Function at 0x10018ba4
Capabilities:
Write file on windows

Disassembly:
push 0x184
mov eax, 0x100e62a2
call fcn.100c74e5
push dword [ebp + 0xc]
mov eax, dword [ebp + 8]
push eax
lea eax, [ebp - 0x174]
mov esi, ecx
push eax
mov dword [ebp - 0x138], esi
call fcn.100970d0
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
add esp, 0xc
lea eax, [ebp - 0x174]
xor ebx, ebx
push esi
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x168], 0x100970e5
mov dword [ebp - 0x154], fcn.100a4e45
mov dword [ebp - 0x164], 0x1009711e
mov dword [ebp - 0x158], 0x1009713b
mov dword [ebp - 0x15c], 0x10097173
mov dword [ebp - 0x160], ebx
mov dword [ebp - 0x150], ebx
call edi
mov esi, eax
lea eax, [esi + 0x105]
push eax
call fcn.100a2139
pop ecx
mov dword [ebp - 0x13c], eax
cmp dword [ebp - 0x138], ebx
je 0x10018c53
push dword [ebp - 0x138]
call edi
inc eax
cmp eax, 0x3fffffff
jle 0x10018c57
xor eax, eax
jmp 0x10018c72
lea edi, [eax + eax]
mov eax, edi
call fcn.100c7f80
mov eax, esp
push 3
push edi
push dword [ebp - 0x138]
push eax
call fcn.100161b6
push eax
lea eax, [esi + 1]
push eax
push dword [ebp - 0x13c]
call fcn.100c3167
push 0x2000
call fcn.100a2139
mov dword [ebp - 0x138], eax
lea eax, [ebp - 0x168]
push eax
push 0x10107c98
call fcn.10094b3a
mov edi, eax
push edi
call fcn.1009468f
add esp, 0x1c
cmp eax, ebx
jne 0x10018e1b
mov eax, dword [ebp - 0x13c]
add eax, esi
mov dword [ebp - 0x148], eax
mov eax, dword [ebp - 0x148]
push ebx
push ebx
push ebx
push ebx
mov byte [eax], bl
push 0x103
lea eax, [ebp - 0x118]
push eax
push ebx
push edi
call fcn.10094668
add esp, 0x20
lea eax, [ebp - 0x118]
push eax
lea ecx, [ebp - 0x134]
call fcn.1000d025
lea eax, [ebp - 0x134]
push eax
mov dword [ebp - 4], ebx
call fcn.100288ee
cmp eax, 0xffffffff
je 0x10018d3f
push 0xffffffffffffffff
inc eax
push eax
lea eax, [ebp - 0x134]
push eax
lea esi, [ebp - 0x190]
call fcn.10028973
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 1
call fcn.1000d11b
push ebx
push 1
mov ecx, esi
call fcn.1000d1ca
cmp dword [ebp - 0x120], ebx
jne 0x10018d52
push edi
call fcn.100946d1
jmp 0x10018dfe
cmp dword [ebp - 0x11c], 0x10
mov eax, dword [ebp - 0x130]
jae 0x10018d67
lea eax, [ebp - 0x130]
push eax
push 0x104
push dword [ebp - 0x13c]
call fcn.100c31cf
add esp, 0xc
push ebx
push 0x80
push 2
push ebx
push ebx
push 0x40000000
push dword [ebp - 0x13c]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x140], eax
push edi
cmp eax, 0xffffffff
je 0x10018d48
call fcn.10094ea6
pop ecx
push 0x2000
push dword [ebp - 0x138]
push edi
call fcn.1009491f
mov esi, eax
add esp, 0xc
cmp esi, ebx
jle 0x10018de5
push ebx
lea eax, [ebp - 0x144]
push eax
push esi
push dword [ebp - 0x138]
push dword [ebp - 0x140]
call dword [sym.imp.KERNEL32.dll_WriteFile]
cmp dword [ebp - 0x144], esi
je 0x10018da8
push dword [ebp - 0x140]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
call fcn.10094ac9
push edi
call fcn.100946d1
pop ecx
or dword [ebp - 4], 0xffffffff
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x134]
mov esi, eax
call fcn.1000d1ca
cmp esi, ebx
je 0x10018cc4
push edi
call fcn.10094ce6
push dword [ebp - 0x138]
call fcn.100a212e
push dword [ebp - 0x13c]
call fcn.100a212e
xor eax, eax
add esp, 0xc
inc eax
lea esp, [ebp - 0x1a0]
call fcn.100c7568
ret