Function at 0x10001870
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100f1956
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x23ac
call fcn.100d4920
mov eax, dword [0x10139d00]
xor eax, esp
mov dword [esp + 0x23a8], eax
push ebx
push esi
push edi
mov eax, dword [0x10139d00]
xor eax, esp
push eax
lea eax, [esp + 0x23c0]
mov dword fs:[0], eax
cmp byte [0x101e3050], 0
mov edi, ecx
mov esi, edx
je 0x10001b00
push 1
push 0x10122674
push edi
call dword [sym.imp.SHLWAPI.dll_PathFindSuffixArrayW]
test eax, eax
je 0x10001b00
push 1
push edi
lea ecx, [esp + 0x1b4]
call fcn.10002100
add esp, 8
test eax, eax
je 0x10001b00
lea eax, [esp + 0x1ac]
push 0x101226b0
push eax
call fcn.100d080d
add esp, 8
mov dword [esp + 0x10], eax
mov dword [esp + 0x23c8], 0
test eax, eax
je 0x10001b00
lea ecx, [esp + 0xa4]
push ecx
push 0x100
push 0x101e3020
call fcn.1006c040
mov edx, dword [0x101e3040]
mov eax, dword [0x101e3044]
mov ecx, dword [0x101e3048]
mov dword [esp + 0x1a8], edx
mov edx, dword [0x101e304c]
mov dword [esp + 0x1ac], eax
mov dword [esp + 0x1b0], ecx
mov dword [esp + 0x1b4], edx
call fcn.1006b0a0
push eax
call fcn.1006b010
mov esi, eax
add esp, 0x10
mov dword [esp + 0x18], esi
lea eax, [esp + 0x24]
mov byte [esp + 0x23c8], 1
push 0xfde9
mov dword [esp + 0x24], eax
push edi
lea eax, [esp + 0x28]
call fcn.10001dc0
mov ecx, dword [esp + 0x20]
push 0x101226b8
push ecx
call fcn.1006c6b0
mov ebx, eax
mov eax, dword [esp + 0x28]
lea edx, [esp + 0x2c]
add esp, 8
cmp eax, edx
je 0x100019c8
push eax
call fcn.100d1800
add esp, 4
test esi, esi
je 0x10001ad9
test ebx, ebx
je 0x10001ae6
push 0x100
push esi
call fcn.1006aac0
push ebx
push esi
call fcn.1006af20
push 0
push 0
push 2
push esi
call fcn.1006ae00
add esp, 0x20
test eax, eax
jne 0x10001a9e
push 0x1000
lea eax, [esp + 0x13b8]
push eax
push esi
call fcn.1006aad0
push 0
lea ecx, [esp + 0x1ac]
push ecx
lea edx, [esp + 0xb8]
push edx
mov edi, eax
push edi
lea eax, [esp + 0x3d0]
push eax
lea ecx, [esp + 0x13d4]
push ecx
call fcn.1006c050
push 0
push 0
push 2
push esi
call fcn.1006ae00
add esp, 0x34
test eax, eax
je 0x10001a6b
mov al, byte [esp + edi + 0x3b3]
cmp al, 0x10
movzx eax, al
jb 0x10001a64
mov eax, 0x10
or edx, 0xffffffff
sub edx, eax
add edi, edx
mov eax, dword [esp + 0x10]
push eax
push edi
lea ecx, [esp + 0x3bc]
push 1
push ecx
call fcn.100d0d86
add esp, 0x10
cmp edi, eax
jne 0x10001abe
push 0
push 0
push 2
push esi
call fcn.1006ae00
add esp, 0x10
test eax, eax
je 0x10001a01
push ebx
call fcn.1006aa20
push esi
call fcn.1006aa20
mov eax, dword [esp + 0x18]
push eax
call fcn.100d11ec
add esp, 0xc
mov eax, 1
jmp 0x10001b02
push ebx
call fcn.1006aa20
push esi
call fcn.1006aa20
mov edx, dword [esp + 0x18]
push edx
call fcn.100d11ec
add esp, 0xc
jmp 0x10001b00
test ebx, ebx
je 0x10001ae6
push ebx
call fcn.1006aa20
add esp, 4
test esi, esi
je 0x10001af3
push esi
call fcn.1006aa20
add esp, 4
mov ecx, dword [esp + 0x10]
push ecx
call fcn.100d11ec
add esp, 4
xor eax, eax
mov ecx, dword [esp + 0x23c0]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x23a8]
xor ecx, esp
call fcn.100d0738
mov esp, ebp
pop ebp
ret