Function at 0x1000af40
Capabilities:
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x1004e274]
xor eax, ebp
mov dword [ebp - 4], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x64], 0xffffffff
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp + 8]
jne 0x1000af6e
mov dword [ebp - 0x4c], 1
jmp 0x1000af75
mov dword [ebp - 0x4c], 0
mov cl, byte [ebp - 0x4c]
mov byte [ebp - 0x35], cl
movzx edx, byte [ebp - 0x35]
test edx, edx
je 0x1000afd1
mov dword [ebp - 0x9c], 0xffffffff
mov eax, dword [ebp + 8]
cmp eax, dword [ebp - 0x9c]
je 0x1000afa0
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x54], ecx
jmp 0x1000afc3
mov dword [ebp - 0x68], 0xffffffff
cmp dword [ebp - 0x68], 0
jne 0x1000afb6
mov dword [ebp - 0x50], 1
jmp 0x1000afbd
mov dword [ebp - 0x50], 0
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x54]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x6c]
jmp 0x1000b217
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0
je 0x1000b049
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x30]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x20]
mov eax, dword [ecx]
add eax, dword [edx]
cmp dword [ebp - 0x74], eax
jae 0x1000b049
mov cl, byte [ebp + 8]
mov byte [ebp - 0x2f], cl
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x30]
mov ecx, dword [eax]
sub ecx, 1
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x30]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
mov dword [ebp - 0x78], eax
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov eax, dword [edx]
add eax, 1
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x20]
mov dword [edx], eax
mov eax, dword [ebp - 0x78]
mov cl, byte [ebp - 0x2f]
mov byte [eax], cl
mov eax, dword [ebp + 8]
jmp 0x1000b217
mov edx, dword [ebp - 0x2c]
cmp dword [edx + 0x4c], 0
jne 0x1000b061
mov dword [ebp - 0x7c], 0xffffffff
mov eax, dword [ebp - 0x7c]
jmp 0x1000b217
mov ecx, dword [ebp - 0x2c]
call fcn.100092a0
mov eax, dword [ebp - 0x2c]
cmp dword [eax + 0x38], 0
jne 0x1000b0cf
mov cl, byte [ebp + 8]
mov byte [ebp - 0x30], cl
mov edx, dword [ebp - 0x2c]
mov eax, dword [edx + 0x4c]
mov dword [ebp - 0x80], eax
mov ecx, dword [ebp - 0x80]
push ecx
movsx edx, byte [ebp - 0x30]
push edx
call fcn.10020672
add esp, 8
cmp eax, 0xffffffff
je 0x1000b0a0
mov dword [ebp - 0x58], 1
jmp 0x1000b0a7
mov dword [ebp - 0x58], 0
movzx eax, byte [ebp - 0x58]
test eax, eax
je 0x1000b0b7
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x3c], ecx
jmp 0x1000b0c7
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x3c], 0xffffffff
mov eax, dword [ebp - 0x3c]
jmp 0x1000b217
mov dword [ebp - 0xa4], 0x20
mov al, byte [ebp + 8]
mov byte [ebp - 0x2e], al
mov ecx, dword [ebp - 0x2c]
mov edx, dword [ecx + 0x38]
mov dword [ebp - 0x5c], edx
lea eax, [ebp - 0x84]
push eax
lea ecx, [ebp - 8]
push ecx
lea edx, [ebp - 0x28]
push edx
lea eax, [ebp - 0x8c]
push eax
lea ecx, [ebp - 0x2d]
push ecx
lea edx, [ebp - 0x2e]
push edx
mov eax, dword [ebp - 0x2c]
add eax, 0x40
push eax
mov ecx, dword [ebp - 0x5c]
mov edx, dword [ecx]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [edx + 0x1c]
call eax
mov dword [ebp - 0x40], eax
cmp dword [ebp - 0x40], 0
jl 0x1000b207
cmp dword [ebp - 0x40], 1
jle 0x1000b138
cmp dword [ebp - 0x40], 3
je 0x1000b1a7
jmp 0x1000b207
mov ecx, dword [ebp - 0x84]
lea edx, [ebp - 0x28]
sub ecx, edx
mov dword [ebp - 0x44], ecx
je 0x1000b17b
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x4c]
push ecx
mov edx, dword [ebp - 0x44]
push edx
push 1
lea eax, [ebp - 0x28]
push eax
call fcn.10020fac
add esp, 0x10
cmp dword [ebp - 0x44], eax
je 0x1000b17b
mov dword [ebp - 0x88], 0xffffffff
mov eax, dword [ebp - 0x88]
jmp 0x1000b217
mov ecx, dword [ebp - 0x2c]
mov byte [ecx + 0x3d], 1
lea edx, [ebp - 0x2e]
cmp dword [ebp - 0x8c], edx
je 0x1000b195
mov eax, dword [ebp + 8]
jmp 0x1000b217
mov dword [ebp - 0x90], 0xffffffff
mov eax, dword [ebp - 0x90]
jmp 0x1000b217
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x4c]
mov dword [ebp - 0x94], ecx
mov dl, byte [ebp - 0x2e]
mov byte [ebp - 0x34], dl
mov eax, dword [ebp - 0x94]
push eax
movsx ecx, byte [ebp - 0x34]
push ecx
call fcn.10020672
add esp, 8
cmp eax, 0xffffffff
je 0x1000b1db
mov dword [ebp - 0x60], 1
jmp 0x1000b1e2
mov dword [ebp - 0x60], 0
movzx edx, byte [ebp - 0x60]
test edx, edx
je 0x1000b1f2
mov eax, dword [ebp + 8]
mov dword [ebp - 0x48], eax
jmp 0x1000b202
mov ecx, dword [ebp - 0xa8]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x48], 0xffffffff
mov eax, dword [ebp - 0x48]
jmp 0x1000b217
mov dword [ebp - 0x98], 0xffffffff
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.10018809
mov esp, ebp
pop ebp
ret 4