Function at 0x1002ddd0
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x424
mov eax, dword [0x100a049c]
xor eax, ebp
mov dword [ebp - 4], eax
push edi
mov edi, ecx
cmp dword [edi + 8], 0xffffffff
je 0x1002e138
cmp byte [edi + 0x13c], 0
je 0x1002e127
push ebx
push esi
nop
cmp dword [edi + 8], 0xffffffff
je 0x1002e125
push 0x32
push dword [edi + 0x14c]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
cmp byte [edi + 0x13c], 0
je 0x1002e125
test eax, eax
je 0x1002ded0
cmp eax, 0x102
jne 0x1002e118
mov eax, dword [edi + 8]
cmp eax, 0xffffffff
je 0x1002de65
lea ecx, [ebp - 0x410]
push ecx
lea ecx, [ebp - 0x424]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ClearCommError]
test eax, eax
je 0x1002de65
mov eax, dword [ebp - 0x40c]
test eax, eax
je 0x1002de8b
jmp 0x1002de68
or eax, 0xffffffff
test byte [edi + 4], 4
je 0x1002de7c
push eax
mov ecx, edi
call fcn.1002d600
mov eax, dword [edi + 0xe8]
cmp eax, dword [edi + 0x170]
jb 0x1002de8b
mov eax, dword [edi]
mov ecx, edi
call dword [eax + 0x1c]
test byte [edi + 4], 8
je 0x1002e118
lea esi, [edi + 0x108]
test esi, esi
je 0x1002deac
mov eax, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ebx, [esi + 0x14]
push ebx
call eax
jmp 0x1002deb1
mov ebx, 0x14
mov esi, dword [esi + 0xc]
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test esi, esi
je 0x1002e118
push ecx
mov ecx, edi
call fcn.1002d6c0
jmp 0x1002e118
test byte [edi + 4], 8
je 0x1002e10c
lea esi, [edi + 0x108]
test esi, esi
je 0x1002def9
lea eax, [esi + 0x14]
push eax
mov dword [ebp - 0x414], eax
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [esi + 0x14]
jmp 0x1002df04
mov eax, 0x14
mov dword [ebp - 0x414], eax
mov ebx, dword [esi + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test ebx, ebx
je 0x1002e10c
mov eax, dword [edi + 4]
shr eax, 1
test al, 1
je 0x1002dfba
mov ebx, dword [ebp - 0x414]
test esi, esi
je 0x1002df35
mov eax, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push ebx
call eax
cmp dword [edi + 0x114], 0
jne 0x1002df52
test esi, esi
je 0x1002e102
push ebx
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1002e102
mov ecx, dword [edi + 0x10c]
test ecx, ecx
je 0x1002df7d
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
cmp eax, 0x400
jae 0x1002df6f
mov ebx, dword [ecx + 4]
sub ebx, dword [ecx]
jmp 0x1002df7f
mov eax, dword [ecx]
mov ebx, 0x400
add eax, 0x10
add eax, ecx
jmp 0x1002df8e
xor ebx, ebx
test ecx, ecx
je 0x1002df8c
mov eax, dword [ecx]
add eax, 0x10
add eax, ecx
jmp 0x1002df8e
xor eax, eax
push ebx
push eax
mov ecx, edi
call fcn.1002cc10
push ebx
push 0
mov ecx, esi
call fcn.1002d1d0
test esi, esi
je 0x1002e102
push dword [ebp - 0x414]
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x1002e102
mov eax, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea ebx, [edi + 0x11c]
push ebx
mov dword [ebp - 0x418], 0
call eax
push 0x400
lea eax, [ebp - 0x404]
mov ecx, esi
push eax
call fcn.1002d1d0
push ebx
mov dword [ebp - 0x414], eax
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [ebp - 0x414], 0
jbe 0x1002e102
mov ecx, dword [ebp - 0x418]
mov esi, dword [ebp - 0x414]
nop dword [eax + eax]
lea eax, [ebp - 0x404]
mov ebx, esi
add eax, ecx
sub ebx, ecx
mov dword [ebp - 0x41c], eax
mov eax, dword [edi + 8]
cmp eax, 0xffffffff
je 0x1002e0ea
test ebx, ebx
je 0x1002e0ea
push 0
lea ecx, [ebp - 0x420]
mov dword [ebp - 0x414], 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_ClearCommError]
test eax, eax
je 0x1002e068
cmp dword [ebp - 0x420], 0
jbe 0x1002e068
push 1
push dword [edi + 8]
call dword [sym.imp.KERNEL32.dll_PurgeComm]
mov eax, dword [edi + 4]
mov ecx, dword [edi + 8]
shr eax, 1
test al, 1
je 0x1002e0bf
lea eax, [edi + 0x188]
push eax
lea eax, [ebp - 0x414]
push eax
push ebx
push dword [ebp - 0x41c]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
jne 0x1002e0ab
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, 0x3e5
je 0x1002e0ab
mov ecx, dword [ebp - 0x418]
xor eax, eax
jmp 0x1002e0ec
add dword [edi + 0x138], ebx
mov eax, dword [ebp - 0x414]
mov ecx, dword [ebp - 0x418]
jmp 0x1002e0ec
push 0
lea eax, [ebp - 0x414]
push eax
push ebx
push dword [ebp - 0x41c]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x414]
add dword [edi + 0x138], eax
mov ecx, dword [ebp - 0x418]
jmp 0x1002e0ec
xor eax, eax
add ecx, eax
mov dword [ebp - 0x418], ecx
cmp ecx, esi
jb 0x1002e010
lea esi, [edi + 0x108]
test byte [edi + 4], 8
jne 0x1002dee0
push dword [edi + 0x14c]
call dword [sym.imp.KERNEL32.dll_ResetEvent]
cmp byte [edi + 0x13c], 0
jne 0x1002de00
pop esi
pop ebx
xor eax, eax
pop edi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.1004cbc7
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
mov eax, 1
xor ecx, ebp
pop edi
call fcn.1004cbc7
mov esp, ebp
pop ebp
ret