Function at 0x1000a42e
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x7c8
mov eax, dword [0x100b0044]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x14]
mov dword [0x100b5fe0], eax
mov eax, dword [ebp + 0x10]
mov dword [0x100b5fe4], eax
mov eax, dword [ebp + 0xc]
mov dword [0x100b5fe8], eax
push 0x400
push 0
lea eax, [ebp - 0x508]
push eax
call fcn.100234f0
add esp, 0xc
lea eax, [ebp - 0x508]
push eax
call fcn.100097fa
pop ecx
push 0x1009b588
lea eax, [ebp - 0x5f8]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x760], eax
mov ecx, dword [ebp - 0x760]
call fcn.10008987
mov dword [ebp - 0x740], eax
push dword [ebp - 0x740]
lea eax, [ebp - 0x508]
push eax
call fcn.10027220
pop ecx
pop ecx
test eax, eax
jne 0x1000a4ca
mov dword [ebp - 0x720], 1
jmp 0x1000a4d1
and dword [ebp - 0x720], 0
mov al, byte [ebp - 0x720]
mov byte [ebp - 0x71a], al
lea ecx, [ebp - 0x5f8]
call fcn.10008c95
lea ecx, [ebp - 0x568]
call fcn.1000260c
push 0x400
lea ecx, [ebp - 0x568]
call fcn.10003c5b
push eax
call fcn.100097fa
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x568]
call fcn.100067b5
lea ecx, [ebp - 0x550]
call fcn.1000260c
push 0x400
lea ecx, [ebp - 0x550]
call fcn.10003c5b
push eax
call fcn.100097fa
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x550]
call fcn.100067b5
lea ecx, [ebp - 0x5b0]
call fcn.1000260c
push 0x400
lea ecx, [ebp - 0x5b0]
call fcn.10003c5b
push eax
call fcn.100097fa
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x5b0]
call fcn.100067b5
lea ecx, [ebp - 0x598]
call fcn.1000260c
push 0x400
lea ecx, [ebp - 0x598]
call fcn.10003c5b
push eax
call fcn.100097fa
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x598]
call fcn.100067b5
lea ecx, [ebp - 0x580]
call fcn.1000260c
push 0x400
lea ecx, [ebp - 0x580]
call fcn.10003c5b
push eax
call fcn.100097fa
pop ecx
push 0xffffffffffffffff
lea ecx, [ebp - 0x580]
call fcn.100067b5
push 0x104
push 0
lea eax, [ebp - 0x108]
push eax
call fcn.100234f0
add esp, 0xc
push 0x104
lea eax, [ebp - 0x108]
push eax
push 0
call fcn.100112e3
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
call fcn.100036fb
pop ecx
mov byte [ebp - 0x719], al
movzx eax, byte [ebp - 0x71a]
test eax, eax
jne 0x1000a631
movzx eax, byte [ebp - 0x719]
test eax, eax
je 0x1000a631
and dword [ebp - 0x724], 0
jmp 0x1000a63b
mov dword [ebp - 0x724], 1
mov al, byte [ebp - 0x724]
mov byte [ebp - 0x71b], al
lea ecx, [ebp - 0x568]
call fcn.10008987
mov dword [ebp - 0x764], eax
push dword [ebp - 0x764]
lea eax, [ebp - 0x520]
push eax
call fcn.10006ce3
pop ecx
pop ecx
movzx eax, byte [ebp - 0x71b]
test eax, eax
jne 0x1000a690
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x768], eax
cmp dword [ebp - 0x768], 0
jne 0x1000a78a
lea ecx, [ebp - 0x5c8]
call fcn.1000260c
push 0x1009b594
lea eax, [ebp - 0x610]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x76c], eax
mov ecx, dword [ebp - 0x76c]
call fcn.10008987
mov dword [ebp - 0x770], eax
lea eax, [ebp - 0x568]
push eax
push str.2c4a7ad4c84e4ed8af2515918fe50ce3
push 0x10
push 0
lea eax, [ebp - 0x628]
push eax
lea ecx, [ebp - 0x550]
call fcn.100066b0
push eax
push dword [ebp - 0x770]
lea ecx, [ebp - 0x5c8]
call fcn.1000139b
lea ecx, [ebp - 0x610]
call fcn.10008c95
lea ecx, [ebp - 0x628]
call fcn.10008c95
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x7c0], esp
lea eax, [ebp - 0x5c8]
push eax
call fcn.10002423
lea eax, [ebp - 0x640]
push eax
call fcn.1000d721
add esp, 0x1c
mov dword [ebp - 0x728], eax
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x774], eax
lea eax, [ebp - 0x520]
cmp eax, dword [ebp - 0x774]
je 0x1000a774
xor eax, eax
mov byte [ebp - 0x778], al
push dword [ebp - 0x778]
push dword [ebp - 0x728]
lea ecx, [ebp - 0x520]
call fcn.10008909
lea ecx, [ebp - 0x640]
call fcn.10008c95
lea ecx, [ebp - 0x5c8]
call fcn.10008c95
lea eax, [ebp - 0x5e0]
push eax
call fcn.100060f0
pop ecx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x780], eax
lea ecx, [ebp - 0x520]
call fcn.10008987
mov dword [ebp - 0x784], eax
lea ecx, [ebp - 0x5e0]
call fcn.10008987
mov dword [ebp - 0x788], eax
push 0x1009b5a4
lea eax, [ebp - 0x658]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x77c]
call fcn.10008987
mov dword [ebp - 0x78c], eax
push dword [ebp - 0x780]
push dword [ebp - 0x784]
push 1
push dword [ebp - 0x788]
push dword [ebp - 0x78c]
push 0x80000002
call fcn.10012cbd
add esp, 0x18
