Function at 0x10731fc
Capabilities:
Write file on windows

Disassembly:
push 0x598
mov eax, 0x10d0653
call fcn.01098a33
push 0
sub esp, 0x58
mov dword [ebp - 0x548], esp
mov dword [ebp - 0x544], ecx
mov ecx, esp
push 0xff
push 1
push 0x25b
mov edi, 0x1019070
push edi
mov esi, 0x1018b1c
push esi
mov ebx, 0x1018ab0
push ebx
call fcn.0109958e
lea ecx, [ebp - 0x5a4]
call fcn.0109aa5f
mov ecx, dword [ebp - 0x544]
and dword [ebp - 4], 0
call fcn.01072bfb
mov dword [ebp - 0x550], eax
mov dword [ebp - 0x564], 0x10059a0
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x544]
mov eax, dword [eax + 0x68]
and dword [ebp - 0x554], 0
mov byte [ebp - 4], 1
mov dword [ebp - 0x55c], 0x9d4feff5
mov dword [ebp - 0x558], 1
mov dword [ebp - 0x538], eax
test eax, eax
je 0x1073315
jmp 0x10732ab
mov eax, dword [ebp - 0x538]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push eax
call dword [ecx + 0x28]
push 0x1007b08
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x548], esp
push 0xff
push 1
push 0x26f
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.0109958e
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043227
add esp, 0x60
test byte [ebp - 0x53c], 8
je 0x1073303
inc dword [ebp - 0x554]
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
mov dword [ebp - 0x538], eax
test eax, eax
jne 0x10732a5
push 0
lea eax, [ebp - 0x540]
push eax
push 0xc
lea eax, [ebp - 0x55c]
push eax
push dword [ebp - 0x550]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1073340
cmp dword [ebp - 0x540], 0xc
je 0x107338d
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1073354
and eax, 0xffff
or eax, 0x80070000
push 0x1018cec
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x548], esp
push 0xff
push 1
push 0x27b
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.0109958e
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043227
add esp, 0x60
mov eax, dword [ebp - 0x544]
mov eax, dword [eax + 0x68]
mov dword [ebp - 0x538], eax
test eax, eax
je 0x10735dc
jmp 0x10733ac
mov eax, dword [ebp - 0x538]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x548]
push edx
push eax
call dword [ecx + 0x28]
push 0x1007b08
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x285
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.0109958e
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043227
add esp, 0x60
test byte [ebp - 0x548], 8
jne 0x1073411
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
mov dword [ebp - 0x538], eax
jmp 0x10735cf
and dword [ebp - 0x53c], 0
mov eax, dword [ebp - 0x538]
mov eax, dword [eax + 0x14]
mov ecx, dword [eax]
lea edx, [ebp - 0x53c]
push edx
push eax
mov byte [ebp - 4], 2
call dword [ecx + 0xc]
push 0x1007a20
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x293
push edi
push esi
push ebx
mov dword [ebp - 0x59c], eax
call fcn.0109958e
lea eax, [ebp - 0x5a4]
push eax
call fcn.010468d9
mov eax, dword [ebp - 0x53c]
add esp, 0x60
lea ecx, [eax + 2]
mov dx, word [eax]
inc eax
inc eax
test dx, dx
jne 0x1073474
mov esi, dword [ebp - 0x538]
sub eax, ecx
sar eax, 1
inc eax
mov dword [ebp - 0x534], eax
add esi, 4
lea edi, [ebp - 0x530]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
push 0
lea eax, [ebp - 0x540]
push eax
movsd dword es:[edi], dword [esi]
push 0x14
lea eax, [ebp - 0x534]
push eax
push dword [ebp - 0x550]
movsd dword es:[edi], dword [esi]
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
call esi
test eax, eax
je 0x10734c9
cmp dword [ebp - 0x540], 0x14
je 0x107351e
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x10734dd
and eax, 0xffff
or eax, 0x80070000
push 0x1018cec
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x2a0
push 0x1019070
push 0x1018b1c
push ebx
mov dword [ebp - 0x59c], eax
call fcn.0109958e
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043227
add esp, 0x60
push 0
lea eax, [ebp - 0x540]
push eax
mov eax, dword [ebp - 0x534]
add eax, eax
push eax
push dword [ebp - 0x53c]
push dword [ebp - 0x550]
call esi
test eax, eax
je 0x1073552
mov eax, dword [ebp - 0x534]
add eax, eax
cmp dword [ebp - 0x540], eax
je 0x10735a7
call dword [sym.imp.KERNEL32.dll_GetLastError]
test eax, eax
jle 0x1073566
and eax, 0xffff
or eax, 0x80070000
push 0x1018cec
sub esp, 0x58
mov ecx, esp
mov dword [ebp - 0x54c], esp
push 0xff
push 1
push 0x2a8
push 0x1019070
push 0x1018b1c
push ebx
mov dword [ebp - 0x59c], eax
call fcn.0109958e
lea eax, [ebp - 0x5a4]
push eax
call fcn.01043227
add esp, 0x60
mov eax, dword [ebp - 0x538]
mov eax, dword [eax]
push dword [ebp - 0x53c]
mov dword [ebp - 0x538], eax
mov byte [ebp - 4], 1
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
mov edi, 0x1019070
mov esi, 0x1018b1c
cmp dword [ebp - 0x538], 0
jne 0x10733a6
lea ecx, [ebp - 0x564]
call fcn.01047383
mov edi, dword [ebp - 0x544]
mov esi, 0x144
push esi
lea eax, [ebp - 0x298]
push eax
push 0
mov ecx, edi
call fcn.0107213c
push esi
lea eax, [ebp - 0x520]
push eax
push 1
mov ecx, edi
call fcn.0107213c
lea eax, [ebp - 0x298]
push eax
mov ecx, edi
call fcn.01071fc0
test al, al
je 0x1073634
lea eax, [ebp - 0x298]
push eax
mov ecx, edi
call fcn.01072091
lea eax, [ebp - 0x298]
push eax
lea eax, [ebp - 0x520]
push eax
mov ecx, edi
call fcn.01071fe1
lea ecx, [ebp - 0x564]
call fcn.0104a1c0
lea ecx, [ebp - 0x5a4]
call fcn.0109ab18
call fcn.01098ac5
ret