Function at 0x10009350
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x28c
mov eax, dword [0x101b100c]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
mov ebx, dword [ebp + 0x14]
lea eax, [ebp - 0x268]
push esi
push edi
push 0x240
push 0
push eax
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x288], ebx
call fcn.1000d180
xor eax, eax
mov byte [ebp - 0x24], 0
xorps xmm0, xmm0
mov dword [ebp - 0xb], 0
add esp, 0xc
movq qword [ebp - 0x13], xmm0
mov word [ebp - 7], 0
mov byte [ebp - 5], 0
mov word [ebp - 0x278], ax
movq qword [ebp - 0x276], xmm0
mov dword [ebp - 0x26e], eax
mov word [ebp - 0x26a], ax
mov dword [ebp - 0x284], eax
movups xmmword [ebp - 0x23], xmm0
test ebx, ebx
je 0x100095b0
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100093e0
sub ecx, edx
cmp ecx, 0x240
jae 0x100095b0
lea eax, [ebp - 0x278]
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
movaps xmm0, xmmword [0x101adae0]
lea edi, [ebp - 7]
mov ebx, dword [ebp + 0x10]
xor esi, esi
movups xmmword [ebp - 0x24], xmm0
mov dword [ebp - 0xc], 0x20202020
movq qword [ebp - 0x14], xmm0
mov word [ebp - 8], 0x2020
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10009430
sub ecx, edx
lea eax, [ecx + 1]
cmp eax, 0x1e
jbe 0x10009448
mov ecx, 0x1e
jmp 0x1000945a
mov ecx, ebx
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10009450
sub ecx, edx
inc ecx
cmp esi, ecx
jae 0x10009477
mov eax, ebx
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10009463
sub eax, edx
sub eax, esi
inc esi
mov al, byte [eax + ebx]
mov byte [edi], al
dec edi
jmp 0x10009427
cmp esi, 0x1d
jae 0x10009484
lea eax, [ebp - 7]
sub eax, esi
mov byte [eax], 0x7c
mov ebx, dword [ebp + 0xc]
lea eax, [ebp - 7]
inc esi
sub eax, esi
mov dword [ebp - 0x280], eax
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10009498
sub ecx, edx
lea eax, [ecx + 1]
cmp eax, 0x1e
jbe 0x100094b0
mov ecx, 0x1e
jmp 0x100094bf
mov ecx, ebx
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100094b5
sub ecx, edx
inc ecx
cmp esi, ecx
jae 0x100094fa
mov edx, ebx
lea ecx, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x100094c8
sub edx, ecx
mov ecx, dword [ebp + 0x10]
lea edi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100094d7
sub ecx, edi
mov edi, dword [ebp - 0x280]
sub ecx, esi
inc esi
add ecx, edx
mov al, byte [ecx + ebx + 1]
mov byte [edi], al
dec edi
mov dword [ebp - 0x280], edi
jmp 0x10009493
push dword [ebp - 0x288]
lea eax, [ebp - 0x24]
push eax
push dword [ebp + 8]
movzx eax, word [ebp - 0x26c]
push eax
movzx eax, word [ebp - 0x26e]
push eax
movzx eax, word [ebp - 0x270]
push eax
movzx eax, word [ebp - 0x272]
push eax
movzx eax, word [ebp - 0x276]
push eax
movzx eax, word [ebp - 0x278]
push eax
push str.__4d__2d__2d__2d:_2d:_2d___4d___s_____s_r_n
lea eax, [ebp - 0x268]
push 0x240
push eax
call fcn.10009870
lea ecx, [ebp - 0x268]
add esp, 0x30
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10009560
mov edi, dword [ebp - 0x27c]
sub ecx, edx
cmp ecx, 0x240
jae 0x100095b6
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
lea eax, [ebp - 0x284]
push 0
push eax
push ecx
lea eax, [ebp - 0x268]
push eax
push dword [edi + 0x108]
call esi
push 0
lea eax, [ebp - 0x284]
push eax
push 2
push 0x101ad6d0
push dword [edi + 0x108]
call esi
jmp 0x100095b6
mov edi, dword [ebp - 0x27c]
lea eax, [edi + 0x10c]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1000a89d
mov esp, ebp
pop ebp
ret 0x10