Function at 0x10013670
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x285c
call fcn.10055700
mov eax, dword [0x1006d258]
xor eax, ebp
mov dword [ebp - 8], eax
push esi
push edi
mov dword [ebp - 4], 0xffffffff
push 0x800
push 0
lea eax, [ebp - 0x1810]
push eax
call fcn.1004e3d0
add esp, 0xc
push 0x800
push 0
lea ecx, [ebp - 0x2010]
push ecx
call fcn.1004e3d0
add esp, 0xc
push 0x800
push 0
lea edx, [ebp - 0x1008]
push edx
call fcn.1004e3d0
add esp, 0xc
push 0x800
push 0
lea eax, [ebp - 0x808]
push eax
call fcn.1004e3d0
add esp, 0xc
push 0x800
push 0
lea ecx, [ebp - 0x2818]
push ecx
call fcn.1004e3d0
add esp, 0xc
mov dword [ebp - 0x2824], 0
jmp 0x10013719
mov edx, dword [ebp - 0x2824]
add edx, 1
mov dword [ebp - 0x2824], edx
cmp dword [ebp - 0x2824], 0x63
jge 0x10013770
mov ecx, 0x10
mov edi, dword [ebp - 0x2824]
imul edi, edi, 0x11
add edi, str.B77F25FB72762DD3
mov esi, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 0x2830], eax
repe cmpsb byte [esi], byte es:[edi]
je 0x10013750
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x2830], ecx
mov edx, dword [ebp - 0x2830]
mov dword [ebp - 0x2834], edx
cmp dword [ebp - 0x2834], 0
jne 0x1001376e
mov eax, dword [ebp - 0x2824]
mov dword [ebp - 4], eax
jmp 0x1001370a
cmp dword [ebp - 4], 0xffffffff
jne 0x100137ed
mov dword [ebp - 4], 0x52
mov ecx, 4
mov edi, 0x10063a54
mov esi, dword [ebp + 0xc]
xor edx, edx
mov dword [ebp - 0x2838], edx
repe cmpsb byte [esi], byte es:[edi]
je 0x100137a1
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x2838], eax
mov ecx, dword [ebp - 0x2838]
mov dword [ebp - 0x283c], ecx
cmp dword [ebp - 0x283c], 0
jne 0x100137d3
push 0
lea edx, [ebp - 0x2010]
push edx
mov eax, dword [ebp + 0xc]
add eax, 4
push eax
call fcn.10047a80
mov dword [ebp - 0x2014], eax
jmp 0x100137eb
push 0
lea ecx, [ebp - 0x2010]
push ecx
mov edx, dword [ebp + 0xc]
push edx
call fcn.10047a80
mov dword [ebp - 0x2014], eax
jmp 0x10013861
mov ecx, 4
mov edi, 0x10063a5c
mov esi, dword [ebp + 0xc]
add esi, 0x10
xor eax, eax
mov dword [ebp - 0x2840], eax
repe cmpsb byte [esi], byte es:[edi]
je 0x10013814
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x2840], ecx
mov edx, dword [ebp - 0x2840]
mov dword [ebp - 0x2844], edx
cmp dword [ebp - 0x2844], 0
jne 0x10013846
push 0
lea eax, [ebp - 0x2010]
push eax
mov ecx, dword [ebp + 0xc]
add ecx, 0x14
push ecx
call fcn.10047a80
mov dword [ebp - 0x2014], eax
jmp 0x10013861
push 0
lea edx, [ebp - 0x2010]
push edx
mov eax, dword [ebp + 0xc]
add eax, 0x10
push eax
call fcn.10047a80
mov dword [ebp - 0x2014], eax
lea ecx, [ebp - 0x281c]
push ecx
lea edx, [ebp - 0x1008]
push edx
mov eax, dword [ebp - 0x2014]
push eax
lea ecx, [ebp - 0x2010]
push ecx
mov edx, dword [ebp - 4]
imul edx, edx, 0x11
add edx, str.B77F25FB72762DD3
push edx
call fcn.10013c00
