Function at 0x1000c1a0
Capabilities:
Get file size
Write file on windows

Disassembly:
sub esp, 0x3c
mov eax, dword [0x101ed004]
xor eax, esp
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x48]
push ebx
push ebp
mov ebp, dword [esp + 0x48]
push esi
mov esi, ecx
mov dword [esp + 0x14], eax
push edi
mov dword [esp + 0x24], esi
cmp dword [esi + 0x414], 0
je 0x1000c470
mov eax, dword [esp + 0x5c]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x14], eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
nop dword [eax + eax]
mov dword [esp + 0x10], eax
xor ebx, ebx
nop word [eax + eax]
mov eax, dword [esi + 0x3e8]
mov esi, dword [eax + ebx*4]
mov eax, dword [esi + 0x13c]
test eax, eax
je 0x1000c248
push 0
lea ecx, [esp + 0x2c]
push ecx
push eax
lea eax, [esi + 0x3c]
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x28]
cmp eax, dword [esi + 0x13c]
je 0x1000c23e
call edi
mov dword [esi + 0x144], eax
jmp 0x1000c248
mov dword [esi + 0x13c], 0
lea eax, [esp + 0x2c]
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [esp + 0x2c]
xor edi, edi
mov edx, dword [esi + 0x13c]
add edi, eax
adc ecx, 0
cmp dword [esp + 0x10], ecx
jl 0x1000c315
jg 0x1000c27b
cmp ebp, edi
jb 0x1000c315
test edx, edx
je 0x1000c2bd
push 0
lea eax, [esp + 0x34]
push eax
push edx
lea eax, [esi + 0x3c]
push eax
push dword [esi + 0xc]
mov eax, dword [sym.imp.KERNEL32.dll_WriteFile]
call eax
mov eax, dword [esp + 0x30]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, dword [esi + 0x13c]
je 0x1000c2b1
call edi
mov dword [esi + 0x144], eax
jmp 0x1000c2c3
mov dword [esi + 0x13c], 0
jmp 0x1000c2c3
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [esp + 0x34]
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov esi, dword [esp + 0x24]
xor ecx, ecx
mov edx, dword [esp + 0x34]
add ecx, eax
adc edx, 0
sub ebp, ecx
mov eax, dword [esi + 0x3ec]
sbb dword [esp + 0x10], edx
inc ebx
sub eax, dword [esi + 0x3e8]
sar eax, 2
cmp ebx, eax
jl 0x1000c200
xor eax, eax
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.10142783
add esp, 0x3c
ret 0x10
test edx, edx
je 0x1000c357
push 0
lea eax, [esp + 0x3c]
push eax
push edx
lea eax, [esi + 0x3c]
push eax
push dword [esi + 0xc]
mov eax, dword [sym.imp.KERNEL32.dll_WriteFile]
call eax
mov eax, dword [esp + 0x38]
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, dword [esi + 0x13c]
je 0x1000c34b
call edi
mov dword [esi + 0x144], eax
jmp 0x1000c35d
mov dword [esi + 0x13c], 0
jmp 0x1000c35d
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea eax, [esp + 0x3c]
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov ecx, dword [esp + 0x3c]
xor edx, edx
mov ebx, dword [esp + 0x10]
add edx, eax
adc ecx, 0
sub edx, ebp
sbb ecx, ebx
xor eax, eax
cmp eax, ecx
jg 0x1000c392
mov eax, dword [esp + 0x14]
jl 0x1000c38e
cmp eax, edx
jae 0x1000c392
mov edi, eax
jmp 0x1000c3e3
mov eax, dword [esi + 0x13c]
test eax, eax
je 0x1000c3d1
push 0
lea ecx, [esp + 0x44]
push ecx
push eax
lea eax, [esi + 0x3c]
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [esp + 0x40]
cmp eax, dword [esi + 0x13c]
je 0x1000c3c7
call edi
mov dword [esi + 0x144], eax
jmp 0x1000c3d1
mov dword [esi + 0x13c], 0
lea eax, [esp + 0x44]
push eax
push dword [esi + 0xc]
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov edi, eax
sub edi, ebp
mov eax, dword [esi]
mov ecx, esi
push ebx
push ebp
mov eax, dword [eax + 0x44]
call eax
cmp eax, ebp
jne 0x1000c2fe
cmp edx, ebx
jne 0x1000c2fe
mov eax, dword [esi]
mov ecx, esi
push edi
push dword [esp + 0x1c]
call dword [eax + 0x14]
test eax, eax
je 0x1000c2fe
mov ebx, dword [esp + 0x14]
cmp edi, ebx
je 0x1000c456
mov ebp, dword [esp + 0x20]
mov eax, edi
mov esi, dword [esp + 0x24]
sub ebx, edi
cdq
add ebp, eax
mov dword [esp + 0x14], ebx
mov eax, dword [esp + 0x1c]
adc eax, edx
mov dword [esp + 0x20], ebp
add dword [esp + 0x18], edi
cmp dword [esi + 0x414], 0
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [esp + 0x1c], eax
jne 0x1000c1f0
mov edi, eax
jmp 0x1000c478
mov eax, 1
pop edi
pop esi
pop ebp
pop ebx
mov ecx, dword [esp + 0x38]
xor ecx, esp
call fcn.10142783
add esp, 0x3c
ret 0x10
mov ebx, dword [esp + 0x5c]
mov edi, dword [esp + 0x54]
mov ecx, dword [esi + 0x3f4]
push edi
push ebp
mov eax, dword [ecx]
mov eax, dword [eax + 0x44]
call eax
cmp eax, ebp
jne 0x1000c2fe
cmp edx, edi
jne 0x1000c2fe
mov ecx, dword [esi + 0x3f4]
push ebx
push dword [esp + 0x1c]
mov eax, dword [ecx]
call dword [eax + 0x14]
mov ecx, dword [esp + 0x48]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.10142783
add esp, 0x3c
ret 0x10