Function at 0x10006a10
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x48
mov dword [esp + 0x14], ecx
mov eax, dword [ecx + 0x38]
mov dword [esp + 0x38], eax
mov eax, 0xe51bd5dc
jmp 0x10006a60
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0x4c]
mov dword [esp + 0x34], eax
cmp dword [esp + 0x34], 0
mov eax, 0x97393484
mov ecx, 0xaa78c841
cmove eax, ecx
mov ecx, dword [esp]
mov dword [esp + 0x18], ecx
mov ebx, dword [esp + 4]
nop word cs:[eax + eax]
cmp eax, 0xe455a71e
jle 0x10006aa0
cmp eax, 0x3cd6681c
jg 0x10006ae0
cmp eax, 0xe455a71f
je 0x10006b7a
cmp eax, 0xe46e582f
je 0x10006bde
cmp eax, 0xe51bd5dc
jne 0x10006a60
cmp dword [esp + 0x38], 0
mov eax, 0x8f4ece7e
mov ecx, 0xe455a71f
cmove eax, ecx
jmp 0x10006a60
cmp eax, 0xaa78c840
jle 0x10006b30
cmp eax, 0xaa78c841
je 0x10006c0a
cmp eax, 0xac33fb1d
je 0x10006a2e
cmp eax, 0xc5156ef4
jne 0x10006a60
mov eax, 0x3cd6681d
mov esi, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov dword [esp + 0x30], ecx
jmp 0x10006a60
cmp eax, 0x3cd6681d
je 0x10006c28
cmp eax, 0x65a663bf
jne 0x10006ce5
mov dword [esp], edi
mov eax, dword [esp + 0x2c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x28]
mov dword [esp + 0x3c], eax
xor eax, eax
cmp eax, dword [esp]
mov eax, 0
sbb eax, dword [esp + 4]
mov eax, 0xaa78c841
mov ecx, 0xac33fb1d
cmovl eax, ecx
jmp 0x10006a4b
cmp eax, 0x8f4ece7e
je 0x10006c71
cmp eax, 0x97393484
jne 0x10006a60
mov eax, dword [esp + 4]
push dword [esp + 0x34]
push dword [esp + 4]
push 1
push dword [esp + 0x48]
call fcn.10015fe6
add esp, 0x10
mov ecx, dword [esp]
mov ebx, dword [esp + 4]
sub ecx, eax
mov dword [esp + 0x18], ecx
sbb ebx, 0
mov eax, 0xaa78c841
jmp 0x10006a60
mov eax, dword [esp + 0x14]
mov dword [esp + 0x1c], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x20]
mov ecx, dword [ecx]
mov dword [esp + 0x40], ecx
mov edx, 0x6bd6bd59
nop word cs:[eax + eax]
nop
cmp edx, 0xd45e8636
je 0x10006bd2
cmp edx, 0x66e07745
je 0x10006c95
cmp edx, 0x6bd6bd59
jne 0x10006ba0
cmp dword [esp + 0x40], 0
mov edx, 0xd45e8636
mov ecx, 0x66e07745
cmove edx, ecx
xor ecx, ecx
jmp 0x10006ba0
mov ecx, dword [eax + 0x30]
mov ecx, dword [ecx]
mov edx, 0x66e07745
jmp 0x10006ba0
mov eax, dword [ebp + 0xc]
cmp eax, dword [esp + 8]
mov eax, dword [ebp + 0x10]
sbb eax, dword [esp + 0xc]
mov eax, 0x3cd6681d
mov ecx, 0xc5156ef4
cmovl eax, ecx
mov esi, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov dword [esp + 0x30], ecx
jmp 0x10006a60
mov eax, dword [ebp + 0xc]
sub eax, dword [esp + 0x18]
mov dword [esp + 0x24], eax
mov eax, dword [ebp + 0x10]
sbb eax, ebx
mov dword [esp + 0x20], eax
mov eax, 0x6b4dc789
jmp 0x10006a60
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x20]
push esi
mov ecx, dword [ebp + 8]
mov edi, ecx
push ecx
push dword [eax]
call fcn.100118f0
add esp, 0xc
mov edx, dword [ebp + 0xc]
sub edx, esi
mov eax, dword [ebp + 0x10]
sbb eax, dword [esp + 0x30]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax + 0x30]
sub dword [ecx], esi
lea ecx, [edi + esi]
mov dword [esp + 0x28], ecx
mov edi, edx
mov eax, dword [eax + 0x20]
add dword [eax], esi
mov eax, 0x65a663bf
jmp 0x10006a60
mov ecx, dword [esp + 0x14]
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp + 8]
call fcn.10008020
mov dword [esp + 0x24], eax
mov dword [esp + 0x20], edx
mov eax, 0x6b4dc789
jmp 0x10006a60
mov dword [esp + 8], ecx
sar ecx, 0x1f
mov dword [esp + 0xc], ecx
xor eax, eax
cmp eax, dword [esp + 8]
mov eax, 0
sbb eax, dword [esp + 0xc]
mov eax, 0x65a663bf
mov ecx, 0xe46e582f
cmovl eax, ecx
mov edi, dword [ebp + 0xc]
mov ecx, edi
neg ecx
mov ecx, 0
mov edx, dword [ebp + 0x10]
sbb ecx, edx
mov ecx, 0x65a663bf
cmovge eax, ecx
mov dword [esp + 0x2c], edx
mov ecx, dword [ebp + 8]
mov dword [esp + 0x28], ecx
jmp 0x10006a60
cmp eax, 0x6b4dc789
jne 0x10006a60
mov eax, dword [esp + 0x24]
mov edx, dword [esp + 0x20]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 0xc