Function at 0x10009120
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x144
push ebx
push esi
push edi
push ecx
lea edi, [ebp - 0x84]
mov ecx, 0x21
mov eax, 0xcccccccc
rep stosd dword es:[edi], eax
pop ecx
mov eax, dword [0x10017024]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0xc], ecx
mov ecx, 0x1001a083
call fcn.1000150a
call fcn.1000119a
mov dword [ebp - 0x13c], eax
lea eax, [ebp + 8]
push eax
lea ecx, [ebp - 0x13c]
push ecx
call fcn.1000105f
add esp, 8
movzx edx, al
test edx, edx
je 0x1000918d
lea eax, [ebp + 8]
push eax
call fcn.100014ba
add esp, 4
jmp 0x10009367
mov esi, esp
mov ecx, dword [ebp - 0xc]
call dword [sym.imp.MSVCP140D.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const]
cmp esi, esp
call fcn.100013a2
test eax, eax
je 0x100091f7
mov esi, esp
mov ecx, dword [ebp - 0xc]
call dword [sym.imp.MSVCP140D.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::pptr_void_const]
cmp esi, esp
call fcn.100013a2
mov esi, eax
mov edi, esp
mov ecx, dword [ebp - 0xc]
call dword [sym.imp.MSVCP140D.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::epptr_void_const]
cmp edi, esp
call fcn.100013a2
cmp esi, eax
jae 0x100091f7
lea eax, [ebp + 8]
push eax
call fcn.10001140
add esp, 4
mov bl, al
mov esi, esp
mov ecx, dword [ebp - 0xc]
call dword [sym.imp.MSVCP140D.dll_protected:_char____thiscall_std::basic_streambuf_char__struct_std::char_traits_char__::_Pninc_void_]
cmp esi, esp
call fcn.100013a2
mov byte [eax], bl
mov eax, dword [ebp + 8]
jmp 0x10009367
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x4c], 0
jne 0x1000920a
call fcn.1000119a
jmp 0x10009367
mov ecx, dword [ebp - 0xc]
call fcn.100012a8
mov eax, dword [ebp - 0xc]
cmp dword [eax + 0x38], 0
jne 0x10009262
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x4c]
push ecx
lea edx, [ebp + 8]
push edx
call fcn.10001140
add esp, 4
movzx eax, al
push eax
call fcn.10001230
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x1000924c
mov edx, dword [ebp + 8]
mov dword [ebp - 0x144], edx
jmp 0x10009257
call fcn.1000119a
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
jmp 0x10009367
mov dword [ebp - 0x18], 0x20
lea eax, [ebp + 8]
push eax
call fcn.10001140
add esp, 4
mov byte [ebp - 0x49], al
mov esi, esp
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp - 0x20]
push ecx
lea edx, [ebp - 0x40]
push edx
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp - 0x48]
push ecx
lea edx, [ebp - 0x49]
push edx
mov eax, dword [ebp - 0xc]
add eax, 0x40
push eax
mov ecx, dword [ebp - 0xc]
mov ecx, dword [ecx + 0x38]
call dword [sym.imp.MSVCP140D.dll_public:_int___thiscall_std::codecvt_char__char__struct__Mbstatet_::out_struct__Mbstatet___char_const___char_const___char_const____char___char___char___const]
cmp esi, esp
call fcn.100013a2
mov dword [ebp - 0x144], eax
cmp dword [ebp - 0x144], 0
je 0x100092d2
cmp dword [ebp - 0x144], 1
je 0x100092d2
cmp dword [ebp - 0x144], 3
je 0x10009329
jmp 0x10009362
mov eax, dword [ebp - 0x64]
lea ecx, [ebp - 0x40]
sub eax, ecx
mov dword [ebp - 0x70], eax
je 0x1000930e
mov esi, esp
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x4c]
push ecx
mov edx, dword [ebp - 0x70]
push edx
push 1
lea eax, [ebp - 0x40]
push eax
call dword [sym.imp.ucrtbased.dll_fwrite]
add esp, 0x10
cmp esi, esp
call fcn.100013a2
cmp dword [ebp - 0x70], eax
je 0x1000930e
call fcn.1000119a
jmp 0x10009367
mov eax, dword [ebp - 0xc]
mov byte [eax + 0x3d], 1
lea eax, [ebp - 0x49]
cmp dword [ebp - 0x58], eax
je 0x10009322
mov eax, dword [ebp + 8]
jmp 0x10009367
call fcn.1000119a
jmp 0x10009367
mov eax, dword [ebp - 0xc]
mov ecx, dword [eax + 0x4c]
push ecx
movzx edx, byte [ebp - 0x49]
push edx
call fcn.10001230
add esp, 8
movzx eax, al
test eax, eax
je 0x1000934f
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x144], ecx
jmp 0x1000935a
call fcn.1000119a
mov dword [ebp - 0x144], eax
mov eax, dword [ebp - 0x144]
jmp 0x10009367
call fcn.1000119a
push edx
mov ecx, ebp
push eax
lea edx, [0x10009398]
call fcn.1000130c
pop eax
pop edx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1000123a
add esp, 0x144
cmp ebp, esp
call fcn.100013a2
mov esp, ebp
pop ebp
ret 4