Function at 0x1000d106
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100d55c4
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x824
push esi
push edi
lea edi, [ebp - 0x830]
mov ecx, 0x209
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
mov dword [ebp - 4], 1
lea ecx, [ebp - 0x81c]
call fcn.100acad7
mov byte [ebp - 4], 2
mov esi, esp
push 0x400
push 0x400
lea ecx, [ebp - 0x81c]
call fcn.1006a88b
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
cmp esi, esp
call fcn.10021b10
push 0xffffffffffffffff
lea ecx, [ebp - 0x81c]
call fcn.1006a9c7
push 0x5c
lea ecx, [ebp - 0x81c]
call fcn.1004fb36
add eax, 1
push eax
lea eax, [ebp - 0x828]
push eax
lea ecx, [ebp - 0x81c]
call fcn.1004f9a6
mov dword [ebp - 0x82c], eax
mov ecx, dword [ebp - 0x82c]
mov dword [ebp - 0x830], ecx
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x830]
push edx
lea ecx, [ebp - 0x81c]
call fcn.1006a2d0
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x828]
call fcn.1006a0d0
push 0x100f5158
lea ecx, [ebp - 0x81c]
call fcn.1006a7e8
mov dword [ebp - 0x820], 0xffffffff
mov word [ebp - 0x80c], 0
mov ecx, 0x1ff
xor eax, eax
lea edi, [ebp - 0x80a]
rep stosd dword es:[edi], eax
stosw word es:[edi], ax
mov word [ebp - 0x814], 0xd
mov word [ebp - 0x812], 0xa
mov word [ebp - 0x810], 0
mov esi, esp
push 0
push 0x80
push 4
push 0
push 1
push 0x40000000
lea ecx, [ebp - 0x81c]
call fcn.100acc14
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0x820], eax
cmp dword [ebp - 0x820], 0xffffffff
je 0x1000d5a4
mov esi, esp
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp esi, esp
call fcn.10021b10
cmp eax, 0xb7
jne 0x1000d2e4
mov esi, esp
push 0
push 0
push 0x1a
mov eax, dword [ebp - 0x820]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea ecx, [ebp - 0x818]
push ecx
push 1
push 0x100f5168
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 2
push 0
push 0xffffffffffffffee
mov eax, dword [ebp - 0x820]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp esi, esp
call fcn.10021b10
jmp 0x1000d395
push 0xfe
push 0xff
push 0x100f516c
lea ecx, [ebp - 0x80c]
push ecx
call fcn.10022150
add esp, 0x10
mov esi, esp
push 0
lea edx, [ebp - 0x818]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.10022340
add esp, 4
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea eax, [ebp - 0x814]
push eax
push str._logs_sync_1___s
lea ecx, [ebp - 0x80c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea edx, [ebp - 0x818]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.100223c0
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov dword [ebp - 0x824], 0
lea eax, [ebp - 0x824]
push eax
call fcn.10025540
add esp, 4
cmp dword [ebp + 0x10], 0xffffffff
jne 0x1000d432
mov esi, esp
lea ecx, [ebp - 0x814]
push ecx
push 0
lea ecx, [ebp + 0xc]
call fcn.1006a88b
push eax
xor edx, edx
cmp dword [ebp + 8], 0
setne dl
push edx
mov eax, dword [ebp - 0x824]
push eax
push str._log_time__d__status__d____s___log__s
lea ecx, [ebp - 0x80c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea edx, [ebp - 0x818]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.100223c0
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
jmp 0x1000d4ba
mov esi, esp
lea eax, [ebp - 0x814]
push eax
push 0
lea ecx, [ebp + 0xc]
call fcn.1006a88b
push eax
push 0
lea ecx, [ebp + 0x14]
call fcn.1006a88b
push eax
mov ecx, dword [ebp + 0x10]
push ecx
xor edx, edx
cmp dword [ebp + 8], 0
setne dl
push edx
mov eax, dword [ebp - 0x824]
push eax
push str._log_time__d__status__d__type__d__name__s____s___log__s
lea ecx, [ebp - 0x80c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x20
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea edx, [ebp - 0x818]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.100223c0
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
lea eax, [ebp - 0x814]
push eax
push str.__logs__s
lea ecx, [ebp - 0x80c]
push ecx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea edx, [ebp - 0x818]
push edx
lea eax, [ebp - 0x80c]
push eax
call fcn.100223c0
add esp, 4
shl eax, 1
push eax
lea ecx, [ebp - 0x80c]
push ecx
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
push 0
push 0x1a
mov eax, dword [ebp - 0x820]
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
lea ecx, [ebp - 0x818]
push ecx
push 1
push 0x100f5274
mov edx, dword [ebp - 0x820]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp esi, esp
call fcn.10021b10
mov esi, esp
mov eax, dword [ebp - 0x820]
push eax
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
cmp esi, esp
call fcn.10021b10
mov esi, esp
mov ecx, dword [ebp - 0x820]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp esi, esp
call fcn.10021b10
mov esi, esp
push 0
push 0
mov edx, dword [0x10107cf8]
push edx
push 0xffff
call dword [sym.imp.USER32.dll_SendMessageW]
cmp esi, esp
call fcn.10021b10
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x81c]
call fcn.1006a0d0
mov byte [ebp - 4], 0
lea ecx, [ebp + 0xc]
call fcn.1006a0d0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.1006a0d0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
add esp, 0x830
cmp ebp, esp
call fcn.10021b10
mov esp, ebp
pop ebp
ret