eax, eax
jmp 0x10010b24
push 0
push 0
push 0
mov eax, dword [ebp - 0x408]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov ecx, dword [ebp - 0x408]
push ecx
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov edx, dword [ebp - 0x408]
push edx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov dword [ebp - 0x40c], 0
push 0x10
push 0x1004b810
mov eax, dword [ebp - 0x410]
add eax, 0x41f0
push eax
call fcn.10026db0
add esp, 0xc
test eax, eax
je 0x10010714
push 9
push str.IMEK_MDK
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.10025860
add esp, 0xc
mov eax, dword [ebp - 0x40c]
add eax, 9
mov dword [ebp - 0x40c], eax
push 0x10
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
mov eax, dword [ebp - 0x410]
add eax, 0x41f0
push eax
mov ecx, dword [ebp - 0x410]
call fcn.1001026e
mov ecx, dword [ebp - 0x40c]
add ecx, 0x20
mov dword [ebp - 0x40c], ecx
mov edx, dword [ebp - 0x40c]
mov byte [ebp + edx - 0x404], 0xd
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
mov byte [ebp + ecx - 0x404], 0xa
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
push 0x10
push 0x1004b810
mov eax, dword [ebp - 0x410]
add eax, 0x4202
push eax
call fcn.10026db0
add esp, 0xc
test eax, eax
je 0x100107d3
push 9
push str.IMEK____
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.10025860
add esp, 0xc
mov eax, dword [ebp - 0x40c]
add eax, 9
mov dword [ebp - 0x40c], eax
push 0x10
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
mov eax, dword [ebp - 0x410]
add eax, 0x4202
push eax
mov ecx, dword [ebp - 0x410]
call fcn.1001026e
mov ecx, dword [ebp - 0x40c]
add ecx, 0x20
mov dword [ebp - 0x40c], ecx
mov edx, dword [ebp - 0x40c]
mov byte [ebp + edx - 0x404], 0xd
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
mov byte [ebp + ecx - 0x404], 0xa
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
push 0x10
push 0x1004b810
mov eax, dword [ebp - 0x410]
add eax, 0x4214
push eax
call fcn.10026db0
add esp, 0xc
test eax, eax
je 0x10010892
push 9
push str.MEK_____
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.10025860
add esp, 0xc
mov eax, dword [ebp - 0x40c]
add eax, 9
mov dword [ebp - 0x40c], eax
push 0x10
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
mov eax, dword [ebp - 0x410]
add eax, 0x4214
push eax
mov ecx, dword [ebp - 0x410]
call fcn.1001026e
mov ecx, dword [ebp - 0x40c]
add ecx, 0x20
mov dword [ebp - 0x40c], ecx
mov edx, dword [ebp - 0x40c]
mov byte [ebp + edx - 0x404], 0xd
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
mov byte [ebp + ecx - 0x404], 0xa
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
push 0x10
push 0x1004b810
mov eax, dword [ebp - 0x410]
add eax, 0x4238
push eax
call fcn.10026db0
add esp, 0xc
test eax, eax
je 0x10010951
push 9
push str.IAEK_MDK
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.10025860
add esp, 0xc
mov eax, dword [ebp - 0x40c]
add eax, 9
mov dword [ebp - 0x40c], eax
push 0x10
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
mov eax, dword [ebp - 0x410]
add eax, 0x4238
push eax
mov ecx, dword [ebp - 0x410]
call fcn.1001026e
mov ecx, dword [ebp - 0x40c]
add ecx, 0x20
mov dword [ebp - 0x40c], ecx
mov edx, dword [ebp - 0x40c]
mov byte [ebp + edx - 0x404], 0xd
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
mov byte [ebp + ecx - 0x404], 0xa
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
push 0x10
push 0x1004b810
mov eax, dword [ebp - 0x410]
add eax, 0x424a
push eax
call fcn.10026db0
add esp, 0xc
test eax, eax
je 0x10010a10
push 9
push str.IAEK____
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.10025860
add esp, 0xc
mov eax, dword [ebp - 0x40c]
add eax, 9
mov dword [ebp - 0x40c], eax
push 0x10
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
mov eax, dword [ebp - 0x410]
add eax, 0x424a
push eax
mov ecx, dword [ebp - 0x410]
call fcn.1001026e
mov ecx, dword [ebp - 0x40c]
add ecx, 0x20
mov dword [ebp - 0x40c], ecx
mov edx, dword [ebp - 0x40c]
mov byte [ebp + edx - 0x404], 0xd
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
mov byte [ebp + ecx - 0x404], 0xa
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
push 0x10
push 0x1004b810
mov eax, dword [ebp - 0x410]
add eax, 0x425c
push eax
call fcn.10026db0
add esp, 0xc
test eax, eax
je 0x10010acf
push 9
push str.AEK_____
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
call fcn.10025860
add esp, 0xc
mov eax, dword [ebp - 0x40c]
add eax, 9
mov dword [ebp - 0x40c], eax
push 0x10
mov ecx, dword [ebp - 0x40c]
lea edx, [ebp + ecx - 0x404]
push edx
mov eax, dword [ebp - 0x410]
add eax, 0x425c
push eax
mov ecx, dword [ebp - 0x410]
call fcn.1001026e
mov ecx, dword [ebp - 0x40c]
add ecx, 0x20
mov dword [ebp - 0x40c], ecx
mov edx, dword [ebp - 0x40c]
mov byte [ebp + edx - 0x404], 0xd
mov eax, dword [ebp - 0x40c]
add eax, 1
mov dword [ebp - 0x40c], eax
mov ecx, dword [ebp - 0x40c]
mov byte [ebp + ecx - 0x404], 0xa
mov edx, dword [ebp - 0x40c]
add edx, 1
mov dword [ebp - 0x40c], edx
push 0
lea eax, [ebp - 4]
push eax
mov ecx, dword [ebp - 0x40c]
push ecx
lea edx, [ebp - 0x404]
push edx
mov eax, dword [ebp - 0x408]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x10010b05
mov ecx, dword [ebp - 0x408]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp 0x10010b24
mov edx, dword [ebp - 0x408]
push edx
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
mov eax, dword [ebp - 0x408]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 1
mov esp, ebp
pop ebp
ret