Function at 0x10a0501
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x48
lea eax, [ebp - 0x14]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x18]
mov dword [ebp - 0x40], eax
push esi
lea eax, [ebp - 0x20]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0x48]
push eax
xor esi, esi
push 3
lea eax, [ebp - 0x10]
push eax
mov dword [ebp - 8], esi
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], esi
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x44], 0x101e9d4
mov dword [ebp - 0x3c], 0x101e9c0
mov dword [ebp - 0x34], 0x101e954
call fcn.010a043a
mov dword [ebp - 4], eax
cmp eax, esi
je 0x10a0568
push eax
push 0x27a0197
call fcn.0108c503
jmp 0x10a06b1
lea eax, [ebp - 8]
push eax
lea eax, [ebp - 0xc]
push eax
call fcn.010a0386
mov dword [ebp - 4], eax
cmp eax, esi
je 0x10a0587
push eax
push 0x27d0197
jmp 0x10a0698
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0xc]
push dword [ebp + 0xc]
push dword [ebp + 8]
call dword [ebp - 0x14]
mov dword [ebp - 4], eax
cmp eax, esi
je 0x10a05a9
push eax
push 0x2820197
jmp 0x10a0698
push esi
push esi
push 1
push esi
push esi
push 0x40000000
push dword [ebp + 0x10]
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp + 0xc], eax
cmp eax, 0xffffffff
jne 0x10a05e0
call fcn.01091f1e
push eax
push 0x2910197
push dword [ebp + 0x10]
mov dword [ebp - 4], eax
call fcn.0108c53e
jmp 0x10a0688
mov ecx, dword [ebp - 0xc]
push ebx
xor eax, eax
add ecx, dword [ebp - 0x30]
push edi
mov edx, eax
adc edx, dword [ebp - 0x2c]
push eax
push dword [ebp - 0xc]
sub ecx, 1
sbb edx, esi
push edx
push ecx
call fcn.010c0730
mov edi, dword [ebp + 0x1c]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x30], esi
jne 0x10a060f
cmp dword [ebp - 0x2c], esi
je 0x10a0673
xor ebx, ebx
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0xc]
push dword [ebp - 8]
push dword [ebp + 8]
call dword [ebp - 0x18]
mov dword [ebp - 4], eax
cmp eax, esi
jne 0x10a06c7
push esi
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x1c]
push dword [ebp - 8]
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x10a06d4
mov eax, dword [ebp - 0x1c]
cmp dword [ebp - 0x24], eax
jne 0x10a06e1
sub dword [ebp - 0x30], eax
sbb dword [ebp - 0x2c], esi
add ebx, dword [ebp + 0x18]
xor edx, edx
mov eax, ebx
div dword [ebp - 0x28]
add eax, dword [ebp + 0x14]
mov dword [edi], eax
cmp dword [ebp - 0x30], esi
jne 0x10a0611
cmp dword [ebp - 0x2c], esi
jne 0x10a0611
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x18]
add eax, ecx
mov dword [edi], eax
push dword [ebp + 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
pop edi
pop ebx
push dword [ebp + 8]
call dword [ebp - 0x20]
cmp eax, esi
je 0x10a069d
push eax
push 0x2c50197
call fcn.0108c503
cmp dword [ebp - 8], esi
je 0x10a06b1
push 0x8000
push esi
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
cmp dword [ebp - 0x10], esi
pop esi
je 0x10a06c0
push dword [ebp - 0x10]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
mov eax, dword [ebp - 4]
leave
ret 0x18
push eax
push 0x29f0197
call fcn.0108c503
jmp 0x10a067d
call fcn.01091f1e
push eax
push 0x2a60197
jmp 0x10a06ec
mov eax, 0x80070026
push eax
push 0x2ab0197
push dword [ebp + 0x10]
mov dword [ebp - 4], eax
call fcn.0108c53e
jmp 0x10a067d