Function at 0x1002344
Capabilities:
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x20
push ebx
push esi
mov ebx, eax
push edi
xor edi, edi
lea ecx, [ebx + 0x30]
mov eax, dword [ecx]
mov dword [ebp - 0x14], edi
mov dword [ebp - 8], edi
mov dword [ebp - 0xc], edi
mov dword [ebp - 0x1c], ecx
xor edx, edx
jmp 0x100236b
mov eax, dword [eax]
inc edx
cmp eax, ecx
jne 0x1002368
push 0xa
pop esi
mov dword [ebp - 8], edx
cmp edx, esi
jb 0x100237c
mov dword [ebp - 8], esi
lea ecx, [ebx + 0x38]
mov eax, dword [ecx]
mov dword [ebp - 0x20], ecx
xor edx, edx
jmp 0x100238b
mov eax, dword [eax]
inc edx
cmp eax, ecx
jne 0x1002388
mov dword [ebp - 0xc], edx
cmp edx, esi
jb 0x1002399
mov dword [ebp - 0xc], esi
mov ecx, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
mov esi, dword [ebx + 0xc]
lea eax, [edx + ecx]
lea eax, [esi + eax*2 + 0xa]
add eax, edx
add eax, ecx
mov ecx, dword [0x10086cc]
shl eax, 2
add ecx, eax
mov dword [ebp - 0x14], eax
cmp ecx, 0x80000
ja 0x1002577
mov esi, dword [sym.imp.KERNEL32.dll_WriteFile]
push edi
lea eax, [ebp - 4]
push eax
push 4
lea eax, [ebp - 0x14]
push eax
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], 4
jne 0x1002577
add dword [0x10086cc], 4
push edi
lea eax, [ebp - 4]
push eax
push 8
pop edi
push edi
lea eax, [ebx + 0x10]
push eax
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
add dword [0x10086cc], edi
push 0
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebx + 0x18]
push eax
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
add dword [0x10086cc], edi
push 0
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebx + 0x20]
push eax
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
add dword [0x10086cc], edi
push 0
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebx + 0x28]
push eax
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
add dword [0x10086cc], edi
push 0
lea eax, [ebp - 4]
push eax
push 4
pop edi
push edi
lea eax, [ebx + 0xc]
push eax
push dword [0x10086c8]
mov dword [ebp - 0x18], eax
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
add dword [0x10086cc], edi
push 0
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebp - 8]
push eax
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
add dword [0x10086cc], edi
push 0
lea eax, [ebp - 4]
push eax
push edi
lea eax, [ebp - 0xc]
push eax
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
mov eax, dword [ebp - 0x18]
add dword [0x10086cc], edi
and dword [ebp - 0x10], 0
cmp dword [eax], 0
jbe 0x100255c
add ebx, 0x40
push 0
lea eax, [ebp - 4]
push eax
push edi
push ebx
push dword [0x10086c8]
call esi
test eax, eax
je 0x1002577
cmp dword [ebp - 4], edi
jne 0x1002577
add dword [0x10086cc], edi
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x10]
add ebx, edi
cmp ecx, dword [eax]
jb 0x100252e
mov ebx, dword [ebp - 0x1c]
call fcn.010022c3
test al, al
je 0x1002577
mov ebx, dword [ebp - 0x20]
call fcn.010022c3
test al, al
setne al
jmp 0x1002579
xor al, al
pop edi
pop esi
pop ebx
leave
ret