Function at 0x100633f
Capabilities:
Write file on windows

Disassembly:
push 0x18
push 0x101a510
call fcn.0100b9b8
xor esi, esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x24], esi
mov dword [ebp - 4], esi
mov edi, dword [ebp + 0xc]
lea eax, [edi + 0xc]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, esi
jne 0x100636d
xor eax, eax
jmp 0x100638d
push eax
call ebx
mov esi, eax
inc esi
lea eax, [esi + esi]
call fcn.0100bbc0
mov dword [ebp - 0x18], esp
mov ecx, esp
push esi
lea eax, [edi + 0xc]
push eax
push ecx
call fcn.010050f1
xor esi, esi
lea ecx, [ebp - 0x28]
push ecx
push 0x200
push eax
call fcn.01005b8a
cmp eax, esi
jge 0x10063b3
push 0x100158c
push 4
call fcn.01005bd8
pop ecx
pop ecx
jmp 0x100665f
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
ja 0x100665f
mov dword [ebp - 0x20], eax
push esi
lea eax, [ebp - 0x24]
push eax
push 4
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 8]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
call esi
test eax, eax
je 0x10063a0
push dword [ebp - 0x20]
push 0x1001678
push 2
call fcn.01005bd8
add esp, 0xc
lea eax, [edi + 0xc]
test eax, eax
je 0x1006419
push eax
call ebx
mov edi, eax
inc edi
lea eax, [edi + edi]
call fcn.0100bbc0
mov dword [ebp - 0x18], esp
mov ecx, esp
push edi
mov eax, dword [ebp + 0xc]
add eax, 0xc
push eax
push ecx
call fcn.010050f1
mov edi, dword [ebp + 0xc]
push 0
lea ecx, [ebp - 0x24]
push ecx
push dword [ebp - 0x20]
push eax
push dword [ebp + 8]
call esi
test eax, eax
je 0x10063a0
lea eax, [edi + 0xc]
push eax
push 0x100165c
push 2
call fcn.01005bd8
add esp, 0xc
lea eax, [edi + 0x10c]
test eax, eax
je 0x1006473
push eax
call ebx
mov edi, eax
inc edi
lea eax, [edi + edi]
call fcn.0100bbc0
mov dword [ebp - 0x18], esp
mov ecx, esp
push edi
mov eax, dword [ebp + 0xc]
add eax, 0x10c
push eax
push ecx
call fcn.010050f1
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x28]
push ecx
push 0x200
push eax
call fcn.01005b8a
test eax, eax
jl 0x10063a0
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
ja 0x100665f
mov dword [ebp - 0x20], eax
push 0
lea eax, [ebp - 0x24]
push eax
push 4
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 8]
call esi
test eax, eax
je 0x10063a0
push dword [ebp - 0x20]
push 0x100163c
push 2
call fcn.01005bd8
add esp, 0xc
lea eax, [edi + 0x10c]
test eax, eax
je 0x10064f4
push eax
call ebx
mov edi, eax
inc edi
lea eax, [edi + edi]
call fcn.0100bbc0
mov dword [ebp - 0x18], esp
mov ecx, esp
push edi
mov eax, dword [ebp + 0xc]
add eax, 0x10c
push eax
push ecx
call fcn.010050f1
mov edi, dword [ebp + 0xc]
push 0
lea ecx, [ebp - 0x24]
push ecx
push dword [ebp - 0x20]
push eax
push dword [ebp + 8]
call esi
test eax, eax
je 0x10063a0
lea eax, [edi + 0x10c]
push eax
push 0x1001624
push 2
call fcn.01005bd8
add esp, 0xc
lea eax, [edi + 0x20c]
test eax, eax
je 0x1006551
push eax
call ebx
mov edi, eax
inc edi
lea eax, [edi + edi]
call fcn.0100bbc0
mov dword [ebp - 0x18], esp
mov ecx, esp
push edi
mov eax, dword [ebp + 0xc]
add eax, 0x20c
push eax
push ecx
call fcn.010050f1
mov edi, dword [ebp + 0xc]
lea ecx, [ebp - 0x28]
push ecx
push 0x200
push eax
call fcn.01005b8a
test eax, eax
jl 0x10063a0
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
ja 0x100665f
mov dword [ebp - 0x20], eax
push 0
lea eax, [ebp - 0x24]
push eax
push 4
lea eax, [ebp - 0x20]
push eax
push dword [ebp + 8]
call esi
test eax, eax
je 0x10063a0
push dword [ebp - 0x20]
push 0x1001600
push 2
call fcn.01005bd8
add esp, 0xc
lea eax, [edi + 0x20c]
test eax, eax
je 0x10065d2
push eax
call ebx
mov edi, eax
inc edi
lea eax, [edi + edi]
call fcn.0100bbc0
mov dword [ebp - 0x18], esp
mov ecx, esp
push edi
mov eax, dword [ebp + 0xc]
add eax, 0x20c
push eax
push ecx
call fcn.010050f1
mov edi, dword [ebp + 0xc]
push 0
lea ecx, [ebp - 0x24]
push ecx
push dword [ebp - 0x20]
push eax
push dword [ebp + 8]
call esi
test eax, eax
je 0x10063a0
lea eax, [edi + 0x10c]
push eax
push 0x1001624
push 2
call fcn.01005bd8
add esp, 0xc
push 0
lea eax, [ebp - 0x24]
push eax
push 8
lea eax, [edi + 0x30c]
push eax
push dword [ebp + 8]
call esi
test eax, eax
je 0x10063a0
push 0
lea eax, [ebp - 0x24]
push eax
push 8
add edi, 0x314
push edi
push dword [ebp + 8]
call esi
test eax, eax
je 0x10063a0
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
inc eax
jmp 0x1006668
mov dword [ebp - 4], 0xfffffffe
xor eax, eax
lea esp, [ebp - 0x38]
call fcn.0100ba00
ret 8