Function at 0x1001bf25
Capabilities:
Write file on windows

Disassembly:
aaa
push ebp
mov ebp, esp
sub esp, 0x2c
push ebx
push esi
mov eax, dword [ebp + 8]
mov dword [ebp - 8], eax
jmp 0x1001bf3e
mov eax, dword [ebp - 8]
add eax, 0x4c
mov dword [ebp - 8], eax
mov eax, dword [ebp + 8]
add eax, 0x1c34
cmp dword [ebp - 8], eax
ja 0x1001c55a
mov eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x2cb1
ja 0x1001c089
cmp dword [ebp - 0xc], 0x2cb1
je 0x1001c1ef
cmp dword [ebp - 0xc], 0x2a05
ja 0x1001c011
cmp dword [ebp - 0xc], 0x2a05
je 0x1001c3ce
cmp dword [ebp - 0xc], 0x221e
ja 0x1001bfd8
cmp dword [ebp - 0xc], 0x221e
je 0x1001c193
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
sub dword [ebp - 0x10], 0xbab
je 0x1001c44c
sub dword [ebp - 0x10], 0x4c
je 0x1001c4e0
sub dword [ebp - 0x10], 0x158f
je 0x1001c1d4
sub dword [ebp - 0x10], 0x4c
je 0x1001c1ae
jmp 0x1001c555
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
sub dword [ebp - 0x14], 0x226a
je 0x1001c27c
sub dword [ebp - 0x14], 0x4c
je 0x1001c540
sub dword [ebp - 0x14], 0x4c
je 0x1001c3fa
sub dword [ebp - 0x14], 0x6b7
je 0x1001c520
jmp 0x1001c555
cmp dword [ebp - 0xc], 0x2b81
ja 0x1001c05d
cmp dword [ebp - 0xc], 0x2b81
je 0x1001c3db
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
sub dword [ebp - 0x18], 0x2a51
je 0x1001c52f
sub dword [ebp - 0x18], 0x4c
je 0x1001c1c3
sub dword [ebp - 0x18], 0x4c
je 0x1001c26a
sub dword [ebp - 0x18], 0x4c
je 0x1001c3bd
jmp 0x1001c555
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
sub dword [ebp - 0x1c], 0x2bcd
je 0x1001c42b
sub dword [ebp - 0x1c], 0x4c
je 0x1001c29b
sub dword [ebp - 0x1c], 0x4c
je 0x1001c242
jmp 0x1001c555
cmp dword [ebp - 0xc], 0x2f5d
ja 0x1001c11b
cmp dword [ebp - 0xc], 0x2f5d
je 0x1001c4c0
cmp dword [ebp - 0xc], 0x2e2d
ja 0x1001c0ef
cmp dword [ebp - 0xc], 0x2e2d
je 0x1001c4ec
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
sub dword [ebp - 0x20], 0x2cfd
je 0x1001c419
sub dword [ebp - 0x20], 0x4c
je 0x1001c22b
sub dword [ebp - 0x20], 0x4c
je 0x1001c534
sub dword [ebp - 0x20], 0x4c
je 0x1001c24b
jmp 0x1001c555
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x24], eax
sub dword [ebp - 0x24], 0x2e79
je 0x1001c4b9
sub dword [ebp - 0x24], 0x4c
je 0x1001c504
sub dword [ebp - 0x24], 0x4c
je 0x1001c492
jmp 0x1001c555
cmp dword [ebp - 0xc], 0x30d9
ja 0x1001c167
cmp dword [ebp - 0xc], 0x30d9
je 0x1001c516
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
sub dword [ebp - 0x28], 0x2fa9
je 0x1001c481
sub dword [ebp - 0x28], 0x4c
je 0x1001c218
sub dword [ebp - 0x28], 0x4c
je 0x1001c20b
sub dword [ebp - 0x28], 0x4c
je 0x1001c4d8
jmp 0x1001c555
mov eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
sub dword [ebp - 0x2c], 0x3125
je 0x1001c40e
sub dword [ebp - 0x2c], 0x4c
je 0x1001c2a6
sub dword [ebp - 0x2c], 0x4c
je 0x1001c3a2
jmp 0x1001c555
mov dword [ebx], 0x10057824
mov dword [ebx + 0x15c], 0
mov al, byte [ebx + 0x160]