lea ecx, [ebp - 0x658]
call fcn.10008c95
lea ecx, [ebp - 0x538]
call fcn.1000260c
lea ecx, [ebp - 0x520]
call fcn.1000916f
mov dword [ebp - 0x794], eax
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x790], eax
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x798], eax
push 0x1009b5c0
lea eax, [ebp - 0x670]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x7a0], eax
lea eax, [ebp - 0x794]
push eax
lea eax, [ebp - 0x798]
push eax
lea eax, [ebp - 0x719]
push eax
lea eax, [ebp - 0x71a]
push eax
mov ecx, dword [ebp - 0x7a0]
call fcn.1000916f
push eax
lea ecx, [ebp - 0x538]
call fcn.10001432
lea ecx, [ebp - 0x670]
call fcn.10008c95
push 0x2d
push 0x2b
lea ecx, [ebp - 0x538]
call fcn.10006882
push 0x5f
push 0x2f
lea ecx, [ebp - 0x538]
call fcn.10006882
push 0x20
push 0x3d
lea ecx, [ebp - 0x538]
call fcn.10006882
lea ecx, [ebp - 0x538]
call fcn.100073a5
mov ecx, eax
call fcn.1000746e
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x7c4], esp
mov dword [ebp - 0x7a4], eax
lea eax, [ebp - 0x538]
push eax
mov ecx, dword [ebp - 0x7a4]
call fcn.10002423
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x7c8], esp
mov dword [ebp - 0x7a8], eax
lea eax, [ebp - 0x568]
push eax
mov ecx, dword [ebp - 0x7a8]
call fcn.10002423
call fcn.10006b09
add esp, 0x30
push 0x1009b5e8
lea eax, [ebp - 0x688]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
push eax
lea eax, [ebp - 0x5e0]
push eax
lea eax, [ebp - 0x718]
push eax
call fcn.10002c59
add esp, 0xc
mov dword [ebp - 0x7ac], eax
push dword [ebp - 0x7ac]
lea ecx, [ebp - 0x580]
call fcn.10008ea0
lea ecx, [ebp - 0x718]
call fcn.10008c95
lea ecx, [ebp - 0x688]
call fcn.10008c95
lea ecx, [ebp - 0x580]
call fcn.1000916f
mov dword [ebp - 0x7b0], eax
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
push dword [ebp - 0x7b0]
call fcn.100108bc
add esp, 0x1c
mov dword [ebp - 0x72c], eax
and dword [ebp - 0x7b4], 0
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x7b8], eax
push 0
lea eax, [ebp - 0x7b4]
push eax
push dword [ebp - 0x7b8]
lea ecx, [ebp - 0x520]
call fcn.1000916f
push eax
push dword [ebp - 0x72c]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push dword [ebp - 0x72c]
call fcn.100104a1
pop ecx
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x730], eax
lea ecx, [ebp - 0x550]
call fcn.1000916f
mov dword [ebp - 0x734], eax
push 0x1009b5f4
lea eax, [ebp - 0x6b8]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x7bc], eax
mov ecx, dword [ebp - 0x7bc]
call fcn.1000916f
mov dword [ebp - 0x738], eax
push 0x1009b5a4
lea eax, [ebp - 0x6a0]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x73c], eax
push dword [ebp - 0x730]
push dword [ebp - 0x734]
push 1
push dword [ebp - 0x738]
mov ecx, dword [ebp - 0x73c]
call fcn.1000916f
push eax
push 0x80000002
call fcn.10012cbd
add esp, 0x18
lea ecx, [ebp - 0x6a0]
call fcn.10008c95
lea ecx, [ebp - 0x6b8]
call fcn.10008c95
mov eax, dword [ebp - 0x5a0]
mov dword [ebp - 0x744], eax
lea ecx, [ebp - 0x5b0]
call fcn.1000916f
mov dword [ebp - 0x748], eax
push 0x1009b600
lea eax, [ebp - 0x6e8]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x79c]
call fcn.1000916f
mov dword [ebp - 0x74c], eax
push 0x1009b5a4
lea eax, [ebp - 0x6d0]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x750], eax
push dword [ebp - 0x744]
push dword [ebp - 0x748]
push 1
push dword [ebp - 0x74c]
mov ecx, dword [ebp - 0x750]
call fcn.1000916f
push eax
push 0x80000002
call fcn.10012cbd
add esp, 0x18
lea ecx, [ebp - 0x6d0]
call fcn.10008c95
lea ecx, [ebp - 0x6e8]
call fcn.10008c95
mov eax, dword [ebp - 0x588]
mov dword [ebp - 0x754], eax
lea ecx, [ebp - 0x598]
call fcn.1000916f
mov dword [ebp - 0x758], eax
push 0x1009b5a4
lea eax, [ebp - 0x700]
push eax
call fcn.1009ac6c
pop ecx
pop ecx
mov dword [ebp - 0x75c], eax
push dword [ebp - 0x754]
push dword [ebp - 0x758]
push 1
push 0x1009b608
mov ecx, dword [ebp - 0x75c]
call fcn.1000916f
push eax
push 0x80000002
call fcn.10012cbd
add esp, 0x18
lea ecx, [ebp - 0x700]
call fcn.10008c95
lea ecx, [ebp - 0x538]
call fcn.10008c95
lea ecx, [ebp - 0x5e0]
call fcn.10008c95
lea ecx, [ebp - 0x520]
call fcn.10008c95
lea ecx, [ebp - 0x580]
call fcn.10008c95
lea ecx, [ebp - 0x598]
call fcn.10008c95
lea ecx, [ebp - 0x5b0]
call fcn.10008c95
lea ecx, [ebp - 0x550]
call fcn.10008c95
lea ecx, [ebp - 0x568]
call fcn.10008c95
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10020d61
leave
ret