Function at 0x60a220
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x69ef88
mov eax, dword fs:[0]
push eax
sub esp, 0x10
push ebx
push esi
push edi
mov eax, dword [0x71a00c]
xor eax, ebp
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edx, dword [0x72ec20]
mov dword [ebp - 0x10], edx
cmp dword [edx + 8], 0xffffffff
jne 0x60a26d
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
mov esi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
test eax, eax
jne 0x60a28d
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4
xor ebx, ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 4], ebx
test eax, eax
je 0x60a2ae
push eax
lea ecx, [ebp - 0x1c]
call fcn.004045e0
mov ebx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x10]
mov eax, dword [esi + 0x10]
xor edi, edi
test eax, eax
jle 0x60a3b2
mov ebx, eax
nop dword [eax]
mov eax, dword [esi + 0x14]
cmp eax, 0x10
jb 0x60a2cc
mov ecx, dword [esi]
jmp 0x60a2ce
mov ecx, esi
cmp byte [ecx + edi], 0x81
jb 0x60a2e5
cmp eax, 0x10
jb 0x60a2dd
mov ecx, dword [esi]
jmp 0x60a2df
mov ecx, esi
cmp byte [ecx + edi], 0xfe
jbe 0x60a307
cmp eax, 0x10
jb 0x60a2ee
mov ecx, dword [esi]
jmp 0x60a2f0
mov ecx, esi
cmp byte [ecx + edi], 0xe0
jb 0x60a328
cmp eax, 0x10
jb 0x60a2ff
mov ecx, dword [esi]
jmp 0x60a301
mov ecx, esi
cmp byte [ecx + edi], 0xef
ja 0x60a328
cmp eax, 0x10
jb 0x60a310
mov eax, dword [esi]
jmp 0x60a312
mov eax, esi
add eax, edi
lea ecx, [ebp - 0x1c]
push eax
call fcn.00416a30
inc edi
cmp dword [esi + 0x14], 0x10
jb 0x60a392
mov eax, dword [esi]
jmp 0x60a394
cmp eax, 0x10
jb 0x60a331
mov ecx, dword [esi]
jmp 0x60a333
mov ecx, esi
cmp byte [ecx + edi], 0xd
jne 0x60a358
cmp eax, 0x10
jb 0x60a342
mov eax, dword [esi]
jmp 0x60a344
mov eax, esi
add eax, edi
lea ecx, [ebp - 0x1c]
push eax
call fcn.00416a30
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x14], 1
jmp 0x60a3a6
cmp eax, 0x10
jb 0x60a361
mov ecx, dword [esi]
jmp 0x60a363
mov ecx, esi
cmp byte [ecx + edi], 0xa
jne 0x60a389
cmp byte [edx + 0x14], 0
jne 0x60a37f
lea eax, [ebp + 0xb]
mov byte [ebp + 0xb], 0xd
push eax
lea ecx, [ebp - 0x1c]
call fcn.00416a30
cmp dword [esi + 0x14], 0x10
jb 0x60a392
mov eax, dword [esi]
jmp 0x60a394
cmp eax, 0x10
jb 0x60a392
mov eax, dword [esi]
jmp 0x60a394
mov eax, esi
add eax, edi
lea ecx, [ebp - 0x1c]
push eax
call fcn.00416a30
mov edx, dword [ebp - 0x10]
mov byte [edx + 0x14], 0
inc edi
cmp edi, ebx
jl 0x60a2c0
mov ebx, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x18]
mov eax, dword [edx + 8]
sub esi, ebx
cmp eax, 0xffffffff
je 0x60a3e3
push 0
lea ecx, [ebp + 8]
push ecx
push esi
push ebx
push eax
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x60a3e3
cmp esi, dword [ebp + 8]
jne 0x60a3e3
mov eax, dword [ebp - 0x10]
mov byte [ebp + 0xb], 1
add dword [eax + 0xc], esi
jmp 0x60a3e7
mov byte [ebp + 0xb], 0
test ebx, ebx
je 0x60a3fc
mov edx, dword [ebp - 0x14]
mov ecx, ebx
push 1
sub edx, ebx
call fcn.004020c0
add esp, 4
mov al, byte [ebp + 0xb]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 4