cmp dword [ebp - 0x281c], 0
jg 0x100138a0
or eax, 0xffffffff
jmp 0x10013ac2
mov ecx, 4
mov edi, str.LOTE
mov esi, dword [ebp + 0xc]
xor eax, eax
mov dword [ebp - 0x2848], eax
repe cmpsb byte [esi], byte es:[edi]
je 0x100138c4
sbb ecx, ecx
sbb ecx, 0xffffffff
mov dword [ebp - 0x2848], ecx
mov edx, dword [ebp - 0x2848]
mov dword [ebp - 0x284c], edx
cmp dword [ebp - 0x284c], 0
jne 0x100138fc
push 0x400
lea eax, [ebp - 0x1008]
push eax
lea ecx, [ebp - 0x1810]
push ecx
call fcn.10013cd0
mov dword [ebp - 0x2820], eax
jmp 0x10013a61
mov ecx, 4
lea edi, [ebp - 0x1008]
mov esi, str.SUDO
xor edx, edx
mov dword [ebp - 0x2850], edx
repe cmpsb byte [esi], byte es:[edi]
je 0x10013923
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x2850], eax
mov ecx, dword [ebp - 0x2850]
mov dword [ebp - 0x2854], ecx
cmp dword [ebp - 0x2854], 0
jne 0x10013991
lea edx, [ebp - 0x1004]
push edx
lea eax, [ebp - 0x2818]
push eax
call fcn.10015750
movzx ecx, al
mov dword [ebp - 0x2828], ecx
cmp dword [ebp - 0x2828], 0
je 0x1001396e
cmp dword [ebp - 0x2828], 2
je 0x1001396e
or eax, 0xffffffff
jmp 0x10013ac2
push 0x400
lea edx, [ebp - 0x2818]
push edx
lea eax, [ebp - 0x1810]
push eax
call fcn.10013eb0
mov dword [ebp - 0x2820], eax
jmp 0x10013a61
mov ecx, 4
lea edi, [ebp - 0x1008]
mov esi, str.NULL
xor edx, edx
mov dword [ebp - 0x2858], edx
repe cmpsb byte [esi], byte es:[edi]
je 0x100139b8
sbb eax, eax
sbb eax, 0xffffffff
mov dword [ebp - 0x2858], eax
mov ecx, dword [ebp - 0x2858]
mov dword [ebp - 0x285c], ecx
cmp dword [ebp - 0x285c], 0
jne 0x10013a1a
lea edx, [ebp - 0x1004]
push edx
lea eax, [ebp - 0x2818]
push eax
call fcn.10015750
movzx ecx, al
mov dword [ebp - 0x282c], ecx
cmp dword [ebp - 0x282c], 0
je 0x100139fa
or eax, 0xffffffff
jmp 0x10013ac2
push 0x400
lea edx, [ebp - 0x2818]
push edx
lea eax, [ebp - 0x1810]
push eax
call fcn.100141b0
mov dword [ebp - 0x2820], eax
jmp 0x10013a61
cmp dword [ebp - 0x281c], 0x400
jl 0x10013a48
mov ecx, dword [ebp - 0x281c]
push ecx
lea edx, [ebp - 0x1008]
push edx
lea eax, [ebp - 0x1810]
push eax
call fcn.100141b0
mov dword [ebp - 0x2820], eax
jmp 0x10013a61
lea ecx, [ebp - 0x1810]
push ecx
lea edx, [ebp - 0x1008]
push edx
call fcn.10015430
mov dword [ebp - 0x2820], eax
push 0x10063a7c
mov eax, dword [ebp + 8]
push eax
lea ecx, [ebp - 0x100c]
push ecx
call fcn.100486a2
add esp, 0xc
cmp dword [ebp - 0x100c], 0
jne 0x10013a87
or eax, 0xffffffff
jmp 0x10013ac2
mov edx, dword [ebp - 0x100c]
push edx
push 1
mov eax, dword [ebp - 0x2820]
push eax
lea ecx, [ebp - 0x1810]
push ecx
call fcn.10048b1f
add esp, 0x10
test eax, eax
ja 0x10013ab1
mov eax, 0xfffffffe
jmp 0x10013ac2
mov edx, dword [ebp - 0x100c]
push edx
call fcn.10048d27
add esp, 4
xor eax, eax
pop edi
pop esi
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.10048168
mov esp, ebp
pop ebp
ret 8