Function at 0x100109e0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1009f130
mov eax, dword fs:[0]
push eax
sub esp, 0x14
push ebx
push esi
push edi
mov eax, dword [0x100b93c0]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [0x100b99b8]
mov edi, eax
mov ebx, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov ecx, dword [edi + 0x40]
test ecx, ecx
je 0x10010a4e
cmp byte [edi + 1], 0
je 0x10010a4e
mov byte [ecx + 0x10], 0
mov esi, dword [edi + 0x40]
test esi, esi
je 0x10010a4e
mov ecx, esi
call fcn.10036310
mov eax, dword [0x100b99b8]
test eax, eax
je 0x10010a43
dec dword [eax + 0xb0]
push esi
call ebx
mov eax, dword [0x100b99b8]
add esp, 4
cmp byte [edi], 0
mov dword [edi + 0x40], 0
je 0x10011399
cmp byte [edi + 0x5368], 0
je 0x10010abc
mov esi, dword [edi + 0x20]
test esi, esi
je 0x10010abc
lea ecx, [ebp - 0x10]
mov dword [eax + 0x536c], 0
mov dword [ebp - 0x10], 0
call fcn.1001f1d0
mov edx, 0x100b34d0
mov dword [ebp - 0x14], eax
mov ecx, esi
call fcn.1000b630
mov esi, eax
test esi, esi
je 0x10010abc
push esi
push dword [ebp - 0x10]
mov dword [ebp - 0x1c], 0
push 1
push dword [ebp - 0x14]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fwrite]
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
call fcn.10021770
xor edx, edx
mov dword [ebp - 0x10], edx
cmp dword [edi + 0x5340], edx
jle 0x10010b15
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov eax, dword [edi + 0x5348]
mov esi, dword [ecx + eax + 4]
test esi, esi
je 0x10010b03
mov ecx, esi
call fcn.10022d70
mov eax, dword [0x100b99b8]
test eax, eax
je 0x10010af7
dec dword [eax + 0xb0]
push esi
call ebx
mov ecx, dword [ebp - 0x14]
add esp, 4
mov edx, dword [ebp - 0x10]
inc edx
add ecx, 8
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x14], ecx
cmp edx, dword [edi + 0x5340]
jl 0x10010ad3
xor esi, esi
cmp dword [edi + 0x53a0], esi
jle 0x10010b4e
xor ecx, ecx
mov dword [ebp - 0x14], ecx
mov edx, dword [edi + 0x53a8]
add edx, ecx
cmp dword [edx + 4], 6
jne 0x10010b3f
mov eax, dword [edx + 0xc]
push edx
push edi
call eax
mov ecx, dword [ebp - 0x14]
add esp, 8
inc esi
add ecx, 0x14
mov dword [ebp - 0x14], ecx
cmp esi, dword [edi + 0x53a0]
jl 0x10010b24
xor edx, edx
lea esi, [edi + 0x3ec4]
mov dword [ebp - 0x14], edx
cmp dword [edi + 0x3ebc], edx
jle 0x10010baf
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov eax, dword [esi]
mov esi, dword [ecx + eax]
test esi, esi
je 0x10010b91
mov ecx, esi
call fcn.1000d970
mov eax, dword [0x100b99b8]
test eax, eax
je 0x10010b85
dec dword [eax + 0xb0]
push esi
call ebx
mov ecx, dword [ebp - 0x10]
add esp, 4
mov edx, dword [ebp - 0x14]
inc edx
lea esi, [edi + 0x3ec4]
add ecx, 4
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], ecx
cmp edx, dword [edi + 0x3ebc]
jl 0x10010b66
lea esi, [edi + 0x3ec4]
mov ecx, dword [esi]
test ecx, ecx
je 0x10010be4
mov eax, dword [0x100b99b8]
mov dword [edi + 0x3ec0], 0
mov dword [edi + 0x3ebc], 0
test eax, eax
je 0x10010bd8
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [esi], 0
mov ecx, dword [edi + 0x3ed0]
test ecx, ecx
je 0x10010c21
mov eax, dword [0x100b99b8]
mov dword [edi + 0x3ecc], 0
mov dword [edi + 0x3ec8], 0
test eax, eax
je 0x10010c11
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3ed0], 0
mov ecx, dword [edi + 0x3edc]
test ecx, ecx
je 0x10010c5e
mov eax, dword [0x100b99b8]
mov dword [edi + 0x3ed8], 0
mov dword [edi + 0x3ed4], 0
test eax, eax
je 0x10010c4e
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3edc], 0
mov dword [edi + 0x3f04], 0
mov ecx, dword [edi + 0x3ee8]
test ecx, ecx
je 0x10010ca5
mov eax, dword [0x100b99b8]
mov dword [edi + 0x3ee4], 0
mov dword [edi + 0x3ee0], 0
test eax, eax
je 0x10010c95
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3ee8], 0
mov ecx, dword [edi + 0x3ef4]
test ecx, ecx
je 0x10010ce2
