Function at 0x1001b1a5
Capabilities:
Write file on windows

Disassembly:
push 0x54
mov eax, 0x1004b3f3
call fcn.1004a560
xor ebx, ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x14], ebx
push 0x18
lea ecx, [ebp - 0x60]
call fcn.100125e6
mov dword [ebp - 4], ebx
mov ecx, dword [0x10115084]
mov eax, dword [ecx + 0x18]
cmp dword [ecx + 0xc], ebx
je 0x1001b1e5
mov edx, dword [eax + 0x88]
mov eax, dword [eax + 0x8c]
jmp 0x1001b1f1
mov edx, dword [eax + 0x98]
mov eax, dword [eax + 0x9c]
cmp edx, ebx
je 0x1001b4ea
cmp eax, ebx
je 0x1001b4ea
lea eax, [ebp - 0x20]
push eax
push edx
call fcn.1001b643
test eax, eax
je 0x1001b4e4
mov eax, dword [ebp - 0x20]
lea edi, [eax + 0x10]
mov dword [ebp - 0x34], edi
mov cx, word [eax + 0xe]
add cx, word [eax + 0xc]
movzx eax, cx
mov dword [ebp - 0x38], eax
mov byte [ebp - 4], 1
mov dword [ebp - 0x18], ebx
mov ax, word [ebp - 0x38]
cmp word [ebp - 0x18], ax
jae 0x1001b3b3
mov esi, dword [edi]
mov dword [ebp - 0x30], esi
mov eax, dword [edi + 4]
test eax, eax
jns 0x1001b365
and eax, 0x7fffffff
add eax, dword [ebp - 0x20]
lea ebx, [eax + 0x10]
mov dword [ebp - 0x4c], ebx
mov cx, word [eax + 0xe]
add cx, word [eax + 0xc]
movzx eax, cx
mov dword [ebp - 0x3c], eax
and dword [ebp - 0x2c], 0
mov ax, word [ebp - 0x3c]
cmp word [ebp - 0x2c], ax
jae 0x1001b3a3
mov esi, dword [ebx]
mov dword [ebp - 0x44], esi
mov eax, dword [ebx + 4]
test eax, eax
jns 0x1001b316
and eax, 0x7fffffff
add eax, dword [ebp - 0x20]
lea esi, [eax + 0x10]
mov dword [ebp - 0x48], esi
mov cx, word [eax + 0xe]
add cx, word [eax + 0xc]
movzx eax, cx
mov dword [ebp - 0x40], eax
and dword [ebp - 0x28], 0
mov ax, word [ebp - 0x40]
cmp word [ebp - 0x28], ax
jae 0x1001b357
mov edi, dword [esi]
test dword [esi + 4], 0x80000000
jne 0x1001b308
push 0x38
call fcn.10042e16
pop ecx
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 2
test eax, eax
je 0x1001b2f1
push dword [ebp - 0x20]
push dword [esi + 4]
push edi
push dword [ebp - 0x44]
push dword [ebp - 0x30]
mov ecx, eax
call fcn.1001aea9
mov edi, eax
jmp 0x1001b2f3
xor edi, edi
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x60]
call fcn.1001256e
mov dword [eax], edi
inc dword [ebp - 0x28]
add esi, 8
mov dword [ebp - 0x48], esi
mov edi, dword [ebp - 0x34]
jmp 0x1001b2ad
push 0x38
call fcn.10042e16
pop ecx
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 3
test eax, eax
je 0x1001b340
push dword [ebp - 0x20]
push dword [ebx + 4]
push 0
push esi
push dword [ebp - 0x30]
mov ecx, eax
call fcn.1001aea9
mov esi, eax
jmp 0x1001b342
xor esi, esi
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x60]
call fcn.1001256e
mov dword [eax], esi
inc dword [ebp - 0x2c]
add ebx, 8
mov dword [ebp - 0x4c], ebx
jmp 0x1001b26f
push 0x38
call fcn.10042e16
pop ecx
mov dword [ebp - 0x50], eax
mov byte [ebp - 4], 4
cmp eax, ebx
je 0x1001b38c
push dword [ebp - 0x20]
push dword [edi + 4]
push ebx
push ebx
push esi
mov ecx, eax
call fcn.1001aea9
mov esi, eax
jmp 0x1001b38e
xor esi, esi
mov byte [ebp - 4], 1
mov eax, dword [ebp - 0x14]
inc dword [ebp - 0x14]
push eax
lea ecx, [ebp - 0x60]
call fcn.1001256e
mov dword [eax], esi
inc dword [ebp - 0x18]
add edi, 8
mov dword [ebp - 0x34], edi
xor ebx, ebx
jmp 0x1001b231
mov dword [ebp - 4], ebx
jmp 0x1001b3cf
cmp dword [ebp - 0x14], ebx
je 0x1001b4ed
xor edi, edi
inc edi
mov dword [ebp - 0x1c], edi
push 0x10003004
push dword [ebp + 8]
lea eax, [ebp - 0x24]
push eax
call dword [sym.imp.MSVCR100.dll__wfopen_s]
add esp, 0xc
cmp dword [ebp - 0x24], 0
je 0x1001b4d9
push 0x20
call fcn.10042e16
pop ecx
mov dword [ebp + 8], eax
mov byte [ebp - 4], 6
test eax, eax
je 0x1001b41b
mov ecx, eax
call fcn.1001ae85
mov esi, eax
jmp 0x1001b41d
xor esi, esi
mov byte [ebp - 4], 0
push dword [ebp - 0x24]
push edi
push 0x20
push esi
call dword [sym.imp.MSVCR100.dll_fwrite]
add esp, 0x10
mov byte [ebp - 4], 7
push esi
call fcn.10042d92
pop ecx
and dword [ebp - 4], 0
mov byte [ebp - 4], 9
and dword [ebp - 0x18], 0
movzx esi, word [ebp - 0x18]
cmp esi, dword [ebp - 0x14]
jae 0x1001b4b8
push esi
lea ecx, [ebp - 0x60]
call fcn.1001256e
push dword [ebp - 0x24]
mov ecx, dword [eax]
call fcn.1001b008
mov byte [ebp - 4], 0xa
push esi
lea ecx, [ebp - 0x60]
call fcn.1001256e
mov esi, dword [eax]
test esi, esi
je 0x1001b485
mov ecx, esi
call fcn.1001af9a
push esi
call fcn.10042d92
pop ecx
mov dword [ebp - 4], 9
movzx eax, word [ebp - 0x18]
push eax
lea ecx, [ebp - 0x60]
call fcn.1001256e
and dword [eax], 0
inc dword [ebp - 0x18]
jmp 0x1001b448
and dword [ebp - 4], 0
push dword [ebp - 0x24]
call dword [sym.imp.MSVCR100.dll_fclose]
pop ecx
jmp 0x1001b4e0
mov dword [ebp - 0x1c], 0xefffffff
xor ebx, ebx
jmp 0x1001b4ed
or dword [ebp - 0x1c], 0xffffffff
jmp 0x1001b4ed
mov dword [ebp - 0x1c], ebx
or dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x60], ebx
je 0x1001b4ff
push dword [ebp - 0x60]
call fcn.10042d92
pop ecx
mov eax, dword [ebp - 0x1c]
call fcn.1004a605
ret 4