Function at 0x10008c00
Capabilities:
Resolve function by parsing pe exports
Write file on windows

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x80
mov eax, dword [0x10023040]
xor eax, esp
mov dword [esp + 0x7c], eax
cmp dword [ecx + 0x10], 0
sete byte [esp + 3]
mov dword [esp + 0x58], ecx
lea eax, [ecx + 0x14]
mov dword [esp + 0x50], eax
mov dword [esp + 0x54], edx
lea eax, [edx + 4]
mov dword [esp + 0x4c], eax
mov eax, 0xe706b4d4
jmp 0x10008c50
push edi
push dword [esp + 0x14]
call fcn.1001077f
add esp, 8
mov eax, 0xe60467b5
nop dword [eax]
cmp eax, 0xe706b4d3
jg 0x10008cc0
cmp eax, 0xd63d8e97
jle 0x10008da0
cmp eax, 0xe51e8d0e
jg 0x10008e0a
cmp eax, 0xd63d8e98
je 0x10008ebc
cmp eax, 0xdf293f08
jne 0x10008c50
mov dword [esp + 0x40], ebx
mov eax, dword [esp + 4]
mov edx, dword [esp + 0x40]
lea ecx, [esp + 0x64]
call fcn.1000f330
mov eax, dword [esp + 0x5c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
cmp dword [ecx], 0x10
mov ecx, dword [esp + 0x3c]
jae 0x10008f52
mov ecx, dword [esp + 4]
jmp 0x10008f54
cmp eax, 0x35502505
jle 0x10008d40
cmp eax, 0x6c136b77
jle 0x10008e4c
cmp eax, 0x6c136b78
je 0x10008eed
cmp eax, 0x7b36716e
jne 0x10008c50
mov eax, dword [esp + 0xc]
mov eax, dword [eax - 4]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0xc]
mov ecx, eax
not ecx
mov edx, eax
and edx, 3
and ecx, 0xfffffffc
lea ecx, [ecx + ecx*2]
or ecx, edx
lea edx, [eax + eax]
xor edx, 6
add edx, ecx
lea ecx, [edx + eax*2]
sub ecx, dword [esp + 0x48]
add ecx, 2
mov eax, 0x6c136b78
cmp ecx, 0x20
jb 0x10008c50
mov eax, 0x18993a2a
jmp 0x10008c50
cmp eax, 0x18993a29
jg 0x10008e83
cmp eax, 0xe706b4d4
je 0x10008f06
cmp eax, 0xfd4768b2
jne 0x10008c50
mov eax, dword [esp + 0x3c]
mov eax, dword [eax]
mov dword [esp + 0xc], eax
mov edi, dword [esp + 8]
add edi, 1
mov eax, dword [esp + 0xc]
mov dword [esp + 0x10], eax
mov eax, 0x7b36716e
cmp edi, 0x1000
jae 0x10008c50
mov eax, 0x9e9efbb1
jmp 0x10008c50
cmp eax, 0x9e9efbb1
je 0x10008c3b
cmp eax, 0xcea48238
je 0x10008f20
cmp eax, 0xd28d29b2
jne 0x10008c50
mov dword [esp + 0x28], ebp
lea eax, [esp + 0x60]
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
mov dword [esp + 0x60], 0
mov eax, dword [esp + 0x14]
mov eax, dword [eax]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax]
mov dword [esp + 0x34], eax
mov ecx, dword [esp + 0x30]
mov eax, 0xe51e8d0f
cmp ecx, dword [esp + 0x34]
je 0x10008c50
mov eax, 0x404db3a5
jmp 0x10008c50
cmp eax, 0xe51e8d0f
je 0x10008f3a
cmp eax, 0xe60467b5
jne 0x10008c50
mov eax, dword [esp + 4]
mov ebx, dword [esp + 0x40]
add ebx, 0x18
mov eax, 0xe51e8d0f
cmp ebx, dword [esp + 0x34]
mov ecx, dword [esp + 0x44]
mov esi, dword [esp + 0x44]
je 0x10008c50
mov eax, 0xdf293f08
jmp 0x10008c50
cmp eax, 0x404db3a5
jne 0x1000902e
lea ecx, [esp + 0x64]
mov dword [esp + 4], ecx
lea eax, [esp + 0x74]
mov dword [esp + 0x5c], eax
lea eax, [esp + 0x78]
mov dword [esp + 0x38], eax
mov dword [esp + 0x3c], ecx
xor esi, esi
mov eax, 0xdf293f08
mov ebx, dword [esp + 0x30]
jmp 0x10008c50
cmp eax, 0x329c50a3
jne 0x1000903b
mov ecx, dword [esp + 0x58]
mov dword [esp + 0x1c], ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x20], eax
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov dword [esp + 0x24], ecx
mov eax, dword [esp + 0x24]
jae 0x10008fa6
mov eax, dword [esp + 0x1c]
jmp 0x10008fa8
mov eax, dword [esp + 0x54]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x14]
mov ecx, dword [eax]
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x18], eax
mov edx, dword [esp + 0x18]
mov eax, 0x35502506
cmp ecx, dword [edx]
je 0x10008c50
mov eax, 0x329c50a3
jmp 0x10008c50
mov edi, dword [esp + 8]
add edi, 0x24
mov eax, dword [esp + 0x48]
mov dword [esp + 0x10], eax
mov eax, 0x9e9efbb1
jmp 0x10008c50
cmp byte [esp + 3], 0
mov eax, 0x35502506
jne 0x10008c50
mov eax, 0xd63d8e98
jmp 0x10008c50
mov eax, dword [esp + 0x20]
cmp dword [eax], 0x10
mov eax, dword [esp + 0x24]
jae 0x10008fea
mov eax, dword [esp + 0x1c]
jmp 0x10008fec
push dword [esp + 0x28]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x2c]
mov eax, 0x35502506
jmp 0x10008c50
mov ecx, dword [ecx]
push 0
lea edx, [esp + 0x64]
push edx
push eax
push ecx
push dword [esp + 0x38]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x60]
mov ecx, esi
not ecx
and ecx, eax
add ecx, ecx
lea edx, [eax + eax]
sub edx, ecx
xor eax, esi
add eax, edx
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x38]
mov eax, dword [eax]
mov dword [esp + 8], eax
mov ecx, dword [esp + 8]
mov eax, 0xfd4768b2
cmp ecx, 0x10
jae 0x10008c50
mov eax, 0xe60467b5
jmp 0x10008c50
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1001f960]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0xcea48238
cmp ebp, 0xffffffff
je 0x10008c50
mov eax, 0xd28d29b2
jmp 0x10008c50
mov eax, dword [eax]
sub esp, 0x1c
movaps xmm0, xmmword [0x1001f950]
movups xmmword [esp + 4], xmm0
mov dword [esp], eax
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0x80
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov ebp, eax
mov eax, 0x35502506
cmp ebp, 0xffffffff
je 0x10008c50
mov eax, 0xd28d29b2
jmp 0x10008c50
cmp eax, 0x35502506
jne 0x10008c50
jmp 0x1000904b
cmp eax, 0x18993a2a
jne 0x10008c50
call fcn.1001273d
mov ecx, dword [esp + 0x7c]
xor ecx, esp
call fcn.10010c8a
add esp, 0x80
pop esi
pop edi
pop ebx
pop ebp
ret