Function at 0x10007620
Capabilities:
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x58
mov esi, ecx
mov eax, dword [0x1003f418]
xor eax, esp
mov dword [esp + 0x54], eax
lea eax, [ecx + 0x38]
mov dword [esp + 0x18], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x2c], eax
lea eax, [ecx + 0x40]
mov dword [esp + 0x28], eax
lea eax, [ecx + 0x3d]
mov dword [esp + 0x24], eax
mov eax, 0x1e5c6082
lea ebp, [esp + 0x34]
lea edi, [esp + 0x30]
mov dword [esp + 4], ecx
mov dword [esp + 0x10], ecx
jmp 0x10007690
cmp eax, 0x7ff2cdaa
jne 0x10007690
mov eax, dword [esp + 0x30]
sub eax, dword [esp + 0xc]
mov dword [esp + 0x14], eax
cmp dword [esp + 0x14], 0
mov eax, 0xc9b06229
mov ecx, 0x11ad055e
cmove eax, ecx
nop
cmp eax, 0xf17bb768
jle 0x100076e0
cmp eax, 0x406aa22a
jle 0x10007730
cmp eax, 0x752aa793
jg 0x100077d1
cmp eax, 0x406aa22b
je 0x10007879
cmp eax, 0x4bbcc14f
je 0x10007889
cmp eax, 0x68ecbf2c
jne 0x10007690
mov eax, 0xa84183e9
mov dword [esp + 4], 0
jmp 0x10007690
cmp eax, 0xb5179335
jg 0x10007780
cmp eax, 0xa84183e8
jg 0x100077fd
cmp eax, 0x85c86b0e
je 0x100078c6
cmp eax, 0x87922b3e
je 0x100078dc
cmp eax, 0x8a7809a1
jne 0x10007690
mov eax, dword [esp]
cmp eax, 3
mov eax, 0xb652e53e
mov ecx, 0xaec05e9c
cmovl eax, ecx
jmp 0x10007690
cmp eax, 0x1e5c6081
jle 0x1000781d
cmp eax, 0x1e5c6082
je 0x100078ea
cmp eax, 0x2e083f48
je 0x10007901
cmp eax, 0x3e495372
jne 0x10007690
cmp dword [esp], 0
mov eax, 0xb318ba3d
mov ecx, 0xb5179336
cmove eax, ecx
jmp 0x10007690
cmp eax, 0xb6b02b1a
jle 0x1000784b
cmp eax, 0xb6b02b1b
je 0x10007914
cmp eax, 0xc07811ef
je 0x10007926
cmp eax, 0xc9b06229
jne 0x10007690
push dword [esi + 0x4c]
push dword [esp + 0x18]
push 1
push dword [esp + 0x18]
call fcn.10015fe6
add esp, 0x10
mov ecx, dword [esp + 0x14]
cmp ecx, eax
mov eax, 0xb6b02b1b
jmp 0x10007687
cmp eax, 0x752aa794
je 0x10007944
cmp eax, 0x77c6f135
jne 0x1000766a
cmp dword [esp], 0
mov eax, 0x8a7809a1
mov ecx, 0x3e495372
cmovle eax, ecx
jmp 0x10007690
cmp eax, 0xaec05e9c
je 0x10007950
cmp eax, 0xb318ba3d
jne 0x10007991
mov eax, 0x752aa794
jmp 0x10007690
cmp eax, 0xf17bb769
je 0x10007968
cmp eax, 0x11ad055e
jne 0x10007690
mov eax, dword [esp + 8]
cmp byte [eax], 0
sete al
mov dword [esp + 0x10], eax
mov eax, 0x87922b3e
jmp 0x10007690
cmp eax, 0xb5179336
je 0x10007980
cmp eax, 0xb652e53e
jne 0x10007690
mov eax, dword [esp]
cmp eax, 3
mov eax, 0xb318ba3d
mov ecx, 0x2e083f48
cmove eax, ecx
jmp 0x10007690
mov eax, 0xa84183e9
mov cl, 1
mov dword [esp + 4], ecx
jmp 0x10007690
mov dword [esp + 0x1c], ebp
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], edi
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
mov dword [esp + 0xc], ebp
mov eax, dword [esp + 0xc]
add eax, 0x20
mov edx, dword [ecx]
push edi
push eax
push dword [esp + 0x14]
push dword [esp + 0x34]
call dword [edx + 0x20]
mov dword [esp], eax
mov eax, 0x77c6f135
jmp 0x10007690
mov eax, dword [esp + 0x24]
mov dword [esp + 8], eax
mov eax, dword [esp + 8]
cmp byte [eax], 0
mov eax, 0xc07811ef
jmp 0x100078f4
mov eax, 0xf17bb769
mov ebx, dword [esp + 0x10]
jmp 0x10007690
cmp dword [esp + 0x2c], 0
mov eax, 0x85c86b0e
mov ecx, 0x406aa22b
cmove eax, ecx
jmp 0x10007690
mov eax, dword [esp + 8]
mov byte [eax], 0
mov eax, 0xf17bb769
mov bl, 1
jmp 0x10007690
mov eax, 0x87922b3e
mov dword [esp + 0x10], 0
jmp 0x10007690
mov eax, dword [esi]
mov ecx, esi
push 0xffffffffffffffff
call dword [eax + 0xc]
cmp eax, 0xffffffff
mov eax, 0x4bbcc14f
mov ecx, 0x68ecbf2c
cmove eax, ecx
jmp 0x10007690
mov eax, 0xf17bb769
xor ebx, ebx
jmp 0x10007690
mov eax, dword [esp]
cmp eax, 1
mov eax, 0xb318ba3d
mov ecx, 0x7ff2cdaa
cmove eax, ecx
jmp 0x10007690
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
mov eax, 0xa84183e9
mov ecx, ebx
mov dword [esp + 4], ecx
jmp 0x10007690
mov eax, dword [esp + 8]
mov byte [eax], 0
mov eax, 0x7ff2cdaa
jmp 0x10007690
cmp eax, 0xa84183e9
jne 0x10007690
mov ebx, dword [esp + 4]
and bl, 1
mov ecx, dword [esp + 0x54]
xor ecx, esp
call fcn.1000daa7
mov eax, ebx
add esp, 0x58
pop esi
pop edi
pop ebx
pop ebp
ret