Function at 0x1011f520
Capabilities:
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x1018
call fcn.1012ba20
mov eax, dword [0x102406a8]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
mov esi, dword [ebp + 8]
lea eax, [ebp - 0x1004]
push edi
push 0x1000
xor ebx, ebx
mov dword [ebp - 0x1010], ecx
push ebx
push eax
mov dword [ebp - 0x1018], esi
call fcn.1012db70
add esp, 0xc
mov dword [ebp - 0x100c], ebx
mov dword [ebp - 0x1008], 1
mov dword [ebp - 0x1014], ebx
push esi
call fcn.10010313
mov edi, 0x80
test eax, eax
je 0x1011f5a9
push esi
call fcn.10041a60
push 0xc
mov dword [ebp - 0x1014], eax
call fcn.10010082
pop ecx
push edi
push esi
test eax, eax
je 0x1011f5a3
call eax
jmp 0x1011f5a9
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 8
call fcn.10010082
pop ecx
push ebx
push edi
push 2
pop edi
push edi
push ebx
push 3
push 0x40000000
push esi
test eax, eax
je 0x1011f5c8
call eax
jmp 0x1011f5ce
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov ebx, eax
cmp ebx, 0xffffffff
jne 0x1011f5dc
xor eax, eax
jmp 0x1011f7bb
mov edx, dword [ebp - 0x1010]
push 0xa
pop eax
cmp dword [edx + 4], edi
jne 0x1011f63f
push eax
mov word [ebp - 0x1004], 0xfeff
call fcn.10010082
pop ecx
push 0
test eax, eax
je 0x1011f614
lea ecx, [ebp - 0x100c]
push ecx
push edi
lea ecx, [ebp - 0x1004]
push ecx
push ebx
call eax
jmp 0x1011f62a
lea eax, [ebp - 0x100c]
push eax
push edi
lea eax, [ebp - 0x1004]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov edx, dword [ebp - 0x1010]
neg eax
sbb eax, eax
xor ecx, ecx
inc ecx
and eax, ecx
mov dword [ebp - 0x1008], eax
mov ecx, dword [edx + 8]
mov eax, dword [ecx]
mov dword [edx + 0x10], eax
cmp eax, ecx
je 0x1011f79e
mov esi, dword [ebp - 0x1008]
test esi, esi
je 0x1011f792
push 0x1000
lea eax, [ebp - 0x1004]
push 0
push eax
call fcn.1012db70
mov ecx, dword [ebp - 0x1010]
add esp, 0xc
mov eax, dword [ecx + 0x10]
mov eax, dword [eax + 8]
mov dword [ebp - 0x1008], eax
cmp dword [ecx + 4], edi
jne 0x1011f6d2
push eax
push 0x1000
lea eax, [ebp - 0x1004]
push eax
call fcn.100100b8
lea eax, [ebp - 0x1004]
push eax
call fcn.10130fe5
pop ecx
push 0xd
pop ecx
mov word [ebp + eax*2 - 0x1004], cx
push 0xa
pop ecx
mov word [ebp + eax*2 - 0x1002], cx
xor ecx, ecx
mov word [ebp + eax*2 - 0x1000], cx
lea eax, [eax*2 + 4]
jmp 0x1011f71d
push 0
push 0
push 0x1000
lea ecx, [ebp - 0x1004]
push ecx
push eax
call fcn.10130fe5
pop ecx
push eax
push dword [ebp - 0x1008]
push 0
call dword [sym.imp.KERNEL32.dll_GetACP]
push eax
call dword [sym.imp.KERNEL32.dll_WideCharToMultiByte]
push 0xd
pop ecx
push 0xa
mov byte [ebp + eax - 0x1004], cl
pop ecx
mov byte [ebp + eax - 0x1003], cl
mov byte [ebp + eax - 0x1002], 0
add eax, edi
push 0xa
mov dword [ebp - 0x1008], eax
pop eax
push eax
call fcn.10010082
pop ecx
push 0
test eax, eax
je 0x1011f74c
lea ecx, [ebp - 0x100c]
push ecx
push dword [ebp - 0x1008]
lea ecx, [ebp - 0x1004]
push ecx
push ebx
call eax
jmp 0x1011f767
lea eax, [ebp - 0x100c]
push eax
push dword [ebp - 0x1008]
lea eax, [ebp - 0x1004]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x1011f779
mov eax, dword [ebp - 0x1008]
cmp eax, dword [ebp - 0x100c]
je 0x1011f77b
xor esi, esi
mov edx, dword [ebp - 0x1010]
mov eax, dword [edx + 0x10]
mov eax, dword [eax]
mov dword [edx + 0x10], eax
cmp eax, dword [edx + 8]
jne 0x1011f655
mov dword [ebp - 0x1008], esi
mov esi, dword [ebp - 0x1018]
push ebx
call fcn.10049da5
mov eax, dword [ebp - 0x1014]
test eax, eax
je 0x1011f7b5
push eax
push esi
call fcn.1007bc85
mov eax, dword [ebp - 0x1008]
mov ecx, dword [ebp - 4]
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.1012b632
leave
ret 4