Function at 0x1000c350
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x80
mov eax, dword [0x10027040]
xor eax, esp
mov dword [esp + 0x7c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 3]
mov dword [esp + 0x58], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
lea eax, [edx + 4]
mov dword [esp + 0x4c], eax
mov eax, 0x95595e2e
jmp 0x1000c3a0
push ebx
push dword [esp + 0x14]
call fcn.1001415d
add esp, 8
mov eax, 0x132f2ca6
nop dword [eax]
cmp eax, 0x132f2ca5
jg 0x1000c410
cmp eax, 0xca98b2b7
jle 0x1000c470
cmp eax, 0xe661c961
jg 0x1000c518
cmp eax, 0xca98b2b8
je 0x1000c596
cmp eax, 0xdcb69143
jne 0x1000c3a0
mov dword [esp + 0x40], edi
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x64]
call fcn.10012c00
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x3c]
jae 0x1000c69d
mov ecx, dword [esp + 4]
jmp 0x1000c69f
cmp eax, 0x604988f3
jg 0x1000c4c0
cmp eax, 0x2daba974
jle 0x1000c55f
cmp eax, 0x2daba975
je 0x1000c5df
cmp eax, 0x56202004
jne 0x1000c790
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
jae 0x1000c6fb
mov eax, dword [esp + 0x1c]
jmp 0x1000c6fd
cmp eax, 0x95595e2e
je 0x1000c5f7
cmp eax, 0xaa0dc5f1
je 0x1000c611
cmp eax, 0xc331b99f
jne 0x1000c3a0
lea ecx, [esp + 0x64]
mov dword [esp + 4], ecx
lea eax, [esp + 0x74]
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
xor esi, esi
mov eax, 0xdcb69143
mov edi, dword [esp + 0x30]
jmp 0x1000c3a0
cmp eax, 0x604988f4
je 0x1000c38b
cmp eax, 0x60f196b4
je 0x1000c65b
cmp eax, 0x7f2395b1
jne 0x1000c3a0
mov eax, dword [esp + 0xc]
mov eax, dword [eax - 4]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xc]
mov eax, ecx
and eax, 0xfffffffc
add ecx, eax
add eax, dword [esp + 0x48]
sub ecx, eax
add ecx, 0xfffffffc
mov eax, 0xe661c962
cmp ecx, 0x20
jb 0x1000c3a0
mov eax, 0x3c9f9a50
jmp 0x1000c3a0
cmp eax, 0xe661c962
je 0x1000c675
cmp eax, 0xf735af7a
jne 0x1000c3a0
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
mov eax, 0x2377e6d5
cmp ecx, dword [edx]
je 0x1000c3a0
mov eax, 0x56202004
jmp 0x1000c3a0
cmp eax, 0x132f2ca6
jne 0x1000c783
mov eax, dword [esp + 4]
mov edi, dword [esp + 0x40]
add edi, 0x18
mov eax, 0x2daba975
cmp edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x44]
je 0x1000c3a0
mov eax, 0xdcb69143
jmp 0x1000c3a0
mov dword [esp + 0x28], ebp
lea eax, [esp + 0x60]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x30]
mov eax, 0x2daba975
cmp ecx, dword [esp + 0x34]
je 0x1000c3a0
mov eax, 0xc331b99f
jmp 0x1000c3a0
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
mov eax, 0x2377e6d5
jmp 0x1000c3a0
cmp byte [esp + 3], 0
mov eax, 0x2377e6d5
jne 0x1000c3a0
mov eax, 0xf735af7a
jmp 0x1000c3a0
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 8]
lea ebx, [eax + eax]
mov ecx, ebx
and ecx, 0xfffffffc
add ecx, eax
or eax, 0xfffffffe
sub ecx, eax
xor ebx, 0xfffffffc
add ebx, ecx
sub ebx, eax
add ebx, 1
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov eax, 0x7f2395b1
cmp ebx, 0x1000
jae 0x1000c3a0
mov eax, 0x604988f4
jmp 0x1000c3a0
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x24]
jae 0x1000c73f
mov eax, dword [esp + 0x1c]
jmp 0x1000c741
mov eax, dword [esp + 8]
mov ecx, eax
xor ecx, 0x24
mov edx, eax
xor edx, 0xffffffdb
add edx, ecx
lea ebx, [eax + edx]
add ebx, 0x25
mov eax, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov eax, 0x604988f4
jmp 0x1000c3a0
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x64]
push edx
push eax
push ecx
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x60]
lea edx, [esi + eax*4]
mov ecx, eax
or ecx, esi
sub edx, ecx
not ecx
add ecx, edx
mov edx, esi
not edx
or edx, eax
add edx, edx
sub ecx, edx
not eax
add eax, ecx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
mov eax, 0xaa0dc5f1
cmp ecx, 0x10
jae 0x1000c3a0
mov eax, 0x132f2ca6
jmp 0x1000c3a0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10023960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0x60f196b4
cmp ebp, 0xffffffff
je 0x1000c3a0
mov eax, 0xca98b2b8
jmp 0x1000c3a0
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10023950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0x2377e6d5
cmp ebp, 0xffffffff
je 0x1000c3a0
mov eax, 0xca98b2b8
jmp 0x1000c3a0
cmp eax, 0x2377e6d5
jne 0x1000c3a0
jmp 0x1000c7a0
cmp eax, 0x3c9f9a50
jne 0x1000c3a0
call fcn.1001611d
mov ecx, dword [esp + 0x7c]
xor ecx, esp
call fcn.1001466a
add esp, 0x80
pop esi
pop edi
pop ebx
pop ebp
ret