mov eax, dword [0x100b99b8]
mov dword [edi + 0x3ef0], 0
mov dword [edi + 0x3eec], 0
test eax, eax
je 0x10010cd2
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x3ef4], 0
mov dword [edi + 0x4120], 0
mov dword [edi + 0x3f0c], 0
mov dword [edi + 0x3f08], 0
mov dword [edi + 0x3f8c], 0
mov dword [edi + 0x3f78], 0
mov dword [edi + 0x3f14], 0
mov ecx, dword [edi + 0x407c]
test ecx, ecx
je 0x10010d5b
mov eax, dword [0x100b99b8]
mov dword [edi + 0x4078], 0
mov dword [edi + 0x4074], 0
test eax, eax
je 0x10010d4b
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x407c], 0
mov ecx, dword [edi + 0x4088]
test ecx, ecx
je 0x10010d98
mov eax, dword [0x100b99b8]
mov dword [edi + 0x4084], 0
mov dword [edi + 0x4080], 0
test eax, eax
je 0x10010d88
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4088], 0
mov ecx, dword [edi + 0x4094]
test ecx, ecx
je 0x10010dd5
mov eax, dword [0x100b99b8]
mov dword [edi + 0x4090], 0
mov dword [edi + 0x408c], 0
test eax, eax
je 0x10010dc5
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4094], 0
mov ecx, dword [edi + 0x40c4]
test ecx, ecx
je 0x10010e12
mov eax, dword [0x100b99b8]
mov dword [edi + 0x40c0], 0
mov dword [edi + 0x40bc], 0
test eax, eax
je 0x10010e02
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x40c4], 0
mov ecx, dword [edi + 0x40d0]
test ecx, ecx
je 0x10010e4f
mov eax, dword [0x100b99b8]
mov dword [edi + 0x40cc], 0
mov dword [edi + 0x40c8], 0
test eax, eax
je 0x10010e3f
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x40d0], 0
xor edx, edx
mov dword [edi + 0x40f0], 0
mov dword [edi + 0x40ec], 0
mov dword [edi + 0x40e8], 0
mov dword [ebp - 0x14], edx
cmp dword [edi + 0x40d8], edx
jle 0x10010f3c
xor ecx, ecx
mov dword [ebp - 0x10], ecx
mov eax, dword [edi + 0x40e0]
mov esi, dword [ecx + eax]
test esi, esi
je 0x10010f26
mov dword [ebp - 4], 0
mov eax, dword [esi + 0x78]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10010ec3
mov ecx, eax
call fcn.10009270
mov eax, dword [0x100b99b8]
test eax, eax
je 0x10010ebb
dec dword [eax + 0xb0]
push dword [ebp - 0x1c]
call ebx
add esp, 4
mov eax, dword [esi + 0x7c]
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x10010eeb
mov ecx, eax
call fcn.10009270
mov eax, dword [0x100b99b8]
test eax, eax
je 0x10010ee3
dec dword [eax + 0xb0]
push dword [ebp - 0x1c]
call ebx
add esp, 4
push 0x1002a280
push 2
push 0xc
lea eax, [esi + 0xb0]
mov byte [ebp - 4], 1
push eax
call fcn.1009cca0
mov dword [ebp - 4], 0xffffffff
mov eax, dword [0x100b99b8]
test eax, eax
je 0x10010f1a
dec dword [eax + 0xb0]
push esi
call ebx
mov ecx, dword [ebp - 0x10]
add esp, 4
mov edx, dword [ebp - 0x14]
inc edx
add ecx, 4
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], ecx
cmp edx, dword [edi + 0x40d8]
jl 0x10010e83
mov ecx, dword [edi + 0x40e0]
test ecx, ecx
je 0x10010f79
mov eax, dword [0x100b99b8]
mov dword [edi + 0x40dc], 0
mov dword [edi + 0x40d8], 0
test eax, eax
je 0x10010f69
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x40e0], 0
lea ecx, [edi + 0x4380]
call fcn.1002a5d0
mov ecx, dword [edi + 0x43a8]
test ecx, ecx
je 0x10010fc1
mov eax, dword [0x100b99b8]
mov dword [edi + 0x43a4], 0
mov dword [edi + 0x43a0], 0
test eax, eax
je 0x10010fb1
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x43a8], 0
mov ecx, dword [edi + 0x43b4]
test ecx, ecx
je 0x10010ffe
mov eax, dword [0x100b99b8]
mov dword [edi + 0x43b0], 0
mov dword [edi + 0x43ac], 0
test eax, eax
je 0x10010fee
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x43b4], 0
xor esi, esi
cmp dword [edi + 0x4324], esi
jle 0x1001104c
xor ecx, ecx
mov dword [ebp - 0x14], ecx
nop dword [eax]
mov eax, dword [edi + 0x432c]
mov edx, dword [eax + ecx + 0x18]
test edx, edx
je 0x10011036
mov eax, dword [0x100b99b8]
test eax, eax
je 0x1001102d
dec dword [eax + 0xb0]
