Function at 0x100123be
Capabilities:
Write file on windows

Disassembly:
mov eax, dword [ebp - 0x34]
add eax, 0x25
mov dword [ebp - 0x34], eax
mov eax, dword [ebp + 8]
add eax, 0xcdd
cmp dword [ebp - 0x34], eax
ja 0x100128e0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x359e
ja 0x100122e3
cmp dword [ebp - 0x64], 0x359e
je 0x10012394
cmp dword [ebp - 0x64], 0x349b
ja 0x10012299
cmp dword [ebp - 0x64], 0x349b
je 0x100128d0
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x68], eax
sub dword [ebp - 0x68], 0x3398
je 0x1001288c
sub dword [ebp - 0x68], 0x25
je 0x1001282b
sub dword [ebp - 0x68], 0x25
je 0x10012747
sub dword [ebp - 0x68], 0x25
je 0x10012863
sub dword [ebp - 0x68], 0x25
je 0x1001238c
sub dword [ebp - 0x68], 0x25
je 0x100127dc
sub dword [ebp - 0x68], 0x25
je 0x10012784
jmp 0x100128db
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x6c], eax
sub dword [ebp - 0x6c], 0x34c0
je 0x10012896
sub dword [ebp - 0x6c], 0x25
je 0x1001287c
sub dword [ebp - 0x6c], 0x25
je 0x100127f4
sub dword [ebp - 0x6c], 0x25
je 0x10012736
sub dword [ebp - 0x6c], 0x25
je 0x1001281d
sub dword [ebp - 0x6c], 0x25
je 0x10012854
jmp 0x100128db
cmp dword [ebp - 0x64], 0x6c5c
ja 0x10012346
cmp dword [ebp - 0x64], 0x6c5c
je 0x1001275c
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x70], eax
sub dword [ebp - 0x70], 0x35c3
je 0x10012812
sub dword [ebp - 0x70], 0x25
je 0x10012893
sub dword [ebp - 0x70], 0x25
je 0x10012848
sub dword [ebp - 0x70], 0x25
je 0x10012762
sub dword [ebp - 0x70], 0x25
je 0x10012881
sub dword [ebp - 0x70], 0x35e0
je 0x1001283e
jmp 0x100128db
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x74], eax
sub dword [ebp - 0x74], 0x7654
je 0x10012768
sub dword [ebp - 0x74], 0x25
je 0x100127a2
sub dword [ebp - 0x74], 0x25
je 0x100128a4
sub dword [ebp - 0x74], 0x25
je 0x10012723
sub dword [ebp - 0x74], 0x25
je 0x10012884
sub dword [ebp - 0x74], 0x25
je 0x100123a7
jmp 0x100128db
cmp eax, 1
jmp 0x100128db
push dword [str.Unknown_error_0x_0lX]
push 0x20
push eax
call fcn.1002f4d6
jmp 0x100128db
lea eax, [ebp - 0x2c]
push eax
push 0x505d
lea eax, [ebp - 0x10]
push eax
call fcn.10036ab6
add esp, 0xc
mov dword [ebp - 0x60], eax
mov al, byte [0x89a0458b]
inc ebp
cld
mov byte [ebp - 0x35], 0
mov al, byte [ebp - 0x35]
mov byte [ebp - 0x2d], al
and dword [ebp - 0x3c], 0
jmp 0x100123dc
mov eax, dword [ebp - 0x3c]
inc eax
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x10
call fcn.10037567
cmp dword [ebp - 0x3c], eax
jge 0x1001248b
mov eax, dword [ebp + 0xc]
mov eax, dword [eax + 4]
mov dword [ebp - 0x78], eax
push dword [ebp - 0x3c]
mov ecx, dword [ebp + 0x10]
add ecx, 0x10
call fcn.10037573
mov eax, dword [eax + 4]
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x7c]
mov al, byte [eax]
mov byte [ebp - 0x7d], al
mov ecx, dword [ebp - 0x78]
cmp al, byte [ecx]
jne 0x1001244a
cmp byte [ebp - 0x7d], 0
je 0x10012441
mov eax, dword [ebp - 0x7c]
mov al, byte [eax + 1]
mov byte [ebp - 0x7e], al
mov ecx, dword [ebp - 0x78]
cmp al, byte [ecx + 1]
jne 0x1001244a
