Function at 0x1000a8e0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x80
mov eax, dword [0x10025040]
xor eax, esp
mov dword [esp + 0x7c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 3]
mov dword [esp + 0x58], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
lea eax, [edx + 4]
mov dword [esp + 0x4c], eax
mov eax, 0x5c50fab1
jmp 0x1000a930
push esi
push dword [esp + 0x14]
call fcn.10012616
add esp, 8
mov eax, 0xa5aacbce
nop dword [eax]
cmp eax, 0xfa4ef15c
jg 0x1000a990
cmp eax, 0xd567d3e5
jle 0x1000a9f0
cmp eax, 0xeb2d0e2b
jg 0x1000aa8b
cmp eax, 0xd567d3e6
je 0x1000ab2b
cmp eax, 0xdc7fc035
jne 0x1000a930
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
mov eax, 0x4317160c
cmp ecx, dword [edx]
je 0x1000a930
mov eax, 0xeb2d0e2c
jmp 0x1000a930
cmp eax, 0x4e3f857a
jg 0x1000aa50
cmp eax, 0x4317160b
jg 0x1000aacf
cmp eax, 0xfa4ef15d
je 0x1000a91b
cmp eax, 0x3edb6c18
jne 0x1000a930
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov esi, dword [esp + 8]
add esi, 1
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov eax, 0xedeece1d
cmp esi, 0x1000
jae 0x1000a930
mov eax, 0xfa4ef15d
jmp 0x1000a930
cmp eax, 0xb60d444d
jg 0x1000ab06
cmp eax, 0xa5aacbce
je 0x1000ab74
cmp eax, 0xb05fbcaf
jne 0x1000a930
mov eax, dword [esp + 8]
mov ecx, eax
or ecx, 0xffffffdb
add ecx, eax
mov edx, eax
xor edx, 0x24
add edx, ecx
or eax, 0x24
xor eax, 0xffffffdb
lea esi, [eax + edx]
add esi, 0x26
mov eax, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov eax, 0xfa4ef15d
jmp 0x1000a930
cmp eax, 0x4e3f857b
je 0x1000aba0
cmp eax, 0x76dd4c70
je 0x1000abd5
cmp eax, 0x5c50fab1
jne 0x1000a930
cmp byte [esp + 3], 0
mov eax, 0x4317160c
jne 0x1000a930
mov eax, 0xdc7fc035
jmp 0x1000a930
cmp eax, 0xeb2d0e2c
je 0x1000abed
cmp eax, 0xedeece1d
jne 0x1000a930
mov eax, dword [esp + 0xc]
mov eax, dword [eax - 4]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xc]
sub ecx, dword [esp + 0x48]
add ecx, 0xfffffffc
mov eax, 0xb05fbcaf
cmp ecx, 0x20
jb 0x1000a930
mov eax, 0xb60d444e
jmp 0x1000a930
cmp eax, 0x4d0b5975
jne 0x1000acfb
lea ecx, [esp + 0x64]
mov dword [esp + 4], ecx
lea eax, [esp + 0x74]
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
xor ebx, ebx
mov eax, 0x4e3f857b
mov edi, dword [esp + 0x30]
jmp 0x1000a930
cmp eax, 0xc06a6b68
jne 0x1000ad08
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x24]
jae 0x1000ac1b
mov eax, dword [esp + 0x1c]
jmp 0x1000ac1d
mov dword [esp + 0x28], ebp
lea eax, [esp + 0x60]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x30]
mov eax, 0x76dd4c70
cmp ecx, dword [esp + 0x34]
je 0x1000a930
mov eax, 0x4d0b5975
jmp 0x1000a930
mov eax, dword [esp + 4]
mov edi, dword [esp + 0x40]
add edi, 0x18
mov eax, 0x76dd4c70
cmp edi, dword [esp + 0x34]
mov ecx, dword [esp + 0x44]
mov ebx, dword [esp + 0x44]
je 0x1000a930
mov eax, 0x4e3f857b
jmp 0x1000a930
mov dword [esp + 0x40], edi
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x64]
call fcn.100110d0
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x3c]
jae 0x1000ac5f
mov ecx, dword [esp + 4]
jmp 0x1000ac61
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
mov eax, 0x4317160c
jmp 0x1000a930
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
jae 0x1000acb7
mov eax, dword [esp + 0x1c]
jmp 0x1000acb9
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10021950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0x4317160c
cmp ebp, 0xffffffff
je 0x1000a930
mov eax, 0xd567d3e6
jmp 0x1000a930
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x64]
push edx
push eax
push ecx
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x60]
mov ecx, ebx
not ecx
and ecx, eax
add ecx, eax
add ecx, ebx
or eax, ebx
not eax
add eax, ecx
add eax, ebx
add eax, 1
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
mov eax, 0x3edb6c18
cmp ecx, 0x10
jae 0x1000a930
mov eax, 0xa5aacbce
jmp 0x1000a930
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x10021960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0xc06a6b68
cmp ebp, 0xffffffff
je 0x1000a930
mov eax, 0xd567d3e6
jmp 0x1000a930
cmp eax, 0x4317160c
jne 0x1000a930
jmp 0x1000ad18
cmp eax, 0xb60d444e
jne 0x1000a930
call fcn.100145cd
mov ecx, dword [esp + 0x7c]
xor ecx, esp
call fcn.10012b1a
add esp, 0x80
pop esi
pop edi
pop ebx
pop ebp
ret