push edx
call ebx
mov ecx, dword [ebp - 0x14]
add esp, 4
inc esi
mov dword [ebp - 4], 0xffffffff
add ecx, 0x1c
mov dword [ebp - 0x14], ecx
cmp esi, dword [edi + 0x4324]
jl 0x10011010
mov ecx, dword [edi + 0x432c]
test ecx, ecx
je 0x10011089
mov eax, dword [0x100b99b8]
mov dword [edi + 0x4328], 0
mov dword [edi + 0x4324], 0
test eax, eax
je 0x10011079
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x432c], 0
lea ecx, [edi + 0x4344]
call fcn.1002a7a0
cmp dword [edi + 0x4338], 0
mov dword [ebp - 0x14], 0
jle 0x10011102
xor ecx, ecx
mov dword [ebp - 0x10], ecx
nop dword [eax]
mov esi, dword [edi + 0x4340]
add esi, ecx
lea ecx, [esi + 0x10]
mov dword [ebp - 4], 3
call fcn.10035b20
mov ecx, dword [esi + 0x20]
test ecx, ecx
je 0x100110e3
mov eax, dword [0x100b99b8]
test eax, eax
je 0x100110dd
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov eax, dword [ebp - 0x14]
mov dword [ebp - 4], 0xffffffff
inc eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x68
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
cmp eax, dword [edi + 0x4338]
jl 0x100110b0
mov ecx, dword [edi + 0x4340]
test ecx, ecx
je 0x1001113f
mov eax, dword [0x100b99b8]
mov dword [edi + 0x433c], 0
mov dword [edi + 0x4338], 0
test eax, eax
je 0x1001112f
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4340], 0
mov ecx, dword [edi + 0x4378]
test ecx, ecx
je 0x1001117c
mov eax, dword [0x100b99b8]
mov dword [edi + 0x4374], 0
mov dword [edi + 0x4370], 0
test eax, eax
je 0x1001116c
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x4378], 0
mov ecx, dword [edi + 0x5308]
test ecx, ecx
je 0x100111b9
mov eax, dword [0x100b99b8]
mov dword [edi + 0x5304], 0
mov dword [edi + 0x5300], 0
test eax, eax
je 0x100111a9
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5308], 0
mov ecx, dword [edi + 0x5314]
test ecx, ecx
je 0x100111f6
mov eax, dword [0x100b99b8]
mov dword [edi + 0x5310], 0
mov dword [edi + 0x530c], 0
test eax, eax
je 0x100111e6
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5314], 0
mov ecx, dword [edi + 0x43d4]
test ecx, ecx
je 0x10011233
mov eax, dword [0x100b99b8]
mov dword [edi + 0x43d0], 0
mov dword [edi + 0x43cc], 0
test eax, eax
je 0x10011223
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x43d4], 0
mov ecx, dword [edi + 0x43e0]
test ecx, ecx
je 0x10011270
mov eax, dword [0x100b99b8]
mov dword [edi + 0x43dc], 0
mov dword [edi + 0x43d8], 0
test eax, eax
je 0x10011260
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x43e0], 0
mov ecx, dword [edi + 0x43ec]
test ecx, ecx
je 0x100112ad
mov eax, dword [0x100b99b8]
mov dword [edi + 0x43e8], 0
mov dword [edi + 0x43e4], 0
test eax, eax
je 0x1001129d
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x43ec], 0
mov ecx, dword [edi + 0x5390]
test ecx, ecx
je 0x100112ea
mov eax, dword [0x100b99b8]
mov dword [edi + 0x538c], 0
mov dword [edi + 0x5388], 0
test eax, eax
je 0x100112da
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5390], 0
mov ecx, dword [edi + 0x5384]
test ecx, ecx
je 0x10011327
mov eax, dword [0x100b99b8]
mov dword [edi + 0x5380], 0
mov dword [edi + 0x537c], 0
test eax, eax
je 0x10011317
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x5384], 0
cmp dword [edi + 0x53b8], 0
je 0x10011359
mov esi, dword [edi + 0x53b8]
push 1
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll___acrt_iob_func]
add esp, 4
cmp esi, eax
je 0x1001134f
push esi
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 4
mov dword [edi + 0x53b8], 0
mov ecx, dword [edi + 0x53c4]
test ecx, ecx
je 0x10011396
mov eax, dword [0x100b99b8]
mov dword [edi + 0x53c0], 0
mov dword [edi + 0x53bc], 0
test eax, eax
je 0x10011386
dec dword [eax + 0xb0]
push ecx
call ebx
add esp, 4
mov dword [edi + 0x53c4], 0
mov byte [edi], 0
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret