Function at 0x10008ef0
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x80
mov eax, dword [0x10023040]
xor eax, esp
mov dword [esp + 0x7c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 3]
mov dword [esp + 0x58], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
lea eax, [edx + 4]
mov dword [esp + 0x4c], eax
mov eax, 0x68ce7ef
jmp 0x10008f40
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
mov eax, 0xe772c6bb
nop
cmp eax, 0xff848131
jle 0x10008fb0
cmp eax, 0x18b139e3
jle 0x10009050
cmp eax, 0x28eab108
jg 0x100090a1
cmp eax, 0x18b139e4
je 0x10009148
cmp eax, 0x1c4a504f
jne 0x10008f40
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 8]
mov edi, eax
and edi, 0xfffffffe
add edi, eax
or eax, 1
sub edi, eax
add edi, 2
mov esi, dword [esp + 0xc]
mov eax, 0x18b139e4
cmp edi, 0x1000
jae 0x10008f40
mov eax, 0x9efef50d
jmp 0x10008f40
cmp eax, 0xa12ceb6c
jle 0x10009010
cmp eax, 0xadaf8d89
jg 0x100090e8
cmp eax, 0xa12ceb6d
je 0x10008f2b
cmp eax, 0xa65a1863
jne 0x10008f40
lea ecx, [esp + 0x64]
mov dword [esp + 4], ecx
lea eax, [esp + 0x74]
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
mov dword [esp + 0x10], 0
mov eax, 0x9962b5c8
mov ebx, dword [esp + 0x30]
jmp 0x10008f40
cmp eax, 0x9e047a4b
jle 0x10009108
cmp eax, 0x9e047a4c
je 0x10009176
cmp eax, 0x9efef50d
jne 0x10008f40
push edi
push esi
call fcn.10010ce6
add esp, 8
mov eax, 0xf9da2cc
jmp 0x10008f40
cmp eax, 0xff848132
je 0x10009190
cmp eax, 0x68ce7ef
je 0x100091be
cmp eax, 0xf9da2cc
jne 0x10008f40
mov eax, dword [esp + 4]
mov ebx, dword [esp + 0x40]
add ebx, 0x18
mov eax, 0xa12ceb6d
cmp ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x44]
mov ecx, dword [esp + 0x44]
mov dword [esp + 0x10], ecx
je 0x10008f40
mov eax, 0x9962b5c8
jmp 0x10008f40
cmp eax, 0x28eab109
je 0x100091d8
cmp eax, 0x659462ee
jne 0x10008f40
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
mov eax, 0xe772c6bb
cmp ecx, dword [edx]
je 0x10008f40
mov eax, 0xff848132
jmp 0x10008f40
cmp eax, 0xadaf8d8a
jne 0x100092f0
mov edi, dword [esp + 8]
add edi, 0x24
mov esi, dword [esp + 0x48]
mov eax, 0x9efef50d
jmp 0x10008f40
cmp eax, 0x9962b5c8
jne 0x100092fd
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x64]
call fcn.1000f790
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x3c]
jae 0x10009221
mov ecx, dword [esp + 4]
jmp 0x10009223
mov eax, dword [esp + 0xc]
mov eax, dword [eax - 4]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0xc]
sub ecx, dword [esp + 0x48]
add ecx, 0xfffffffc
mov eax, 0xadaf8d8a
cmp ecx, 0x20
jb 0x10008f40
mov eax, 0x93de92fa
jmp 0x10008f40
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x24]
jae 0x10009268
mov eax, dword [esp + 0x1c]
jmp 0x1000926a
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
jae 0x100092ac
mov eax, dword [esp + 0x1c]
jmp 0x100092ae
cmp byte [esp + 3], 0
mov eax, 0xe772c6bb
jne 0x10008f40
mov eax, 0x659462ee
jmp 0x10008f40
mov dword [esp + 0x28], ebp
lea eax, [esp + 0x60]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x30]
mov eax, 0xa12ceb6d
cmp ecx, dword [esp + 0x34]
je 0x10008f40
mov eax, 0xa65a1863
jmp 0x10008f40
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x64]
push edx
push eax
push ecx
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x60]
add eax, dword [esp + 0x10]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
mov eax, 0x1c4a504f
cmp ecx, 0x10
jae 0x10008f40
mov eax, 0xf9da2cc
jmp 0x10008f40
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1001f950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0xe772c6bb
cmp ebp, 0xffffffff
je 0x10008f40
mov eax, 0x28eab109
jmp 0x10008f40
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1001f960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0x9e047a4c
cmp ebp, 0xffffffff
je 0x10008f40
mov eax, 0x28eab109
jmp 0x10008f40
cmp eax, 0xe772c6bb
jne 0x10008f40
jmp 0x1000930d
cmp eax, 0x93de92fa
jne 0x10008f40
call fcn.10012c9d
mov ecx, dword [esp + 0x7c]
xor ecx, esp
call fcn.100111ea
add esp, 0x80
pop esi
pop edi
pop ebx
pop ebp
ret