add dword [ebp - 0x7c], 2
add dword [ebp - 0x78], 2
cmp byte [ebp - 0x7e], 0
jne 0x1001240d
and dword [ebp - 0x84], 0
jmp 0x10012455
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0
jne 0x10012486
mov esi, dword [ebp + 0xc]
push dword [ebp - 0x3c]
mov ecx, dword [ebp + 0x10]
add ecx, 0x10
call fcn.10037573
push 6
pop ecx
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x2d], 1
jmp 0x100123d5
movzx eax, byte [ebp - 0x2d]
test eax, eax
jne 0x1001271e
push dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
add ecx, 0x10
call fcn.10037b32
push 0
push 0
push 2
push 0
add byte [edx + 3], ch
push 0xc0000000
mov eax, dword [ebp + 0x10]
push dword [eax + 0x20]
call dword [ebp - 4]
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0xffffffff
jne 0x100124cb
jmp 0x100128e0
and dword [ebp - 0x44], 0
and dword [ebp - 0x48], 0
jmp 0x100124dc
mov eax, dword [ebp - 0x48]
inc eax
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp + 0x10]
add ecx, 0x10
call fcn.10037567
cmp dword [ebp - 0x48], eax
jge 0x10012715
mov dword [ebp - 0x50], 0x5ff2
jmp 0x10012502
mov eax, dword [ebp - 0x50]
add eax, 0x4d
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x6126
ja 0x10012710
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x8c], eax
mov eax, dword [ebp - 0x8c]
mov dword [ebp - 0x90], eax
sub dword [ebp - 0x90], 0x5ff2
je 0x1001262e
sub dword [ebp - 0x90], 0x4d
je 0x10012579
sub dword [ebp - 0x90], 0x4d
je 0x10012565
sub dword [ebp - 0x90], 0x4d
je 0x10012611
sub dword [ebp - 0x90], 0x4d
je 0x10012625
jmp 0x1001270b
push 2
push 0
push 0
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
jmp 0x1001270b
mov eax, dword [ebp - 0x4c]
dec eax
mov dword [ebp - 0x94], eax
mov eax, dword [ebp - 0x94]
mov al, byte [eax + 1]
mov byte [ebp - 0x95], al
inc dword [ebp - 0x94]
cmp byte [ebp - 0x95], 0
jne 0x10012583
mov edi, dword [ebp - 0x94]
mov esi, 0x10053b40
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x9c], eax
mov eax, dword [ebp - 0x9c]
inc eax
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x9c]
mov al, byte [eax]
mov byte [ebp - 0xa1], al
inc dword [ebp - 0x9c]
cmp byte [ebp - 0xa1], 0
jne 0x100125c5
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa8], eax
push 0
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 0xa8]
push dword [ebp - 0x4c]
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x1001270b
cli
add byte [eax], al
invalid
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x58], eax
push dword [ebp - 0x58]
call fcn.100351b3
pop ecx
jmp 0x1001270b
and dword [ebp - 0x4c], 0
jmp 0x1001270b
push dword [ebp - 0x48]
mov ecx, dword [ebp + 0x10]
add ecx, 0x10
call fcn.10037573
mov eax, dword [eax + 4]
mov dword [ebp - 0xac], eax
mov eax, dword [ebp - 0xac]
inc eax
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0xac]
mov al, byte [eax]
mov byte [ebp - 0xb1], al
inc dword [ebp - 0xac]
cmp byte [ebp - 0xb1], 0
jne 0x10012652
mov eax, dword [ebp - 0xac]
sub eax, dword [ebp - 0xb0]
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0xb8]
