Function at 0x100a76d0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10130f48
mov eax, dword fs:[0]
push eax
sub esp, 0x2c8
mov eax, dword [0x10188068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, ecx
mov eax, dword [ebp + 8]
mov dword [ebp - 0x2cc], eax
test esi, esi
jne 0x100a7716
mov eax, 0x80004005
jmp 0x100a7d2a
push edx
lea ecx, [ebp - 0x230]
call fcn.10045090
mov dword [ebp - 4], 0
push 8
mov dword [ebp - 0x2c4], 0
mov dword [ebp - 0x2c0], 0
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2b8], 0
mov dword [ebp - 0x2b4], 0
call fcn.100e279e
mov dword [ebp - 0x2c4], eax
lea ecx, [ebp - 0x2c4]
mov dword [eax], 0
mov dword [eax + 4], 0
mov eax, dword [ebp - 0x2c4]
mov dword [eax], ecx
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x230]
push dword [ebp - 0x2d4]
cmp dword [ebp - 0x21c], 8
mov edx, dword [ebp - 0x220]
cmovae ecx, dword [ebp - 0x230]
push 1
push 0x101601ac
push 0
call fcn.1006edd0
add esp, 0x14
test eax, eax
je 0x100a7819
lea eax, [ebp - 0x230]
push eax
lea ecx, [ebp - 0x248]
call fcn.100a99f0
mov edi, eax
add esp, 4
lea eax, [ebp - 0x230]
cmp eax, edi
je 0x100a780e
mov ecx, eax
call fcn.10043ac0
movups xmm0, xmmword [edi]
xor eax, eax
movups xmmword [ebp - 0x230], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x220], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
lea ecx, [ebp - 0x248]
call fcn.10043ac0
mov edx, dword [ebp - 0x220]
lea ecx, [ebp - 0x230]
xor edi, edi
cmp dword [ebp - 0x21c], 8
push 1
cmovae ecx, dword [ebp - 0x230]
push 0x101601ac
push edi
call fcn.100492b0
mov ecx, dword [esi]
add esp, 0xc
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2d4], esi
push esi
call dword [ecx + 4]
mov eax, dword [ebp - 0x2c8]
mov byte [ebp - 4], 2
mov edx, dword [ebp - 0x220]
test eax, eax
js 0x100a7a62
mov dword [ebp - 0x2b0], edx
cmp edi, eax
jge 0x100a7a25
xor ecx, ecx
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 7
mov word [ebp - 0x248], cx
cmp edx, edi
jb 0x100a7d45
mov ecx, eax
sub edx, edi
sub ecx, edi
lea eax, [ebp - 0x230]
cmp edx, ecx
cmovb ecx, edx
cmp dword [ebp - 0x21c], 8
push ecx
cmovae eax, dword [ebp - 0x230]
lea ecx, [ebp - 0x248]
lea eax, [eax + edi*2]
push eax
call fcn.10043b50
mov dword [ebp - 0x2ac], 0
lea edx, [ebp - 0x2ac]
mov byte [ebp - 4], 4
cmp dword [ebp - 0x234], 8
lea ecx, [ebp - 0x248]
mov eax, dword [esi]
cmovae ecx, dword [ebp - 0x248]
push edx
push 0
push 0
push 0x10
push 0
push ecx
push esi
call dword [eax + 0x18]
mov edi, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x2b8]
mov eax, dword [ebp - 0x2ac]
mov ecx, dword [ebp - 0x2bc]
mov dword [ebp - 0x2d0], eax
lea eax, [edi + edx]
test al, 3
jne 0x100a7956
lea eax, [edi + 4]
shr eax, 2
cmp ecx, eax
ja 0x100a7956
push ecx
lea ecx, [ebp - 0x2c4]
call fcn.100868f0
mov edi, dword [ebp - 0x2b4]
mov edx, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2bc]
lea eax, [ecx*4 - 1]
dec ecx
and edx, eax
add edi, edx
mov dword [ebp - 0x2b8], edx
mov eax, edi
shr eax, 2
and ecx, eax
lea eax, [ecx*4]
mov ecx, dword [ebp - 0x2c0]
mov dword [ebp - 0x2b0], eax
cmp dword [ecx + eax], 0
jne 0x100a79a9
push 0x10
call fcn.100e279e
mov ecx, dword [ebp - 0x2c0]
add esp, 4
mov edx, dword [ebp - 0x2b0]
mov dword [ecx + edx], eax
mov eax, edx
mov ecx, dword [ebp - 0x2c0]
mov eax, dword [ecx + eax]
and edi, 3
mov ecx, dword [ebp - 0x2d0]
mov dword [eax + edi*4], ecx
inc dword [ebp - 0x2b4]
mov eax, dword [ebp - 0x2ac]
cmp esi, eax
je 0x100a79f4
mov edi, eax
test edi, edi
je 0x100a79da
mov ecx, dword [eax]
push eax
call dword [ecx + 4]
mov eax, dword [ebp - 0x2ac]
mov ecx, esi
mov esi, edi
mov dword [ebp - 0x2d4], esi
test ecx, ecx
je 0x100a79f4
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x2ac]
mov byte [ebp - 4], 3
test eax, eax
je 0x100a7a02
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x248]
mov byte [ebp - 4], 2
call fcn.10043ac0
mov edx, dword [ebp - 0x220]
mov eax, dword [ebp - 0x2c8]
mov dword [ebp - 0x2b0], edx
jmp 0x100a7a27
jg 0x100a7a62
cmp dword [ebp - 0x21c], 8
lea edi, [eax + 1]
push 1
lea ecx, [ebp - 0x230]
cmovae ecx, dword [ebp - 0x230]
push 0x101601ac
push edi
call fcn.100492b0
mov edx, dword [ebp - 0x2b0]
add esp, 0xc
mov dword [ebp - 0x2c8], eax
test eax, eax
jns 0x100a7875
xor eax, eax
mov dword [ebp - 0x250], 0
mov dword [ebp - 0x24c], 7
mov word [ebp - 0x260], ax
cmp edx, edi
jb 0x100a7d45
sub edx, edi
lea eax, [ebp - 0x230]
cmp dword [ebp - 0x21c], 8
lea ecx, [ebp - 0x260]
push edx
cmovae eax, dword [ebp - 0x230]
lea eax, [eax + edi*2]
push eax
call fcn.10043b50
mov byte [ebp - 4], 5
cmp dword [ebp - 0x250], 0
je 0x100a7c38
mov dword [ebp - 0x2ac], 0
lea edx, [ebp - 0x2ac]
mov byte [ebp - 4], 6
cmp dword [ebp - 0x24c], 8
lea ecx, [ebp - 0x260]
mov eax, dword [esi]
cmovae ecx, dword [ebp - 0x260]
push edx
push 0
push 0x10
push 0
push ecx
push esi
call dword [eax + 0x10]
mov edi, dword [ebp - 0x2ac]
test edi, edi
je 0x100a7c28
push 0x48
lea eax, [ebp - 0x2a8]
push 0
push eax
call fcn.100fc650
mov eax, dword [edi]
lea ecx, [ebp - 0x2a8]
add esp, 0xc
push 1
push ecx
push edi
call dword [eax + 0x30]
mov edi, dword [ebp - 0x2a0]
push edi
call fcn.101085fd
add esp, 4
mov dword [ebp - 0x2b0], eax
mov byte [ebp - 4], 7
lea eax, [ebp - 0x2d0]
mov ecx, dword [ebp - 0x2ac]
push eax
mov eax, dword [ebp - 0x2b0]
push edi
mov edx, dword [ecx]
push eax
push ecx
call dword [edx + 0xc]
push 0x208
lea eax, [ebp - 0x218]
push 0
push eax
call fcn.100fc650
mov edi, dword [ebp - 0x2cc]
add esp, 0xc
cmp dword [edi + 0x14], 8
jb 0x100a7b7c
mov edi, dword [edi]
lea ecx, [ebp - 0x218]
mov edx, 0x104
mov eax, ecx
sub edi, eax
nop dword [eax + eax]
lea eax, [edx + 0x7ffffefa]
test eax, eax
je 0x100a7bae
movzx eax, word [ecx + edi]
test ax, ax
je 0x100a7bae
mov word [ecx], ax
add ecx, 2
sub edx, 1
jne 0x100a7b90
push dword [ebp - 0x2a8]
lea eax, [ecx - 2]
test edx, edx
cmovne eax, ecx
xor ecx, ecx
mov word [eax], cx
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
push 0
push 0
push 4
push 0
push 0
push 0xc0000000
lea eax, [ebp - 0x218]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov edi, eax
cmp edi, 0xffffffff
je 0x100a7c14
push 0
lea eax, [ebp - 0x2cc]
push eax
push dword [ebp - 0x2d0]
push dword [ebp - 0x2b0]
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x2b0]
call fcn.101080bf
mov edi, dword [ebp - 0x2ac]
add esp, 4
mov byte [ebp - 4], 5
test edi, edi
je 0x100a7c45
mov eax, dword [edi]
push edi
call dword [eax + 8]
jmp 0x100a7c45
mov edx, dword [ebp - 0x2cc]
mov ecx, esi
call fcn.100a72d0
lea ecx, [ebp - 0x260]
call fcn.10043ac0
mov byte [ebp - 4], 1
test esi, esi
je 0x100a7c5e
mov eax, dword [esi]
push esi
call dword [eax + 8]
mov ecx, dword [ebp - 0x2b4]
test ecx, ecx
je 0x100a7c8b
mov eax, dword [ebp - 0x2b8]
nop
sub ecx, 1
mov edx, 0
cmove eax, edx
test ecx, ecx
jne 0x100a7c70
mov dword [ebp - 0x2b8], eax
mov dword [ebp - 0x2b4], ecx
mov esi, dword [ebp - 0x2bc]
mov ecx, dword [ebp - 0x2c0]
test esi, esi
je 0x100a7cc4
nop dword [eax + eax]
mov eax, dword [ecx + esi*4 - 4]
dec esi
test eax, eax
je 0x100a7cba
push 0x10
push eax
call fcn.100e2b31
mov ecx, dword [ebp - 0x2c0]
add esp, 8
test esi, esi
jne 0x100a7ca0
mov esi, dword [ebp - 0x2bc]
test ecx, ecx
je 0x100a7cef
shl esi, 2
mov eax, ecx
cmp esi, 0x1000
jb 0x100a7ce5
mov ecx, dword [ecx - 4]
add esi, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100a7d4a
push esi
push ecx
call fcn.100e2b31
add esp, 8
push 8
push dword [ebp - 0x2c4]
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2c0], 0
call fcn.100e2b31
add esp, 8
mov dword [ebp - 0x2c4], 0
lea ecx, [ebp - 0x230]
call fcn.10043ac0
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100e278d
mov esp, ebp
pop ebp
ret
call fcn.100492a0
call fcn.10107f97
int3