Function at 0x10002ffc
Capabilities:
Write file on windows

Disassembly:
mov eax, 0x10009180
call sub.MSVCRT.dll__EH_prolog
sub esp, 0x44
test byte [0x10011abc], 1
push esi
mov esi, 0x10011ab8
jne 0x10003031
or byte [0x10011abc], 1
mov ecx, esi
call fcn.10008b46
push 0x100032d5
call fcn.10008f0b
pop ecx
lea ecx, [ebp - 0x10]
call fcn.10008b46
mov eax, dword [ebp + 0x10]
and dword [ebp - 4], 0
test eax, eax
je 0x10003051
cmp byte [eax], 0
je 0x10003051
push eax
mov ecx, esi
call fcn.10008b40
push 0x10011acc
push dword [0x10011ab8]
call dword [sym.imp.MSVCRT.dll__mbscmp]
pop ecx
test eax, eax
pop ecx
je 0x100030bb
cmp byte [ebp + 0x14], 1
mov esi, dword [sym.imp.MSVCRT.dll_fopen]
jne 0x1000309a
and byte [ebp - 0x16], 0
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 0x18], 0x77
push dword [0x10011ab8]
mov byte [ebp - 0x17], 0x2b
call esi
pop ecx
test eax, eax
pop ecx
je 0x100030bb
push eax
call dword [sym.imp.MSVCRT.dll_fclose]
pop ecx
and byte [ebp - 0x16], 0
lea eax, [ebp - 0x18]
push eax
mov byte [ebp - 0x18], 0x61
push dword [0x10011ab8]
mov byte [ebp - 0x17], 0x2b
call esi
pop ecx
mov dword [ebp + 0x10], eax
test eax, eax
pop ecx
jne 0x100030cc
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::CString
jmp 0x100032c8
push ebx
lea eax, [ebp - 0x28]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0x5b
call fcn.10008467
or ebx, 0xffffffff
mov edi, eax
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
lea edx, [ebp - 0x3c]
mov eax, ecx
mov esi, edi
mov edi, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, eax
movzx eax, word [ebp - 0x20]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x3c]
mov ecx, ebx
xor eax, eax
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [ebp + ecx - 0x3c]
push eax
call fcn.10008205
push 0x3a
call fcn.10008467
mov edi, eax
mov ecx, ebx
xor eax, eax
lea edx, [ebp - 0x3c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
mov ecx, ebx
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x1e]
mov ecx, edx
push eax
and ecx, 3
xor eax, eax
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x3c]
mov ecx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [ebp + ecx - 0x3c]
push eax
call fcn.10008205
push 0x3a
call fcn.10008467
mov edi, eax
mov ecx, ebx
xor eax, eax
lea edx, [ebp - 0x3c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
mov esi, edi
mov edi, edx
mov edx, ecx
mov ecx, ebx
repne scasb al, byte es:[edi]
dec edi
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
movzx eax, word [ebp - 0x1c]
mov ecx, edx
push eax
and ecx, 3
xor eax, eax
rep movsb byte es:[edi], byte [esi]
lea edi, [ebp - 0x3c]
mov ecx, ebx
repne scasb al, byte es:[edi]
not ecx
dec ecx
lea eax, [ebp + ecx - 0x3c]
push eax
call fcn.10008205
push 0x5d
call fcn.10008467
mov edi, eax
mov ecx, ebx
xor eax, eax
lea edx, [ebp - 0x3c]
repne scasb al, byte es:[edi]
not ecx
sub edi, ecx
push dword [ebp + 8]
mov esi, edi
mov edi, edx
mov edx, ecx
mov ecx, ebx
repne scasb al, byte es:[edi]
mov ecx, edx
dec edi
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea eax, [ebp - 0x50]
and ecx, 3
push eax
rep movsb byte es:[edi], byte [esi]
call fcn.100082d9
add esp, 0x30
cmp dword [ebp + 0xc], 0
je 0x1000325c
cmp dword [ebp + 8], 0x3f800000
je 0x1000324f
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x10]
push eax
call fcn.10008b40
push 0x20
call fcn.10008467
pop ecx
push eax
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator
push 0x3c
call fcn.10008467
pop ecx
push eax
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator
lea eax, [ebp - 0x50]
lea ecx, [ebp - 0x10]
push eax
call sub.MFC42.DLL_CString::operator
push 0x3e
call fcn.10008467
pop ecx
push eax
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator
push dword [ebp + 0xc]
jmp 0x1000327d
push dword [ebp + 0xc]
lea ecx, [ebp - 0x10]
call fcn.10008b40
jmp 0x10003285
lea eax, [ebp - 0x3c]
lea ecx, [ebp - 0x10]
push eax
call fcn.10008b40
push 0x20
call fcn.10008467
pop ecx
push eax
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator
cmp byte [ebp + 0x14], 0
jne 0x1000329c
push 0xa
call fcn.10008467
pop ecx
push eax
lea ecx, [ebp - 0x10]
call sub.MFC42.DLL_CString::operator
mov eax, dword [ebp - 0x10]
push dword [ebp + 0x10]
mov ecx, dword [eax - 8]
push 1
push ecx
push eax
call dword [sym.imp.MSVCRT.dll_fwrite]
push dword [ebp + 0x10]
call dword [sym.imp.MSVCRT.dll_fclose]
add esp, 0x14
lea ecx, [ebp - 0x10]
mov dword [ebp - 4], ebx
call sub.MFC42.DLL_CString::CString
pop edi
pop ebx
mov ecx, dword [ebp - 0xc]
pop esi
mov dword fs:[0], ecx
leave
ret