Function at 0x10b66d9
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x68
mov eax, dword [0x10e607c]
mov dword [ebp - 4], eax
push ebx
push esi
push edi
mov eax, dword [ebp + 0xc]
mov ecx, dword [eax + 0x54]
mov ax, word [eax + 0x8c]
mov ebx, dword [ebp + 8]
mov dword [ebp - 0x68], ecx
mov ecx, dword [ecx + 0xf8]
mov word [ebp - 0x5e], ax
mov ax, word [ebx + 0x3e]
mov word [ebp - 0x42], ax
mov eax, dword [ebx + 4]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebx + 0x34]
mov dword [ebp - 0x58], eax
mov eax, dword [ebx + 0x50]
mov dword [ebp - 0x54], eax
mov eax, dword [ebx + 0x54]
mov dword [ebp - 0x50], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x40], eax
mov eax, dword [ebx + 0x18]
mov dword [ebp - 0x3c], eax
mov al, byte [ebx + 0xa]
lea esi, [ebx + 0x58]
lea edi, [ebp - 0x10]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov byte [ebp - 0xa], al
mov al, byte [ebx + 0xb]
mov byte [ebp - 9], al
mov eax, dword [ebx + 0xc]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x28], eax
mov al, byte [ebx + 0x5f]
mov byte [ebp - 0xb], al
mov ax, word [ebx + 0x38]
mov word [ebp - 0x22], ax
mov al, byte [ebx + 0x30]
mov byte [ebp - 8], al
mov al, byte [ebx + 0x60]
mov byte [ebp - 7], al
mov al, byte [ebx + 0x61]
xor esi, esi
mov byte [ebp - 6], al
mov ax, word [ebx + 0x40]
inc esi
xor edi, edi
cmp ax, di
push 0x5b
pop edx
mov dword [ebp - 0x64], ecx
mov word [ebp - 0x24], si
mov word [ebp - 0x20], ax
je 0x10b679d
mov word [ebp - 0x1e], dx
mov edx, dword [ebp - 0x20]
add edx, 0x5b
jmp 0x10b67a1
mov word [ebp - 0x1e], di
mov ax, word [ebx + 0x48]
cmp ax, di
mov word [ebp - 0x1c], ax
je 0x10b67b7
mov word [ebp - 0x1a], dx
add edx, dword [ebp - 0x1c]
jmp 0x10b67bb
mov word [ebp - 0x1a], di
mov ax, word [ebx + 0x44]
cmp ax, di
mov word [ebp - 0x18], ax
je 0x10b67d1
mov word [ebp - 0x16], dx
add edx, dword [ebp - 0x18]
jmp 0x10b67d5
mov word [ebp - 0x16], di
mov ax, word [ebx + 0x4c]
mov word [ebp - 0x14], ax
neg ax
push 2
push edi
push ecx
sbb eax, eax
and eax, edx
mov edx, dword [ebp - 0x18]
mov word [ebp - 0x12], ax
mov eax, dword [ebp - 0x14]
add eax, edx
add eax, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x20]
lea eax, [eax + edx + 0x5b]
mov word [ebp - 0x60], ax
call dword [sym.imp.msvcrt.dll_fseek]
add esp, 0xc
test eax, eax
je 0x10b682e
mov edi, dword [ebp - 0x68]
push esi
push 2
push edi
call fcn.010b4ebf
mov word [edi + 0xd6], si
mov word [edi + 0xd4], si
jmp 0x10b6920
push dword [ebp - 0x64]
call dword [sym.imp.msvcrt.dll_ftell]
cmp word [ebp + 0x10], di
mov edi, dword [ebp - 0x68]
pop ecx
jne 0x10b6849
mov dword [edi + 0x158], eax
jmp 0x10b6852
mov ecx, dword [ebp - 0x68]
mov dword [ecx + 0x15c], eax
push dword [ebp - 0x64]
lea eax, [ebp - 0x60]
push esi
mov esi, dword [sym.imp.msvcrt.dll_fwrite]
push 0x5b
push eax
call esi
add esp, 0x10
cmp eax, 1
jne 0x10b6904
cmp word [ebp - 0x20], 0
je 0x10b6895
push dword [ebp - 0x64]
movzx ecx, word [ebp - 0x20]
movzx eax, word [ebx + 0x42]
push ecx
add eax, ebx
push 1
push eax
call esi
movzx ecx, word [ebp - 0x20]
add esp, 0x10
cmp eax, ecx
jne 0x10b6904
cmp word [ebp - 0x1c], 0
je 0x10b68ba
push dword [ebp - 0x64]
movzx ecx, word [ebp - 0x1c]
movzx eax, word [ebx + 0x4a]
push ecx
add eax, ebx
push 1
push eax
call esi
movzx ecx, word [ebp - 0x1c]
add esp, 0x10
cmp eax, ecx
jne 0x10b6904
cmp word [ebp - 0x18], 0
je 0x10b68df
push dword [ebp - 0x64]
movzx ecx, word [ebp - 0x18]
movzx eax, word [ebx + 0x46]
push ecx
add eax, ebx
push 1
push eax
call esi
movzx ecx, word [ebp - 0x18]
add esp, 0x10
cmp eax, ecx
jne 0x10b6904
cmp word [ebp - 0x14], 0
je 0x10b6926
push dword [ebp - 0x64]
movzx ecx, word [ebp - 0x14]
movzx eax, word [ebx + 0x4e]
push ecx
add eax, ebx
push 1
push eax
call esi
movzx ecx, word [ebp - 0x14]
add esp, 0x10
cmp eax, ecx
je 0x10b6926
push 1
push 2
push edi
call fcn.010b4ebf
mov word [edi + 0xd6], 1
mov word [edi + 0xd4], 1
mov ax, 0xfde7
jmp 0x10b6929
xor ax, ax
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.01078836
leave
ret 0xc