jmp 0x1001c555
mov dword [esp + 4], 0x200
mov dword [esp], eax
call fcn.100046d7
jmp 0x1001c555
invalid
push esi
push ebx
sub esp, 0x20
mov esi, dword [ebp + 8]
mov dword [esp], 0x164
call fcn.100044f5
mov ebx, eax
jmp 0x1001c555
push 4
call dword [sym.imp.KERNEL32.dll_GetThreadLocale]
push eax
call dword [sym.imp.KERNEL32.dll_GetDateFormatA]
test eax, eax
je 0x1001c44c
jmp 0x1001c555
mov dword fs:[eax], edx
push 0x1001c3a2
jmp 0x1001c555
mov eax, ebx
mov edx, esi
call fcn.1002572c
xor eax, eax
pop edx
pop ecx
pop ecx
jmp 0x1001c555
call fcn.1002d63a
dec esi
jne 0x1001c481
mov ax, word [0x1005d82c]
jmp 0x1001c555
lea eax, [ebp - 0x14]
push eax
jmp 0x1001c555
into
dec ebp
inc ebx
arpl bx, cx
sub ax, 0xd
jne 0x1001c22b
push ebx
mov eax, dword [ebx]
mov edx, 1
call fcn.10028cd1
mov ecx, eax
jmp 0x1001c555
push 0x1001c2a6
push dword fs:[eax]
mov dword fs:[eax], esp
mov eax, ebx
jmp 0x1001c555
and eax, 0xffffffc0
or eax, 2
mov byte [ebx + 0x160], al
mov eax, dword [ebp + 0xc]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], esi
jmp 0x1001c555
call fcn.10029e0e
push eax
jmp 0x1001c555
mov dword [ebp - 8], 0x3171
jmp 0x100128a3
mov dword [ebp - 8], 0x31bd
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
call fcn.10003b5f
mov eax, dword [ebp + 8]
mov ax, word [eax - 0xe]
jmp 0x1001c555
xor ecx, ecx
mov dword [ebp - 0x118], ecx
jmp 0x1001c555
mov word [ebp - 0x14], ax
mov eax, dword [ebp + 8]
mov ax, word [eax - 0x10]
mov word [ebp - 0x12], ax
mov eax, dword [ebp + 8]
mov ax, word [eax - 0x12]
mov word [ebp - 0xe], ax
jmp 0x1001c555
mov dword [esp], eax
call fcn.1000574d
add esp, 0x20
pop ebx
pop esi
leave
ret
call fcn.10016de3
ret
mov eax, ebx
lea edx, [ebp - 0x114]
mov ecx, 0x100
jmp 0x1001c555
lea eax, [ebp - 4]
mov edx, 0x1001c2b4
call fcn.1001c561
push 0x100
lea eax, [ebp - 0x114]
push eax
mov eax, dword [ebp - 4]
jmp 0x1001c555
mov eax, 0x7473
mov word [0x1005d9d0], ax
push 0x61
pop eax
mov word [0x1005d9d2], ax
mov dword [0x1005d9d3], 0x725f7472
push 0x65
pop eax
mov word [0x1005d9d7], ax
push 0x73
pop eax
mov word [0x1005d9d8], ax
jmp 0x1001c555
mov edx, 2
call fcn.10029cdb
mov ecx, eax
jmp 0x1001c555
iretd
jne 0x1001c4d8
jmp 0x1001c555
add esi, eax
dec esi
lea eax, [ebp - 0x118]
mov edx, esi
call fcn.1001ba43
mov eax, dword [ebp - 0x118]
jmp 0x1001c555
lea eax, [ebp - 0x118]
jmp 0x1001c555
mov dword [ebp - 4], 0x1005d9d0
mov eax, dword [ebp - 4]
jmp 0x1001c55d
mov eax, dword [ebx]
mov edx, 1
call fcn.10014e69
jmp 0x1001c4b9
mov eax, dword [ebx]
call fcn.1000cd5e
mov edx, eax
mov eax, dword [ebx]
call fcn.10033502
jmp 0x1001c555
call fcn.10025e58
lea eax, [ebp - 4]
jmp 0x1001c555
mov ch, al
invalid
mov dword [ebp - 4], ecx
jmp 0x1001c555
sub ax, 4
je 0x1001c1ae
jmp 0x1001c555
call fcn.100137a0
mov dword [esi], 0x10058120
mov dword [esi + 8], str._eKe
mov eax, dword [esi + 4]
jmp 0x1001bf35
mov eax, dword [ebp - 4]
pop esi
pop ebx
leave
ret