Function at 0x1072f34
Capabilities:
Write file on windows

Disassembly:
push 0x598
mov eax, 0x10d03e4
call fcn.0109883f
push 0
sub esp, 0x58
mov dword [ebp - 0x548], esp
mov dword [ebp - 0x544], ecx
mov ecx, esp
push 0xff
push 1
push 0x25b
mov edi, 0x1018f40
push edi
mov esi, 0x10189ec
push esi
mov ebx, 0x1018980
push ebx
call fcn.01099386
lea ecx, [ebp - 0x5a4]
call fcn.0109a83a
mov ecx, dword [ebp - 0x544]
and dword [ebp - 4], 0
call fcn.01072933
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x564], 0x10059a0
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x544]
mov eax, dword [eax + 0x68]
and dword [ebp - 0x554], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x55c], 0x9d4feff5
mov dword [ebp - 0x558], 1
mov dword [ebp - 0x538], eax
test eax, eax
je 0x107304d
jmp 0x1072fe3
mov eax, dword [ebp - 0x538]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push eax
call dword [ecx + 0x28]
push 0x1007b10
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x548], esp
push 0xff
push 1
push 0x26f
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.01099386
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043107
add esp, 0x60
test byte [ebp - 0x53c], 8
je 0x107303b
inc dword [ebp - 0x554]
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
mov dword [ebp - 0x538], eax
test eax, eax
jne 0x1072fdd
push 0
lea eax, [ebp - 0x540]
push eax
push 0xc
lea eax, [ebp - 0x55c]
push eax
push dword [ebp - 0x550]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1073078
cmp dword [ebp - 0x540], 0xc
je 0x10730c5
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x107308c
and eax, 0xffff
or eax, 0x80070000
push 0x1018bbc
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x548], esp
push 0xff
push 1
push 0x27b
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.01099386
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043107
add esp, 0x60
mov eax, dword [ebp - 0x544]
mov eax, dword [eax + 0x68]
mov dword [ebp - 0x538], eax
test eax, eax
je 0x1073314
jmp 0x10730e4
mov eax, dword [ebp - 0x538]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x548]
push edx
push eax
call dword [ecx + 0x28]
push 0x1007b10
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x285
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.01099386
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043107
add esp, 0x60
test byte [ebp - 0x548], 8
jne 0x1073149
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
mov dword [ebp - 0x538], eax
jmp 0x1073307
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x538]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push eax
mov byte [ebp - 4], 2
call dword [ecx + 0xc]
push 0x1007a28
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x293
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.01099386
lea eax, [ebp - 0x5a4]
push eax
call fcn.01046812
mov eax, dword [ebp - 0x53c]
add esp, 0x60
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x10731ac
mov esi, dword [ebp - 0x538]
sub eax, ecx
sar eax, 1
inc eax
mov dword [ebp - 0x534], eax
add esi, 4
lea edi, [ebp - 0x530]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x540]
push eax
movsd dword es:[edi], dword [esi]
push 0x14
lea eax, [ebp - 0x534]
push eax
push dword [ebp - 0x550]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
call esi
test eax, eax
je 0x1073201
cmp dword [ebp - 0x540], 0x14
je 0x1073256
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1073215
and eax, 0xffff
or eax, 0x80070000
push 0x1018bbc
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x2a0
push 0x1018f40
push 0x10189ec
push ebx
mov dword [ebp - 0x59c], eax
call fcn.01099386
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043107
add esp, 0x60
push 0
lea eax, [ebp - 0x540]
push eax
mov eax, dword [ebp - 0x534]
add eax, eax
push eax
push dword [ebp - 0x53c]
push dword [ebp - 0x550]
call esi
test eax, eax
je 0x107328a
mov eax, dword [ebp - 0x534]
add eax, eax
cmp dword [ebp - 0x540], eax
je 0x10732df
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x107329e
and eax, 0xffff
or eax, 0x80070000
push 0x1018bbc
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x2a8
push 0x1018f40
push 0x10189ec
push ebx
mov dword [ebp - 0x59c], eax
call fcn.01099386
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043107
add esp, 0x60
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
push dword [ebp - 0x53c]
mov dword [ebp - 0x538], eax
mov byte [ebp - 4], 1
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, 0x1018f40
mov esi, 0x10189ec
cmp dword [ebp - 0x538], 0
jne 0x10730de
lea ecx, [ebp - 0x564]
call fcn.01047340
mov edi, dword [ebp - 0x544]
mov esi, 0x144
push esi
lea eax, [ebp - 0x298]
push eax
push 0
mov ecx, edi
call fcn.01071e74
push esi
lea eax, [ebp - 0x520]
push eax
push 1
mov ecx, edi
call fcn.01071e74
lea eax, [ebp - 0x298]
push eax
mov ecx, edi
call fcn.01071cf8
test al, al
je 0x107336c
lea eax, [ebp - 0x298]
push eax
mov ecx, edi
call fcn.01071dc9
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x520]
push eax
mov ecx, edi
call fcn.01071d19
lea ecx, [ebp - 0x564]
call fcn.0104a1b7
lea ecx, [ebp - 0x5a4]
call fcn.0109a8f3
call fcn.010988d1
ret