add eax, 3
push eax
call fcn.1000361d
pop ecx
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x5c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
push dword [ebp - 0x48]
mov ecx, dword [ebp + 0x10]
add ecx, 0x10
call fcn.10037573
mov eax, dword [eax + 4]
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xbc]
mov al, byte [eax]
mov byte [ebp - 0xc5], al
mov eax, dword [ebp - 0xc0]
mov cl, byte [ebp - 0xc5]
dec dword [eax + 0x44858b08]
invalid
invalid
inc dword [eax - 0x77]
test dword [edi + edi*8 - 1], eax
dec dword [ebx - 0xbf7b]
inc dword [eax - 0x77]
test dword [eax - 1], eax
invalid
inc dword [eax - 0xc443]
inc dword [eax]
jne 0x100126cc
jmp 0x100124f9
jmp 0x100124d5
push dword [ebp - 0x40]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp 0x100128db
push 0x6c
pop eax
mov word [ebp - 0x18], ax
push 0x6c
pop eax
mov word [ebp - 0x16], ax
jmp 0x100128db
mov bh, 0xd2
test dx, dx
je 0x10012884
push edx
jmp 0x100128db
push 0
push esi
push 0x400
push eax
push 0
push 0x1300
jmp 0x100128db
ret
pop esi
jmp 0x100128db
mov eax, 0x7243
mov word [ebp - 0x10], ax
push 0x65
pop eax
mov word [ebp - 0xe], ax
push 0x61
pop eax
mov word [ebp - 0xd], ax
jmp 0x100128db
jne 0x10012784
xor edx, edx
mov word [ecx], dx
mov ecx, dword [esi]
cmp word [ecx + eax*2 - 4], 0xd
lea eax, [ecx + eax*2 - 4]
jne 0x1001238c
jmp 0x100128db
push 0x74
pop eax
mov word [ebp - 0xc], ax
push 0x65
pop eax
mov word [ebp - 0xb], ax
mov eax, 0x6946
mov word [ebp - 0xa], ax
mov eax, 0x656c
mov word [ebp - 8], ax
push 0x41
pop eax
mov word [ebp - 6], ax
push 0x6b
pop eax
mov word [ebp - 0x2c], ax
push 0x65
pop eax
mov word [ebp - 0x2a], ax
jmp 0x100128db
invalid
lea edx, [ecx + 0x7ffbfe00]
cmp edx, 0xfdff
ja 0x10012762
lea edx, [ecx - 0x200]
psubsw mm1, mm1
add byte [eax], al
add byte [ebx + 0x10c48306], cl
mov eax, dword [esi]
add esp, 0x10
pop esi
jmp 0x100128db
push dword [str.IDispatch_error__d]
push 0x20
push eax
jmp 0x100128db
lea esi, [edi + 0xc]
jne 0x100128d0
mov eax, dword [edi + 4]
push 0
jmp 0x100128db
mov dword [0x1005d824], eax
jmp 0x100128db
in al, dx
add bl, byte [eax]
xchg esp, eax
pop esi
mov eax, ecx
jmp 0x100128db
call fcn.10028b28
add esp, 0x10
mov eax, dword [esi]
pop esi
ret
call dword [sym.imp.KERNEL32.dll_FormatMessageW]
mov eax, dword [esi]
test eax, eax
je 0x10012625
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
jmp 0x100128db
mov ecx, dword [edi + 4]
jmp 0x100128db
ret
xor eax, eax
mov word [ebp - 0x14], ax
inc ebp
in al, dx
jmp 0x100128db
cmp dword [edi + 0xc], 0
push esi
jmp 0x100128db
ret
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov dword [esi], eax
test eax, eax
je 0x10012881
jmp 0x100128db
push 0x72
pop eax
mov word [ebp - 0x28], ax
push 0x6e
pop eax
mov word [ebp - 0x26], ax
mov dword [ebp - 0x24], 0x6c0065
push 0x33
pop eax
mov word [ebp - 0x20], ax
mov dword [ebp - 0x1e], 0x2e0032
push 0x64
pop eax
mov word [ebp - 0x1a], ax
jmp 0x100128db
mov word [eax], dx
mov eax, dword [esi]
pop esi
ret
jmp 0x100121f5
pop edi
pop esi
leave
ret