Function at 0x100056b0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x10
mov dword [ebp - 0xc], 0
mov dword [ebp - 4], 0
mov eax, dword [ebp + 0xc]
xor ecx, ecx
mov cx, word [eax]
test ecx, ecx
jne 0x100056e2
push 0x1000886c
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
jmp 0x1000570b
mov edx, dword [ebp + 0xc]
push edx
push 0x100089e0
call fcn.10005a52
add esp, 8
push 0x100089e0
push 0x10008870
push 0x10028a00
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp dword [ebp + 0x10], 3
je 0x1000574b
cmp dword [ebp + 0x10], 2
je 0x1000574b
cmp dword [ebp + 0x10], 7
je 0x1000574b
cmp dword [ebp + 0x10], 5
je 0x1000574b
cmp dword [ebp + 0x10], 0
je 0x1000574b
cmp dword [ebp + 0x10], 6
je 0x1000574b
cmp dword [ebp + 0x10], 8
je 0x1000574b
cmp dword [ebp + 0x10], 9
je 0x1000574b
cmp dword [ebp + 0x10], 0xa
je 0x1000574b
cmp dword [ebp + 0x10], 0xb
jne 0x1000599b
cmp dword [ebp + 0x10], 3
jne 0x10005766
push str.hex:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 0
jne 0x10005781
push str.hex_0_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 2
jne 0x1000579c
push str.hex_2_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 5
jne 0x100057b7
push str.hex_5_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 6
jne 0x100057cf
push str.hex_6_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 7
jne 0x100057e7
push str.hex_7_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 8
jne 0x100057ff
push str.hex_8_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 9
jne 0x10005817
push str.hex_9_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 0xa
jne 0x1000582f
push str.hex_a_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x10005845
cmp dword [ebp + 0x10], 0xb
jne 0x10005845
push str.hex_b_:
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
cmp dword [ebp + 0x18], 0
jne 0x10005883
push 0x1000893c
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
lea eax, [ebp - 8]
push eax
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
push eax
push 0x10028a00
mov ecx, dword [ebp + 8]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x10005a4e
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov edx, 0x4f
sub edx, eax
mov eax, edx
cdq
mov ecx, 3
idiv ecx
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], 0
jg 0x100058af
mov dword [ebp - 0x10], 1
jmp 0x100058c8
push 0x10008944
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
mov dword [ebp - 0x10], 0x19
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp + 0x18]
jae 0x10005996
mov dword [ebp - 4], 0
jmp 0x100058ef
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
cmp edx, dword [ebp + 0x18]
jae 0x1000592f
mov eax, dword [ebp - 4]
cmp eax, dword [ebp - 0x10]
jge 0x1000592f
mov ecx, dword [ebp + 0x14]
add ecx, dword [ebp - 0xc]
xor edx, edx
mov dl, byte [ecx]
push edx
push str._02x_
push 0x10050c60
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
push 0x10050c60
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x100058dd
mov eax, dword [ebp - 0xc]
cmp eax, dword [ebp + 0x18]
jne 0x1000595e
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov word [eax*2 + 0x100289fe], 0
push 0x10008958
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
jmp 0x1000596e
push 0x10008960
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
lea ecx, [ebp - 8]
push ecx
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
push eax
push 0x10028a00
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x100058b1
jmp 0x10005a4e
cmp dword [ebp + 0x10], 1
jne 0x10005a07
mov eax, dword [ebp + 0x14]
push eax
push 0x100089e0
call fcn.10005a52
add esp, 8
push 0x10008968
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x100089e0
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0x10008970
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
lea ecx, [ebp - 8]
push ecx
push 0x10028a00
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
push eax
push 0x10028a00
mov edx, dword [ebp + 8]
push edx
call dword [sym.imp.KERNEL32.dll_WriteFile]
jmp 0x10005a4e
cmp dword [ebp + 0x10], 4
jne 0x10005a4e
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax]
push ecx
push 0x10028a00
push str._sdword:_08x_r_n
push 0x100089e0
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x10
push 0
lea edx, [ebp - 8]
push edx
push 0x100089e0
call dword [sym.imp.KERNEL32.dll_lstrlenW]
shl eax, 1
push eax
push 0x100089e0
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esp, ebp
pop ebp
ret